Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you may not be able to execute some actions.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

Is there a safe way to archive Azure App Services application settings?

E
esther last edited by

I successfully deployed a fastAPI onto Azure App Services.

However, the environmental variables that I specified into the Configurations > App Settings pane got unexpectedly deleted, thus preventing my app from running correctly and I had to manually recreate the application settings from scratch.

I could save these settings onto my local computer but I am wondering if there is a better way to archive these environment variables.
Reply Quote 0
1 Reply Last reply
C
chanisef last edited by

Ideally, you would be injecting these via an appsettings.json, Key Vault reference or something and not manually setting these in the Configuration panel itself. In terms of archiving the actual values etc, this is probably most easily accomplished via the https://learn.microsoft.com/en-us/rest/api/appservice/web-apps . There are several CRUD operations that can GET, UPDATE, etc configurations/application settings which should be able to allow you to accomplish what you have asked here.
Reply Quote 0
1 Reply Last reply

2
Posts

0
Views

Suggested Topics

R

How to SSH from Jenkins node to Jenkins node safely?
Continuous Integration and Delivery (CI, CD) • ssh jenkins key management jenkins plugins • • Rossere

2

0
Votes

2
Posts

1
Views

G

Yes, storing your ssh keys directly on a build node is a bad practice. Nodes can be replicated, deleted, or given access to from other systems, and you don't want to lose track of what systems have access to your secrets. You should also not pass them directly into the build job, either as a parameter or as an environment variable. This can cause a huge headache with logging and tracking to make sure your keys aren't inadvertently output to places they shouldn't be. Instead, you should: Use a centralized secret store (such as Hashicorp Vault) to retrieve the secrets at build run-time. Use a plugin (such as the Credentials or SSH Credentials Plugin) to reference the keys during the build.
Which libraries generate observability metrics for applications in the cluster to prometheus?
Continuous Integration and Delivery (CI, CD) • kubernetes metrics prometheus • • briley

2

0
Votes

2
Posts

1
Views

J

For Application specific calls you need to use a Prometheus client and create the metrics yourself. The Prometheus client will allow you to create a /metrics endpoint where you can output the current metric values which Prometheus will scrape. For metrics that are not unique to your application, you can use Prometheus exporters that will run on either the node, container, or runtime environment, or third-party software. These will also create targets which you can tell Prometheus to scrape to gather the metric data. Once the metric data is collected you'll need to write your own RED and USE queries in graphana to display those metrics.
Spring authentication Directory active azure
Software Programming • java spring spring boot azure • • Analeea

2

0
Votes

2
Posts

0
Views

S

I already solved the validation through a tutorial that gives me azure https://azure.microsoft.com/es-mx/resources/samples/active-directory-java-webapp-openidconnect/ which gives me detailed the process.
T

No access to Azure folder (ASP.NET MVC)
Software Programming • c sharp asp.net mvc asp.net azure • • terrea

2

0
Votes

2
Posts

0
Views

N

IIS does not file static files for which it does not have mime type. So he just doesn't know if your file is static and safe to hand it over to the first counter.Write on the web.config at website level. <configuration> <system.webServer> <staticContent> <remove fileExtension=".webm" /> <mimeMap fileExtension=".webm" mimeType="video/webm" /> </staticContent> </system.webServer> </configuration> But the idea of putting something right in the bottom of the website is questionable. It's better to put Storage in Azure and give the user right there.
Is there an idiomatic way to create reusable Packer templates?
Continuous Integration and Delivery (CI, CD) • packer • • Alberto

2

0
Votes

2
Posts

1
Views

G

So far, I've taken to defining the default builders and provisioners we use, with user variables interpolated in where required, eg: "type": "amazon-ebs", "instance_type": "t2.micro", "ami_name": "{{ user `ami-name` }} I've got files called eg. packer-builders.json and packer-provisioners.json, and then all the separate Packer templates in their own directories. I've then written a quick Bash script that takes the name of the template one wants to build, finds all the packer-*.json files, and uses jq --slurp to merge them in (eg. jq --slurp '.[0] * .[1] * .[2]' $LIST_OF_FILES) with the supplied template at the end. It saves the output and sends that along to packer build. As a bonus, I'm also using jsmin before hitting jq so that I can include comments in any of the JSON files. It works well, but I'm not a massive fan of it because it's custom and it adds an additional barrier for entry for others coming across it (much more to consider than just packer build something.json! So I'm really keen for additional answers here if there's a better way to do this.
K

Question on NGINX reverse proxy when there are services on the host and on containers
Continuous Integration and Delivery (CI, CD) • docker nginx • • Kadyn

2

0
Votes

2
Posts

1
Views

A

I though about putting the container on a not used port, like 8999 for example, and proxying the request to this port, and blocking these ports on the firewall, so no one outside can access them. If I go with this option, does the nginx configuration inside of the containers will need the server_name still? You're thinking along the right lines. You do need the server_name directives in the container, since it can be accessed both by app2.com/example and app3.com. Here's an example setup. I'll emulate an nginx on the host machine with a docker container running on the host network. Scroll down past the code and console log for some explanations. Here is the listing of the files I used: lllamnyp@lllamnyp:~/Cloud/dev/stackexchange/devops/q11420$ tail -n +1 * ==> app1.html I am app1! ==> app2_example.html I am app2 in example subpath! ==> app2.html I am app2! ==> app3.html I am app3! ==> container_nginx.conf server { server_name app2.com; location /example { root /var/www/app2/; } } server { server_name app3.com; location / { root /var/www/app3/; } } ==> host_nginx.conf server { server_name app1.com; location / { root /var/www/app1/; } } server { server_name app2.com; location / { root /var/www/app2/; } location /example { proxy_pass http://localhost:8999; proxy_set_header Host $http_host; } } server { server_name app3.com; location / { proxy_pass http://localhost:8999; proxy_set_header Host $http_host; } } ==> nginx.conf user nginx; worker_processes 1; error_log /var/log/nginx/error.log warn; pid /var/run/nginx.pid; events { worker_connections 1024; } http { include /etc/nginx/mime.types; default_type application/octet-stream; log_format main '$remote_addr - $remote_user [$time_local] "$request" "$http_host" ' '$status $body_bytes_sent "$http_referer" ' '"$http_user_agent" "$http_x_forwarded_for"'; access_log /var/log/nginx/access.log main; sendfile on; #tcp_nopush on; keepalive_timeout 65; #gzip on; include /etc/nginx/conf.d/*.conf; } ==> run.sh docker run --name host_nginx --network=host --rm -d \ -v `pwd`/nginx.conf:/etc/nginx/nginx.conf \ -v `pwd`/host_nginx.conf:/etc/nginx/conf.d/default.conf \ -v `pwd`/app1.html:/var/www/app1/index.html \ -v `pwd`/app2.html:/var/www/app2/index.html \ nginx docker run --name container_nginx -p 8999:80 --rm -d \ -v `pwd`/nginx.conf:/etc/nginx/nginx.conf \ -v `pwd`/container_nginx.conf:/etc/nginx/conf.d/default.conf \ -v `pwd`/app2_example.html:/var/www/app2/example/index.html \ -v `pwd`/app3.html:/var/www/app3/index.html \ nginx Here is the log from my console, where I am testing things out. lllamnyp@lllamnyp:~/Cloud/dev/stackexchange/devops/q11420$ sudo ./run.sh 73ebc99b8fae1d18bcbc571adbab6b65eaa49f861d66f11a7490d61b4e1beb0f 9f3761ab0619255d9bde08eee70e1fb9b686b645f38d976de7c39d4c8f0ad70d lllamnyp@lllamnyp:~/Cloud/dev/stackexchange/devops/q11420$ curl app1.com I am app1! lllamnyp@lllamnyp:~/Cloud/dev/stackexchange/devops/q11420$ curl app2.com I am app2! lllamnyp@lllamnyp:~/Cloud/dev/stackexchange/devops/q11420$ curl app3.com I am app3! lllamnyp@lllamnyp:~/Cloud/dev/stackexchange/devops/q11420$ curl app2.com/example <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx/1.17.10</center> </body> </html> lllamnyp@lllamnyp:~/Cloud/dev/stackexchange/devops/q11420$ curl app2.com/example/ I am app2 in example subpath! lllamnyp@lllamnyp:~/Cloud/dev/stackexchange/devops/q11420$ sudo docker logs host_nginx 127.0.0.1 - - [25/Apr/2020:15:11:15 +0000] "GET / HTTP/1.1" "app1.com" 200 11 "-" "curl/7.68.0" "-" 127.0.0.1 - - [25/Apr/2020:15:11:17 +0000] "GET / HTTP/1.1" "app2.com" 200 11 "-" "curl/7.68.0" "-" 127.0.0.1 - - [25/Apr/2020:15:11:20 +0000] "GET / HTTP/1.1" "app3.com" 200 11 "-" "curl/7.68.0" "-" 127.0.0.1 - - [25/Apr/2020:15:11:25 +0000] "GET /example HTTP/1.1" "app2.com" 301 170 "-" "curl/7.68.0" "-" 127.0.0.1 - - [25/Apr/2020:15:11:29 +0000] "GET /example/ HTTP/1.1" "app2.com" 200 30 "-" "curl/7.68.0" "-" lllamnyp@lllamnyp:~/Cloud/dev/stackexchange/devops/q11420$ sudo docker logs container_nginx 172.17.0.1 - - [25/Apr/2020:15:11:20 +0000] "GET / HTTP/1.0" "app3.com" 200 11 "-" "curl/7.68.0" "-" 172.17.0.1 - - [25/Apr/2020:15:11:25 +0000] "GET /example HTTP/1.0" "app2.com" 301 170 "-" "curl/7.68.0" "-" 172.17.0.1 - - [25/Apr/2020:15:11:29 +0000] "GET /example/ HTTP/1.0" "app2.com" 200 30 "-" "curl/7.68.0" "-" I corrected some errors in your config (missing semicolon here and there), changed the server roots to directories, rather than index.html and also the request for app2.com/example would request /var/www/app2/example/index.html so pay close attention to the way in which I mounted the files when starting up the containers in ./run.sh. Finally, it was necessary to do proxy_set_header Host $http_host; in the host nginx config, so that the requested Host header gets correctly relayed to the containerized nginx and both app2 and app3 work correctly.
Set umask for an individual salt state
Continuous Integration and Delivery (CI, CD) • salt • • jeanid

2

0
Votes

2
Posts

0
Views

G

No, there's no facility for changing the umask of the running Salt process. What you could do is start a new process with cmd.run: install python module: cmd.run: - name: pip install foo - umask: '077' - unless: - fun: pip.is_installed pkgname: foo install python module at version: cmd.run: - name: pip install bar==4.2 - umask: '077' - unless: - pip freeze | grep bar==4.2
Necessity of mirroring git repos for small team considering switching to Azure
Continuous Integration and Delivery (CI, CD) • git gitlab azure devops distributed systems • • carriann

2

0
Votes

2
Posts

1
Views

D

As you have realised Git is decentralised by design. Using LAN repos If Azure DevOps goes down, or your office internet connection, you can still use LAN repos. These could be simple file shares. You can also use emails to share commits; nothing I've tried but Git has native support for it). I have however pushed and pulled commits directly from and to my colleagues computers using file shares (because our online Git provider back then was extremely bad and slow (and the repos were many GB). If you don't have automatic sync (which you can setup using pipelines/CI) between Azure DevOps and GitLab then the most up-to-date repos will reside on the developers computers which makes it easy to push the repo to a new location when needed (simply add the new remote and click push). However, if some repo hasn't been used in a long time it'll probably not exist on any developers computer and you'll therefor not be able to access it. If you want to be disaster-ready I'd suggest hosting an Azure DevOps Server instance on your LAN that's synced with the cloud. Azure DevOps Server is capable of processing the very same yaml pipelines as the online version. You'd be protected against much more than just Azure DevOps Services outages. The maintenance costs of having Azure DevOps Server as a backup for a small team shouldn't be much different than having GitLab as backup. I'm not recommending these solutions, rather I'm just discussing them. You might want to have a look at the Azure DevOps Proxy Server.
T

Azure Powershell DSC or Ansible
Continuous Integration and Delivery (CI, CD) • powershell azure ansible vmware • • tahishae

2

0
Votes

2
Posts

1
Views

S

PowerShell Desired State Configuration: Pro's Great support for Microsoft Technologies (IIS, Exchange, SharePoint, etc.) Con's OS and PowerShell Version requirements can become prohibitive. WinRM and the LCM can be flakey requiring fiddling around restarting services to get it working. Opensource Ecosystem isn't as strong. Ansible: Pro's Huge Open-source ecosystem around Ansible, with many ways of doing one task. Support for a wide range of technologies, enabling you to use Ansible YAML for vSphere, Azure, AWS, etc. Easy to hire people with Ansible experience. Con's Poor support for the nitty-gritty of Microsoft Products, however, you can use the win_dsc module to call DSC from Ansible. Ansible is becoming less important with the advent of Cloud, Kubernetes and Terraform. Personally, I use DSC for my workstation and that's it now. Previously I used it to bootstrap MongoDB and Redis clusters but eventually switched to Ansible because it meant throwing away the hard to maintain DSC and using open-source Ansible modules from Galaxy.
G

How to prompt when win_service service exists?
Continuous Integration and Delivery (CI, CD) • windows ansible • • guilherme

2

0
Votes

2
Posts

0
Views

T

Use https://docs.ansible.com/ansible/latest/user_guide/playbooks_conditionals.html . - name: Check Service by Display name | NameOfMyService win_service: name: name_of_my_service register: service ignore_unreachable: yes name: Print status of Windows Service | NameOfMyService debug: var: service name: Frobnicate the service frobnicate: service: name_of_my_service when: service.exists | default(false)
E

How much information about our Security & Penetration Testing should we share with customers?
Security, Penetration Testing • penetration test azure saas • • emerson

2

0
Votes

2
Posts

0
Views

This will vary according to your business and the transparency you have with your customers. Most of the companies perform tests on their application and share with the customers the standards they have been tested against, but not the "step-by-step" of the testing. For example, let's say you have a web application, you can mention to your customers that your application was tested against the OWASP web application standards. That should be enough to satisfy most of the customers. If you deal with sensitive information, you may need to get certified in some regulations. For example, if you deal with credit card information, you need to be PCI-Certified. Once you get this certification, you just need to proof to your clients that you passed on PCI, but you don't necessarily need to describe every single test that was done.
M

Log into an Azure Active Directory application from a WPF app?
Software Programming • c sharp wpf azure • • meriah

2

0
Votes

2
Posts

0
Views

With the following corrections to my code I can send to call a browser to log in in in a definitive way. private async void SignOutButton_Click(object sender, RoutedEventArgs e) { var accounts = await App.PublicClientApp.GetAccountsAsync(); if (accounts.Any()) { try { await App.PublicClientApp.RemoveAsync(accounts.FirstOrDefault()); NavigationWindow window = new NavigationWindow(); window.Source = new Uri("https://login.microsoftonline.com/common/oauth2/v2.0/logout"); window.Show(); this.ResultText.Text = "User has signed-out"; this.CallGraphButton.Visibility = Visibility.Visible; this.SignOutButton.Visibility = Visibility.Collapsed; } catch (MsalException ex) { ResultText.Text = $"Error signing-out user: {ex.Message}"; } } }
Scripts for setting the environment for Oracle Database Multitenant
SQL, Database Testing • oracle environment variables • • Demir

2

0
Votes

2
Posts

0
Views

Looks to me like you are making this waaay more complex than it needs to be and re-inventing the wheel (oraenv) How bout this? #!/bin/sh cat /etc/oratab |grep -v ^# | grep -v ^$ echo echo Pick one of the above source oraenv
E

Terraform wanting to redeploy azure vms for 'no' reason
Continuous Integration and Delivery (CI, CD) • linux azure terraform vm • • elysha

2

0
Votes

2
Posts

0
Views

M

So, in short, there is a bug/feature in terraform, and the posted solution was to output the keyvault_id from the keyvault module, then declaring the output value as a variable to pass into other modules. So when getting the secrets now, I use the output value as key_vault_id in the data-block for the secrets like this: data "azurerm_key_vault_secret" "username" { name = var.username key_vault_id = var.keyvault_id } instead of this: data "azurerm_key_vault_secret" "username" { name = var.username key_vault_id = data.azurerm_key_vault.kv.id }
G

How to Configure jenkins email notification for some commercial email services?
Continuous Integration and Delivery (CI, CD) • configuration jenkins • • gionna

2

0
Votes

2
Posts

1
Views

You may consider these two Jenkins plugins for it: https://wiki.jenkins.io/display/JENKINS/Mailer https://wiki.jenkins.io/display/JENKINS/Email-ext+plugin The first one is mostly basic and the second one is extended for additional user customizations. All necessary instructions regarding configuration, etc are described there. How we can get mail server setting details like mail server name, port number, using SSL, etc. for such email services? I am afraid that the best approach here is either refer to your system administrator who is resposible for it or contact with the provider who provides mail services.

Is there a safe way to archive Azure App Services application settings?

Suggested Topics

How to SSH from Jenkins node to Jenkins node safely? Continuous Integration and Delivery (CI, CD) • ssh jenkins key management jenkins plugins • • Rossere

Which libraries generate observability metrics for applications in the cluster to prometheus? Continuous Integration and Delivery (CI, CD) • kubernetes metrics prometheus • • briley

Spring authentication Directory active azure Software Programming • java spring spring boot azure • • Analeea

No access to Azure folder (ASP.NET MVC) Software Programming • c sharp asp.net mvc asp.net azure • • terrea

Is there an idiomatic way to create reusable Packer templates? Continuous Integration and Delivery (CI, CD) • packer • • Alberto

Question on NGINX reverse proxy when there are services on the host and on containers Continuous Integration and Delivery (CI, CD) • docker nginx • • Kadyn

Set umask for an individual salt state Continuous Integration and Delivery (CI, CD) • salt • • jeanid

Necessity of mirroring git repos for small team considering switching to Azure Continuous Integration and Delivery (CI, CD) • git gitlab azure devops distributed systems • • carriann

Azure Powershell DSC or Ansible Continuous Integration and Delivery (CI, CD) • powershell azure ansible vmware • • tahishae

How to prompt when win_service service exists? Continuous Integration and Delivery (CI, CD) • windows ansible • • guilherme

How much information about our Security & Penetration Testing should we share with customers? Security, Penetration Testing • penetration test azure saas • • emerson

Log into an Azure Active Directory application from a WPF app? Software Programming • c sharp wpf azure • • meriah

Scripts for setting the environment for Oracle Database Multitenant SQL, Database Testing • oracle environment variables • • Demir

Terraform wanting to redeploy azure vms for 'no' reason Continuous Integration and Delivery (CI, CD) • linux azure terraform vm • • elysha

How to Configure jenkins email notification for some commercial email services? Continuous Integration and Delivery (CI, CD) • configuration jenkins • • gionna

How to SSH from Jenkins node to Jenkins node safely?
Continuous Integration and Delivery (CI, CD) • ssh jenkins key management jenkins plugins • • Rossere

Which libraries generate observability metrics for applications in the cluster to prometheus?
Continuous Integration and Delivery (CI, CD) • kubernetes metrics prometheus • • briley

Spring authentication Directory active azure
Software Programming • java spring spring boot azure • • Analeea

No access to Azure folder (ASP.NET MVC)
Software Programming • c sharp asp.net mvc asp.net azure • • terrea

Is there an idiomatic way to create reusable Packer templates?
Continuous Integration and Delivery (CI, CD) • packer • • Alberto

Question on NGINX reverse proxy when there are services on the host and on containers
Continuous Integration and Delivery (CI, CD) • docker nginx • • Kadyn

Set umask for an individual salt state
Continuous Integration and Delivery (CI, CD) • salt • • jeanid

Necessity of mirroring git repos for small team considering switching to Azure
Continuous Integration and Delivery (CI, CD) • git gitlab azure devops distributed systems • • carriann

Azure Powershell DSC or Ansible
Continuous Integration and Delivery (CI, CD) • powershell azure ansible vmware • • tahishae

How to prompt when win_service service exists?
Continuous Integration and Delivery (CI, CD) • windows ansible • • guilherme

How much information about our Security & Penetration Testing should we share with customers?
Security, Penetration Testing • penetration test azure saas • • emerson

Log into an Azure Active Directory application from a WPF app?
Software Programming • c sharp wpf azure • • meriah

Scripts for setting the environment for Oracle Database Multitenant
SQL, Database Testing • oracle environment variables • • Demir

Terraform wanting to redeploy azure vms for 'no' reason
Continuous Integration and Delivery (CI, CD) • linux azure terraform vm • • elysha

How to Configure jenkins email notification for some commercial email services?
Continuous Integration and Delivery (CI, CD) • configuration jenkins • • gionna