Paul Yuknewicz paulyuk

Configuring scale

General command to set

az functionapp scale config set --resource-group <RESOURCE_GROUP> --name <APP_NAME> --trigger-type http --trigger-settings perInstanceConcurrency=10

e.g. set to 2 events per instance

How to - Securing your Azure Function

Paul's secret mision "do this, and dont do that"

Using indentity

Using identity for AzureWebJobsStorage

Using identity for Bindings

Using identity for Deployment

Networking

Setting up vnet in your function app

Snippets for Functions Under the Hood at Scale

Configuring scale

General command to set

az functionapp scale config set --resource-group <RESOURCE_GROUP> --name <APP_NAME> --trigger-type http --trigger-settings perInstanceConcurrency=10

e.g. set to 2 events per instance

Converting a Function App to Managed Identity - 101

Overview

This shows how to take a simple Function App (e.g. the output of our client tools templates for a trigger or binding) or a simple sample and "modernize" it from using ConnectionStrings and secrets in favor of Managed Identity and RBAC.

Assumptions

User-assigned managed identity is prefered. Beware if you do not select an identity to use in code (ClientId), it will default to system assigned.
local development will make Connections to local emulators if they exist, and otherwise will make remote cloud connections to resource using identity based connections. Some resources like Service Bus, AI Cognitive, Open AI, and Datalake will

Slides

[https://paulyukstoragev2.blob.core.windows.net/flex-under-hood/functions-scale-under-hood.pptx]

Gist with CLI terminal commands

[https://gist.github.com/paulyuk/7609612ad5330e4e3aaf66b844b93075]

End to end sample we load tested (e2e with HTTP, EH & VNET)

[https://aka.ms/flexconsumption/samples]

AI RAG sample with concurrency=1

PowerShell

install latest - 7.3

winget search Microsoft.PowerShell
winget install --id Microsoft.Powershell

or alternatively:

OPTIONAL install PowerShell preview - 7.4

one-time setup

set this alias, and/or insert at the end of your ~/.zshrc file

alias intel="env /usr/bin/arch -x86_64 /bin/zsh --login"

start every development session in intel to be safe

intel
arch

unzip the tools that match your OS and Arch, and copy to your usr folder ~/funccli/Azure.Functions.Cli.osx-x64.4.0.5194
make the func cli executable

cd ~/funccli/Azure.Functions.Cli.osx-x64.4.0.5194
chmod +x func

run func cli in this folder

./func version

	apiVersion: dapr.io/v1alpha1
	kind: Component
	metadata:
	name: statestore
	spec:
	type: state.redis
	version: v1
	metadata:
	# These settings will work out of the box if you use `helm install
	# bitnami/redis`. If you have your own setup, replace

	{
	"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
	"contentVersion": "1.0.0.0",
	"parameters": {
	"sites_py_flex_beta_function2_name": {
	"defaultValue": "py-flex-beta-function2",
	"type": "String"
	},
	"serverfarms_py_flex_beta_function2FlexPlan_externalid": {
	"defaultValue": "/subscriptions/ca5ce512-88e1-44b1-97c6-22caf84fb2b0/resourceGroups/py-flex-beta-2/providers/Microsoft.Web/serverfarms/py-flex-beta-function2FlexPlan",