Regarding section Deploy a Service Bus trigger and HTTP trigger I get auth error to to deploy the code via github. Since both storage and func app are behind private end points is github expected to successfully be authorized even with a managed identity since it’s outside the vnet?
I confirm github repo yml file has the correct secrets, both attempted automatically generated and manually entered.
Suggested alternative zip deploy also fails because it is outside the vnet. Unfortunately I do not have the flexibility to setup my own self-hosted github.
Run azure/login@v1
Running Azure CLI Login.
/usr/bin/az cloud set -n azurecloud
Done setting cloud: "azurecloud"
Federated token details:
issuer - https://token.actions.githubusercontent.com
subject claim - repo:/:environment:Production
Attempting Azure CLI login by using OIDC...
Error: AADSTS700213: No matching federated identity record found for presented assertion subject '/:environment:Production'. Please check your federated identity credential Subject, Audience and Issuer against the presented assertion. https://docs.microsoft.com/en-us/azure/active-directory/develop/workload-identity-federation Trace ID: d63a3f58-7f2f-49a4-a525-cb683a8a4300 Correlation ID: aa0c31e4-a211-481e-8ac6-ea7a729471e0 Timestamp: 2024-05-26 06:54:13Z
Error: Interactive authentication is needed. Please run:
az login
Error: Login failed with Error: The process '/usr/bin/az' failed with exit code 1. Double check if the 'auth-type' is correct. Refer to https://github.com/Azure/login#readme for more information.