Maybe helpful to some getting started: https://cloud-right.com/2020/06/pulumi-encrypt-secrets-azure-keyvault

@colossal-room-15708 if you get a chance, please send that to this repo 🙂 https://github.com/ghuntley/awesome-pulumi

Is it possible to use Pulumi to Grant Admin Consent to the Required Resource Accesses specified for an Azure Application created using new Pulumi.AzureAD.Application?

[SOLVED] Hello guys! Im stucked on weird issue and i'm wondering, if somebody have ran into it before. I'm using Pulumi with

C# SDK

with Azure provider. I want to create new

AppService

with existing

AppServicePlan

on Azure (we are migrating as a company to Pulumi, but slowly and we still have some resources in the azure created manually). When i try to reference it as described here I get following error (i suppose from Azure api)

error: ID was missing the `serverfarms` element

But i'm sure, that the id is correct in form of:

/subscriptions/<OUR_SUB_ID>/resourceGroups/<OUR_RESOURCE_GROUP_NAME>/providers/Microsoft.Web/serverFarms/<OUR_APP_SERVICE_PLAN_NAME>

And that it exists. Have somebody experienced this issue or do you have any hints what could be root cause of this error? Thanks for any insights / hints! 🙂

What will the Azure Infrastructure as Code Workshop will be about ? The description is quite generic, is an hands on lab introduction like the ones on Github ? Is prior knowledge of Kubernettes needed ?

When trying to specify a description > 32 characters long for an Application Secret created with Pulumi.AzureAD.ApplicationPassword I am receiving the following error Service returned an error. Status=400 Code="Unknown" Message="Unknown service error" Details=[{"odata.error":{"code":"Request_BadRequest","date":"2020-06-23T150728","message":{"lang":"en","value":"When present, application key identifier cannot be empty and can be at most 32 bytes.\r\nParameter name: applicationKeyIdentifierValue"},"requestId":"***"}}] The error refers to applicationKeyIdentifierValue which I am not specifying. I am using the dotnet libraries and only specifying ApplicationObjectId, Description, Value and EndDate. I can specify a description longer than 32 characters when I manually create a secret in the Azure portal. Is this a known limitation?

I'm creating a PostgreSQL server on Azure then I want to configure roles and schemas on it using the

@pulumi\postgresql

package. How do I tie the roles and schemas to the server I create?

Any help on that?

is there by any change an example of setting up a windows vm on azure with rdp access?

I've been seeing this error when trying to create a new Azure SQL Server

azure:mssql:Server (<edit>):
    error: Error waiting on create/update future for SQL Server "<edit>" (Resource Group "<edit>"): Code="PasswordNotComplex" Message="Password validation failed. The password does not meet policy requirements because it is not complex enough."

The password generated for this attempt (nw$a594KSKEu%9tXdIMRlj!#DqoD61mp) more than meets the standards in Microsoft's documentation. I'm not sure where to go from here to get past this issue. I'm using Go and on version

<http://github.com/pulumi/pulumi-azure/sdk/v3|github.com/pulumi/pulumi-azure/sdk/v3> v3.10.0

.

Changed my config to create an azure.postgresql.Database (instead of azure.sql.Database), now I'm getting this:

postgresql:index:Role (ground-control-db): error: Error initializing PostgreSQL client: error detecting capabilities: error PostgreSQL version: dial tcp: lookup ground-control-db-server on 8.8.8.8:53: no such host

Found something here: https://github.com/terraform-providers/terraform-provider-postgresql/issues/47

Do I need to create firewall rules? Does anyone have an example of creating a PGSQL on Azure?

Hello and thanks in advance. In Pulumi Azure I need to import an existing sql azure in my stack. So I setup the admin username and password equal to the existing ones and found the correct ResourceId. But when I launch pulumi up to import the resource it says that administratorLoginPassword is different and the import fails. The password is stored as a secret config and I’m sure that matches…maybe is because the encrypted value is different? How I can manage?

Hi, does anyone know if there a way to set an Azure KeyVault secret as part of a deployment please?

I'm seeing a weird issue when creating network security groups. I'm aware of the issue with specifying NSG rules both in the NSG object and in seperate rule objects, so I have created an NSG with no rules, then create seperate rule objects for that NSG. When I deploy the NSG it works fine, however if I change anything, like adding a tag to the NSG, when I re-run Pulumi Up then all of the NSG rules are deleted. Any ideas? If it makes any different I am creating the NSG in a custom component.

Hi there, is there any possibility to deploy an Azure AD B2C Tenant ?

Hello, are there any resources about how to diagnose

Failed to retrieve the host keys

errors? Started receiving those errors during

pulumi up

without doing any change, and could find anything helpful in the logs when executing with

--logtostderr -v=3

. Full exception in the thread.

Hi, how am I able to programmatically get the value of tenant_id? I've seen that there's a provider resource with properties and that tenant_id is there, but I cant figure out how to get it. Thank you.

Is anyone know how to enable diagnostic logging on Blob Storage in Azure (Using Pulumi). The AccountBlobProperties class has very limited properties compare to whatever is available. There is also DiagnosticSetting which might be relevant but i'm wonder if anyone has used this to solve similar problem

Getting this error this morning with no changes from last week:

error: Running program '/Users/jason/projects/cluster-config/pulumi' failed with an unhandled exception:
    Error: Invoke of 'azure:core/getClientConfig:getClientConfig' failed: rpc error: code = Unknown desc = invocation of azure:core/getClientConfig:getClientConfig returned an error: Error building account: Error getting authenticated object ID: Error parsing json result from the Azure CLI: Error waiting for the Azure CLI: exit status 1 ()

I'm getting an error

do not have ServiceEndpoints for Microsoft.Sql resources configured. Add Microsoft.Sql to subnet's ServiceEndpoints collection before trying to ACL Microsoft.Sql resources to these subnets.'

Is there a way to modify the

serviceEndpoints

property of the subnet after creation, or do I have to know all of the services I want to be able to access up front when I create the subnet?

Hello, somehow I am not getting the correct private_ip_address from a LinuxVirtualMachine after performing an update on the subnet associated to the NIC. Anyone experiencing the same problem?

I am struggling to add a VM to a load balancer backend pool. I can not seem to find a way to associate these two things. Any pointers / examples anyone?

Getting this error still:

postgresql:index:Role (ground-control-db):
    error: Error initializing PostgreSQL client: error detecting capabilities: error PostgreSQL version: pq: Invalid connection parameters specified. Check connection parameters, and try again.

This is the code that's failing:

const adminPassword = new random.RandomPassword(name + "-admin-password", {length: 12, special: false}).result;

    let serverName = name + '-server';
    const server = new azure.postgresql.Server(serverName, {
        name: serverName,
        location: resourceGroup.location,
        resourceGroupName: resourceGroup.name,
        administratorLogin: "psqladmin",
        administratorLoginPassword: adminPassword,
        skuName: "GP_Gen5_4",
        version: "10",
        sslEnforcement: `Enabled`,
        storageProfile: {
            storageMb: 5120,
            backupRetentionDays: 7,
            autoGrow: 'Enabled',
        },
        tags: {
            "project": "mercury"
        }
    });

    let dbName = name + '-db';
    const db = new azure.postgresql.Database(dbName,{
        name: dbName,
        resourceGroupName: resourceGroup.name,
        serverName: server.name,
        charset: 'UTF8',
        collation: 'en-US'
    }, {
        dependsOn: server
    });

    const databaseUsersNetworkRule = new azure.postgresql.VirtualNetworkRule("dbusersallowed", {
        resourceGroupName: resourceGroup.name,
        serverName: server.name,
        subnetId: subnet.id,
    });

    const pgProvider = new pgsql.Provider(serverName,{
        username: `${server.administratorLogin}@${serverName}`,
        password: server.administratorLoginPassword,
        host: server.fqdn,
    });

    const userPassword = new random.RandomPassword(name + "-password", {length: 12, special: false}).result;

    const role = new pgsql.Role(name, {login: true, password: userPassword}, {dependsOn: server, provider: pgProvider});
    const schema = new pgsql.Schema(name , {
        owner: name,
        policies: [
            {
                role: role.name,
                usage: true,
                create: true
            }
        ],
    },
        {dependsOn: [server, role, databaseUsersNetworkRule], provider: pgProvider});

So hopefully something simple I have missed. I have stack written in typesceipt that contains an archive function app that I deploy. This happily deploys my .net functions. However I am finding the function app does not reflect any code updates unless it is restarted kinda expected I guess. Is there a neat way I could continuosly deploy and trigger the restart from within Pulumi?

Has anyone deployed Windows VMs and joined them to an Azure Active Directory Domain via code? I am not seeing much of anything of how to do this or if it is even possible

Hi All, When deploying an Azure App Service is there any way to mark an APPSETTING as being a slot setting? At the moment all of my APPSETTINGS are swapping whenever I swap slots which is breaking things.

Does anyone know how to set the minimum TLS version on an Azure Storage account to 1.2 using Pulumi? Thanks!

trying to use vnet segregation on an eventhub.Namespace but the properties don't seem to exist, but they're there in the terraform provider. is there any timescale for supporting that? it exists on storage accounts and keyvaults etc.