[QUERY] Issue with running spring boot application on azure spring apps with key vault configuration by using service principal identity

[kirankumar994]

[QUERY] Issue with running spring boot application on azure spring apps with key vault configuration by using service principal identity

[github-actions]

@chenrujun @moarychan @Netyyyy @saragluna

[github-actions]

Thank you for your feedback. Tagging and routing to the team member best able to assist.

[saragluna]

@kirankumar994 are you using the com.azure.spring spring-cloud-azure-starter-keyvault to retrieve the kv property source, instead of using the kv secret client and get the secret by yourself?

[kirankumar994]

Hi @saragluna , here is the dependency I am using.

<dependency> <groupId>com.azure.spring</groupId> <artifactId>spring-cloud-azure-starter-keyvault</artifactId> <version>5.11.0</version> </dependency>

But, as I mentioned in the above I am able to run the application on my local by configurin the bean in my Reactive Mongo config as below

`@Bean
public SecretClient createSecretClient() {

   ClientSecretCredential clientSecretCredential = new ClientSecretCredentialBuilder()
            .clientId(clientId)
            .clientSecret(clientSecret)
            .tenantId(tenantId)
            .build();

    // Azure SDK client builders accept the credential as a parameter.
   return new SecretClientBuilder()
            .vaultUrl(keyVaultEndpoint)
            .credential(clientSecretCredential)
            .buildClient();
}`

The clientId, secret and tenantId are reading from the application properties file. I am not facing any issue on my local. Here is the following I am trying to do.
- Keeping clientId, secret and tenantId in the application properties file and reading in the above code. The application is up and runnin after I login with az login service principal.
- Later, I copied the same properties in the azure spring apps environment variables and tried to deploy the application on azure spring apps, then it is failing to start the application and throwing the below exception.

 java.lang.IllegalStateException: Failed to configure KeyVault property source

I would like to know what I am doing wrong here. Thank you in advance.