Forum Discussion

tanulbhasin's avatar
tanulbhasin
Brass Contributor
Mar 01, 2023
Solved

Azure devops unable to access azure storage account?

Hello,

 

We are using only Microsoft hosted agents in azure pipeline, and I need to enable the connectivity between them and azure storage account. We don't want to access storage account from any Azure VM or Kubernetes or self-hosted agent hence, selected this configuration:

 

Error: 

The request may be blocked by network rules of storage account. Please check network rule set using 'az storage account show -n accountname --query networkRuleSet'.

 

Can anyone guide us to enable connectivity from Microsoft hosted agent. It starts working the moment I select enabled form all networks. The region of Azure devops and storage account is also same. 

 

Pipeline:-

 

 

pool:
  vmImage: ubuntu-latest
.
.
.
- task: AzureCLI@2
    displayName: 'Download file'
    inputs:
      azureSubscription: Production
      scriptLocation: inlineScript
      scriptType: bash
      inlineScript: |
        az storage blob download -c test -n file.zip -f ./file.zip --account-name testaccount

 

 

Please help. Thank you. 

 
Kind Regards,
Tanul
  • Kidd_Ip 

     

    Microsoft hosted agents doesn't have fix ip address. And if I'm not wrong, they doesn't work over Microsoft backbone network.

3 Replies

    • tanulbhasin's avatar
      tanulbhasin
      Brass Contributor

      Kidd_Ip 

       

      Microsoft hosted agents doesn't have fix ip address. And if I'm not wrong, they doesn't work over Microsoft backbone network.

      • lakime's avatar
        lakime
        Copper Contributor

        Azure is using internal IP's to access the storage account when the agent is deployed in the same region

        https://learn.microsoft.com/en-us/azure/devops/organizations/security/allow-list-ip-url?view=azure-devops&tabs=IP-V4

        tanulbhasin 

Resources