0

Update: more detail can be found in the GitHub issue that i opened here:

https://github.com/Azure/AppConfiguration/issues/567#issuecomment-953365024

Original question:

I have set up three resource groups, each with their own instance of App Configuration. All keys/values are synchronized between the configuration stores. I have also created an Azure Front Door instance and associated frontend, backendpool, and route linking the frontend and backendpool via forwarding. Everything is wired up successfully. However, when I attempt to call into the front door config endpoint, I get an authentication failure in my app config client.

Azure.Identity.AuthenticationFailedException
DefaultAzureCredential authentication failed.
...
Azure.Identity.AuthenticationFailedException
ClientSecretCredential authentication failed.
...
Azure.RequestFailedException
Service request failed.
Status: 400 (Bad Request)

Content:
{"error":"invalid_resource","error_description":"AADSTS500011: The resource principal named https://config.[redacted].com was not found in the tenant named [redacted]. This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. You might have sent your authentication request to the wrong tenant."}

Calling the uri of any/all of the individual config services (backends) works fine.

David Peden
  • 17,596
  • 6
  • 52
  • 72

1 Answers1

0

Not out of the box, this is an issue with the token handling, but I think a more important question is why you want this? redundancy with App Configuration is normally build in the code/function itself very easily, and even when apps/functions are distributed the config call to the store does not introduce much latency to even be notable

Matt Douhan
  • 677
  • 3
  • 13
  • Because I want all of the stacks to be independent and I don't want regions being aware of each other, even if it's because of configuration. – David Peden Jan 18 '22 at 17:26
  • @DavidPeden But what is the difference with adding backend pools to AFD and doing the same in your code? Just because you specify the various options in your code instead of in AFD doesn't make them more or less aware they are still independent – Matt Douhan Jan 20 '22 at 06:21