Is it possible to use Azure Container Apps Spring Admin Java component in a private network?

Question

Is it possible to use Azure Container Apps Spring Admin Java component in a private network?

365 Louis Savoldy 20

I'd like to use the Apps Spring Admin Java component in my Container App Environment (CAE), but the generated Spring Admin URL appears to be a public URL. Our CAE is private (i.e., not publicly accessible). Is there a way to access the Spring Admin dashboard from within a private network?

Note: I tried mapping the CAE's private IP to the provided Spring Admin URL, but that resulted in an "Internal Server Error."

Sai Prabhu Naveen Parimi 570 Reputation points Microsoft External Staff

2025-03-06T05:18:28.33+00:00
365 Louis Savoldy

Welcome to the Q&A platform! Thank you for reaching out.

I understand that you're trying to access the Admin for Spring dashboard within your private Azure Container Apps Environment (CAE). Since the default Spring Admin URL is public, you'll need to configure your CAE to ensure private access.

Here’s how you can achieve this:

Deploy CAE into a Virtual Network (VNet) – This ensures your container apps, including Admin for Spring, are accessible within your private network.

Set Up a Private Endpoint – This assigns a private IP from your VNet to your CAE, making it accessible without exposing it to the internet.

Configure a Private DNS Zone – This ensures that the Spring Admin dashboard's URL resolves correctly to the private IP.

Once these steps are in place, you should be able to access the Admin for Spring dashboard securely within your private network.

I've attached relevant Azure documentation to guide you through the process:

Container Apps VNet Integration

Setting Up Private Endpoints

Networking in Container Apps

Let me know if you have any questions or need further assistance!
365 Louis Savoldy 20 Reputation points

2025-03-06T13:09:28.9833333+00:00

Thank you. Our current CAE is deployed to VNET and we have a private end-point configured. We have no problems accessing deployed CAE containers from our private network.

My question is specifically about Microsoft's managed Spring Admin client.
https://learn.microsoft.com/en-us/azure/container-apps/java-admin

Is this dashboard only accessible from a public URL?
365 Louis Savoldy 20 Reputation points

2025-03-06T13:11:29.8833333+00:00

duplicate
Madugula Jahnavi 85 Reputation points Microsoft External Staff

2025-03-07T16:14:50.0166667+00:00

365 Louis Savoldy, Yes, currently the Spring Admin dashboard is hosted and managed as a public service only.
Arko 410 Reputation points Microsoft External Staff

2025-03-10T07:21:50.9+00:00

Just to be clear 365 Louis Savoldy is asking specifically about Microsoft’s managed Spring Admin client and whether it can be accessed privately. Correct?
If so then as of now, Microsoft's documentation does not mention a private networking option for the managed Spring Admin service. If it is always exposed via a public URL, this means it cannot be natively accessed within a private network.

Why?
Because by default, this admin dashboard is assigned a public URL, which is managed and hosted outside the private CAE environment.

Hope it answers your query 365 Louis Savoldy
Arko 410 Reputation points Microsoft External Staff

2025-03-12T08:21:13.13+00:00

Hello 365 Louis Savoldy, following up to check if this answers your query?

Accepted answer

0 additional answers

Your answer

Sai Prabhu Naveen Parimi 570 Reputation points Microsoft External Staff

2025-03-06T05:18:28.33+00:00

365 Louis Savoldy

Welcome to the Q&A platform! Thank you for reaching out.

I understand that you're trying to access the Admin for Spring dashboard within your private Azure Container Apps Environment (CAE). Since the default Spring Admin URL is public, you'll need to configure your CAE to ensure private access.

Here’s how you can achieve this:

Deploy CAE into a Virtual Network (VNet) – This ensures your container apps, including Admin for Spring, are accessible within your private network.

Set Up a Private Endpoint – This assigns a private IP from your VNet to your CAE, making it accessible without exposing it to the internet.

Configure a Private DNS Zone – This ensures that the Spring Admin dashboard's URL resolves correctly to the private IP.

Once these steps are in place, you should be able to access the Admin for Spring dashboard securely within your private network.

I've attached relevant Azure documentation to guide you through the process:

Container Apps VNet Integration

Setting Up Private Endpoints

Networking in Container Apps

Let me know if you have any questions or need further assistance!
365 Louis Savoldy 20 Reputation points

2025-03-06T13:09:28.9833333+00:00

Thank you. Our current CAE is deployed to VNET and we have a private end-point configured. We have no problems accessing deployed CAE containers from our private network.

My question is specifically about Microsoft's managed Spring Admin client.
https://learn.microsoft.com/en-us/azure/container-apps/java-admin

Is this dashboard only accessible from a public URL?
365 Louis Savoldy 20 Reputation points

2025-03-06T13:11:29.8833333+00:00

duplicate
Madugula Jahnavi 85 Reputation points Microsoft External Staff

2025-03-07T16:14:50.0166667+00:00

365 Louis Savoldy, Yes, currently the Spring Admin dashboard is hosted and managed as a public service only.
Arko 410 Reputation points Microsoft External Staff

2025-03-10T07:21:50.9+00:00

Just to be clear 365 Louis Savoldy is asking specifically about Microsoft’s managed Spring Admin client and whether it can be accessed privately. Correct?
If so then as of now, Microsoft's documentation does not mention a private networking option for the managed Spring Admin service. If it is always exposed via a public URL, this means it cannot be natively accessed within a private network.

Why?
Because by default, this admin dashboard is assigned a public URL, which is managed and hosted outside the private CAE environment.

Hope it answers your query 365 Louis Savoldy
Arko 410 Reputation points Microsoft External Staff

2025-03-12T08:21:13.13+00:00

Hello 365 Louis Savoldy, following up to check if this answers your query?

Answer 1

Arko 410 Microsoft External Staff

Hello Louis, as I mentioned in comment it is directly not possible to access the Admin for Spring dashboard in a private Azure Container Apps Environment (CAE) since by default, it is publicly accessible.

Currently, Microsoft's managed Admin for Spring service does not have support for private endpoints, so the dashboard is accessible only via public URL.

As a workaround, you can deploy your own instance of Spring Boot Admin within your private network. That way, you have better control over security and access, ensuring the admin interface complies with your organization's privacy policies.

Kindly refer to the official documentation Azure-Container-apps-Java-admin for further details.

Arko 410 Reputation points Microsoft External Staff

2025-03-17T18:31:29.7533333+00:00

Following up to check if this information was helpful. Kindly accept the answer if this was helpful. Thanks

Share via

Is it possible to use Azure Container Apps Spring Admin Java component in a private network?

0 additional answers

Your answer