OpenTelemetry data agent does not support RBAC for app insights

[michaelmcneilnet]

This issue is a: (mark with an x)

• bug report -> please search issues before submitting
• documentation issue or request
• regression (a behavior that used to work and stopped in a new release)

Issue description

When using the OpenTelementry data agent to send to App Insights, no data flows through until I set DisableLocalAuth to false in the App Insights resource.

Originally I had DisableLocalAuth set to true as I want to use RBAC only. I gave the container app environment the Monitoring Metrics Publisher role, but still saw no data flow through to App Insights.

Does the data agent support azure RBAC?

[v-vish]

@michaelmcneilnet The OpenTelemetry data agent currently requires local auth (like instrumentation keys) to send data to Application Insights. When DisableLocalAuth is set to true, only Azure AD-based authentication is allowed, blocking data flow since the agent doesn’t support this yet.

To work around this, set DisableLocalAuth to false until native RBAC support is available in a future update.

[michaelmcneilnet]

@v-vish Thanks for the update. It would be great if this was mentioned in the docs at https://learn.microsoft.com/en-us/azure/container-apps/opentelemetry-agents?tabs=arm#azure-monitor-application-insights as it took me a long time to realise this was probably the issue (no access to agent logs means there was no way to debug this, so it was a lucky guess).

Is there an issue tracking RBAC support that I can subscribe to? I couldn't find one in a search.