search

microsoft / azure-container-apps

Roadmap and issues for Azure Container Apps
MIT License
360 stars 29 forks source link

Load .pfx or .p12 certificate from code? #378

Open andrekiba opened 2 years ago

andrekiba commented 2 years ago

Is there a way to load (from C# code) a previously uploaded certificate in the container apps environment? This works great for a asp.net core app hosted on a Linux app service but seems not for ACA. The same app containerized is one that I want to try to run in ACA.

c1 c2

kendallroden commented 1 year ago

Hi @andrekiba for clarity, from your app code how are you loading the cert? Is it via a local file path? In app service do they mount the cert for you? Thanks for raising

andrekiba commented 1 year ago

thank you for your reply @kendallroden, yes in this way https://docs.microsoft.com/en-us/azure/app-service/configure-ssl-certificate-in-code#load-certificate-in-linuxwindows-containers

andrekiba commented 1 year ago

@kendallroden any update on this? Please tell me if you need more info. Thank you!

ghost commented 1 year ago

This issue has been automatically marked as stale because it has been marked as requiring author feedback but has not had any activity for 4 days. It will be closed if no further activity occurs within 3 days of this comment.

andrekiba commented 1 year ago

@kendallroden @anthonychu I don't think should be closed

kendallroden commented 1 year ago

Sorry for the delay will resurface

anthonychu commented 1 year ago

Certificates in Azure Container Apps are currently only for ingress TLS and are unavailable to the container app itself. If you store certs in Key Vault, you can access them in code via a managed identity.

bowlerma commented 1 year ago

Agree, it would be great to allow certificates held within the key vault to automatically be mounted into the container in the same way that they are for app services and for AKS using the secrets store CSI driver integration.