Enterprise 11.1 - Error creating site when using Azure Storage accounts. about arcgis-powershell-dsc HOT 8 OPEN

Hi @vassilo,

ArcGIS Server doesn't support specifying a specific container. Let's try removing the/hosting-config-store from the UserName attribute value. For example:

"ConfigStoreCloudStorageAccount":{
   "UserName": "mneustortestesri01.blob.core.windows.net",
   "Password": "<AccessKey>",
   "CloudStorageType": "AzureBlob",
   "CloudNamespace": "mneustortestesri01_hosting-config-store",
   "AzureBlobAuthenticationType": "AccessKey"
},

Thanks,
Cameron K.

from arcgis-powershell-dsc.

Hi @cameronkroeker

When using a Service Principle Name I still get the

1/22/2024 3:56:32 AM: [mneu-t-a-esri01]: [[ArcGIS_Server]Servermneu-t-a-esri01.anglo.local] Response from CreateSite:- {
"status": "error",
"messages": [
"Failed to create the site. Configuration store error. Azure cloud storage namespace \u0027null\u0027 schema creation failed in 0 ms. Invalid connection string. "
],
"code": 500
}

And when using the Access Key

1/22/2024 4:01:13 AM: [mneu-t-a-esri01]: [[ArcGIS_Server]Servermneu-t-a-esri01.anglo.local] Response from CreateSite:- {
"status": "error",
"messages": [
"No such host is known (mneustortestesri01.table.core.windows.net)."
],
"code": 500
}

Regards,
Vassilo

from arcgis-powershell-dsc.

it appears the storage account is not a general purpose storage account, but a blob only storage account.

The ArcGIS Server config. store needs Table storage endpoints

from arcgis-powershell-dsc.

Ah ha. Thank you. I will change the account and then test.
Maybe the documentation needs to be a bit more specific in the requirements of the storage account. We had selected premium to get it as speedy as possible.

Thanks,
Vassilo

from arcgis-powershell-dsc.

Hi,

I have recreated the storage account to the required one. However, I am still getting the following error when using a SPN.

1/22/2024 9:13:00 AM: [mneu-t-a-esri01]: [[ArcGIS_Server]Servermneu-t-a-esri01.anglo.local] Response from CreateSite:- {
"status": "error",
"messages": [
"Failed to create the site. Configuration store error. Azure cloud storage namespace \u0027null\u0027 schema creation failed in 0 ms. Invalid connection string. "
],
"code": 500
}

Regards,
Vassilo

from arcgis-powershell-dsc.

Hi @vassilo,

Looks like in the json config the AzureBlobAuthenticationType is set to AccessKey rather than ServicePrincipalName. Here is an example for ServicePrincipalName:

"ConfigStoreCloudStorageAccount":{
   "UserName": "mneustortestesri01.blob.core.windows.net",
   "CloudStorageType": "AzureBlob",
   "AzureBlobAuthenticationType": "ServicePrincipal",
   "AzureBlobServicePrincipal": {
      "TenantId": "<tenant>",
      "ClientId": "<appId>",
      "ClientSecret": "<password>"
   },
   "CloudNamespace": "mneustortestesri01_hosting-config-store"
}

Thanks,
Cameron K.

from arcgis-powershell-dsc.

Hi @cameronkroeker

In my initial post I had the config for SPN, which by the looks of it is the same as what you have posted.
Could it be a permission issue? The SPN has Storage Blob Data Contributor on the storage account.
For the "ClientSecret" do I use the actual password (Value) or the Secret ID?

Regards,
Vassilo

from arcgis-powershell-dsc.

Hi @cameronkroeker

In my initial post I had the config for SPN, which by the looks of it is the same as what you have posted. Could it be a permission issue? The SPN has Storage Blob Data Contributor on the storage account. For the "ClientSecret" do I use the actual password (Value) or the Secret ID?

Regards, Vassilo

Let's check to make sure the storage account has the following:

• Storage Blob Data Contributor
• Storage Table Data Contributor
• Role assignment has Data owner permissions

from arcgis-powershell-dsc.