Ravnur Media Services uses common Azure resources to provision the application. There are cases, however, where the resource is not supported in a specific region. This may cause the deployment to fail.
Microsoft Entra Workload Identity not supported
Symptom: Deployment fails
Solution: Manually create the managed identity in a different region that supports workload identity.
Discussion: Workloads running in AKS require Microsoft Entra application credentials or managed identities to access Microsoft Entra protected resources such as Azure Key Vault. This is best achieved using Microsoft Entra Workload Identity, and Ravnur Media Services uses workload identity with its AKS cluster. However, there are a few regions that do not support workload identity:
- East Asia
- Qatar Central
- Malaysia South
- Italy North
- Israel Central
The workaround is to create the managed identity in a different region where workload identity is supported and use that one. This is a manual process and Ravnur will seek your approval before proceeding to remediate the issue.
West Europe no longer allows creation of Azure SQL Server
Symptom: Deployment fails
Solution: Select another region for your resource group and deploy resources to that region.
Discussion: West Europe does not allow the creation of new Azure SQL servers, and this causes deployments to West Europe to fail. Please do not use West Europe.