search

dotnet / aspire

Tools, templates, and packages to accelerate building observable, production-ready apps
https://learn.microsoft.com/dotnet/aspire
MIT License
3.91k stars 476 forks source link

Default role assignments used for AddAzureStorage cannot create a container. #6507

Open mitchdenny opened 3 weeks ago

mitchdenny commented 3 weeks ago

I was doing some test deployments with playground/AzureStorageEndToEnd tonight using azd and I noticed that when I hit the endpoint in the same once it is deployed to ACA I get a 500 response. After further examination it appears that the Storage Blob Data Owner role is required in order to support creating containers in blob storage.

This surprised me because I am sure I had deployed this playground app (and other apps that use blob storage) before and the would have failed if they could not create a container. I'm so surprised that I am wondering if there has been a default ACLs change.