How about using this tool as PaaS offering

[amitjattan]

@msftgits @DCMattyG Looks like currently tool is deployed as owned solution by customer and it's hard to accommodate new features in the tool when added in this repository, how do you suggests consumers to update tool once deployed in their environments?

[DCMattyG]

Hi @amitjattan, this is a great question!

If a customer deploys the standard offering, the containers are hosted in a public Azure Container Registry. As the containers are updated, the only thing users have to do is simply restart the App Service, and the new containers will be pulled down. In the near future, I'll probably add in some automation around this restart so it "just happens".

If a customer chooses to deploy this solution in a Private ACR, then they will need to pull down the updated code from GitHub and build the new containers into their ACR's on a regular basis.

Did that help to answer your question completely?

[DCMattyG]

Hi @amitjattan, it appears you are navigating to "localhost"....am I reading that correctly?

[amitjattan]

Yes this is correct @DCMattyG

[amitjattan]

And this is the error it shows in logs, if I just run with context localhost/admin/admins and try to save it

"PUT /api/admin/admins HTTP/1.0" 403 Forbidden

[DCMattyG]

So how are you running this? It's designed to be run in Azure App Services (assuming you are using the provided deploy script). I would assume your URL would be https://<something>.azurewebsites.net. Can you help me better how exactly this is deployed in your circumstance?

[amitjattan]

So I have previousely executed the the ./deploy.ps1 --AppsOnly script and I was able to manage All SPNs/Apps created with correct permissions and then I have updated the ipam-ui-app redirect url to http://localhost

As a second step, where I have deployed the bicep templates, which created cosmos DB and key vault for me, I had just used those instances as it is for my local docker-compose and then updated the docker-compose.prod.yml with the secrets directly and ran that in local.