To use an App Configuration reference for an app setting, set the reference as the value of the setting. If you need centralized configuration management capabilities, then configuration data should go into App Config. Application Settings and App Configuration key-values both are securely encrypted at rest. Source Application Settings from App ConfigĪpp Configuration references can be used as values for Application Settings, allowing you to keep configuration data in App Configuration instead of the site config. Label should be the value of Label for the Key specified in Keyįor example, a complete reference with Label would look like the following, Key=myAppConfigKey Label=myKeysLabel)Īlternatively without any Label: Key=myAppConfigKey)Īny configuration change to the app that results in a site restart causes an immediate refetch of all referenced key-values from the App Configuration store. The Label part is optional in reference string. Value for Key should be the name of the Key that you want to assign to the App setting. Key forms the required part of the reference string. The value for Endpoint should have the url of your App Configuration resource. If the value of an App Configuration reference is a Key Vault reference in App Configuration store, your app will also need to have permission to access the key vault being specified.Įndpoint is the required part of the reference string. In addition to storing raw configuration values, Azure App Configuration has its own format for storing Key Vault references. Granting your app access to referenced key vaults This configuration will apply to all references from this App. userAssignedIdentityResourceId=$(az identity show -g MyResourceGroupName -n MyUserAssignedIdentityName -query id -o tsv)ĪppResourceId=$(az webapp show -g MyResourceGroupName -n MyAppName -query id -o tsv)Īz rest -method PATCH -uri "$" Though the property has keyVault in the name, the identity will apply to App Configuration references as well. Once you have granted permissions to the user-assigned identity, follow these steps:Īssign the identity to your application if you haven't already.Ĭonfigure the app to use this identity for App Configuration reference operations by setting the keyVaultReferenceIdentity property to the resource ID of the user-assigned identity. Follow these steps to create user-assigned identity for App Configuration store. In these cases, a user-assigned identity can be created and given access to the App Configuration store, in advance. Some apps might need to reference configuration at creation time, when a system-assigned identity wouldn't yet be available. You'll be assigning App Configuration Data Reader role to this identity, scoped over the resource.Īccess App Configuration Store with a user-assigned identity Update the role assignments for your store. App Configuration references do not yet support network-restricted configuration stores.Ĭreate a managed identity for your application.Īpp Configuration references will use the app's system assigned identity by default, but you can specify a user-assigned identity.Įnable the newly created identity to have the right set of access permissions on the App Configuration store.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |