Soru

Zorluk: OrtaDeploy and Configure Azure Container Apps

You are deploying a containerized microservice named inventory-service to Azure Container Apps. The service needs to communicate with other services in the same Container App Environment using HTTP/2, but it must not be accessible from the public internet.

Which two configuration settings must you apply to the Container App configuration to meet these requirements? (Select two.)

  1. Set the external property within the ingress configuration block to false.Cevap
  2. Set the transport property within the ingress configuration block to http2.Cevap
  3. C
    Enable a system-assigned managed identity on the Container App Environment rather than the individual Container App.
  4. D
    Configure Azure Container Registry (ACR) credentials in the registries block using an admin account to authorize inbound requests.

Cevap

To configure an internal Container App that communicates via HTTP/2, you must set the ingress external property to false and the transport property to http2 within the application's configuration definition.
To restrict access to the Container App Environment and prevent public internet access, the external property within the ingress block must be set to false. Additionally, the transport property within the ingress block must be set to http2 to support HTTP/2 communication. Both properties are standard ingress settings configured at the Container App level.

Adım Adım Çözüm

1
Set the ingress scope to internal by configuring the external property.
Setting external to false restricts incoming traffic to only originate from within the Container App Environment, preventing public internet access.
This secures the service by isolation.
2
Set the transport protocol to HTTP/2.
Setting transport to http2 configures the proxy to accept HTTP/2 requests.
This aligns the container app with the required communication protocol for the microservice.

Anahtar Kavram

Configuring ingress parameters for Azure Container Apps to restrict accessibility to the internal environment and define specific network transport protocols.
Bu soruyu puanla