Azure Functions Container Apps creates managed resource group without access

Patryk Mikolajczak 20

Hi, I'm playing around with the in preview Azure Functions in Container Apps. I've deployed a dummy app with the azure-functions/dotnet7-quickstart-demo image. Unfortunately I cannot edit the Container App - can't edit scale rules or containers deployed in the Container App. The error states, that I have no access to the resource group named 'managed environment functions app' created for the Function App. I can't move the resource from the 'managed environment functions app' to any other one. Can't edit tags for those as well. In the access tab of the managed resource group, I am assigned as the owner.

Does anyone know a solution, had this issue? I'm sadly running a no support plan and can't create support tickets.

Luke Murray 11,086 Reputation points MVP

2023-10-15T08:54:11.7166667+00:00
Hi, Patryk

Because this is in Preview - your best bet is to open an issue directly on the Container Apps Git repo:

https://github.com/microsoft/azure-container-apps/issues This will be seen by the Container Apps product team, I couldn't find anything related to your issue in a brief search of open issues, but it could be worth opening a new one, at the very least it is an opportunity for some documentation on this functionality, to be updated.
navba-MSFT 24,270 Reputation points Microsoft Employee

2023-10-16T08:44:32.64+00:00

@Patryk Mikolajczak Welcome to Microsoft Q&A Forum, Thank you for posting your query here!

Please check if the below suggestion provided by @Luke Murray helped. If you still need any assistance, please let me know. I would be happy to assist.
Ramya Oruganti 5 Reputation points Microsoft Employee

2024-02-28T08:21:43.74+00:00

Hi @Patryk Mikolajczak are your queries resolved for Azure Functions on ACA. May I know why you are looking to move the resource?
Patryk Mikolajczak 20 Reputation points

2024-02-28T08:45:44.9566667+00:00

@Ramya Oruganti I simply did not understand the docs. Maybe it's an area to improve on. To me it wasn't quite clear that the managed ACA will be created with managed resource group. Tried updating the Functions image on the ACA instance which obviously failed. When I tried updating the Functions App itself with the new image it did work. The confusion came from the fact that those are essentially two products merged into one, I had no clue which one to update and as I was deploying a number of Container Apps, I tried to update the Functions Container App via ACA as well. The issue is now resolved and I was able to update the underlying image via Functions and scaling via ACA, all in Github Action.

Accepted answer

navba-MSFT 24,270 Reputation points Microsoft Employee

2023-10-19T08:56:45.7166667+00:00

@Patryk Mikolajczak Thanks for your reply.

Here are the answers to your pending questions:

Question 1: updating underlying image of the ACA for the Function App by hand in the UI..

Answer: You can update the Image url using portal . Go to Azure Functions resource running on ACA -> configuration -> Update the image url here

Question 2: updating underlying image of the ACA for the Function App via Azure/functions-container-action@v1 action, where I provide the Function App name and the image url hosted in ACR.

Answer: For an existing Github action – the deployment yml can be updated with the new image url which should trigger the Github action to deploy the new image. Refer to the samples here - azure-functions-on-container-apps/samples/GitHubActions at main · Azure/azure-functions-on-container-apps

**
Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.
Please sign in to rate this answer.
navba-MSFT 24,270 Reputation points Microsoft Employee

2023-10-23T03:10:28.82+00:00

@Patryk Mikolajczak Just following up to check if the above answer helped. If that answers your query, do click "Accept the answer” for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know. I would be happy to help.

Patryk Mikolajczak 20 Reputation points

2023-10-27T12:15:07.9233333+00:00

Hi, sorry for the late reply. Accepting your answer as it did help.

Did not notice that I need to update the image via Function configuration in the UI. After using this tab, the update worked. (maybe the docs can be improved?)

I ditched the action and used the az cli directly in order to update the scaling rules as well. Working flawlessly.

I can now query my test http function fine, the container scales to 0 when not used.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

1 additional answer

navba-MSFT 24,270 Reputation points Microsoft Employee

2023-10-18T03:30:25.25+00:00

@Patryk Mikolajczak Welcome to Microsoft Q&A Forum, Thank you for posting your query here!

Please note that this is an expected behavior. The underlying ACA resource will not be accessible to end user as this can bring inconsistency to the resource state.

Specifically scale rules as we have seamless integration with KEDA and the user should not require to modify the scale rules. Based on the function types the scaled rules are auto configured.

Please update tags on the functions resource and not the underlying ACA resource.

If you still have any follow-up questions, please let me know. I would be happy to answer.

**
Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.
Please sign in to rate this answer.
Patryk Mikolajczak 20 Reputation points

2023-10-18T09:34:05.6833333+00:00

Thanks, I fully understand the reason.

However, I guess I should still be able to update the underlying container (by editing Conatiners in the corresponding Container App). Sadly, I cannot do this. Is the only solution atm to remove the Function App and deploy it again? Ideally I'd like to automate it via Github Action, the Azure/functions-container-action@v1 action fails on the same issue as I have on the UI - Unathorized to perform the action.

Do you want me to continue the discussion here or do I create a Github issue in the container apps repo?

navba-MSFT 24,270 Reputation points Microsoft Employee

2023-10-18T09:39:14.03+00:00

@Patryk Mikolajczak I would be happy to assist you here on this thread. Please share your complete use case ? and what are you trying to achieve ? Please let me know your questions.

This information would help me to assist you better. Awaiting your reply.

Patryk Mikolajczak 20 Reputation points

2023-10-18T10:04:26.55+00:00

I'm aiming to have a repo with CICD setup for the Functions project written in .net. Those will be hosted via the preview ACA (I like the low cost and those need to be containers with a custom dockerfile as I need ffmpeg).

What I have atm:

the repo setup with CICD for the Functions App,

sample Functions App in ACA deployed by hand via UI

What I struggle with:

updating underlying image of the ACA for the Function App by hand in the UI,

updating underlying image of the ACA for the Function App via Azure/functions-container-action@v1 action, where I provide the Function App name and the image url hosted in ACR.

The image I'd like to use is hosted in ACR in the same Resource Group and Location.

In both cases the update fails with authorization to the managed Resource Group error.

navba-MSFT 24,270 Reputation points Microsoft Employee

2023-10-23T03:11:43+00:00

@Patryk Mikolajczak Just following up to check if the below answer helped. If that answers your query, do click "Accept the answer” for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know. I would be happy to help.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Azure Functions Container Apps creates managed resource group without access

1 additional answer

Your answer