https://docs.microsoft.com/archive/blogs/karansingh/feed.xml Blog on Azure App Services Wed, 17 Apr 2019 04:08:18 GMT en-US hourly 1 https://docs.microsoft.com/archive/blogs/karansingh/azure-app-service-automate-vnet-re-sync-in-case-of-failure Thu, 04 Jan 2018 20:46:36 GMT https://blogs.msdn.microsoft.com/karansingh/?p=215 Use Case  Azure App Service is associated with a Virtual Network using the point-to-site connection and accessing resources which are present inside that Virtual Network. Sometimes due to x reason, the Virtual Network connection is getting disconnected and causing downtime in the application. However, the issue can be resolved by re-syncing the VNET. Now, you want an automated way which can detect this situation and automatically perform a re-sync operation on VNET.   PowerShell to re-sync VNET    Re-sync VNET using WebJobs  To perform Sync operation on Virtual Network using WebJobs, you need a way to silently authenticate (Without any login prompt). Please follow the link below for information about silent authentication:

• Azure: Silent Authentication using Azure AD application 

Once we have the Service Principal Id, Tenant Id, Subscription Id and Password values using the output of the previous step. Create a scheduled web job and Add PowerShell script which will ping the application URL and will perform VNET re-sync if there is a failure: Note: Azure Automation Runbooks can also be used to automate this process. https://docs.microsoft.com/en-us/azure/automation/automation-runbook-types]]> https://docs.microsoft.com/archive/blogs/karansingh/azure-silent-authentication-using-azure-ad-application Tue, 10 Oct 2017 20:16:02 GMT https://blogs.msdn.microsoft.com/karansingh/?p=205 Use Case  You want to automate management operations on Azure resources using Azure Powershell. For this, you need a way to silently authentication (Without any login prompt). You can achieve this by creating an Azure AD application which will give Service Principal Id, which can be used for authentication   Get Service Principle Id for silent authentication  Please run below Power-Shell script to create a native AD application from which we will get service principal ID that will be used to do silent authentication. This is a one time job. Note: You need to be Global admin on active directory to create the native AD appliction. When you run this script, you will get prompt to provide Subscription Name, Password and then log in. After completion, you will get below information in output: Note: Please keep a note of th.s information, we'll use it in following steps.   Login using Service Principal Id without user interaction 

• Create a PowerShell and save as run.ps1
• Update Service Principal Id, Tenant Id, Subscription Id and Password values using output of previous step.

Note: In above sample, We have shown how to STOP/START an Azure App Service without any user interaction. After login, you can run any PowerShell script which requires subscription level access without any user interaction.  ]]> https://docs.microsoft.com/archive/blogs/karansingh/azure-app-services-how-to-determine-if-the-client-certificate-is-loaded Wed, 15 Mar 2017 17:50:01 GMT https://blogs.msdn.microsoft.com/karansingh/?p=115 USE CASE Application is hosted on Azure App Service and it requires the use of client certificate, you can upload your certificate to the certificates collection in Azure App Service and consume it in your web application from your site’s personal certificate store. This functionality is only available for dedicated sites (Basic, Standard, Premium pricing tiers). You can follow the steps/code mentions in below article to implement this in C# application:

• https://azure.microsoft.com/en-in/blog/using-certificates-in-azure-websites-applications/
• https://channel9.msdn.com/blogs/Azure-App-Service-Self-Help/Upload-an-SSL-Certificate

  ISSUE DEFINITION The same code was running fine but suddenly application started throwing exception while loading the client certificates from cert store.   CHECK IF CERTIFICATE IS LOADING OR NOT? Using Power Shell

1. Check for the application setting and see if WEBSITE_LOAD_CERTIFICATES is present or not. (This is required to load the client certificates for application)

2. Open Azure Portal, go to Advance tools-> Click on Go
3. Select Debug console-> PowerShell
4. Run command “cd cert:\currentuser\my”
5. Run command “dir”
6. It should list down all the certificates loaded for this application. (Note: Please make sure that application setting WEBSITE_LOAD_CERTIFICATES is present)

Note: If your site is running on multiple instances, than you should run above PowerShell command on all the instances. Please follow below link for more information on how to connect to the Kudu site of specific instance:

• https://blogs.msdn.microsoft.com/kaushal/2016/11/21/azure-app-service-how-to-connect-to-the-kudu-site-of-a-specific-instance/

  Using Site Extension You can install Certificate Read Checker(CRC) Web Site Extension. Using this extension one can easily test whether uploaded certificate can be read via code or not. The site extension is already present in the Site Extension gallery.    ]]> https://docs.microsoft.com/archive/blogs/karansingh/azure-app-services-automate-application-restart-using-web-job Fri, 10 Feb 2017 06:59:42 GMT https://blogs.msdn.microsoft.com/karansingh/?p=25 Use Case  An application is hosted on Azure as App Service and you want to restart your application on a scheduled basis. You can achieve this by creating a web job and placing a PowerShell script to STOP and START the web app. Please follow the steps below to implement this for your web app:   Get Service Principle Id for silent authentication  To perform START/STOP operation on Azure App Service, the job should have access to your subscription. Please run below Power-Shell script to create a native AD application from which we will get service principal ID that will be used to do silent authentication. This is a one time job. Note: You need to be a Global admin on Active Directory to create the native AD application. When you run this script, you will get prompt to provide Subscription Name, Password and then log in. After completion, you will get information in output: Note: Please keep a note of this information, we'll use it in following steps.   Create PowerShell to STOP/START App Service 

• Create a PowerShell and save as run.ps1
• Update Service Principal Id, Tenant Id, Subscription Id and Password values using the output of the previous step.

  If the application is running on multiple instances, then you can use below script to leverage Advanced Application restart. In this case below script will restart worker process on each instance one by one. This can help in minimizing the downtime.   Create a scheduled web job 

• Create a zip file which contains both the files (ps1 and azureprofile.json).
• Go to App Service -> Web Job and then create a triggered web job by uploading the zip file.

• Make sure that Always on is enabled on the App Service where you are deploying this web job. Always on is required for triggered web jobs.

  Note: Please follow the link below for information about scheduling web job using CRON expression:

• https://docs.microsoft.com/en-us/azure/app-service-web/web-sites-create-web-jobs 

 ]]>