Roadmap: Multiple ports support #763

torosent · 2023-05-30T16:05:28Z

8/30/2023 Public Preview: https://azure.microsoft.com/en-us/updates/public-preview-azure-container-apps-supports-additional-tcp-ports/
Docs: https://aka.ms/aca/additional-tcp-ports

Justrebl · 2023-05-31T09:42:05Z

Don't need more than just this title : Hyped 💯 😄

dhilgarth · 2023-05-31T10:39:09Z

Awesome, thanks for listening!

joaquinvacas · 2023-06-05T11:58:07Z

Waiting for this, trying to migrate my actual SMTP relay to Container Apps but this breaks the whole process.

ATM made it working by having two instances of SMTP, one for port 25 and another one for 465 sharing the volume.
Not the best practice, but the one that works.

Phiph · 2023-06-19T09:57:23Z

Looking forward to this! Thank you team!

riccardopinosio · 2023-07-13T16:41:30Z

This is currently a massive blocker for ACA usage in my opinion, as there's a ton of services that require multiple exposed ports. Really looking forward for this to be implemented.

sebastian-hans-swm · 2023-07-14T07:46:39Z

I'm also really looking forward to be able to do remote debugging of my web applications.

elruss · 2023-07-21T05:32:43Z

Slightly confused here...are we talking about multiple ports exposed externally, or internally, or both?

My use case is Selenium Grid, where I need a "hub" container to have the only externally available ingress port for its management console. But separate node/worker Container Apps in the same environment need to be able to consume an event queue on the hub where the publish and subscribe ports are different.

So, need a container app with one ingress port and two "internal" ports.

ahmelsayed · 2023-07-24T23:21:52Z

Slightly confused here...are we talking about multiple ports exposed externally, or internally, or both?

Both. Each additional port mapping will have its own external/internal state ref.

dvdr00t · 2023-07-28T23:11:01Z

Very hyped for this! 🚀
Any updates on the work so far? Is there an estimated release date?

torosent · 2023-08-07T22:26:31Z

We are working on the docs but you can use it now with api version 2023-05-02-preview under ingress section

"additionalPortMappings": [
              {
                "external": true,
                "targetPort": 1234
              },
              {
                "external": false,
                "targetPort": 2345,
                "exposedPort": 3456
              }
            ]

elglogins · 2023-08-08T21:58:42Z

What is the reason of having a custom VNET as a requirement? To expose multiple external http ports?

drapka · 2023-08-11T13:34:48Z

I am sorry, I am just starting with Azure and I am completely lost about updating existing ACA to add additionalPortMappings config using CLI.
I am using az containerapp update -g groupName -n appName --yaml <yamlPath>

The yaml contains the following section:

    ingress:
      external: true
      transport: Tcp
      allowInsecure: false
      targetPort: 10000
      exposedPort: 10000
      additionalPortMappings:
        - external: true
          targetPort: 1001
          exposesdPort: 1001

But it still gives me error: Bad Request({"type":"https://tools.ietf.org/html/rfc7231#section-6.5.1","title":"One or more validation errors occurred.","status":400,"traceId":"00-f4f96e97b9de893a2316e4f101410e53-685b10742c4f49c5-01","errors":{"$":["Unknown properties additionalPortMappings in Microsoft.ContainerApps.WebApi.Views.Version20230401Preview.ContainerAppIngress are not supported"]}})

I believe I have the latest version of the CLI extension, specifying the preview apiVersion at the top of the yaml file seems to have no effect.

When I check the details of the container app via az containerapp show command I can already see the new property additionalPortMapping, which is obviously set to null.

Thanks for any help.

ahmelsayed · 2023-08-11T16:57:48Z

What is the reason of having a custom VNET as a requirement? To expose multiple external http ports?

@elglogins additional ports are all TCP. External http ports are 80/443 only.

ahmelsayed · 2023-08-11T17:33:49Z

@drapka the cli hasn't been updated yet to use that preview api version so it won't work there.

If you want to live dangerously :) you can put this in a patch.json file

{
  "properties": {
    "configuration": {
      "ingress": {
        "external": true,
        "transport": "Tcp",
        "targetPort": 10000,
        "exposedPort": 10000,
        "additionalPortMappings": [
          {
            "external": true,
            "targetPort": 1001,
            "exposedPort": 1001
          }
        ]
      }
    }
  }
}

then do

# get your app's full resource id
ID=$(az containerapp show -n appName -g groupName -o tsv --query id)

# patch the app using patch.json and api-version=2023-05-02-preview
az rest \
  --method patch \
  --body @patch.json \
  --url "${ID}?api-version=2023-05-02-preview"

# verify the property is there
az rest \
  --method get \
  --url "${ID}?api-version=2023-05-02-preview" | \
  jq -r '.properties.configuration.ingress'

gcrockenberg · 2023-08-11T21:53:36Z

What if the transport for the second port is different. For example, gRPC for integration between microservices?

ahmelsayed · 2023-08-14T22:59:43Z

What if the transport for the second port is different. For example, gRPC for integration between microservices?

@gcrockenberg All additional ports are TCP. So any tcp based protocol (like htt2/grpc) should work.

tiwood · 2023-08-22T16:06:59Z

@ahmelsayed, if I understood this correctly this won't allow us to expose UDP ports?
If so, are they any plans to introduce this?

We have a use case where we must expose a service over udp.

ahmelsayed · 2023-08-22T18:07:11Z

Correct, we don't have UDP. Can't speak of any plans myself.

simonkurtz-MSFT · 2023-08-24T15:44:48Z

Hi @torosent and @ahmelsayed,

First, thank you for this feature!

Is this still in development or is it in preview now as the documentation indicates?
Do you have a rough ETA for GA?

https://learn.microsoft.com/en-us/azure/container-apps/ingress-overview#additional-tcp-ports

ahmelsayed · 2023-08-24T18:08:29Z

It's in preview now. You can use it through ARM/bicep (api-version=2023-05-02-preview) or the cli with --yaml option. Here is a bicep sample https://github.com/ahmelsayed/bicep-templates/blob/main/aca-app-multiple-ports.bicep#L20-L36

with --yaml in the cli, add the following to your ingress

additionalPortMappings:
  - external: false
    targetPort: 9090
    exposedPort: 9090
  - external: false
    targetPort: 22
    exposedPort: 22

gcrockenberg · 2023-08-26T16:46:49Z

I just tried running a bicep "what-if" with that preview and did not see the additionalPortMapping applied. I didn't see an error just didn't see the port mapping either.

zhenqxuMSFT · 2023-10-11T02:34:36Z

Happy to see the feature is in preview!

I'm running a few container apps with an additional port specified on each one so I can facilitate gRPC between containers. My container app env is also deployed to a custom vnet. When I execute a grpcurl request within one container to another, I receive a successful response when addressing the internal IP address of the container, (e.g. grpcurl -plaintext 10.5.0.37:443 list). However, I cannot get a successful response when addressing the container by its host name + DNS suffix (e.g. my-service.<unique-identifier>.<location>.azurecontainerapps.io:443).

The additional ports are all external. Is there something I am missing?
additionalPorts:
        - external: true
          targetPort: 443
          exposedPort: 443

@jlkardas hostname+DNS suffix only supports ports with HTTP transport. You need to use <app name>:<port> for additional ports.

zhenqxuMSFT · 2023-10-11T02:37:02Z

api-version=2023-05-02-preview

@ahmelsayed I tried the patching solution, in my case it fails with:

Bad Request({"error":{"code":"ContainerAppSecretInvalid","message":"Invalid Request: Container app secret(s) with name(s) 'reg-pswd-f60c7731-bf65' are invalid: value or keyVaultUrl and identity should be provided."}}).

@dummy-andra looks like your secret was not configured correctly in the payload. Make sure you have provide the secret value if it's not a key vault secret.

zhenqxuMSFT · 2023-10-11T02:41:21Z

Trying to deploy a container app with 4 external tcp ports using CLI + yml, the deployment completes just fine but the provision status is stuck in "Provisioning". The only information available is the following log from the Sytem Logs stream:

{"TimeStamp":"2023-09-21T08:58:32Z","Type":"Normal","ContainerAppName":null,"RevisionName":null,"ReplicaName":null,"Msg":"Connecting to the events collector...","Reason":"StartingGettingEvents","EventSource":"ContainerAppController","Count":1}
{"TimeStamp":"2023-09-21T08:58:35Z","Type":"Normal","ContainerAppName":null,"RevisionName":null,"ReplicaName":null,"Msg":"Successfully connected to events server","Reason":"ConnectedToEventsServer","EventSource":"ContainerAppController","Count":1}
{"TimeStamp":"2023-09-21 08:56:47 \u002B0000 UTC","Type":"Normal","ContainerAppName":"[APP_NAME_HERE]","RevisionName":"","ReplicaName":"","Msg":"Deactivating old revisions for ContainerApp \u0027[APP_NAME_HERE]\u0027","Reason":"RevisionDeactivating","EventSource":"ContainerAppController","Count":2}
{"TimeStamp":"2023-09-21 08:56:48 \u002B0000 UTC","Type":"Normal","ContainerAppName":"[APP_NAME_HERE]","RevisionName":"[APP_NAME_HERE]--z00g9fu","ReplicaName":"","Msg":"Successfully provisioned revision \[APP_NAME_HERE]--z00g9fu\u0027","Reason":"RevisionReady","EventSource":"ContainerAppController","Count":3}
{"TimeStamp":"2023-09-21 08:56:47 \u002B0000 UTC","Type":"Normal","ContainerAppName":"[APP_NAME_HERE]","RevisionName":"","ReplicaName":"","Msg":"Successfully updated containerApp: [APP_NAME_HERE]","Reason":"ContainerAppReady","EventSource":"ContainerAppController","Count":2}
{"TimeStamp":"2023-09-21 08:56:48 \u002B0000 UTC","Type":"Normal","ContainerAppName":"[APP_NAME_HERE]","RevisionName":"","ReplicaName":"","Msg":"Updating containerApp: [APP_NAME_HERE]","Reason":"ContainerAppUpdate","EventSource":"ContainerAppController","Count":11}
{"TimeStamp":"2023-09-21 08:56:48 \u002B0000 UTC","Type":"Normal","ContainerAppName":"[APP_NAME_HERE]","RevisionName":"[APP_NAME_HERE]--z00g9fu","ReplicaName":"","Msg":"Updating revision : [APP_NAME_HERE]--z00g9fu","Reason":"RevisionUpdate","EventSource":"ContainerAppController","Count":10}
{"TimeStamp":"2023-09-21 08:56:48 \u002B0000 UTC","Type":"Normal","ContainerAppName":"[APP_NAME_HERE]","RevisionName":"","ReplicaName":"","Msg":"Setting traffic weight of \u0027100%\u0027 for revision \u0027[APP_NAME_HERE]--z00g9fu\u0027","Reason":"RevisionUpdate","EventSource":"ContainerAppController","Count":3}
{"TimeStamp":"2023-09-21 08:56:46 \u002B0000 UTC","Type":"Warning","ContainerAppName":"[APP_NAME_HERE]","RevisionName":"[APP_NAME_HERE]--z00g9fu","ReplicaName":"[APP_NAME_HERE]--z00g9fu-5f4b867ff9-rlhvm","Msg":"0/2 nodes are available: 2 node(s) didn\u0027t match Pod\u0027s node affinity/selector. preemption: 0/2 nodes are available: 2 Preemption is not helpful for scheduling.","Reason":"AssigningReplicaFailed","EventSource":"ContainerAppController","Count":0}
{"TimeStamp":"2023-09-21 08:56:53 \u002B0000 UTC","Type":"Normal","ContainerAppName":"[APP_NAME_HERE]","RevisionName":"[APP_NAME_HERE]--z00g9fu","ReplicaName":"[APP_NAME_HERE]--z00g9fu-5f4b867ff9-rlhvm","Msg":"pod didn\u0027t trigger scale-up: 3 node(s) didn\u0027t match Pod\u0027s node affinity/selector","Reason":"NotTriggerScaleUp","EventSource":"ContainerAppController","Count":1}
{"TimeStamp":"2023-09-21T08:59:35Z","Type":"Normal","ContainerAppName":null,"RevisionName":null,"ReplicaName":null,"Msg":"No events since last 60 seconds","Reason":"NoNewEvents","EventSource":"ContainerAppController","Count":1}
{"TimeStamp":"2023-09-21T09:00:36Z","Type":"Normal","ContainerAppName":null,"RevisionName":null,"ReplicaName":null,"Msg":"No events since last 60 seconds","Reason":"NoNewEvents","EventSource":"ContainerAppController","Count":1}
{"TimeStamp":"2023-09-21T09:01:36Z","Type":"Normal","ContainerAppName":null,"RevisionName":null,"ReplicaName":null,"Msg":"No events since last 60 seconds","Reason":"NoNewEvents","EventSource":"ContainerAppController","Count":1}
{"TimeStamp":"2023-09-21 09:01:49 \u002B0000 UTC","Type":"Warning","ContainerAppName":"[APP_NAME_HERE]","RevisionName":"[APP_NAME_HERE]--z00g9fu","ReplicaName":"[APP_NAME_HERE]--z00g9fu-5f4b867ff9-rlhvm","Msg":"0/2 nodes are available: 2 node(s) didn\u0027t match Pod\u0027s node affinity/selector. preemption: 0/2 nodes are available: 2 Preemption is not helpful for scheduling.","Reason":"AssigningReplicaFailed","EventSource":"ContainerAppController","Count":0}
{"TimeStamp":"2023-09-21 09:01:55 \u002B0000 UTC","Type":"Normal","ContainerAppName":"[APP_NAME_HERE]","RevisionName":"[APP_NAME_HERE]--z00g9fu","ReplicaName":"[APP_NAME_HERE]--z00g9fu-5f4b867ff9-rlhvm","Msg":"pod didn\u0027t trigger scale-up: 3 node(s) didn\u0027t match Pod\u0027s node affinity/selector","Reason":"NotTriggerScaleUp","EventSource":"ContainerAppController","Count":31}
{"TimeStamp":"2023-09-21T09:02:55Z","Type":"Normal","ContainerAppName":null,"RevisionName":null,"ReplicaName":null,"Msg":"No events since last 60 seconds","Reason":"NoNewEvents","EventSource":"ContainerAppController","Count":1}

The following YAML was used to create the app:

location: westeurope
name: [APP_NAME_HERE]
properties:
  configuration:
    activeRevisionsMode: Single
    secrets:
      [SOME_SECRETS_HERE]
    registries:
      [ACR_SETTINGS_HERE]
    ingress:
      transport: tcp
      allowInsecure: false
      exposedPort: 9100
      targetPort: 9100
      external: true
      additionalPortMappings:
      - exposedPort: 9200
        targetPort: 9200
        external: true
      - exposedPort: 9300
        targetPort: 9300
        external: true
      - exposedPort: 9400
        targetPort: 9400
        external: true
      traffic:
      - latestRevision: true
        weight: 100
  managedEnvironmentId: [ENV_ID_HERE]
  template:
    containers:
    - image: [ACR_NAME_HERE]/[IMAGE_NAME_HERE]:[IMAGE_REVISION_HERE]
      name: [IMAGE_NAME_HERE]
      resources:
        cpu: 0.25
        memory: 0.5Gi
      env:
     [SOME_ENV_REFERENCING_SECRETS]
    scale:
      maxReplicas: 1
      minReplicas: 1
  workloadProfileName: Consumption
type: Microsoft.App/containerApps

After a while, status changes to Provisioned but Running Status becomes "Degraded" and no replica is actually running

@pizerg this issue is related to additional ports. Are you still hitting the same issue now?

dummy-andra · 2023-10-11T06:09:14Z

api-version=2023-05-02-preview

@ahmelsayed I tried the patching solution, in my case it fails with:
Bad Request({"error":{"code":"ContainerAppSecretInvalid","message":"Invalid Request: Container app secret(s) with name(s) 'reg-pswd-f60c7731-bf65' are invalid: value or keyVaultUrl and identity should be provided."}}).

@dummy-andra looks like your secret was not configured correctly in the payload. Make sure you have provide the secret value if it's not a key vault secret.

This secret `reg-pswd-f60c7731-bf65` was NOT Configured by me.

When deploying container app with ACR, it automatically add ACR password to ACA Secrets and the reg-pswd-xxxxxx is the name of the secret automatically generated upon the app's creation

Anyway I recreated ACA via Bicep and worked since updating it with the patch did not worked as expected.

pizerg · 2023-10-11T15:45:10Z

Trying to deploy a container app with 4 external tcp ports using CLI + yml, the deployment completes just fine but the provision status is stuck in "Provisioning". The only information available is the following log from the Sytem Logs stream:

{"TimeStamp":"2023-09-21T08:58:32Z","Type":"Normal","ContainerAppName":null,"RevisionName":null,"ReplicaName":null,"Msg":"Connecting to the events collector...","Reason":"StartingGettingEvents","EventSource":"ContainerAppController","Count":1}
{"TimeStamp":"2023-09-21T08:58:35Z","Type":"Normal","ContainerAppName":null,"RevisionName":null,"ReplicaName":null,"Msg":"Successfully connected to events server","Reason":"ConnectedToEventsServer","EventSource":"ContainerAppController","Count":1}
{"TimeStamp":"2023-09-21 08:56:47 \u002B0000 UTC","Type":"Normal","ContainerAppName":"[APP_NAME_HERE]","RevisionName":"","ReplicaName":"","Msg":"Deactivating old revisions for ContainerApp \u0027[APP_NAME_HERE]\u0027","Reason":"RevisionDeactivating","EventSource":"ContainerAppController","Count":2}
{"TimeStamp":"2023-09-21 08:56:48 \u002B0000 UTC","Type":"Normal","ContainerAppName":"[APP_NAME_HERE]","RevisionName":"[APP_NAME_HERE]--z00g9fu","ReplicaName":"","Msg":"Successfully provisioned revision \[APP_NAME_HERE]--z00g9fu\u0027","Reason":"RevisionReady","EventSource":"ContainerAppController","Count":3}
{"TimeStamp":"2023-09-21 08:56:47 \u002B0000 UTC","Type":"Normal","ContainerAppName":"[APP_NAME_HERE]","RevisionName":"","ReplicaName":"","Msg":"Successfully updated containerApp: [APP_NAME_HERE]","Reason":"ContainerAppReady","EventSource":"ContainerAppController","Count":2}
{"TimeStamp":"2023-09-21 08:56:48 \u002B0000 UTC","Type":"Normal","ContainerAppName":"[APP_NAME_HERE]","RevisionName":"","ReplicaName":"","Msg":"Updating containerApp: [APP_NAME_HERE]","Reason":"ContainerAppUpdate","EventSource":"ContainerAppController","Count":11}
{"TimeStamp":"2023-09-21 08:56:48 \u002B0000 UTC","Type":"Normal","ContainerAppName":"[APP_NAME_HERE]","RevisionName":"[APP_NAME_HERE]--z00g9fu","ReplicaName":"","Msg":"Updating revision : [APP_NAME_HERE]--z00g9fu","Reason":"RevisionUpdate","EventSource":"ContainerAppController","Count":10}
{"TimeStamp":"2023-09-21 08:56:48 \u002B0000 UTC","Type":"Normal","ContainerAppName":"[APP_NAME_HERE]","RevisionName":"","ReplicaName":"","Msg":"Setting traffic weight of \u0027100%\u0027 for revision \u0027[APP_NAME_HERE]--z00g9fu\u0027","Reason":"RevisionUpdate","EventSource":"ContainerAppController","Count":3}
{"TimeStamp":"2023-09-21 08:56:46 \u002B0000 UTC","Type":"Warning","ContainerAppName":"[APP_NAME_HERE]","RevisionName":"[APP_NAME_HERE]--z00g9fu","ReplicaName":"[APP_NAME_HERE]--z00g9fu-5f4b867ff9-rlhvm","Msg":"0/2 nodes are available: 2 node(s) didn\u0027t match Pod\u0027s node affinity/selector. preemption: 0/2 nodes are available: 2 Preemption is not helpful for scheduling.","Reason":"AssigningReplicaFailed","EventSource":"ContainerAppController","Count":0}
{"TimeStamp":"2023-09-21 08:56:53 \u002B0000 UTC","Type":"Normal","ContainerAppName":"[APP_NAME_HERE]","RevisionName":"[APP_NAME_HERE]--z00g9fu","ReplicaName":"[APP_NAME_HERE]--z00g9fu-5f4b867ff9-rlhvm","Msg":"pod didn\u0027t trigger scale-up: 3 node(s) didn\u0027t match Pod\u0027s node affinity/selector","Reason":"NotTriggerScaleUp","EventSource":"ContainerAppController","Count":1}
{"TimeStamp":"2023-09-21T08:59:35Z","Type":"Normal","ContainerAppName":null,"RevisionName":null,"ReplicaName":null,"Msg":"No events since last 60 seconds","Reason":"NoNewEvents","EventSource":"ContainerAppController","Count":1}
{"TimeStamp":"2023-09-21T09:00:36Z","Type":"Normal","ContainerAppName":null,"RevisionName":null,"ReplicaName":null,"Msg":"No events since last 60 seconds","Reason":"NoNewEvents","EventSource":"ContainerAppController","Count":1}
{"TimeStamp":"2023-09-21T09:01:36Z","Type":"Normal","ContainerAppName":null,"RevisionName":null,"ReplicaName":null,"Msg":"No events since last 60 seconds","Reason":"NoNewEvents","EventSource":"ContainerAppController","Count":1}
{"TimeStamp":"2023-09-21 09:01:49 \u002B0000 UTC","Type":"Warning","ContainerAppName":"[APP_NAME_HERE]","RevisionName":"[APP_NAME_HERE]--z00g9fu","ReplicaName":"[APP_NAME_HERE]--z00g9fu-5f4b867ff9-rlhvm","Msg":"0/2 nodes are available: 2 node(s) didn\u0027t match Pod\u0027s node affinity/selector. preemption: 0/2 nodes are available: 2 Preemption is not helpful for scheduling.","Reason":"AssigningReplicaFailed","EventSource":"ContainerAppController","Count":0}
{"TimeStamp":"2023-09-21 09:01:55 \u002B0000 UTC","Type":"Normal","ContainerAppName":"[APP_NAME_HERE]","RevisionName":"[APP_NAME_HERE]--z00g9fu","ReplicaName":"[APP_NAME_HERE]--z00g9fu-5f4b867ff9-rlhvm","Msg":"pod didn\u0027t trigger scale-up: 3 node(s) didn\u0027t match Pod\u0027s node affinity/selector","Reason":"NotTriggerScaleUp","EventSource":"ContainerAppController","Count":31}
{"TimeStamp":"2023-09-21T09:02:55Z","Type":"Normal","ContainerAppName":null,"RevisionName":null,"ReplicaName":null,"Msg":"No events since last 60 seconds","Reason":"NoNewEvents","EventSource":"ContainerAppController","Count":1}

The following YAML was used to create the app:

location: westeurope
name: [APP_NAME_HERE]
properties:
  configuration:
    activeRevisionsMode: Single
    secrets:
      [SOME_SECRETS_HERE]
    registries:
      [ACR_SETTINGS_HERE]
    ingress:
      transport: tcp
      allowInsecure: false
      exposedPort: 9100
      targetPort: 9100
      external: true
      additionalPortMappings:
      - exposedPort: 9200
        targetPort: 9200
        external: true
      - exposedPort: 9300
        targetPort: 9300
        external: true
      - exposedPort: 9400
        targetPort: 9400
        external: true
      traffic:
      - latestRevision: true
        weight: 100
  managedEnvironmentId: [ENV_ID_HERE]
  template:
    containers:
    - image: [ACR_NAME_HERE]/[IMAGE_NAME_HERE]:[IMAGE_REVISION_HERE]
      name: [IMAGE_NAME_HERE]
      resources:
        cpu: 0.25
        memory: 0.5Gi
      env:
     [SOME_ENV_REFERENCING_SECRETS]
    scale:
      maxReplicas: 1
      minReplicas: 1
  workloadProfileName: Consumption
type: Microsoft.App/containerApps

After a while, status changes to Provisioned but Running Status becomes "Degraded" and no replica is actually running

@pizerg this issue is related to additional ports. Are you still hitting the same issue now?

@zhenqxuMSFT I opened a support request with the Azure team and they are investigating this, as far as I know, last week the issue was still happening, however I managed to find a workaround, after the initial deploy fails as described in my initial message, I just need to create a new revision (using the portal for example) and the new revision is deployed correctly and fully functional, including the 4 tcp ports defined in the original failed deployment

cforce · 2023-10-27T07:56:37Z

@zhenqxuMSFT
Please support "transport":"http" for additional ports as well.
If we only get tcp we have to start to offload tls in the app , that is very ugly.
We want that we can manage (custsom) certs in azure not in our app, also because of load balancing etc

It works over additional port (no ssl, we would need setup extra ssl inside the app)
It does not work over main port with ssl managed by ACA - Is this expected to be a bug?

pizerg · 2023-11-23T11:30:22Z

@zhenqxuMSFT

It seems that the official Azure DevOps pipeline is breaking the additional ports configuration of an existing app that uses this feature (no ingress settings specified in the pipeline stage "Azure Container Apps Deploy" version 1.*) and only keeping the main port active.

jlkardas · 2023-11-27T15:20:17Z

@zhenqxuMSFT

It seems that the official Azure DevOps pipeline is breaking the additional settings configuration of an existing app that uses this feature (no ingress settings specified in the pipeline stage "Azure Container Apps Deploy" version 1.*) and only keeping the main port active.

Also experiencing this issue

zhenqxuMSFT · 2023-12-01T05:37:48Z

@cforce Thanks for the feedback, noted.

It does not work over main port with ssl managed by ACA - Is this expected to be a bug?

Did you mean custom domain is not working for you? Could you elaborate more?

zhenqxuMSFT · 2023-12-01T05:39:09Z

@pizerg @jlkardas do you have any name of container app names and timeframes I can take a look? Or if it's possible for you to provide some steps for me to repro the issue?

RocheVal · 2023-12-04T15:10:48Z

I had to put this subject aside but now I'm back on it.
And when I tried to reuse my "old" yaml file the additional ports are not working (like when I tried few months ago). And if I look at configuration details I don't see any of the additional ports (contrary to few months ago where I could see the additional ports in the config).

I used the workaround proposed by @ahmelsayed, and I updated my app through the API, to add additional ports and it worked.

So it seems it's working only through API.

I will continue to use it and tell you if I face other issues

zhenqxuMSFT · 2023-12-06T03:33:41Z

@RocheVal could you upgrade to latest cli and try with --yaml again?
If that still not work, could you provide the output of cli command with --debug option to acasupport at microsoft dot com and we will take a look at the issue ASAP.

RocheVal · 2023-12-06T09:59:25Z

I updated az cli to 2.55.0 and the results is the same (app created but additional ports not working).

I sent an email to [email protected] with the output of cli with --debug.

Juliehzl · 2023-12-07T02:42:30Z

@RocheVal could you install containerapp cli extension with az extension add -n containerapp and then try again? Only GA feature will be in azure cli core and all preview features will be in containerapp extension.

RocheVal · 2023-12-07T09:09:43Z

Thank you it's working correctly with the extension containerapp.

I didn't see in it the docs, I don't know if it wasn't specified or if I didn't read correctly.

But thank again it's working like expected now !

pizerg · 2023-12-13T15:48:09Z

@zhenqxuMSFT

@pizerg @jlkardas do you have any name of container app names and timeframes I can take a look? Or if it's possible for you to provide some steps for me to repro the issue?

If you contact me privately I could provide the required information, otherwise the repro steps are quite straightforward, just deploy any container app with additional ports (in our case 1 main tcp port and 3 additional tcp ports running in a consumption environment). After checking all ports work correctly, deploy a new revision using the official Azure DevOps' Container App Deploy pipeline (just leave ingress setting empty) and you should see that only the main port is working after that

jlkardas · 2023-12-18T00:31:13Z

@zhenqxuMSFT

@pizerg @jlkardas do you have any name of container app names and timeframes I can take a look? Or if it's possible for you to provide some steps for me to repro the issue?

If you contact me privately I could provide the required information, otherwise the repro steps are quite straightforward, just deploy any container app with additional ports (in our case 1 main tcp port and 3 additional tcp ports running in a consumption environment). After checking all ports work correctly, deploy a new revision using the official Azure DevOps' Container App Deploy pipeline (just leave ingress setting empty) and you should see that only the main port is working after that

Similarly, if you could provide me with an email address I would be more than happy to provide some documentation for our ACA and release pipeline setup, or whatever required information you may need.

pizerg · 2024-01-17T13:33:26Z

@zhenqxuMSFT Any update on the issue related to Azure Pipelines ?

Wycliffe-nml · 2024-02-26T08:21:08Z

Hi There

We have a setup of 3 Rabbit MQ Container apps running Rabbit MQ Alpine image from docker hub
We have added an etra port for AMQP and the other port is used for health checks via TCP
1 of the containers is being used on our QA environment and the other 2 are not yet used
All three are in different resource groups

We have an issue where the containers keep creating new replicas for no aparrent reason, when they do they will all create new replicas on the same day for no apparent reason. We have made sure the containers have 4 gig ram and other resources are fine. The revisions stay the same but why are new replicas getting created?
scaling is set to
1 - 1

We would like to use this setup in production but are not sure how to fix the auto creation of replicas
The health of the replicas is Running (at max)

Please assist

pizerg · 2024-03-25T13:22:48Z

@zhenqxuMSFT Now that this feature is not in preview anymore, could you give us an update on the issue related to Azure Pipelines and multiple ports?

boncyrus · 2024-04-16T01:49:14Z

Is this possible using Azure CLI without yaml config?

Juliehzl · 2024-04-16T02:07:44Z

Is this possible using Azure CLI without yaml config?

Not yet

bosh-bs · 2024-04-19T10:09:46Z

We use only TCP ports in our ACA, so we don't really need the default 443 and 80 ports open at all. We don't configure any ACA applications to have an ingress on those ports either. However, if I run nmap against the ACA Environment's IP, it reports that 443 and 80 are open (in addition to our expected other TCP ports).

Is there a possibility to not have 443 and 80 open at all? IMO ACA should not even open those ports if there is no ingress apps configured for them.

jlkardas · 2024-05-16T18:20:39Z

Any update here?

RP-TSB · 2024-05-30T23:27:29Z

Hello, any timeframes on making it supported by Terraform, and through Azure CLI without the need to use YAML? Appreciated.

LianaAdaza · 2025-01-13T20:26:23Z

This issue will be officially closed as it has reached General Availability (GA) and has been tagged as 'Archive'. If you have any further feedback or encounter new difficulties, please feel free to create a new issue so we can better assist you. Thank you for your continued support and interest!

torosent added this to Azure Container Apps Roadmap May 30, 2023

torosent converted this from a draft issue May 30, 2023

microsoft-github-policy-service bot added the Needs: triage 🔍 Pending a first pass to read, tag, and assign label May 30, 2023

torosent added enhancement New feature or request roadmap This feature is on the roadmap and removed Needs: triage 🔍 Pending a first pass to read, tag, and assign labels May 30, 2023

dhilgarth mentioned this issue May 31, 2023

Feature Request: ability to expose multiple ports #546

Open

Expecho mentioned this issue Jul 4, 2023

Feature Request: Container Apps with multiple ports to expose outside of the environment #201

Closed

Phiph mentioned this issue Aug 9, 2023

containerapps: updating to API Version 2023-05-01 hashicorp/terraform-provider-azurerm#22804

Merged

dariagrigoriu moved this from Public Preview (Shipped and Improving) to Generally Available (Done) in Azure Container Apps Roadmap Feb 6, 2024

LianaAdaza closed this as completed Jan 13, 2025

github-project-automation bot moved this from Archive (GA older than 6 months) to In-Progress (Development) in Azure Container Apps Roadmap Jan 13, 2025

LianaAdaza moved this from In-Progress (Development) to Archive (GA older than 6 months) in Azure Container Apps Roadmap Jan 13, 2025

Roadmap: Multiple ports support #763

Roadmap: Multiple ports support #763

Comments

torosent commented May 30, 2023 • edited by SophCarp Loading

Justrebl commented May 31, 2023 • edited Loading

dhilgarth commented May 31, 2023

joaquinvacas commented Jun 5, 2023

Phiph commented Jun 19, 2023

riccardopinosio commented Jul 13, 2023

sebastian-hans-swm commented Jul 14, 2023

elruss commented Jul 21, 2023

ahmelsayed commented Jul 24, 2023

dvdr00t commented Jul 28, 2023

torosent commented Aug 7, 2023

elglogins commented Aug 8, 2023

drapka commented Aug 11, 2023 • edited Loading

ahmelsayed commented Aug 11, 2023

ahmelsayed commented Aug 11, 2023 • edited Loading

gcrockenberg commented Aug 11, 2023

ahmelsayed commented Aug 14, 2023

tiwood commented Aug 22, 2023

ahmelsayed commented Aug 22, 2023

simonkurtz-MSFT commented Aug 24, 2023

ahmelsayed commented Aug 24, 2023

gcrockenberg commented Aug 26, 2023

zhenqxuMSFT commented Oct 11, 2023 • edited Loading

zhenqxuMSFT commented Oct 11, 2023

zhenqxuMSFT commented Oct 11, 2023

dummy-andra commented Oct 11, 2023 • edited Loading

This secret reg-pswd-f60c7731-bf65 was NOT Configured by me.

pizerg commented Oct 11, 2023

cforce commented Oct 27, 2023 • edited Loading

pizerg commented Nov 23, 2023 • edited Loading

jlkardas commented Nov 27, 2023

zhenqxuMSFT commented Dec 1, 2023

zhenqxuMSFT commented Dec 1, 2023

RocheVal commented Dec 4, 2023

zhenqxuMSFT commented Dec 6, 2023

RocheVal commented Dec 6, 2023

Juliehzl commented Dec 7, 2023 • edited Loading

RocheVal commented Dec 7, 2023

pizerg commented Dec 13, 2023

jlkardas commented Dec 18, 2023

pizerg commented Jan 17, 2024

Wycliffe-nml commented Feb 26, 2024 • edited Loading

pizerg commented Mar 25, 2024

boncyrus commented Apr 16, 2024 • edited Loading

Juliehzl commented Apr 16, 2024

bosh-bs commented Apr 19, 2024

jlkardas commented May 16, 2024

RP-TSB commented May 30, 2024 • edited Loading

LianaAdaza commented Jan 13, 2025

torosent commented May 30, 2023 •

edited by SophCarp

Loading

Justrebl commented May 31, 2023 •

edited

Loading

drapka commented Aug 11, 2023 •

edited

Loading

ahmelsayed commented Aug 11, 2023 •

edited

Loading

zhenqxuMSFT commented Oct 11, 2023 •

edited

Loading

dummy-andra commented Oct 11, 2023 •

edited

Loading

This secret `reg-pswd-f60c7731-bf65` was NOT Configured by me.

cforce commented Oct 27, 2023 •

edited

Loading

pizerg commented Nov 23, 2023 •

edited

Loading

Juliehzl commented Dec 7, 2023 •

edited

Loading

Wycliffe-nml commented Feb 26, 2024 •

edited

Loading

boncyrus commented Apr 16, 2024 •

edited

Loading

RP-TSB commented May 30, 2024 •

edited

Loading