pulumi-community #azure

orange-dog-73995

10/05/2020, 11:31 AM

Hi Guys! I'm trying to rewrite my stack to azure nextgen. Have some questions on proper NSG config: made 2 security rules -

var rule1 = new SecurityRule("rule1", new Pulumi.AzureNextGen.Network.Latest.SecurityRuleArgs

SecurityRuleName = "RDP_3389",

...

});

var rule2 = new SecurityRule("rule2", new Pulumi.AzureNextGen.Network.Latest.SecurityRuleArgs

SecurityRuleName = "Port_6516",

...

});

and trying to make a List of them to use in NSG:

var securityRules = new List<Pulumi.AzureNextGen.Network.Latest.SecurityRuleArgs> { rule1, rule2 };

VSCode says that: Argument 1: cannot convert from 'Pulumi.AzureNextGen.Network.Latest.SecurityRule' to 'Pulumi.AzureNextGen.Network.Latest.SecurityRuleArgs' [Azure.WebServer]csharp(CS1503) What am I doing wrong, please?

orange-dog-73995

10/05/2020, 12:20 PM

And another question on NSG - how should we tie subnets to it in NextGen? Before it was like:

new SubnetNetworkSecurityGroupAssociation("assc1", new SubnetNetworkSecurityGroupAssociationArgs

{ NetworkSecurityGroupId = nsg.Id, SubnetId = Subnet1.Id });

orange-dog-73995

10/05/2020, 2:01 PM

And another question on associating Inbound Nat Rules to NICs, was :

var NetworkInterfaceNatRuleAssociation_aap = new NetworkInterfaceNatRuleAssociation("aap-nat-rule-to-nic", new NetworkInterfaceNatRuleAssociationArgs

{ NetworkInterfaceId = _VmNics[0].Id, IpConfigurationName = "Ipconfig1", NatRuleId = NatRule_aap.Id, });

mysterious-australia-14256

10/05/2020, 3:35 PM

Hi All, is there an example around of how to read and set secrets in an existing azure keyvault using azure nextgen?

important-carpet-93412

10/05/2020, 9:26 PM

Hi guys, I have an error with Azure Next gen and Azure Firewall. I receive the follow error but I don't have any idea. Everything it looks good to me, I have created a public static standard IP and I still receive this error: Code="AzureFirewallPublicIPNotProvided" Message="AzureFirewall azurefirewall references subnet /subscriptions/xxxxxxxxxxxxxxxxxxxxxxxxxxxx/resourceGroups/test-rg/providers/Microsoft.Network/virtualNetworks/vnethub936acd5b/subnets/AzureFirewallSubnet, but does not provide a PublicIP Address." Details=[] Any hint? This is part of the code: pip = azure_nextgen.network.latest.PublicIPAddress( "fwpip", public_ip_address_name="fwpip", resource_group_name=rg_name, public_ip_allocation_method="Static", location=location, sku = { "name": "Standard" } ) azure_firewall = azure_nextgen.network.latest.AzureFirewall("azureFirewall", application_rule_collections=[{ "name": "apprulecoll", }], azure_firewall_name="azurefirewall", ip_configurations=[{ "name": "azureFirewallIpConfiguration", "subnet": vnet.subnets[1], "public_ip_address": pip, }], location=location, nat_rule_collections=[{ "name": "natrulecoll", }], network_rule_collections=[{ "name": "netrulecoll", }], resource_group_name=rg_name, sku={ "name": "AZFW_VNet", "tier": "Standard", }, tags={ "key1": "value1", }, threat_intel_mode="Alert", zones=[])

wet-noon-14291

10/05/2020, 10:26 PM

Hello. I'm trying to sping up postgresql and following what is here: https://www.pulumi.com/docs/reference/pkg/azure/postgresql/configuration/ I manage to create the server, but the configuration fails with the message:

Code="ConfigurationNotExists" Message="The configuration '<name of resource>' does not exist for PostgreSQL server version <version number>."

I've tried both version 9.5 and 11. I'm using F#, but that shouldn't matter since I've basically done a 1-to-1 copy from the C# sample. Any idea what I should do to get configuration working?

mysterious-australia-14256

10/06/2020, 8:15 AM

Hi All, is it possible to get a vnet ID from a name and resource group using Azure Nextgen? I've been looking at the vnet docs but can't see a way to retrieve the ID.

mysterious-australia-14256

10/06/2020, 11:16 AM

Hi All, another question, is it possibly to use Pulumi to access multiple subscriptions within a single project? I have multiple Azure subscriptions within the same tenant and would like to be able to read secrets from a Key Vault in one subscription while deploying resources in another. I am logged in to the Azure CLI with an account that has access to both subscriptions though I have set the active subscription to be the one I am deploying resources in to. At the moment I am getting 404 errors when I try to use Pulumi.Azure.KeyVault.GetSecret to read a secret from a key vault in the other subscription. I'm not sure if this just isn't supported or if I am simply doing something wrong...?

bumpy-byte-21437

10/06/2020, 12:45 PM

hi all, question i am new to pulumi and created the below code

bumpy-byte-21437

10/06/2020, 12:45 PM

Copy code

import pulumi
config = pulumi.Config()
import pulumi_azure_nextgen as azure

#----------------------------------------------------------------------------------------
# Resourcegroups
#----------------------------------------------------------------------------------------

resource_group = azure.resources.latest.ResourceGroup("resourceGroup",
  location=(config.require('region')),
  resource_group_name="dkotst342")

#----------------------------------------------------------------------------------------
# Storage accounts
#----------------------------------------------------------------------------------------

storage_account = azure.storage.latest.StorageAccount("storageAccount",
  account_name=(config.require('sa_name')),
  allow_blob_public_access=False,
  is_hns_enabled=True,
  kind="StorageV2",
  location=(config.require('region')),
  minimum_tls_version="TLS1_2",
  enable_https_traffic_only=True,
  resource_group_name=resource_group.name,
  routing_preference={
    "publishInternetEndpoints": True,
    "publishMicrosoftEndpoints": True,
    "routingChoice": "MicrosoftRouting",
  },
  sku={
    "name": "Standard_GRS",
  },)

#----------------------------------------------------------------------------------------
# Storage containers
#----------------------------------------------------------------------------------------

blob_container = azure.storage.latest.BlobContainer("blobContainer",
  account_name=storage_account.name,
  container_name="container231",
  resource_group_name=resource_group.name)

#----------------------------------------------------------------------------------------
# Storage account management policy
#----------------------------------------------------------------------------------------

management_policy = azure.storage.latest.ManagementPolicy("managementPolicy",
    account_name=storage_account.name,
    management_policy_name="default",
    policy={
        "rules": [
            {
                "definition": {
                    "actions": {
                        "baseBlob": {
                            "delete": {
                                "daysAfterModificationGreaterThan": 1000,
                            },
                            "tierToArchive": {
                                "daysAfterModificationGreaterThan": 90,
                            },
                            "tierToCool": {
                                "daysAfterModificationGreaterThan": 30,
                            },
                        },
                    },
                    "filters": {
                        "blobTypes": [ "blockBlob" ],
                        "prefixMatch": [ "olcmtestcontainer2" ],
                    },
                },
                "enabled": True,
                "name": "dkotst",
                "type": "Lifecycle",
            },
        ],
    },
    resource_group_name=resource_group.name)

bumpy-byte-21437

10/06/2020, 12:46 PM

when i change something manually in the azure subscription pulumi says nothing changed?

bumpy-byte-21437

10/06/2020, 12:46 PM

is this correct behaviour?, since state is maintained right?

orange-dog-73995

10/06/2020, 1:21 PM

Please take a look on my LoadBalancer config:

Copy code

var publicIp = new PublicIPAddress("public-ip", new Pulumi.AzureNextGen.Network.Latest.PublicIPAddressArgs
        {
            PublicIpAddressName = "public-ip",
            Location = _resourceGroup.Location,
            ResourceGroupName = _resourceGroup.Name,
            PublicIPAllocationMethod = "Static"
        });

        var frontendIPConfiguration = new FrontendIPConfigurationArgs
        {
            Name = "PublicIPAddress",
            PublicIPAddress = new Pulumi.AzureNextGen.Network.Latest.Inputs.PublicIPAddressArgs
            {
                Id = publicIp.Id,
            }
        };

        var NatRuleArgs_dc = new Pulumi.AzureNextGen.Network.Latest.Inputs.InboundNatRuleArgs
        {
            Name = "dc_rdp",
            Protocol = "Tcp",
            FrontendPort = 33390,
            BackendPort = 3389,
            EnableTcpReset = false,
            FrontendIPConfiguration = new Pulumi.AzureNextGen.Network.Latest.Inputs.SubResourceArgs { Id = frontendIPConfiguration.Id },
        };
...//2 more rules
var NatRulesArgs = new List<Pulumi.AzureNextGen.Network.Latest.Inputs.InboundNatRuleArgs> { NatRuleArgs_dc, NatRuleArgs_aap, NatRuleArgs_vui };

        var loadBalancer = new LoadBalancer("LoadBalancer", new LoadBalancerArgs
        {
            LoadBalancerName = "LoadBalancer",
            ResourceGroupName = _resourceGroup.Name,
            Location = _resourceGroup.Location,
            FrontendIPConfigurations = frontendIPConfiguration,
            InboundNatRules = NatRulesArgs,
        });

pulumi up

it fails with following:

Copy code

error: Code="InvalidRequestFormat" Message="Cannot parse the request." Details=[{"code":"MissingJsonReferenceId","message":"Value for reference id is missing. Path properties.inboundNatRules[0].properties.frontendIPConfiguration."}

Apparently it fails to link frontendIPConfig to rule, but how to do that right, please?

rapid-oil-61997

10/07/2020, 5:54 PM

Hi, I have created a new issue in github regarding pulumi destroy. If somebody here has any suggestions, please let let me know. https://github.com/pulumi/pulumi-azure/issues/724

broad-dog-22463

10/08/2020, 6:57 PM

This issue has been resolved and version v3.24.1 has been released

high-scientist-88788

10/08/2020, 9:45 PM

Hey all 👋 Has anyone tried migrating their node pool using Pulumi on AKS? I created one node pool using the

Copy code

defaultNodePool

variable, and now have added an extra node pool and want to delete the original. Since you have to have the default node pool value (and if you try to change it you end up with trying to delete the whole cluster as a "replace") I'm not sure how to bin my original node pool

mysterious-australia-14256

10/09/2020, 10:48 AM

Hi All, I'm having trouble specifying the definition for a Logic App Workflow in C# as per Resource Workflow | Module logic | Package Azure NextGen | Pulumi. The Definition wants something of Pulumi.Input<object> but I haven't worked out the correct format. I have tried passing in a System.Text.Json.JsonElement created by Deserializing

{"$schema":"<https://schema.management.azure.com/providers/Microsoft.Logic/schemas/2016-06-01/workflowdefinition.json#>","actions":{},"parameters":{},"triggers":{},"contentVersion":"1.0.0.0","outputs":{}}

Without luck (I get an error saying that the property $schema wasn't found in the JSON (though I can access it via GetProperty("$schema")). Does anyone know the correct format? I've tried the example code from the above link but that won't build

orange-dog-73995

10/09/2020, 12:15 PM

Hi All! Trying to understand how to link Azure DSC configuration to a Node-VM? Can't locate this in documentation.

mysterious-australia-14256

10/09/2020, 4:16 PM

I am experiencing another strange issue today. I have an azure-nextgen project that is simply creating a new resource group with a bunch of tags assigned. Deployment works fine. If I go in to Azure and delete some of the Tags though and try to redeploy via "pulumi up -r" the tags aren't replaced and Pulumi reports that the 2 resources (the stack and the resource group) were unchanged. During the preview stage of the up process though I do see the attached message saying that the tags differ.

few-pillow-1133

10/10/2020, 8:15 PM

Hi, Has anyone had luck with creating certificate object for azure automation runbooks ...keep failing while trying to load the base64 cert

Copy code

with open('cert.cer'], 'rb') as auto_cert:
    automation_certificate_content = auto_cert.read()

automation_certificate = automation.Certificate(
    config_bie['certificate']['name'],
    name=config_bie['certificate']['name'],
    description=config_bie['certificate']['description'],
    base64=automation_certificate_content_base64, # fails here
    resource_group_name=rgazautopbie.name,
    automation_account_name=automation_account.name
)

orange-dog-73995

10/12/2020, 8:04 AM

While trying to setup a TeamServicesAgent VM extension with NextGen, got a strange error - perhaps not doing something right.. This is how I create it:

var pipeline_vui = new VirtualMachineExtension("pipeline-vui", new VirtualMachineExtensionArgs

VmExtensionName = "TeamServicesAgent",

Publisher = "Microsoft.VisualStudio.Services",

Location = _resourceGroup.Location,

ResourceGroupName = _resourceGroup.Name,

VmName = "vui",

Settings = new Dictionary<string, object>{

"AzureDevOpsOrganizationUrl", "<https://dev.azure.com/xxxxxxx>"

},

"TeamProject", "xxxx"

},

"DeploymentGroup", "Dev-Test environment"

},

"AgentName", "test-vui"

},

"Tags", "Test"

},

ProtectedSettings = new Dictionary<string, object>{

"PATToken", "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"

},

Type = "TeamServicesAgent",

TypeHandlerVersion = "1.0",

AutoUpgradeMinorVersion = true,

});

And error is: error: Code="VMExtensionProvisioningError" Message="VM has reported a failure when processing extension 'TeamServicesAgent'. Error message: \"The extension received an incorrect input. Please correct the input and try again. More details: AzureDevOpsOrganizationUrl should be specified.\"\r\n\r\nMore information on troubleshooting is available at https://aka.ms/vmextensionwindowstroubleshoot "

dazzling-oxygen-76309

10/12/2020, 12:33 PM

HI, I am trying out the Azure next-gen, and as i see is that it is very closely related to the ARM. This means that, compared to the old Azure Pulumi package, it is missing some features which makes my function deployment quite difficult. Currently i am struggling with uploading the code for my Azure Function so it can get run. I previously used the Azure.storage.Blob to upload and reference that (signed) from the Function. These resources do not exist i Azure next-gen or in the ARM templates, so does anyone have any idea how to achieve deployment of azure functions direction from Pulumi using Azure next-gen? 🙂

stale-ambulance-47721

10/13/2020, 12:09 AM

Hello, nextgen newb here. I need to create a linux VM which is backed up once a day. I can create the VM but l'm not sure what I need to do to back it up. I see likely API entries in

recoveryservices

, but I'm not sure what a minimal working config for that would look like and I don't see any relevant examples or docs. Any help appreciated.

wet-noon-14291

10/15/2020, 10:54 AM

What service principal is used when? My scenario: * I have logged in to

az cli

using service principal

since that is what will be used on the CI server to access blob storage and key vault for secrets. * In my

Pulumi.Dev.yaml

I have service principal

defined with

pulumi config set azure:clientId

Now when I try to run

pulumi up

I would expect

to be used to store state in blob storage as well as dealing with secrets, but service principal

to be used when creating the resources on Azure. However,

pulumi up

fails with the message that

doesn't have access to the resource group I'm trying to import.

shouldn't have access, so that is ok, but why is

used when I run

pulumi up

and not

since that is what I have defined in my stack config file?

cool-jewelry-33023

10/15/2020, 1:35 PM

Copy code

azure:appservice:AppService (qa-submission-api-v2):
    error: transport is closing

  pulumi:pulumi:Stack (project-name_v2-qa):
    error: update failed

    panic: interface conversion: interface {} is nil, not map[string]interface {}
    goroutine 188 [running]:
    <http://github.com/terraform-providers/terraform-provider-azurerm/azurerm/internal/services/web.expandAppServiceLogs(0x4798460|github.com/terraform-providers/terraform-provider-azurerm/azurerm/internal/services/web.expandAppServiceLogs(0x4798460>, 0xc0016c4d60, 0x4, 0x4798460, 0xc0016c4d60, 0x1)
        /home/runner/go/pkg/mod/github.com/pulumi/terraform-provider-azurerm@v1.41.1-0.20201008221637-389886a3bb0d/azurerm/internal/services/web/app_service.go:1382 +0xcb4
    <http://github.com/terraform-providers/terraform-provider-azurerm/azurerm/internal/services/web.resourceArmAppServiceUpdate(0xc0023c2d90|github.com/terraform-providers/terraform-provider-azurerm/azurerm/internal/services/web.resourceArmAppServiceUpdate(0xc0023c2d90>, 0x4923ca0, 0xc00130e840, 0x0, 0x0)
        /home/runner/go/pkg/mod/github.com/pulumi/terraform-provider-azurerm@v1.41.1-0.20201008221637-389886a3bb0d/azurerm/internal/services/web/resource_arm_app_service.go:487 +0x1c47
    <http://github.com/hashicorp/terraform-plugin-sdk/helper/schema.(*Resource).Apply(0xc000dad560|github.com/hashicorp/terraform-plugin-sdk/helper/schema.(*Resource).Apply(0xc000dad560>, 0xc00170cff0, 0xc001aac620, 0x4923ca0, 0xc00130e840, 0x1, 0xffffffffffffffff, 0x0)
        /home/runner/go/pkg/mod/github.com/hashicorp/terraform-plugin-sdk@v1.13.1/helper/schema/resource.go:316 +0x26a
    <http://github.com/hashicorp/terraform-plugin-sdk/helper/schema.(*Provider).Apply(0xc0000a0700|github.com/hashicorp/terraform-plugin-sdk/helper/schema.(*Provider).Apply(0xc0000a0700>, 0xc001b075e0, 0xc00170cff0, 0xc001aac620, 0x0, 0x0, 0x0)
        /home/runner/go/pkg/mod/github.com/hashicorp/terraform-plugin-sdk@v1.13.1/helper/schema/provider.go:294 +0xa0
    <http://github.com/pulumi/pulumi-terraform-bridge/v2/pkg/tfshim/sdk-v1.v1Provider.Apply(0xc0000a0700|github.com/pulumi/pulumi-terraform-bridge/v2/pkg/tfshim/sdk-v1.v1Provider.Apply(0xc0000a0700>, 0x5086b5b, 0x13, 0x5a482c0, 0xc00170cff0, 0x5a63540, 0xc001aac620, 0x0, 0x5a63540, 0xc001aac620, ...)
        /home/runner/go/pkg/mod/github.com/pulumi/pulumi-terraform-bridge/v2@v2.11.0/pkg/tfshim/sdk-v1/provider.go:97 +0xec
    <http://github.com/pulumi/pulumi-terraform-bridge/v2/pkg/tfbridge.(*Provider).Update(0xc0005af6c0|github.com/pulumi/pulumi-terraform-bridge/v2/pkg/tfbridge.(*Provider).Update(0xc0005af6c0>, 0x5a44b00, 0xc001732750, 0xc000c4ed80, 0xc0005af6c0, 0x4993001, 0xc001737100)
        /home/runner/go/pkg/mod/github.com/pulumi/pulumi-terraform-bridge/v2@v2.11.0/pkg/tfbridge/provider.go:957 +0x960
    <http://github.com/pulumi/pulumi/sdk/v2/proto/go._ResourceProvider_Update_Handler.func1(0x5a44b00|github.com/pulumi/pulumi/sdk/v2/proto/go._ResourceProvider_Update_Handler.func1(0x5a44b00>, 0xc001732750, 0x4d93740, 0xc000c4ed80, 0x4d7b320, 0x94e56a0, 0x5a44b00, 0xc001732750)
        /home/runner/go/pkg/mod/github.com/pulumi/pulumi/sdk/v2@v2.11.3-0.20201009201355-249140242ebb/proto/go/provider.pb.go:2280 +0x90
    <http://github.com/grpc-ecosystem/grpc-opentracing/go/otgrpc.OpenTracingServerInterceptor.func1(0x5a44b00|github.com/grpc-ecosystem/grpc-opentracing/go/otgrpc.OpenTracingServerInterceptor.func1(0x5a44b00>, 0xc000f15a40, 0x4d93740, 0xc000c4ed80, 0xc000fb6dc0, 0xc000fb6de0, 0x0, 0x0, 0x59c7520, 0xc000078fe0)
        /home/runner/go/pkg/mod/github.com/grpc-ecosystem/grpc-opentracing@v0.0.0-20180507213350-8e809c8a8645/go/otgrpc/server.go:57 +0x2f2
    <http://github.com/pulumi/pulumi/sdk/v2/proto/go._ResourceProvider_Update_Handler(0x4e4a200|github.com/pulumi/pulumi/sdk/v2/proto/go._ResourceProvider_Update_Handler(0x4e4a200>, 0xc0005af6c0, 0x5a44b00, 0xc000f15a40, 0xc00052eea0, 0xc0001ecaa0, 0x5a44b00, 0xc000f15a40, 0xc00171c000, 0x2003)
        /home/runner/go/pkg/mod/github.com/pulumi/pulumi/sdk/v2@v2.11.3-0.20201009201355-249140242ebb/proto/go/provider.pb.go:2282 +0x152
    <http://google.golang.org/grpc.(*Server).processUnaryRPC(0xc0005af500|google.golang.org/grpc.(*Server).processUnaryRPC(0xc0005af500>, 0x5a8bce0, 0xc000644900, 0xc0014f3400, 0xc000650300, 0x94a5378, 0x0, 0x0, 0x0)
        /home/runner/go/pkg/mod/google.golang.org/grpc@v1.30.0/server.go:1171 +0x511
    <http://google.golang.org/grpc.(*Server).handleStream(0xc0005af500|google.golang.org/grpc.(*Server).handleStream(0xc0005af500>, 0x5a8bce0, 0xc000644900, 0xc0014f3400, 0x0)
        /home/runner/go/pkg/mod/google.golang.org/grpc@v1.30.0/server.go:1494 +0xcd4
    <http://google.golang.org/grpc.(*Server).serveStreams.func1.2(0xc000b30150|google.golang.org/grpc.(*Server).serveStreams.func1.2(0xc000b30150>, 0xc0005af500, 0x5a8bce0, 0xc000644900, 0xc0014f3400)
        /home/runner/go/pkg/mod/google.golang.org/grpc@v1.30.0/server.go:834 +0xa8
    created by <http://google.golang.org/grpc.(*Server).serveStreams.func1|google.golang.org/grpc.(*Server).serveStreams.func1>
        /home/runner/go/pkg/mod/google.golang.org/grpc@v1.30.0/server.go:832 +0x20b

cool-jewelry-33023

10/15/2020, 1:35 PM

Hi all 🙂 Any ideas why am I getting this error when trying to update AppService AppSettings? I'm adding another key-value pair. I'm using Pulumi v2.12.0 and Pulumi.Azure Nuget 3.25.0 - I'm using C#.

icy-jordan-58549

10/15/2020, 6:49 PM

I am trying to create network.RecordSet (public) and I can’t make, it throws this error:

Copy code

azure-nextgen:network/latest:RecordSet (records):
    error: Code="ParentResourceNotFound" Message="Can not perform requested operation on nested resource. Parent resource '<http://test.io|test.io>' not found."

handsome-optician-50551

10/16/2020, 10:18 AM

Hello, started getting this error last night. My pipeline hasn't had this error previously and branches that I hadn't made changes in previously stoped working aswell. I am running the pip install -r requirements.txt before pulumi up and I've tried specifically reinstalling the protobuff after the pip install command but for some reason pulumi up doesn't find the module. Any ideas?

bumpy-byte-21437

10/16/2020, 1:28 PM

hi all, quesion does someone know how to loop properly from variable list specified in config

bumpy-byte-21437

10/16/2020, 1:28 PM

Copy code

config:
  azure:environment: public
  azure:location: westeurope
  pulumi_test2:sa_name:
  - shdjuik
  - jkpoyht
  - jmnsxap