http-trigger | Kubernetes CRD controller for http invocation | Function As A Service library

I have made a Azure function (http-trigger) and deployed it in the portal using Visual Studio 2019.

The function works fine and I now will add a binding to my CosmosDB. I navigate to my function and click on “Integration”. Now I see the trigger, the function and input and output bindings.

I should be able to add a new input binding here. But I have no “add”button. What am I doing wrong?

There are similar questions to this one on Stackoverflow, but none of them addressing my issue in using Terraform when an Azure Storage account is used to retain outputs.

Here is my scenario, which may sound familiar:

My terraform script provisions an Azure HTTP-triggered function with a function key. Also, this terraform script provisions a Web App that calls the mentioned HTTP-triggered function. The HTTP-triggered function's key is stored in the Web App's appsettings.json file to include it in the HTTP headers' calls to the HTTP-triggered function.

The following code snippet illustrates how the HTTP-triggered function is provisioned in terraform:

Im having trouble with puppeteer in Functions. I am running the exact same code path from two different functions; one HTTP-triggered and one scheduled.

The HTTP-triggered functions works as intended. But the scheduled function times out with:

I already read and tried this, this, and many other resources, without success.

I have a UWP app that calls an AAD-protected HTTP-triggered Azure Function. I created the two app registrations on the AAD section of the Azure portal. The API app registration specifies a scope and has an application ID URI of api://5e6b2b53-.... On the “Authentication” blade, I set https://login.microsoftonline.com/common/oauth2/nativeclient as redirect URI. I already set the same value as the redirect URI of the UWP app registration (I don’t know if it’s correct). I also set:

On the Function app registration. I also set the following redirect URI for the Function app registration, but I don’t understand if it’s required:

The UWP app registration uses the right scope I defined on the Function app registration. Both the app registrations are multi-tenant. The code I use on the UWP app to call the protected Azure Function is:

I'd like to only allow requests to an HTTP-triggered Azure Function that include a well-known client-certificate.

I do not want requests forwarded to the Azure Function that are not "approved".

• I have set Client-certificate mode to Require

Where is the Trust Store in Azure where I can store these well-known, client public certificates?

• How do I point AppService to look at this Trust Store?

I have two Azure Functions in the same project in VS Code. They are written in Python 3.8. They are both HTTP-triggered with either a GET or POST request. They were made using the Azure Functions extension for VS Code.

Their authorization levels are both set to anonymous, meaning they should accept requests from anywhere.

They have identical HttpTrigger[1, 2]/function.json files:

There is a C# application under development that is supposed to be a part of a bigger backend application to process some data. This application is supposed to obtain a token from Azure AD B2C and send it to an HTTP-triggered function where it is supposed to be validated by the following code:

We are using PubSub for queuing utilizing a push subscription pointing at an http-triggered cloud function. According to this documentation Cloud Run and App Engine will both authenticate requests from PubSub, cloud functions isn't listed. We have used other google services, like scheduler to invoke functions which require authentication, but have not had luck doing so with PubSub.

My question is, does cloud functions support authentication from PubSub through a subscription aim account set, or is it required that the function read and deal with the JWT itself for authentication?

I'm running a blob-triggered function on Azure VM (Ubuntu 18.04) using Azure Function Core Tools.
What I want to do is to get information of blobs WITHOUT using a service endpoint.

In my VNet I have:

• VM1 which runs a function with Core Tools

• VM2 which is a DNS server and pokes VM1 with an HTTP request like below;

  • curl -X POST http://{VM1's private IP}:7071/admin/functions/{my blob Function}
    -H "content-type:application/json" -d "{'input':'myContainer/myFolder/myBlob'}"

• Blob storage with a private endpoint

When I enabled a service endpoint Microsoft.Storage on my subnet, VM1 can run a blob-triggered function, can be poked by VM2, and gets information of blobs (which was fed in curl).

However once I delete a service endpoint, VM1 can't run the function and gets following errors, obviously failed to connect to a storage:

An unhandled exception has occurred. Host is shutting down.
Microsoft.WindowsAzure.Storage: This request is not authorized to perform this operation.
An unhandled exception has occurred. Host is shutting down.
Microsoft.WindowsAzure.Storage: The operation was canceled. System.Private.CoreLib: The operation was canceled.

Name resolution to a private IP of a storage is naturally fine, from both VM1 and VM2, as they are in the same subnet.

Is there any way to solve this, like adding a route to my route table?
Thank you in advance.

Edit #1
Other functions which don't use private endpoints, like HTTP-triggered functions are not affected and are callable.
I guess the Core Tools runtime does not support Private Link, because if I want a function on Azure Functions (not Core Tools on a local machine) to connect to private endpoints, it is required to use a Premium plan or App Service Plan.