projectkudu / kudu

Kudu is the engine behind git/hg deployments, WebJobs, and various other features in Azure Web Sites. It can also run outside of Azure.
Apache License 2.0
3.13k stars 652 forks source link

Azure China Function app :Why is the bear token authorization for the deployed scm site not ARM Endpoint? #3482

Closed GHL2770 closed 1 year ago

GHL2770 commented 1 year ago

Azure China We use “https://.scm.chinacloudsites.cn/api/zipdeploy” deployed ZIP files for Function app, we got an error 403 when we got bear token auth using: “https://management.azure.com/.default” ARM Endpoint. But use https://management.core.chinacloudapi.cn/.default ASM Endpoint can be successfully deployed in Azure China.

We want to confirm that the“https://.scm.chinacloudsites.cn/api/zipdeploy”authentication is not updated to ARM the endpoint authentication management? If not, are there any relevant instructions In document https://learn.microsoft.com/en-us/azure/reliability/asm-retirement ASM Endpoint will outage in August 2024, Will this have an influence on Azure China?

image image At the same time found in Azure China using “az account get - access - auth token ”using url is https://management.**core.**chinacloudapi.cn ASM Endpoint too. referenced document:https://docs.azure.cn/en-us/azure-functions/deployment-zip-push#azure-ad-authentication image image

suwatch commented 1 year ago

This is a known issue and the fix is being rollout (ETA end of 2024). In the meantime, continue to use https://management.core.chinacloudapi.cn/ as audience (resource) for now. This is the audience URL and should continue to work till then.

GHL2770 commented 1 year ago

Thank you very much~