Azure Container Apps
An Azure service that provides a general-purpose, serverless container platform.
694 questions
Azure container apps ingress : RBAC access deined
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 34%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAK%3C/text%3E%3C/svg%3E)
Anushankar Konduri
5
Reputation points
I deployed a Container App environment using the Workload Profiles environment type with a subnet CIDR of /21. A private endpoint is also configured for the environment.
I deployed a Container App and was able to access it successfully when ingress was set to allow all traffic and traffic within the VNet. However, when I changed the ingress settings to allow traffic only from a specific IP address, accessing the app results in a "RBAC access denied" error on the webpage.
Azure Container Apps
{count} vote
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(64, 16%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERG%3C/text%3E%3C/svg%3E)
Ranashekar Guda 2,825 Reputation points Moderator2025-04-16T11:52:45.34+00:00 Hello @Anushankar Konduri,
When you configure ingress settings to allow traffic only from a specific IP address, it's important to ensure that the IP address you are allowing matches the source IP of the requests being made to your Container App. If the source IP is not included in the allowed list, you may encounter access issues, such as the "RBAC access denied" error.To resolve this issue, you should:
- Verify that the IP address you configured in the ingress settings is correct and matches the client's IP address.
- Check if there are any additional IP restrictions or network security settings that may be affecting access.
- Ensure that the RBAC (Role-Based Access Control) permissions are correctly set up for the user or service trying to access the Container App.
If the issue persists, consider reviewing the ingress configuration and related network settings to ensure that they align with your access requirements.
For further clarification, please refer to the following documentations:
Hope this helps. Do let us know if you any further queries.
-
Anushankar Konduri 5 Reputation points
2025-04-16T13:04:14.3133333+00:00 Hi @Ranashekar Guda ,
Let me provide more details on my configuration:- VNet CIDR: 10.15.192.0/18
- Container App CIDR: 10.15.208.0/21
- PEP CIDR: 10.15.197.0/24
- VM CIDR: 10.15.194.0/24
I am trying to access the endpoint from a VM within the same VNet. I’ve added the VM’s CIDR block to the allowed ingress IPs for the Container App. However, when I try to access the endpoint, I encounter an "RBAC access denied" error.
Could you provide some guidance on how to resolve this?
- VNet CIDR: 10.15.192.0/18
-
Ranashekar Guda 2,825 Reputation points Moderator
2025-04-18T13:26:35.7466667+00:00 Hello @Anushankar Konduri,
Could you please share me the screenshot of the error message?
-
Ranashekar Guda 2,825 Reputation points Moderator
2025-04-21T13:59:58.6333333+00:00 Hello @Anushankar Konduri,
Following up to see if you have chance to check my previous response and help us with requested information to check and assist you further on this.
-
Anushankar Konduri 5 Reputation points
2025-04-21T14:07:10.81+00:00 Getting below error when hitting endpoint in browser from vm .@Ranashekar Guda
-
Ranashekar Guda 2,825 Reputation points Moderator
2025-04-21T16:41:00.0266667+00:00 Hello @Anushankar Konduri,
I have reached out to you over private message could you please check and help me with requested information to assist you further on this. -
Ranashekar Guda 2,825 Reputation points Moderator
2025-04-22T14:23:54.8733333+00:00 Hi @Anushankar Konduri,
Following up to see if you had a chance to review my previous response and provide the requested information so we can assist you further.
Sign in to comment
Sign in to answer