https://pulumi.com logo
Docs
Join the conversationJoin Slack
Channels
announcements
automation-api
aws
azure
blog-posts
built-with-pulumi
cloudengineering
cloudengineering-support
content-share
contribex
contribute
docs
dotnet
finops
general
getting-started
gitlab
golang
google-cloud
hackathon-03-19-2020
hacktoberfest
install
java
jobs
kubernetes
learn-pulumi-events
linen
localstack
multi-language-hackathon
office-hours
oracle-cloud-infrastructure
plugin-framework
pulumi-cdk
pulumi-crosscode
pulumi-deployments
pulumi-kubernetes-operator
pulumi-service
pulumiverse
python
registry
status
testingtesting123
testingtesting321
typescript
welcome
workshops
yaml
Powered by Linen
azure
  • c

    colossal-room-15708

    06/21/2020, 9:37 PM
    Maybe helpful to some getting started: https://cloud-right.com/2020/06/pulumi-encrypt-secrets-azure-keyvault
    👍 2
  • b

    broad-dog-22463

    06/21/2020, 9:39 PM
    @colossal-room-15708 if you get a chance, please send that to this repo 🙂 https://github.com/ghuntley/awesome-pulumi
    c
    • 2
    • 2
  • m

    mysterious-australia-14256

    06/23/2020, 12:51 PM
    Is it possible to use Pulumi to Grant Admin Consent to the Required Resource Accesses specified for an Azure Application created using new Pulumi.AzureAD.Application?
    t
    • 2
    • 10
  • n

    nice-football-42636

    06/23/2020, 2:33 PM
    [SOLVED] Hello guys! Im stucked on weird issue and i'm wondering, if somebody have ran into it before. I'm using Pulumi with
    C# SDK
    with Azure provider. I want to create new
    AppService
    with existing
    AppServicePlan
    on Azure (we are migrating as a company to Pulumi, but slowly and we still have some resources in the azure created manually). When i try to reference it as described here I get following error (i suppose from Azure api)
    error: ID was missing the `serverfarms` element
    But i'm sure, that the id is correct in form of:
    /subscriptions/<OUR_SUB_ID>/resourceGroups/<OUR_RESOURCE_GROUP_NAME>/providers/Microsoft.Web/serverFarms/<OUR_APP_SERVICE_PLAN_NAME>
    And that it exists. Have somebody experienced this issue or do you have any hints what could be root cause of this error? Thanks for any insights / hints! 🙂
    • 1
    • 2
  • m

    millions-journalist-34868

    06/23/2020, 2:48 PM
    What will the Azure Infrastructure as Code Workshop will be about ? The description is quite generic, is an hands on lab introduction like the ones on Github ? Is prior knowledge of Kubernettes needed ?
  • m

    mysterious-australia-14256

    06/23/2020, 3:18 PM
    When trying to specify a description > 32 characters long for an Application Secret created with Pulumi.AzureAD.ApplicationPassword I am receiving the following error Service returned an error. Status=400 Code="Unknown" Message="Unknown service error" Details=[{"odata.error":{"code":"Request_BadRequest","date":"2020-06-23T15:07:28","message":{"lang":"en","value":"When present, application key identifier cannot be empty and can be at most 32 bytes.\r\nParameter name: applicationKeyIdentifierValue"},"requestId":"***"}}] The error refers to applicationKeyIdentifierValue which I am not specifying. I am using the dotnet libraries and only specifying ApplicationObjectId, Description, Value and EndDate. I can specify a description longer than 32 characters when I manually create a secret in the Azure portal. Is this a known limitation?
  • e

    enough-kite-69616

    06/23/2020, 9:32 PM
    I'm creating a PostgreSQL server on Azure then I want to configure roles and schemas on it using the
    @pulumi\postgresql
    package. How do I tie the roles and schemas to the server I create?
    g
    • 2
    • 10
  • e

    enough-kite-69616

    06/24/2020, 6:14 PM
    Any help on that?
    g
    • 2
    • 1
  • f

    famous-jelly-72366

    06/25/2020, 1:04 PM
    is there by any change an example of setting up a windows vm on azure with rdp access?
    c
    • 2
    • 4
  • e

    echoing-librarian-76448

    06/25/2020, 4:05 PM
    I've been seeing this error when trying to create a new Azure SQL Server
    azure:mssql:Server (<edit>):
        error: Error waiting on create/update future for SQL Server "<edit>" (Resource Group "<edit>"): Code="PasswordNotComplex" Message="Password validation failed. The password does not meet policy requirements because it is not complex enough."
    The password generated for this attempt (nw$a594KSKEu%9tXdIMRlj!#DqoD61mp) more than meets the standards in Microsoft's documentation. I'm not sure where to go from here to get past this issue. I'm using Go and on version
    <http://github.com/pulumi/pulumi-azure/sdk/v3|github.com/pulumi/pulumi-azure/sdk/v3> v3.10.0
    .
  • e

    enough-kite-69616

    06/25/2020, 7:58 PM
    Changed my config to create an azure.postgresql.Database (instead of azure.sql.Database), now I'm getting this:
    postgresql:index:Role (ground-control-db): error: Error initializing PostgreSQL client: error detecting capabilities: error PostgreSQL version: dial tcp: lookup ground-control-db-server on 8.8.8.8:53: no such host
    g
    • 2
    • 5
  • e

    enough-kite-69616

    06/25/2020, 7:58 PM
    Found something here: https://github.com/terraform-providers/terraform-provider-postgresql/issues/47
  • e

    enough-kite-69616

    06/25/2020, 7:59 PM
    Do I need to create firewall rules? Does anyone have an example of creating a PGSQL on Azure?
    l
    • 2
    • 3
  • l

    little-kangaroo-50941

    06/26/2020, 1:21 PM
    Hello and thanks in advance. In Pulumi Azure I need to import an existing sql azure in my stack. So I setup the admin username and password equal to the existing ones and found the correct ResourceId. But when I launch pulumi up to import the resource it says that administratorLoginPassword is different and the import fails. The password is stored as a secret config and I’m sure that matches…maybe is because the encrypted value is different? How I can manage?
    t
    b
    • 3
    • 4
  • k

    kind-tomato-78099

    06/26/2020, 2:57 PM
    Hi, does anyone know if there a way to set an Azure KeyVault secret as part of a deployment please?
    m
    • 2
    • 2
  • m

    miniature-leather-70472

    06/28/2020, 4:25 PM
    I'm seeing a weird issue when creating network security groups. I'm aware of the issue with specifying NSG rules both in the NSG object and in seperate rule objects, so I have created an NSG with no rules, then create seperate rule objects for that NSG. When I deploy the NSG it works fine, however if I change anything, like adding a tag to the NSG, when I re-run Pulumi Up then all of the NSG rules are deleted. Any ideas? If it makes any different I am creating the NSG in a custom component.
    g
    c
    t
    • 4
    • 14
  • l

    limited-carpenter-34991

    06/29/2020, 9:35 AM
    Hi there, is there any possibility to deploy an Azure AD B2C Tenant ?
  • b

    bitter-afternoon-8442

    06/29/2020, 10:55 AM
    Hello, are there any resources about how to diagnose
    Failed to retrieve the host keys
    errors? Started receiving those errors during
    pulumi up
    without doing any change, and could find anything helpful in the logs when executing with
    --logtostderr -v=3
    . Full exception in the thread.
    t
    • 2
    • 3
  • a

    ambitious-father-68746

    06/29/2020, 1:26 PM
    Hi, how am I able to programmatically get the value of tenant_id? I've seen that there's a provider resource with properties and that tenant_id is there, but I cant figure out how to get it. Thank you.
    c
    • 2
    • 2
  • s

    swift-lunch-74411

    06/30/2020, 11:26 AM
    Is anyone know how to enable diagnostic logging on Blob Storage in Azure (Using Pulumi). The AccountBlobProperties class has very limited properties compare to whatever is available. There is also DiagnosticSetting which might be relevant but i'm wonder if anyone has used this to solve similar problem
    g
    • 2
    • 2
  • e

    enough-kite-69616

    06/30/2020, 1:16 PM
    Getting this error this morning with no changes from last week:
    error: Running program '/Users/jason/projects/cluster-config/pulumi' failed with an unhandled exception:
        Error: Invoke of 'azure:core/getClientConfig:getClientConfig' failed: rpc error: code = Unknown desc = invocation of azure:core/getClientConfig:getClientConfig returned an error: Error building account: Error getting authenticated object ID: Error parsing json result from the Azure CLI: Error waiting for the Azure CLI: exit status 1 ()
    t
    l
    • 3
    • 8
  • e

    enough-kite-69616

    06/30/2020, 2:40 PM
    I'm getting an error
    do not have ServiceEndpoints for Microsoft.Sql resources configured. Add Microsoft.Sql to subnet's ServiceEndpoints collection before trying to ACL Microsoft.Sql resources to these subnets.'
    Is there a way to modify the
    serviceEndpoints
    property of the subnet after creation, or do I have to know all of the services I want to be able to access up front when I create the subnet?
  • c

    curved-alarm-76356

    06/30/2020, 3:54 PM
    Hello, somehow I am not getting the correct private_ip_address from a LinuxVirtualMachine after performing an update on the subnet associated to the NIC. Anyone experiencing the same problem?
  • q

    quiet-hairdresser-18834

    06/30/2020, 4:16 PM
    I am struggling to add a VM to a load balancer backend pool. I can not seem to find a way to associate these two things. Any pointers / examples anyone?
    • 1
    • 1
  • e

    enough-kite-69616

    06/30/2020, 8:51 PM
    Getting this error still:
    postgresql:index:Role (ground-control-db):
        error: Error initializing PostgreSQL client: error detecting capabilities: error PostgreSQL version: pq: Invalid connection parameters specified. Check connection parameters, and try again.
    This is the code that's failing:
    const adminPassword = new random.RandomPassword(name + "-admin-password", {length: 12, special: false}).result;
    
        let serverName = name + '-server';
        const server = new azure.postgresql.Server(serverName, {
            name: serverName,
            location: resourceGroup.location,
            resourceGroupName: resourceGroup.name,
            administratorLogin: "psqladmin",
            administratorLoginPassword: adminPassword,
            skuName: "GP_Gen5_4",
            version: "10",
            sslEnforcement: `Enabled`,
            storageProfile: {
                storageMb: 5120,
                backupRetentionDays: 7,
                autoGrow: 'Enabled',
            },
            tags: {
                "project": "mercury"
            }
        });
    
        let dbName = name + '-db';
        const db = new azure.postgresql.Database(dbName,{
            name: dbName,
            resourceGroupName: resourceGroup.name,
            serverName: server.name,
            charset: 'UTF8',
            collation: 'en-US'
        }, {
            dependsOn: server
        });
    
        const databaseUsersNetworkRule = new azure.postgresql.VirtualNetworkRule("dbusersallowed", {
            resourceGroupName: resourceGroup.name,
            serverName: server.name,
            subnetId: subnet.id,
        });
    
        const pgProvider = new pgsql.Provider(serverName,{
            username: `${server.administratorLogin}@${serverName}`,
            password: server.administratorLoginPassword,
            host: server.fqdn,
        });
    
        const userPassword = new random.RandomPassword(name + "-password", {length: 12, special: false}).result;
    
        const role = new pgsql.Role(name, {login: true, password: userPassword}, {dependsOn: server, provider: pgProvider});
        const schema = new pgsql.Schema(name , {
            owner: name,
            policies: [
                {
                    role: role.name,
                    usage: true,
                    create: true
                }
            ],
        },
            {dependsOn: [server, role, databaseUsersNetworkRule], provider: pgProvider});
    g
    b
    b
    • 4
    • 28
  • c

    chilly-crayon-19101

    07/03/2020, 9:22 PM
    So hopefully something simple I have missed. I have stack written in typesceipt that contains an archive function app that I deploy. This happily deploys my .net functions. However I am finding the function app does not reflect any code updates unless it is restarted kinda expected I guess. Is there a neat way I could continuosly deploy and trigger the restart from within Pulumi?
    c
    • 2
    • 3
  • q

    quiet-hairdresser-18834

    07/03/2020, 11:56 PM
    Has anyone deployed Windows VMs and joined them to an Azure Active Directory Domain via code? I am not seeing much of anything of how to do this or if it is even possible
    c
    • 2
    • 9
  • m

    mysterious-australia-14256

    07/06/2020, 10:11 AM
    Hi All, When deploying an Azure App Service is there any way to mark an APPSETTING as being a slot setting? At the moment all of my APPSETTINGS are swapping whenever I swap slots which is breaking things.
    t
    p
    • 3
    • 5
  • f

    flat-bear-83490

    07/06/2020, 2:37 PM
    Does anyone know how to set the minimum TLS version on an Azure Storage account to 1.2 using Pulumi? Thanks!
  • b

    better-rainbow-14549

    07/07/2020, 11:18 AM
    trying to use vnet segregation on an eventhub.Namespace but the properties don't seem to exist, but they're there in the terraform provider. is there any timescale for supporting that? it exists on storage accounts and keyvaults etc.
    t
    • 2
    • 17
Powered by Linen
Title
b

better-rainbow-14549

07/07/2020, 11:18 AM
trying to use vnet segregation on an eventhub.Namespace but the properties don't seem to exist, but they're there in the terraform provider. is there any timescale for supporting that? it exists on storage accounts and keyvaults etc.
t

tall-librarian-49374

07/07/2020, 11:49 AM
Could you point me to the terraform property in question?
b

better-rainbow-14549

07/07/2020, 11:49 AM
https://www.terraform.io/docs/providers/azurerm/r/eventhub_namespace.html#network_rulesets
t

tall-librarian-49374

07/07/2020, 11:50 AM
They seem to be here https://www.pulumi.com/docs/reference/pkg/azure/eventhub/eventhubnamespace/#eventhubnamespacenetworkrulesets
b

better-rainbow-14549

07/07/2020, 11:50 AM
what on earth, ok sorry about that
dunno why typescript is throwing errors at me then
i've got 3.11.0 of the @pulumi/azure
t

tall-librarian-49374

07/07/2020, 11:51 AM
Are you using
azure.eventhub.EventHubNamespace
?
b

better-rainbow-14549

07/07/2020, 11:51 AM
new azure.eventhub.Namespace
i think the full name was deprecated?
t

tall-librarian-49374

07/07/2020, 11:52 AM
It’s a wrong one I believe, see the deprecation note. https://github.com/pulumi/pulumi-azure/blob/master/sdk/nodejs/eventhub/namespace.ts#L27
It used to be a Service Bus namespace (yes, it was a mess)
b

better-rainbow-14549

07/07/2020, 11:52 AM
ohhh that would probably explain it
t

tall-librarian-49374

07/07/2020, 11:53 AM
We’ll remove those classes at the next major version
b

better-rainbow-14549

07/07/2020, 11:53 AM
interesting because i swapped a lot of my code over to avoid the deprecation warning and they all seem to work still
like getEventHubNamespace -> getNamespace
ok i'll carry on using the EventHub* ones, thanks for that
t

tall-librarian-49374

07/07/2020, 11:54 AM
Right, it is confusing I admit
View count: 3