Skip to content

Document AZURE_TOKEN_CREDENTIALS breaking change in Aspire 13.0 #424

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
Copilot wants to merge 4 commits into
base: main
Choose a base branch
from
+196 −50
Draft

Document AZURE_TOKEN_CREDENTIALS breaking change in Aspire 13.0 #424

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
1b772d3
Initial plan
Copilot Feb 17, 2026
e346dc0
Document AZURE_TOKEN_CREDENTIALS breaking change in Aspire 13.0
Copilot Feb 17, 2026
3e8e146
Fix prettier formatting in documentation files
Copilot Feb 17, 2026
a20eb7e
Address code review feedback: improve wording and consistency
Copilot Feb 17, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 13 additions & 0 deletions src/frontend/src/content/docs/integrations/cloud/azure/azure-app-service.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -102,6 +102,19 @@ The preceding code:

During local development (when running with <Kbd windows='F5' mac='F5' />), the project runs locally. When you publish your app, the project is deployed as an Azure App Service website within the provisioned environment.

<Aside type="note">
When you publish resources to Azure App Service using the
`PublishAsAzureAppServiceWebsite` method, Aspire automatically sets the
`AZURE_TOKEN_CREDENTIALS` environment variable to `managedidentity`. This
ensures that `DefaultAzureCredential` uses only `ManagedIdentityCredential`
for authentication, following [Azure SDK best
practices](https://learn.microsoft.com/dotnet/azure/sdk/authentication/best-practices?tabs=aspdotnet#use-deterministic-credentials-in-production-environments).
If you need to use a different credential type, you can remove this
environment variable in the `PublishAsAzureAppServiceWebsite` callback. For
more information, see [DefaultAzureCredential behavior in Azure
deployments](/whats-new/aspire-13/#defaultazurecredential-behavior-in-azure-deployments).
</Aside>

## Customize the App Service website

The `PublishAsAzureAppServiceWebsite` method accepts a callback that allows you to customize the Azure App Service website configuration using the [Azure.Provisioning](https://learn.microsoft.com/dotnet/api/azure.provisioning) APIs:
Expand Down
13 changes: 13 additions & 0 deletions ...frontend/src/content/docs/integrations/cloud/azure/configure-container-apps.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,19 @@ By using the `Azure.Provisioning` APIs (explained in [Customize Azure resources]

This article guides you through the process of tailoring ACA environments for your solutions.

<Aside type="note">
When you publish resources to Azure Container Apps using the
`PublishAsAzureContainerApp` APIs, Aspire automatically sets the
`AZURE_TOKEN_CREDENTIALS` environment variable to `managedidentity`. This
ensures that `DefaultAzureCredential` uses only `ManagedIdentityCredential`
for authentication, following [Azure SDK best
practices](https://learn.microsoft.com/dotnet/azure/sdk/authentication/best-practices?tabs=aspdotnet#use-deterministic-credentials-in-production-environments).
If you need to use a different credential type, you can remove this
environment variable in the `PublishAsAzureContainerApp` callback. For more
information, see [DefaultAzureCredential behavior in Azure
deployments](/whats-new/aspire-13/#defaultazurecredential-behavior-in-azure-deployments).
</Aside>

## Add an ACA environment

The `AzureContainerAppEnvironmentResource` type models an ACA environment resource. When you call the `AddAzureContainerAppEnvironment` method, it creates an instance of this type (wrapped in the `IResourceBuilder<AzureContainerAppEnvironmentResource>`).
Expand Down
Loading
Loading