1# Aspire Validation
2 
3> ⚠️ **Only load this file when the project is a .NET Aspire application.**
4 
5Validation steps specific to .NET Aspire projects deployed via AZD.
6 
7## Detection
8 
9A project is Aspire-based if any of these are true:
10 
11| Indicator | Check |
12|-----------|-------|
13| AppHost project | `find . -name "*.AppHost.csproj"` |
14| Aspire.Hosting package | `grep -r "Aspire.Hosting" . --include="*.csproj"` |
15 
16**If none found → skip this file entirely.**
17 
18---
19 
20## Pre-Provisioning: Functions Secret Storage
21 
22> ⚠️ **CRITICAL — Must run BEFORE `azd provision`.**
23 
24Check if the project uses Azure Functions within Aspire and ensure `AzureWebJobsSecretStorageType` is configured.
25See [Aspire Functions Secrets Reference](../../aspire-functions-secrets.md) for detection commands, fix examples, and full details.
26 
27**If `AddAzureFunctionsProject` is NOT found**, skip this section.
28 
29---
30 
31## Post-Provisioning: Container Apps Environment Variables
32 
33> ⚠️ **CRITICAL — Run AFTER `azd provision` but BEFORE `azd deploy`.**
34 
35When using Aspire with Container Apps in "limited mode" (in-memory infrastructure generation), `azd provision` creates Azure resources but doesn't automatically populate environment variables that `azd deploy` needs.
36 
37**Check if environment variables are set:**
38 
39```bash
40azd env get-values | grep -E "AZURE_CONTAINER_REGISTRY_ENDPOINT|AZURE_CONTAINER_REGISTRY_MANAGED_IDENTITY_ID|MANAGED_IDENTITY_CLIENT_ID"
41```
42 
43**If any are missing, set them now BEFORE running `azd deploy`:**
44 
45```bash
46# Get resource group name
47RG_NAME=$(azd env get-values | grep AZURE_RESOURCE_GROUP | cut -d'=' -f2 | tr -d '"')
48 
49# Set required variables
50azd env set AZURE_CONTAINER_REGISTRY_ENDPOINT $(az acr list --resource-group "$RG_NAME" --query "[0].loginServer" -o tsv)
51azd env set AZURE_CONTAINER_REGISTRY_MANAGED_IDENTITY_ID $(az identity list --resource-group "$RG_NAME" --query "[0].id" -o tsv)
52azd env set MANAGED_IDENTITY_CLIENT_ID $(az identity list --resource-group "$RG_NAME" --query "[0].clientId" -o tsv)
53```
54 
55**PowerShell:**
56```powershell
57# Get resource group name
58$rgName = (azd env get-values | Select-String 'AZURE_RESOURCE_GROUP').Line.Split('=')[1].Trim('"')
59 
60# Set required variables
61azd env set AZURE_CONTAINER_REGISTRY_ENDPOINT (az acr list --resource-group $rgName --query "[0].loginServer" -o tsv)
62azd env set AZURE_CONTAINER_REGISTRY_MANAGED_IDENTITY_ID (az identity list --resource-group $rgName --query "[0].id" -o tsv)
63azd env set MANAGED_IDENTITY_CLIENT_ID (az identity list --resource-group $rgName --query "[0].clientId" -o tsv)
64```
65 
66**Why this is needed:** Aspire's "limited mode" generates infrastructure in-memory. While `azd provision` creates all necessary Azure resources (Container Registry, Managed Identity, Container Apps Environment), it doesn't populate the environment variables that reference those resources. The `azd deploy` phase requires these variables to authenticate with the container registry and configure managed identity bindings.
67