Base solution for your next web application
Open Closed

Enabling Azure Key Vault in Production #12291


User avatar
0
4Matrix created

In the appsettings.json file for our staging site, we have enabled the azure key vault but then this stops the app service from running when deployed. It all works fine when running locally with all the same configuration. Any Ideas? Do we need to do anything to the Key Vault Firewall? We have tried both RBAC and Vault Access Policies and cant seem to fix the issue. The only way to get the app service to run is to set the Azure Key Vault enabled to False.


2 Answer(s)
  • User Avatar
    0
    4Matrix created

    Ok so we have made some progress on the issue, we found that we needed to add our virtual network to allow those services to access the key vault but we still cant get it working using the Asp Net Zero configuration https://docs.aspnetzero.com/aspnet-core-angular/latest/Features-Angular-Azure-Key-Vault

    We have also tried switching the code to use the DefaultAzureIdentity instead of the Tenant ID and Secret etc:

    But this is not working either

  • User Avatar
    0
    oguzhanagir created
    Support Team

    Hi @4Matrix

    Can you review the Key Vault error status in the Activity Logs Insights section? If there is no problem in the stage environment but a problem occurs in the production environment, you can check your private endpoints. Here you need to make sure that you have configured your virtual network correctly. Also, make sure that you have adjusted the configuration in the Entra Id section according to the production environment.