Skip to content

NimBus v3.11.0

Choose a tag to compare

View all tags
@akakaule akakaule released this 24 Sep 13:42
· 143 commits to master since this release
v3.11.0
0326fe6

NimBus 3.11.0 fixes the Application Insights log query, which stopped working when Microsoft retired API keys for the query API, by authenticating with the WebApp's managed identity.

Highlights

  • Fixed the event logs endpoint (GET /api/event/details/{endpointId}/{id}/logs), which stopped returning logs when Microsoft retired API keys for the Application Insights query API on 2026-03-31; the WebApp now sends a Microsoft Entra token from its managed identity.
  • Added a Reader role assignment for the WebApp's managed identity on the Application Insights component to deploy.webapp.bicep, the role Microsoft documents for Entra-authenticated queries.
  • Fixed nb infra apply deleting and recreating the management-app Application Insights API key on every run; it no longer creates, deletes or passes a key.

Compatibility

No schema migration, topology change or message wire change. Run nb infra apply before or together with nb deploy apps, because the WebApp needs the Reader grant; without it the event logs endpoint keeps returning no logs, as it has since the key retirement.

The web app deployment now assigns Reader (acdd72a7-3385-48ef-bd42-f606fba81ae7). If the deploying identity is limited by the ABAC condition from the Azure requirements guide, add Reader to that condition first. If the WebApp identity already holds Reader on the component from a manual grant, delete that assignment, or the deployment fails with RoleAssignmentExists.

The apiKey parameter of deploy.webapp.bicep is deprecated and ignored, and is removed in the next major version. AppInsights:ApiKey is no longer read, and the next deployment removes the setting. Existing management-app keys stay in place until you delete them. See Application Insights log queries.

This release was validated at commit 0326fe6 with the full .NET Release build and test suite in CI, live Cosmos DB and SQL Server conformance suites with no skipped tests, Service Bus emulator compatibility checks, 411 frontend tests, the frontend production build, and a manual run of the new query path against a deployed Application Insights component with a developer credential.

Commits: v3.10.0...v3.11.0

Assets 2
Loading