Below is the screenshot:

I encounter the following error message

ERROR: usage error: --resource ID | --resource NAME --resource-group NAME --resource-type TYPE [--resource-parent PARENT] [--resource-namespace NAMESPACE]

when exe the command:

 az monitor diagnostic-settings create --name "send-logs-and-metrics-to-log-analytics" \
    --resource-id ${SPRING_CLOUD_RESOURCE_ID} \
    --workspace ${LOG_ANALYTICS_RESOURCE_ID} \
    --logs '[
         {
           "category": "ApplicationConsole",
           "enabled": true,
           "retentionPolicy": {
             "enabled": false,
             "days": 0
           }
         },
         {
            "category": "SystemLogs",
            "enabled": true,
            "retentionPolicy": {
              "enabled": false,
              "days": 0
            }
          },
         {
            "category": "IngressLogs",
            "enabled": true,
            "retentionPolicy": {
              "enabled": false,
              "days": 0
             }
           }
       ]' \
       --metrics '[
         {
           "category": "AllMetrics",
           "enabled": true,
           "retentionPolicy": {
             "enabled": false,
             "days": 0
           }
         }
       ]'

My env: windows 11, git-bash

There are several files and directories that are not required when working with Azure Spring Apps, for example the kubernetes manifests, and Dockerfiles. These files distract from learning how to use ASA-E

instructions ask to edit a file and set AZURE_OPENAI_APIKEY in a script, then in part 2 asked to export OPENAI_RESOURCE_NAME in a small shell script. we should set the OPENAI_RESOURCE_NAME in the script, and export the AZURE_OPENAI_APIKEY later

Following the steps of the tutorial deploying an Azure Spring Apps service in East US results in failed application deployment for the Catalog, Payment and Identity services.

See below logs for the partial Payment service deployment logs:

`Paketo Syft Buildpack 1.10.0
https://github.com/paketo-buildpacks/syft
Reusing cached download from buildpack
Writing env.build/SYFT_CHECK_FOR_APP_UPDATE.default

Paketo Gradle Buildpack 6.4.2
https://github.com/paketo-buildpacks/gradle
Build Configuration:
$BP_GRADLE_BUILD_ARGUMENTS --no-daemon assemble the arguments to pass to Gradle
$BP_GRADLE_BUILD_FILE the location of the main build config file, relative to the application root
$BP_GRADLE_BUILT_ARTIFACT build/libs/*.[jw]ar the built application artifact explicitly. Supersedes $BP_GRADLE_BUILT_MODULE
$BP_GRADLE_BUILT_MODULE the module to find application artifact in
Creating cache directory /home/cnb/.gradle
Compiled Application: Contributing to layer
Executing gradlew --no-daemon assemble
Downloading https://services.gradle.org/distributions/gradle-7.4.1-bin.zip
...........10%...........20%...........30%...........40%...........50%...........60%...........70%...........80%...........90%...........100%

Welcome to Gradle 7.4.1!

Here are the highlights of this release:

• Aggregated test and JaCoCo reports
• Marking additional test source directories as tests in IntelliJ
• Support for Adoptium JDKs in Java toolchains

For more details see https://docs.gradle.org/7.4.1/release-notes.html

To honour the JVM settings for this build a single-use Daemon process will be forked. See https://docs.gradle.org/7.4.1/userguide/gradle_daemon.html#sec:disabling_the_daemon.
Daemon will be stopped at the end of the build

Task :compileJava
Task :processResources
Task :classes
Task :bootJarMainClassName
Task :bootJar
Task :jar
Task :assemble

BUILD SUCCESSFUL in 1m 1s
5 actionable tasks: 5 executed

Removing source code
Restoring multiple artifacts

Paketo Executable JAR Buildpack 6.2.0
https://github.com/paketo-buildpacks/executable-jar
Process types:
executable-jar: java -jar /workspace/acme-payment-0.0.1-SNAPSHOT.jar (direct)
task: java -jar /workspace/acme-payment-0.0.1-SNAPSHOT.jar (direct)
web: java -jar /workspace/acme-payment-0.0.1-SNAPSHOT.jar (direct)

Paketo Azure Application Insights Buildpack 5.4.2
https://github.com/paketo-buildpacks/azure-application-insights
Azure Application Insights Java Agent 3.2.11: Contributing to layer
Reusing cached download from buildpack
Copying to /layers/paketo-buildpacks_azure-application-insights/azure-application-insights-java
Writing env.launch/JAVA_TOOL_OPTIONS.append
Writing env.launch/JAVA_TOOL_OPTIONS.delim
Launch Helper: Contributing to layer
Creating /layers/paketo-buildpacks_azure-application-insights/helper/exec.d/properties
Adding layer 'paketo-buildpacks/ca-certificates:helper'
Adding layer 'paketo-buildpacks/microsoft-openjdk:helper'
Adding layer 'paketo-buildpacks/microsoft-openjdk:java-security-properties'
Adding layer 'paketo-buildpacks/microsoft-openjdk:jdk'
Adding layer 'paketo-buildpacks/azure-application-insights:azure-application-insights-java'
Adding layer 'paketo-buildpacks/azure-application-insights:helper'
Adding layer 'launch.sbom'
Adding 1/1 app layer(s)
Adding layer 'launcher'
Adding layer 'config'
Adding layer 'process-types'
Adding label 'io.buildpacks.lifecycle.metadata'
Adding label 'io.buildpacks.build.metadata'
Adding label 'io.buildpacks.project.metadata'
Setting default process type 'web'
Saving acr4b04ad7888ce4ea5b.azurecr.io/build-service-result-image-cab1d346fdbd45a391af896367d177be-default-payment-service:result-1...
*** Images (sha256:96a12590c49bcbe93f4a357e895c71c26985e2b44821cec37cd44a08aafa59cb):
acr4b04ad7888ce4ea5b.azurecr.io/build-service-result-image-cab1d346fdbd45a391af896367d177be-default-payment-service:result-1
Adding cache layer 'paketo-buildpacks/microsoft-openjdk:jdk'
Adding cache layer 'paketo-buildpacks/syft:syft'
Adding cache layer 'paketo-buildpacks/gradle:application'
Adding cache layer 'paketo-buildpacks/gradle:cache'
Adding cache layer 'cache.sbom'
[5/5] Updating deployment in app "payment-service" (this operation can take a while to complete)
112404: Failed to wait for deployment instances to be ready. Please check the application log (see https://aka.ms/azure-spring-cloud-doc-log ), and try again later.`

When checking the application logs with az spring app logs -n $PAYMENT_SERVICE_APP the following is available:

2022-06-01 14:35:15.541 INFO 1 --- [ main] c.v.acme.payment.PaymentApplication : Starting PaymentApplication using Java 11.0.14 on payment-service-default-15-d64965f75-xp84s with PID 1 (/workspace/acme-payment-0.0.1-SNAPSHOT.jar started by cnb in /workspace) 2022-06-01 14:35:17.031 INFO 1 --- [ main] c.v.acme.payment.PaymentApplication : No active profile set, falling back to 1 default profile: "default" 2022-06-01 14:35:23.054 INFO 1 --- [ main] o.s.cloud.context.scope.GenericScope : BeanFactory id=fa1fe375-0a10-380c-9ee8-2ea19f46f0cf 2022-06-01 14:35:23.245 INFO 1 --- [ main] trationDelegate$BeanPostProcessorChecker : Bean 'org.springframework.cloud.client.loadbalancer.reactive.LoadBalancerBeanPostProcessorAutoConfiguration' of type [org.springframework.cloud.client.loadbalancer.reactive.LoadBalancerBeanPostProcessorAutoConfiguration] is not eligible for getting processed by all BeanPostProcessors (for example: not eligible for auto-proxying) 2022-06-01 14:35:23.247 INFO 1 --- [ main] trationDelegate$BeanPostProcessorChecker : Bean 'org.springframework.cloud.client.loadbalancer.reactive.LoadBalancerBeanPostProcessorAutoConfiguration$ReactorDeferringLoadBalancerFilterConfig' of type [org.springframework.cloud.client.loadbalancer.reactive.LoadBalancerBeanPostProcessorAutoConfiguration$ReactorDeferringLoadBalancerFilterConfig] is not eligible for getting processed by all BeanPostProcessors (for example: not eligible for auto-proxying) 2022-06-01 14:35:23.248 INFO 1 --- [ main] trationDelegate$BeanPostProcessorChecker : Bean 'reactorDeferringLoadBalancerExchangeFilterFunction' of type [org.springframework.cloud.client.loadbalancer.reactive.DeferringLoadBalancerExchangeFilterFunction] is not eligible for getting processed by all BeanPostProcessors (for example: not eligible for auto-proxying) Terminating due to java.lang.OutOfMemoryError: Metaspace

When the JVM option is added with -XX:MaxMetaspaceSize=148644K to override the default calculated value of 74322K the issue is resolved and the application is able to start successfully.

In unit 1, we are using Config server, build service, service registry, gateway and API portal for the sample app, which is great. I think we may need to mark this inside architecture picture. Otherwise customer may not be able to understand why they trigger various commands for these components.

@maly7 - developers may not have permission to set up SSO. Suggest marking this as explicitly optional and ensure that it does not block subsequent steps.

The cart application is a python application and the order application is a .Net Core one, and it's not correct in the architecture picture.

must be

az spring gateway route-config create --name ${FRONTEND_APP} --app-name ${FRONTEND_APP} --routes-file ./azure-spring-apps-enterprise/resources/json/routes/frontend.json

Currently the ./deploy.sh script makes a call to the function

function configure_defaults() {
  echo "Configure azure defaults resource group: $RESOURCE_GROUP and spring $SPRING_APPS_SERVICE"
  az configure --defaults group=$RESOURCE_GROUP spring=$SPRING_APPS_SERVICE location=${REGION}
}

It is surprising that the script changes the defaults settings for the az cli, it is better if the script uses the passed in args -r, -s, -g without changing defaults

In the following paragraph of the start:

Note - The Bash shell. While Azure CLI should behave identically on all environments, shell semantics vary. Therefore, only bash can be used with the commands in this repo. To complete these repo steps on Windows, use Git Bash that accompanies the Windows distribution of Git. Use only Git Bash to complete this training on Windows. Do not use WSL.

git bash may not work for all the places, for example:
In this section:

Create a Service Principal
    az ad sp create-for-rbac --role contributor --scopes /subscriptions/${SUBSCRIPTION} --sdk-auth

throws:

ERROR: Error occurred in request., InvalidSchema: No connection adapters were found for 'C:/Program Files/Git/subscriptions/subscription-id-xxxx/providers/Microsoft.Authorization/roleDefinitions?$filter=roleName%20eq%20%27contributor%27&api-version=2018-01-01-preview'

And if I use cmd, it works! git bash is only for those command for env variables setting operation.

Command:
az spring create --name ${SPRING_APPS_SERVICE}
--resource-group ${RESOURCE_GROUP}
--location ${REGION}
--sku Enterprise
--enable-application-configuration-service
--enable-service-registry
--enable-gateway
--enable-api-portal
--enable-alv
--enable-app-acc
--build-pool-size S2

This command gives error as
unrecognized arguments: --enable-alv --enable-app-acc

I even tried with --enable-application-live-view --enable-application-accelerator. But got the same error

Hey @egamma we need to modernize this Spring App and bring it to the cloud for better scale.

Given your extensive Java and JUnit skills 😎 can you please help us on this effort. Please take a look at the tasks below:

• Review the tests
• Clean-up the TO DOs
• Check the security setup

We need clear instructions for - Create GitHub Codespaces, log into Azure, set the correct account, configure defaults and verify them

there are some places in tutorial using commands like "open "https://${GATEWAY_URL}"". It is working in Mac, but does not work in Azure Cloud Shell, Windows cmd, and I guess linux either. It will be good to point it out in the doc.

When trying to provision the Redis server and Postgres server, it will complain:

(NameNotAvailable) An error occured when trying to reserve the DNS name for the cache instance. This may be a temporary issue if a cache instance of this name was recently deleted. Please choose a different name or try again later.
RequestID=a49e924d-b6c0-43e3-ab99-8c7b41ac9ea8

and

az postgres flexible-server create --name ${POSTGRES_SERVER} \
    --resource-group ${RESOURCE_GROUP} \
    --location ${REGION} \
    --admin-user ${POSTGRES_SERVER_USER} \
    --admin-password ${POSTGRES_SERVER_PASSWORD} \
    --yes
Checking the existence of the resource group 'xxx'...
Resource group 'xxx' exists ? : True
Specified server name is already used.

Maybe we should let users configure the AZURE_CACHE_NAME and POSTGRES_SERVER like other Azure Resources.

We should add the resource-group option like the others.

az postgres flexible-server db create \
  --resource-group ${RESOURCE_GROUP} \
  --database-name ${ORDER_SERVICE_DB} \
  --server-name ${POSTGRES_SERVER}

az postgres flexible-server db create \
  --resource-group ${RESOURCE_GROUP} \
  --database-name ${CATALOG_SERVICE_DB} \
  --server-name ${POSTGRES_SERVER}

There is no reply for the command:

 az spring-cloud build-service builder create -n ${CUSTOM_BUILDER} \
       --builder-file azure/builder.json \
       --no-wait

Is this normal?

My env: Windows 11, Git-bash

Following the readme here:
https://github.com/Azure-Samples/acme-fitness-store/#activate-applications-to-load-secrets-from-azure-key-vault

It seems that the apps are in a failing state due to access permissions to key vault.
Only after restarting the apps I was able to connect to key vault and the app will run.

When trying to authenticate an API in the API Portal, a popup to Azure AD login screen appears with the error in the title. The docs in https://github.com/Azure-Samples/acme-fitness-store#configure-sso-for-api-portal don't mention needing to place a client_id in the body of the HTTP request and it doesn't seem there's a place to include this.

Hey,
I am facing an issue in Unit 2 - Configure Single Sign-On-Login to the Application through Spring Cloud Gateway (https://github.com/Azure-Samples/acme-fitness-store#unit-2---configure-single-sign-on) in which we are getting the error in the payment service while placing an order in the Acme fitness application.

Can you please suggest any resolution for the same.

PFA image for reference below:

Thanks.

routes-file paths are incorrect

must be

az spring gateway route-config create
--name ${CART_SERVICE_APP}
--app-name ${CART_SERVICE_APP}
--routes-file ./azure-spring-apps-enterprise/resources/json/routes/cart-service.json

az spring gateway route-config create
--name ${ORDER_SERVICE_APP}
--app-name ${ORDER_SERVICE_APP}
--routes-file ./azure-spring-apps-enterprise/resources/json/routes/order-service.json

az spring gateway route-config create
--name ${CATALOG_SERVICE_APP}
--app-name ${CATALOG_SERVICE_APP}
--routes-file ./azure-spring-apps-enterprise/resources/json/routes/catalog-service.json

Documentation link on the main webpage: https://azure.microsoft.com/en-us/products/spring-apps/ links to missing file https://github.com/Azure-Samples/acme-fitness-store/tree/Azure/workshops/azure-spring-apps-enterprise.

Can it be either reinstantiated, or links corrected? THank you

In Unit 1 - Deploy and Build Applications, facing an issue while creating an instance of Azure Spring Apps Enterprise.

After running the given below command, it will create a Azure Spring Apps resource but that is in Failed status:

az spring create --name ${SPRING_APPS_SERVICE} \
    --resource-group ${RESOURCE_GROUP} \
    --location ${REGION} \
    --sku Enterprise \
    --enable-application-configuration-service \
    --enable-service-registry \
    --enable-gateway \
    --enable-api-portal \
    --build-pool-size S2 

Please find the below screenshots FYR:

• create Service Connector for catalog service failed

This is a problem in Service Connector and will be fix in Jan.

We could follow this doc to set it manually with Azure hosting service.

• catalog-service restart failed

Now should add a new environment variable: spring.datasource.azure.passwordless-enabled=true.

az spring app update --name ${CATALOG_SERVICE_APP} --env "spring.datasource.azure.passwordless-enabled=true"

Service Connector will add this configuration in the future, but now it should be added manually.

Add this tip for all the command that is time consuming. For example:

az spring-cloud app deploy --name ${IDENTITY_SERVICE_APP} \
    --env "JWK_URI=${JWK_SET_URI}" \
    --config-file-pattern identity/default \
    --source-path apps/acme-identity

Create environment should be called out as optional

in the readme file, we are talking about set jq alias in bashrc file for Windows:
Note - The jq utility. On Windows, download this Windows port of JQ and add the following to the ~/.bashrc file

But in Windows we need to use set command to do so, as it does not have bashrc file.

When trying to load the static images, such as static/images/yogamat_square.jpg, seems like the images are not cached but downloaded every time. Is this expected?

The file path is different ./scripts no longer work
Looks like the create command for setup-env-variables.sh is missing

the azure/deploy.sh script usage output indicates you need to pass in -s and -g options however, to run you need to also provide -r option indicating the region.

Add usage description for -r to the azure/deploy.sh script

fails

export LOG_ANALYTICS_RESOURCE_ID=$(az monitor log-analytics workspace show \ 
    --resource-group ${RESOURCE_GROUP} \ 
    --workspace-name ${LOG_ANALYTICS_WORKSPACE} | jq -r '.id')  

works
export LOG_ANALYTICS_RESOURCE_ID=$(az monitor log-analytics workspace show --resource-group ${RESOURCE_GROUP}  --workspace-name ${LOG_ANALYTICS_WORKSPACE} | jq -r '.id')

see

In Unit-7, deploy catalog github action workflow is failing even though I have already added the github action secrets with the error:

We are in the process of syncing this repo with the upstream repo it is forked from. The code in the Azure branch of this repo is reflected in the upstream main branch. However the github actions in this repo are all triggered on the Azure branch. Given the branch name difference between upstream and this repo we should change the branch name in this repo to be main to match upstream.

Context

when exe:

az ad app create --display-name ${AD_DISPLAY_NAME} > ad.json

then appears:

WARNING: The underlying Active Directory Graph API will be replaced by Microsoft Graph API in Azure CLI 2.37.0.

Goal

We should solve this warning for better compatibility.

When running all az spring-cloud xxx commands, it prints something like the following:

This command is implicitly deprecated because command group 'spring-cloud gateway route-config' is deprecated and will be removed in a future release. Use 'spring gateway route-config' instead.

Maybe we should switch to az spring instead.

Some azure services require globally unique names across all of azure according to azure docs Naming rules and restrictions for Azure resources the Redis and postgres services must have globally unique names.

The ./azure/deploy.sh fails when it tries to create the redis cache because the name is not globally unique.

./deploy.sh -g demo -r germanywestcentral -s demo-asa-instance
Configure azure defaults resource group: demo and spring demo-asa-instance
Creating Azure Cache for Redis Instance fitness-cache in location eastus
(NameNotAvailable) An error occured when trying to reserve the DNS name for the cache instance. This may be a temporary issue if a cache instance of this name was recently deleted. Please choose a different name or try again later.
RequestID=ec628194-f0cb-47b5-b745-e26da796ee9d
Code: NameNotAvailable
Message: An error occured when trying to reserve the DNS name for the cache instance. This may be a temporary issue if a cache instance of this name was recently deleted. Please choose a different name or try again later.
RequestID=ec628194-f0cb-47b5-b745-e26da796ee9d

It seems that the azure redis service requires a unique dns name for each instance of redis under the .redis.cache.windows.net domain. The script should be modified to generate a unique name for the redis service.

Also the postgres service creation will fail with the same issue.

it says cp azure-spring-apps-enterprise/scripts/setup-ai-env-variables-template.sh azure-spring-apps-enterprise/scripts/setup-ai-env-variables.sh

in the fitness repo intermediate workshop, it appears to be creating everything in the project root directory. BTW, many of the values that need to be set in the bash file are not yet available hence, the follow on fails as well.

source ./azure-spring-apps-enterprise/scripts/setup-ai-env-variables.sh

Unit 3 use Connector Service for PostgreSQL passwordless connections.

Unit 4 drop PostgreSQL passwordless connections after use KeyVault as secret management.

Unit 7 don't use PostgreSQL passwordless connections in terraform.

I think all of them should use passwordless connections, it's more security for customers.

Hey @egamma we need to modernise this Spring App and bring it to the cloud for better scale.

Given your extensive Java and JUnit skills 😎 can you please help us on this effort. Please take a look at the tasks below:

• Review the tests
• Clean-up the TO DOs
• Check the security setup

When trying to create the Service Connector for the Cart Service to Azure Cache for Redis, seems like the cart service is a Python application, why the client type is set to Java?

az spring-cloud connection create redis \
    --resource-group ${RESOURCE_GROUP} \
    --service ${SPRING_CLOUD_SERVICE} \
    --connection $CART_SERVICE_CACHE_CONNECTION \
    --app ${CART_SERVICE_APP} \
    --deployment default \
    --tg ${RESOURCE_GROUP} \
    --server ${AZURE_CACHE_NAME} \
    --database 0 \
    --client-type java 

The current readme.md instructions in the app folders are for manual development without a platform like Azure Spring Apps. They are confusing and should be updated to accurately reflect how work will be done by a developer when using azure spring apps.

Add echo statement in env setup shell script to output the result. This can help user know the command result.

azure/setup-db-env-variables.sh

Re script in https://github.com/Azure-Samples/acme-fitness-store/blob/Azure/.github/scripts/gateway.sh
The managed Spring Cloud Gateway's desired state can be declaratively expressed and reconciled using Terraform, including route configuration using JSON as a parameter:
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/spring_cloud_gateway
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/spring_cloud_gateway_custom_domain
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/spring_cloud_gateway_route_config

Similarly:
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/spring_cloud_builder
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/spring_cloud_build_pack_binding
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/spring_cloud_dev_tool_portal
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/spring_cloud_application_live_view
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/spring_cloud_api_portal

In the step 4 Deploy the application, the environment variables are not updated to the latest spring-ai and the application won't start.

We need to execute step by step to create and config the resources. And then we need to keep an eye on it for a long time. Is there a possibility to give a terraform script to help provision the resources? This could be a advanced option for those users not patient.