Issue After Switching to V4 .Net and New Install Repo (Details Below)

[shlubz]

Describe the bug
Getting the following error after switching the following values. This is causing my certificates to not renew as well.

FUNCTIONS_EXTENSION_VERSION = ~4
WEBSITE_RUN_FROM_PACKAGE = https://stacmebotprod.blob.core.windows.net/keyvault-acmebot/v4/latest.zip

"Orchestrator function 'GetCertificates_Orchestrator' failed: The activity function 'GetAllCertificates' failed: "DNS Provider is not configured. Please check the documentation and configure it.". See the function execution logs for additional details."

Checked DNS Subcription ID and it's set for our subscription.

To Reproduce
Steps to reproduce the behavior:

1. Go to web dashboard
2. Wait a few seconds
3. Error pops up

Environment (please complete the following information):

• Certificate Type: All Certificates (Not Renewing)
• Certificate Deploy Target: App Service Function App

Additional context
Went through the entire setup process a few times and restarting the app service. The issue is persistent. Everything was working until the removal of .Net version 3 we were using this for a few years prior with no issue.

Thanks!

[shlubz]

Just wondering where else I can check. It's pretty significant work to try and redeploy this and create all the certificates again. Any help would be much appreciated!

[shlubz]

Found this error.

1106e4b2a4204ef6973c0b8abb03a383: Function 'GetAllCertificates (Activity)' failed with an error.
Reason: System.NullReferenceException: Object reference not set to an instance of an object. at Azure.Security.KeyVault.ChallengeBasedAuthenticationPolicy.AuthorizeRequestOnChallengeAsyncInternal(HttpMessage message, Boolean async) at Azure.Core.Pipeline.BearerTokenAuthenticationPolicy.ProcessAsync(HttpMessage message, ReadOnlyMemory1 pipeline, Boolean async) at Azure.Core.Pipeline.RedirectPolicy.ProcessAsync(HttpMessage message, ReadOnlyMemory1 pipeline, Boolean async) at Azure.Core.Pipeline.RetryPolicy.ProcessAsync(HttpMessage message, ReadOnlyMemory1 pipeline, Boolean async) at Azure.Core.Pipeline.RetryPolicy.ProcessAsync(HttpMessage message, ReadOnlyMemory1 pipeline, Boolean async) at Azure.Core.Pipeline.HttpPipeline.SendRequestAsync(Request request, CancellationToken cancellationToken) at Azure.Security.KeyVault.KeyVaultPipeline.SendRequestAsync(Request request, CancellationToken cancellationToken) at Azure.Security.KeyVault.KeyVaultPipeline.GetPageAsync[T](Uri firstPageUri, String nextLink, Func1 itemFactory, String operationName, CancellationToken cancellationToken) at Azure.Core.PageResponseEnumerator.FuncAsyncPageable1.AsPages(String continuationToken, Nullable1 pageSizeHint)+MoveNext() at Azure.Core.PageResponseEnumerator.FuncAsyncPageable1.AsPages(String continuationToken, Nullable1 pageSizeHint)+System.Threading.Tasks.Sources.IValueTaskSource<System.Boolean>.GetResult() at Azure.AsyncPageable1.GetAsyncEnumerator(CancellationToken cancellationToken)+MoveNext() at Azure.AsyncPageable1.GetAsyncEnumerator(CancellationToken cancellationToken)+MoveNext() at Azure.AsyncPageable1.GetAsyncEnumerator(CancellationToken cancellationToken)+System.Threading.Tasks.Sources.IValueTaskSource<System.Boolean>.GetResult() at KeyVault.Acmebot.Functions.SharedActivity.GetAllCertificates(Object input) in /home/runner/work/keyvault-acmebot/keyvault-acmebot/KeyVault.Acmebot/Functions/SharedActivity.cs:line 85 at KeyVault.Acmebot.Functions.SharedActivity.GetAllCertificates(Object input) in /home/runner/work/keyvault-acmebot/keyvault-acmebot/KeyVault.Acmebot/Functions/SharedActivity.cs:line 85 at Microsoft.Azure.WebJobs.Host.Executors.FunctionInvoker`2.InvokeAsync(Object instance, Object[] arguments) in D:\a_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionInvoker.cs:line 53 at Microsoft.Azure.WebJobs.Host.Executors.FunctionExecutor.InvokeWithTimeoutAsync(IFunctionInvoker invoker, ParameterHelper parameterHelper, CancellationTokenSource timeoutTokenSource, CancellationTokenSource functionCancellationTokenSource, Boolean throwOnTimeout, TimeSpan timerInterval, IFunctionInstance instance) in D:\a_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionExecutor.cs:line 581 at Microsoft.Azure.WebJobs.Host.Executors.FunctionExecutor.ExecuteWithWatchersAsync(IFunctionInstanceEx instance, ParameterHelper parameterHelper, ILogger logger, CancellationTokenSource functionCancellationTokenSource) in D:\a_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionExecutor.cs:line 527 at Microsoft.Azure.WebJobs.Host.Executors.FunctionExecutor.ExecuteWithLoggingAsync(IFunctionInstanceEx instance, FunctionStartedMessage message, FunctionInstanceLogEntry instanceLogEntry, ParameterHelper parameterHelper, ILogger logger, CancellationToken cancellationToken) in D:\a_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionExecutor.cs:line 306.
IsReplay: False.
State: Failed.
RuntimeStatus: Failed.

[shlubz]

Looking like it has something to do with the Azure Role Based access policy method. Is there a guide on how to get this working with Azure RBAC instead of the Key Vault Access Policy? My company doesn't allow the Key Vault access policy on anything.