search

microsoft / azure-container-apps

Roadmap and issues for Azure Container Apps
MIT License
374 stars 29 forks source link

403 Error trying to access .NET Aspire Dashboard in Azure Container Apps #1238

Open nor0x opened 4 months ago

nor0x commented 4 months ago

This issue is a: (mark with an x)

Issue description

I have created a dotnet new aspire-starter project and published it to Azure Container Apps via Visual Studio. I cannot access the dashboard hosted in Azure - I get a 403 error when trying to access the provisionied url image

Steps to reproduce

  1. dotnet new aspire-starter
  2. publish from Visual Studio
  3. Access dashboard link

Expected behavior [What you expected to happen.] Dashboard should load correctly. Localhost works just fine: image

Actual behavior [What actually happened.] 403 Forbidden - see screenshot image

In the Azure portal the checkmark for .NET Aspire Dashboard is enabled in the Container App Environment image

Additional context

.NET 8.0.303 .NET Aspire workload version: 8.0.2/8.0.100

snehapar9 commented 4 months ago

@nor0x Thanks for opening this issue. Can you please email your environment name and subscription Id to acasupport@microsoft.com? We will take a closer look.

nor0x commented 4 months ago

@snehapar9 thank you for the reply, I have just sent the email

iturner100 commented 4 months ago

I'm having the same issues (previously logged here: https://github.com/microsoft/azure-container-apps/issues/1231#issuecomment-2242825244)

I'll email details through as well.

rfcdejong commented 4 months ago

Same issue here, was working before. Never seen a login page though.

davidxw commented 4 months ago

I'm also having this issue, have deployed the eShop solution with azd up. I'm certain it was working when I first deployed it, but now it doesn't (and a brand new deployed to a different RG also has the same issue). @snehapar9 will email details as requested.

interpeix commented 4 months ago

Me too, worked yesterday without issues.

onionhammer commented 4 months ago

Me too, inconsistently

MrDeej commented 4 months ago

Me 3 aspire dashboards have not worked in more than a week now. I feel abandoned by Microsoft here.

Also, I saw yesterday when it intermittent worked somewhat, that the version of the dashboard differs from what it says localhost. It still had something with "preview" when deployed, but after workload update it says 8.1.0 in localhost.

simonjj commented 4 months ago

Brief update for everyone. We've intermittently been able to reproduce this issue unfortunately we've not come up with a fix. What we have found is that sometimes it resolves itself after a few hours for reasons we're not sure about yet. We are continuing to investigate this, please keep reporting any findings you have on this issue.

MrDeej commented 4 months ago

I am pretty sure that it is not resolving itself after a few hours. I belive I am starting the 3. week without access to logs for distributed application.

nor0x commented 4 months ago

After @snehapar9 and I had an email conversation the Aspire Dashboards in my ACA Environments were working fine - now it's back to the 403

relounge commented 4 months ago

Same problem. No matter what I do. Did everything from scratch twice, still 403 on the dashboard. I'm the owner of subscription so I must have the access, but azure says 403

MrDeej commented 4 months ago

Mine 3 dashboards have been working more than 10 hours now. Maybe it is solved.

Now I only need to solve the other Aspire Dashboard issue I have: https://github.com/dotnet/aspire/discussions/4583#discussioncomment-10193320

interpeix commented 4 months ago

Mine are also working now!

relounge commented 4 months ago

Mine still doesn't but something has changed. Before I was just getting 403 error after loading. Not I am asked to login (but I'm logged in in Azure portal though). Ok, I try to login with my email again, but I get an error telling me that my email domain does not exist!!! What the hell's happening?)

nor0x commented 4 months ago

mine are working fine as well 👍

relounge commented 4 months ago

I confirm, mine works as well now. Thanks

snehapar9 commented 4 months ago

Thanks for your patience. The fix for this issue has been rolled out. Please let us know if you run into this again.

bishwaranjans commented 3 months ago

@snehapar9 It is the same issue for me. 403 Could not authenticate user with requested resource.

snehapar9 commented 3 months ago

@bishwaranjans Can you also provide your resource group name in the email you sent earlier today? Can you confirm if you have Contributor/Owner access on your container app environment? This information should be available in your azure portal. Container App Environment -> Access Control (IAM) -> Role Assignments. If you don't see yourself as Contributor/Owner you'll see a 403 response while accessing the Dashboard.

matte-wilderness commented 3 months ago

Same issue here. I have Contributor on the CA environment too:

image

snehapar9 commented 3 months ago

@matte-wilderness this is related to this issue - https://github.com/microsoft/azure-container-apps/issues/1231

matte-wilderness commented 3 months ago

I have contributor on both the Environment and the App

snehapar9 commented 2 months ago

I have contributor on both the Environment and the App Matt Evans Business Solutions T (direct): +27 21 702 7514 | T: +27 21 702 7500 P O Box 30417, Tokai, 7966, South Africa Block H, The Terraces, Steenberg Office Park, 1 Silverwood Close, Tokai, Cape Town, South Africa From: snehapar9 @.> Sent: Wednesday, 28 August 2024 19:35 To: microsoft/azure-container-apps @.> Cc: Matt Evans - Wilderness @.>; Mention @.> Subject: Re: [microsoft/azure-container-apps] 403 Error trying to access .NET Aspire Dashboard in Azure Container Apps (Issue #1238) You don't often get email from @.**@.>. Learn why this is importanthttps://aka.ms/LearnAboutSenderIdentification External Sender @matte-wildernesshttps://github.com/matte-wilderness you need Owner or Contributor roles. Container Apps Contributor is only on the container app level and is not enough permissions to access the dashboard. image.png (view on web)https://github.com/user-attachments/assets/0a92e142-d04d-4f34-a72c-7769221a031c — Reply to this email directly, view it on GitHub<#1238 (comment)>, or unsubscribehttps://github.com/notifications/unsubscribe-auth/BKIALMGSQA52WL55XF55NUTZTYC4PAVCNFSM6AAAAABLID73U6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDGMJVHEYTENRYGU. You are receiving this because you were mentioned.Message ID: @.**@.>> Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. This email has been scanned for viruses and malware, and automatically archived by Mimecast SA (Pty) Ltd, an innovator in Software as a Service (SaaS) for business. Mimecast Unified Email Management (UEM) offers email continuity, security, archiving and compliance with all current legislation. To find out more, visit http://www.mimecast.co.za/uem.

This is related to https://github.com/microsoft/azure-container-apps/issues/1281

bradygaster commented 2 months ago

Is there a variance in the behavior when you try with a "work and school account" (like .onmicrosoft.com) and when you use a "personal account" like a hotmail or outlook.com account?

matte-wilderness commented 2 months ago

I don't have a personal account that has access to the Azure account in question.

bradygaster commented 1 month ago

Thanks for that reply, @matte-wilderness - wondering if others on here who've experienced this are seeing a variance. Asking as I've seen a variance when I try with personal accounts versus work and school accounts.