Getting InvalidStorageAccountKey error while deploying ACI

Sergio Castañeda 0 Microsoft Employee

I'm trying to deploy an ACI with a mounted Azure File but keep getting an error that the storage account key is invalid. For context. I have successfully deployed other ACIs with volumes hosted on the same storage account and using the same key without an issue. I've used YAML files, but for simplicity and as a test I also used Azure CLI to retrieve the key and deploy the container to rule out any typos and below is the command I used:

STORAGE_KEY=$(az storage account keys list --resource-group $ACI_PERS_RESOURCE_GROUP --account-name $ACI_PERS_STORAGE_ACCOUNT_NAME --query "[0].value" --output tsv)

WARNING: [Warning] This output may compromise security by showing secrets. Learn more at: https://go.microsoft.com/fwlink/?linkid=2258669

az container create --resource-group $ACI_PERS_RESOURCE_GROUP --name test-server --image lscr.io/linuxserver/prowlarr:latest --dns-name-label saturnz-barrz --ports 9696 --azure-file-volume-account-name $ACI_PERS_STORAGE_ACCOUNT_NAME --azure-file-volume-account-key $STORAGE_KEY --azure-file-volume-share-name prowlarr-config --azure-file-volume-mount-path /config/

Here is the error I keep getting no matter the method I use to deploy:

{

"status": "Failed",

"error": {

    "code": "InvalidStorageAccountKey",

    "message": "The Azure storage account key in volume 'azurefile' is invalid."

}

}

Sergio Castañeda 0 Reputation points Microsoft Employee

2024-12-26T18:30:42.86+00:00

This seems to be a false positive returned by Log Analytics. I deleted and redeployed the ACIs that I had running and those returned the same error before successfully deploying.
Keshavulu Dasari 2,570 Reputation points Microsoft Vendor

2024-12-27T02:22:38.1233333+00:00
Hi Sergio Castañeda,
Thanks for posting your query! especially since you've successfully deployed other ACIs with the same storage account and key,
I suggest few steps you can take to troubleshoot the issue.
Verify Storage Account Key Double-check that the storage account key you're using is correct. You can manually copy the key from the Azure portal to ensure there are no issues with the az storage account keys list command.

Key Permissions: Ensure that the storage account key has the necessary permissions. Sometimes, key permissions might be restricted or changed.

Key Rotation: If the storage account key was recently rotated, make sure you're using the updated key.

Azure CLI Version: Ensure that your Azure CLI is up to date. Sometimes, issues can arise from using an outdated version.

Network Restrictions: Check if there are any network restrictions or firewall rules that might be affecting the storage account access.

Resource Group and Account Names: Verify that the resource group and storage account names are correct and match exactly, including case sensitivity. Try deploying the ACI using the Azure portal or an ARM template to see if the issue persists.

If you are still facing issues, please provide some screenshots and details in the "comments" and I would be happy to help you

Share via

Getting InvalidStorageAccountKey error while deploying ACI

Your answer