Oryx
Oryx copied to clipboard
Cannot deploy an Azure Function when Azure Function App is enabled with VNET integration
Bug Report
I cannot deploy a function via Visual Studio code to a Function App. Here is the output of the from VSCode
1:22:16 dsfatest02: Starting deployment... 11:22:18 dsfatest02: Creating zip package... 11:22:18 dsfatest02: Zip package size: 5.86 kB 11:22:21 dsfatest02: Fetching changes. 11:22:22 dsfatest02: Cleaning up temp folders from previous zip deployments and extracting pushed zip file /tmp/zipdeploy/d6310803-a3de-474b-afdd-9142b8369002.zip (0.01 MB) to /tmp/zipdeploy/extracted 11:22:27 dsfatest02: Updating submodules. 11:22:28 dsfatest02: Preparing deployment for commit id 'bb7a0fdc29'. 11:22:31 dsfatest02: Repository path is /tmp/zipdeploy/extracted 11:22:31 dsfatest02: Running oryx build... 11:22:31 dsfatest02: Command: oryx build /tmp/zipdeploy/extracted -o /tmp/build/expressbuild --platform python --platform-version 3.9 -i /tmp/8d983fc357e4522 -p packagedir=.python_packages/lib/site-packages 11:22:32 dsfatest02: Operation performed by Microsoft Oryx, https://github.com/Microsoft/Oryx 11:22:32 dsfatest02: You can report issues at https://github.com/Microsoft/Oryx/issues 11:22:33 dsfatest02: Oryx Version: 0.2.20210618.2, Commit: d70100fba618b33e529c149b7d2d5f2c981ebbb1, ReleaseTagName: 20210618.2 11:22:33 dsfatest02: Build Operation ID: |Rxn4n7BmnR4=.e30add5b_ 11:22:33 dsfatest02: Repository Commit : bb7a0fdc29614a61ad363f39ba72f26e 11:22:33 dsfatest02: Detecting platforms... 11:24:12 dsfatest02: Error: Oops... An unexpected error has occurred. 11:24:14 dsfatest02: /opt/Kudu/Scripts/starter.sh oryx build /tmp/zipdeploy/extracted -o /tmp/build/expressbuild --platform python --platform-version 3.9 -i /tmp/8d983fc357e4522 -p packagedir=.python_packages/lib/site-packages 11:24:33 dsfatest02: Deployment failed.
The Function App is configured to use a VNET where the VNET is behind an Azure Firewall. If I remove/disable VNET integration, I am then able to publish a function via VSCode. But when I enable VNET integration, it breaks, with the above error.
I believe the issue could be a Firewall permissions issue. Would you be able to tell me what rules would be required to allow the function code deployment to work via VSCode with VNET integration enabled ?
Regards
Imran
Hey Imran,
I was experiencing a very similar issue. We've managed to resolve it by allowing outbound HTTPS access from any IP to "0.0.0.0/0" on port 443.
Hello Boris,
I had to had to allow outbound access to the following domains on port 443 :-
oryx-cdn.microsoft.io pypi.org files.pythonhosted.org
in order to be able to publish to an Azure Function App using Visual Studio Code.
Regards
Imran
From: Boris @.> Sent: 26 October 2021 10:10 To: microsoft/Oryx @.> Cc: Imran Kamaluddin @.>; Author @.> Subject: Re: [microsoft/Oryx] Cannot deploy an Azure Function when Azure Function App is enabled with VNET integration (#1126)
External Email - This message originated outside Jupiter.
Hey Imran,
I was experiencing a very similar issue. We've managed to resolve it by allowing outbound HTTPS access from any IP to "0.0.0.0/0" on port 443.
You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fmicrosoft%2FOryx%2Fissues%2F1126%23issuecomment-951738647&data=04%7C01%7Cimran.kamaluddin%40jupiteram.com%7C6fc4e71ffe2148ab412808d99860dbc6%7C70e1a0b75bf5416b96c4f244fca5ae53%7C0%7C0%7C637708364039826219%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=xfwiDa9ZVhRynsiLN8cTeQQNRUzIAUH%2B%2FEJ9u%2B%2F6BOM%3D&reserved=0, or unsubscribehttps://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAV3NSL63IRLTLLF36V2OX5LUIZ5AHANCNFSM5FCJCWTQ&data=04%7C01%7Cimran.kamaluddin%40jupiteram.com%7C6fc4e71ffe2148ab412808d99860dbc6%7C70e1a0b75bf5416b96c4f244fca5ae53%7C0%7C0%7C637708364039836175%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=dGynIAVF%2Fg7%2FAbKAjF5y0Z50pxJ%2B3B3tsZUni940xvA%3D&reserved=0. Triage notifications on the go with GitHub Mobile for iOShttps://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fapps.apple.com%2Fapp%2Fapple-store%2Fid1477376905%3Fct%3Dnotification-email%26mt%3D8%26pt%3D524675&data=04%7C01%7Cimran.kamaluddin%40jupiteram.com%7C6fc4e71ffe2148ab412808d99860dbc6%7C70e1a0b75bf5416b96c4f244fca5ae53%7C0%7C0%7C637708364039836175%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=opGQ7ZP76efAZsBfeJCdIuwbCf2MuhghERlcNySs72I%3D&reserved=0 or Androidhttps://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fplay.google.com%2Fstore%2Fapps%2Fdetails%3Fid%3Dcom.github.android%26referrer%3Dutm_campaign%253Dnotification-email%2526utm_medium%253Demail%2526utm_source%253Dgithub&data=04%7C01%7Cimran.kamaluddin%40jupiteram.com%7C6fc4e71ffe2148ab412808d99860dbc6%7C70e1a0b75bf5416b96c4f244fca5ae53%7C0%7C0%7C637708364039846129%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=535KSsRJaz9ARraxUY9ywt8cWqbOE87QVI%2BQJLWpXLM%3D&reserved=0.
This communication (including any attachments) contains information which is confidential and may also be privileged. This communication is for the exclusive use of the intended recipient(s). If you are not the intended recipient(s) you are strictly prohibited from distributing, copying, disclosing or using this communication or the information in it (in whole or in part). If you have received this communication in error, please notify us by email @.***) or by telephone +44 (0)20 3817 1000 and then delete the email (including any attachments) from your system together with any copies of it. This communication does not constitute investment advice or a recommendation.
All communications sent to and from the companies mentioned below are subject to monitoring of content. By using this method of communication, you give consent to the monitoring of such communications. Any views or opinions are solely those of the author and do not necessarily represent those of the companies listed below unless specifically stated.
Jupiter Fund Management plc ('JFM'), Jupiter Investment Management Group Limited ('JIMG'), Jupiter Asset Management Limited ('JAM'), Jupiter Investment Management Limited ('JIM'), Jupiter Fund Managers Limited ('JFML') and Jupiter Unit Trust Managers Limited ('JUTM') are all registered in England and Wales (nos. 6150195, 792030, 2036243, 02949554, 802627 and 2009040 respectively). The registered office of JFM, JIMG, JAM, JIM, JFML and JUTM is The Zig Zag Building, 70 Victoria Street, London, SW1E 6SQ. JAM, JIM, JFML and JUTM are authorised and regulated by the Financial Conduct Authority, whose address is 12 Endeavour Square, London E20 1JN.
Jupiter Asset Management (Europe) Limited, The Wilde-Suite G01, The Wilde, 53 Merrion Square South, Dublin 2, D02 PR63, Ireland. Authorised and regulated by the Central Bank of Ireland (Number: C181816).
Personal information provided to us or collected by us is processed in accordance with our Privacy Policy which can be found at the foot of pages on www.jupiteram.com. JAM000499-004-0321
Can we please get a more detailed error message instead of Oops... An unexpected error has occurred.?
Strongly agree this needs a better error message. This was a bit of PITA to troubleshoot.