Unstable Behavior of `az functionapp config container set` Command for Container App Hosted Azure Functions

[shibayan]

Describe the bug

When trying to enable ACR Pull using a User Assigned Managed Identity for Azure Functions hosted on Container Apps and updating the Docker Image with az functionapp config container set, random errors occur. Even when the update is successful, it takes a very long time. This issue does not seem to occur when using the ACR admin user.

Related command

az functionapp config container set

Errors

az functionapp config container set -g rg-neo4j-test -n func-deploy-test-001 -i crfuncdeploy001.azurecr.io/aca-func:v4
App settings have been redacted. Use `az webapp/logicapp/functionapp config appsettings list` to view.
Operation returned an invalid status 'Too Many Requests'
Content: {"Code":"Conflict","Message":"Cannot modify this site because another operation is in progress. Details: Id: 79a27b85-16f3-45df-b5d6-a1bc4154f65d, OperationName: ContainerAppUpdateAppSettings, CreatedTime: 8/24/2024 7:15:08 AM, RequestId: b3d0e83e-4776-46cb-960d-5843866af3d6, EntityType: 3","Target":null,"Details":[{"Message":"Cannot modify this site because another operation is in progress. Details: Id: 79a27b85-16f3-45df-b5d6-a1bc4154f65d, OperationName: ContainerAppUpdateAppSettings, CreatedTime: 8/24/2024 7:15:08 AM, RequestId: b3d0e83e-4776-46cb-960d-5843866af3d6, EntityType: 3"},{"Code":"Conflict"},{"ErrorEntity":{"ExtendedCode":"51032","MessageTemplate":"Cannot modify this site because another operation is in progress. Details: {0}","Parameters":["Id: 79a27b85-16f3-45df-b5d6-a1bc4154f65d, OperationName: ContainerAppUpdateAppSettings, CreatedTime: 8/24/2024 7:15:08 AM, RequestId: b3d0e83e-4776-46cb-960d-5843866af3d6, EntityType: 3"],"Code":"Conflict","Message":"Cannot modify this site because another operation is in progress. Details: Id: 79a27b85-16f3-45df-b5d6-a1bc4154f65d, OperationName: ContainerAppUpdateAppSettings, CreatedTime: 8/24/2024 7:15:08 AM, RequestId: b3d0e83e-4776-46cb-960d-5843866af3d6, EntityType: 3"}}],"Innererror":null}

Issue script & Debug output

azure-cli.log

Expected behavior

Quickly succeed in updating Docker Image

Environment Summary

azure-cli                         2.63.0

core                              2.63.0
telemetry                          1.1.0

Dependencies:
msal                              1.30.0
azure-mgmt-resource               23.1.1

Python location 'C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe'
Extensions directory 'C:\Users\shibayan\.azure\cliextensions'

Python (Windows) 3.11.8 (tags/v3.11.8:db85d51, Feb  6 2024, 22:03:32) [MSC v.1937 64 bit (AMD64)]

Additional context

No response

[yonzhan]

Thank you for opening this issue, we will look into it.

[microsoft-github-policy-service]

Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @kamperiadis, @khkh-ms, @shreyabatra4.

[microsoft-github-policy-service]

Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @AzureAppServiceCLI, @antcp.

[ledbutter]

We are seeing the same symptoms, but I've yet to see this command actually work (so not unstable, just broken). From the portal, I'm not even sure if Managed Identity-based permission is even supported as there is no option for it when configuring such a function app; it only lists Admin Creds as an option.

[dicknetherlands]

I am seeing this problem too. Using az functionapp container set to change the image using the same syntax described in this issue works maybe 1 out of 10 times, the other 9 times it produces the error reported in this issue.