Hi all! There's an way to enable https and set CustomHttpsConfiguration property of a FrontDoor using Pulumi? I found this ARM example but I can't found anything in docs and Pulumi2ARM can't convert.

How do you add rules to the cdn with pulumi? A rule that makes deeplinking in React possible when hosting on storage account and with a cdn in front with az cli i will write this -> # #create redirect url for 404 to index.html to enable deeplinking az cdn endpoint rule add -n “${random}cdnendpoint” -g $resourceGroupName --profile-name “${random}cdn” --rule-name sparewrite --order 2 --action-name “UrlRewrite” --source-pattern ‘/’ --destination /index.html --preserve-unmatched-path false --match-variable UrlFileExtension --operator LessThan

We cannot compile azure next gen doc the example usage of cdn in endpoint in our IDE (RIDER) The parameter section with sub arguments doesn’t work. Any Ideas? from this page… https://www.pulumi.com/docs/reference/pkg/azure-nextgen/cdn/endpoint/

I use

operationalinsights.getWorkspace()

to get the id of a `Log Analytics workspace`:

const insightsWorkspaceId = operationalinsights
  .getWorkspace({
    resourceGroupName: `tal-env-ci`,
    workspaceName: `tal-logs`,
  })
  .then((w) => w.id);

and use it to create a new

DiagnosticSetting

new monitoring.DiagnosticSetting(
      `diagnostic-setting`,
      {
        name: `diagnostic-setting`,
        targetResourceId: app.id,
        logAnalyticsWorkspaceId: insightsWorkspaceId,
        logs: [ ...

This works fine, but for some reason, Pulumi wants to update the

DiagnosticSetting

with every single run (even if nothing changes in the whole stack). The reason seems to be, that

getWorkspace()

returns the the workspace ID with some characters in upper case, but when it gets saved, it changes to lowercase (see

Microsoft.OperationalInsights

):

~ logAnalyticsWorkspaceId: "/subscriptions/fd90a697-afda-4fdd-9b9e-2bdffe0d2601/resourceGroups/tal-env-ci/providers/Microsoft.OperationalInsights/workspaces/tal-logs" => "/subscriptions/fd90a697-afda-4fdd-9b9e-2bdffe0d2601/resourcegroups/tal-env-ci/providers/microsoft.operationalinsights/workspaces/tal-logs"

Is this a known problem, is there any way around it?

Hi all Im new here, but been getting used to pulumi, and I do actually like it, however I am currently experiencing an issue with latest:listStorageAccountKeys where i get a 404, anyone have an ideer what to look for and what might actually be wrong ?

Is there a next gen equivalent for

Pulumi.Azure.Storage.Blob

? I can't find it in Pulumi or the Azure rest spec.

Should Pulumi be able to import swagger version 3 api’s in a api managment api. We get the following error?

Hi, I have been facing a strange error when using pulumi cli. Has anyone of you encountered this before ?

$ pulumi up
 error: malformed resource value: id must be a string

#azure what is it about standing up a redisCache that takes so long? Is there a way to speed that up?

For someone who's starting to use Pulumi to provision a platform on Azure, would you recommend using the next-gen provider or the terraform one?

I'm struggling to setup a reverseFqdn for a public IP address in Azure due to required order of operations. I want an IP address to point to a "vanity" domain FQDN, and the domain to be an A record. To do that I appear to need to 1) Create the IP address, 2) Setup the A record to point to the IP address, then finally 3) update the IP address with the FQDN. Of course, given declarative nature of Pulumi I cannot update the same resource in multiple places. How do I work around this? If it matters, I'm using the Terraform-based Azure provider

Hi guys, is there any particular reason why creating a certificate resource using next-gen requires keyvault? The terraform provider allows to create based on a pfxblob (based64 encoded string), it didn't work for me tho

I tried importing a CDN Endpoint since I am not able to get the documentation example to compile from Azure Next-gen https://www.pulumi.com/docs/reference/pkg/azure-nextgen/cdn/endpoint/. But it seems it uses the same construct of nested objects which C# doesn’t like. Any ideas how to get this to work??

Is it just me or the pulumi service won't show the links to the actual resources when they're created via next-gen?

How do you guys normally manage your app settings when using Pulumi + Azure DevOps? I was trying to go for a hybrid approach where some settings would be set by pulumi (e.g., dependencies on other resources) and others by the pipeline. So far doesn't seem to be a good approach so I'd like to know how you guys do it.

Im looking at configuring an Azure FQDN for the kubernetes ingress. Something along those lines https://docs.microsoft.com/en-us/azure/aks/ingress-tls#add-an-a-record-to-your-dns-zone The question is, how can this be achieved using Pulumi? I need to retrieve the ingress IP somehow. And then update it and set the

dns name

. TL DR: How do I look up an existing k8s Service (LoadBalancer) created via a helm chart (ingress controller)?

Anyone else run into this? I'm trying to set the secrets provider to Azure key vault, and I get the following error:

error: open keeper <azurekeyvault://foo.vault.azure.net/keys/pulumi>: failed to Dial default KeyVault: Invoking Azure CLI failed with the following error:

There's no output after the

:

, even if I throw in like

--logtostderr -v=10

. This is with

AZURE_KEYVAULT_AUTH_VIA_CLI

set to

true

. If I don't have it set to true, the program just hangs when I try to switch.

Regarding API Management with azure next gen, should it be possible to import more than one openapi under the same path? Its possible in the console to import another function app api (openapi specced) under an all-ready existing API. But we cannot find out how to do this with pulumi. Our use case is that all apis will have the path /api and then each function aps openapi is imported in this. Pulumi code that fails if i use the same path. So that the Apis will have same path such as this:

<https://api-management-zg057f.azure-api.net/api/v1/customers/v1>
<https://api-management-zg057f.azure-api.net/api/v1/incidents/v1/{shortId}/comments>

Hello! I'm not sure if I'm missing something here, but is there a way to configure the "manage backup" settings and retention policies for a sql server database in Pulumi?

Hello everyone, is there an easy way to copy over Connection Strings from one app service to another? Encountering the following type error:

Is there a way to easily inspect what's going on when running

Pulumi up

? I'd like to be able to debug/step through but I'm not sure if/how this is possible.

Using next-gen, after I create a storage account I have access to a PrimaryEndpoints property, but being an Output<EndpointsResponse> I can't access what I really want, which is the "Blob" property. What would be the appropriate way to retrieve that? doing myStgAccount.PrimaryEndpoints.Blob doesn't work and I've not came across any examples that would show how this is meant to be done. Thanks

Hey guys I'm trying to create a CosmosDB account using next-gen but it looks like the DatabaseAccountOfferType property is not accepting a string as the example in the docs and it's not clear how to do it properly (IntelliSense not being very helpful).

Anyone else ever seen this? pulumiprovidersazure (default_3_45_0): error: could not read plugin [C:\Users\[REDACTED]\.pulumi\plugins\resource-azure-v3.45.0\pulumi-resource-azure.exe] stdout: EOF I'm using TypeScript sdk NodeJS: 15.7.0 Pulumi: 2.19.0 Pulumi Azure Plugin: 3.45 To test it, I uninstalled NodeJs and Pulumi, rebooted, reinstalled both, latest versions. The did a

pulumi new

selected azure typescript, all the defaults, then

pulumi preview

and I get the above error. Related to this github issue I logged a while back: https://github.com/pulumi/pulumi-azure/issues/707

Soooooooooooooooo I'm trying to have an aliased database to switch from db name "A" to db name "B". I aliased them both to "C". This is outlined in the documentation here: https://www.pulumi.com/docs/intro/concepts/programming-model/#aliases However I get the following error: "error: post-step event returned an error: failed to normalize URN references:"

Okay new question, same scenario as the above. I now following the above process can see my resource being marked as "Replaced" however if I add table "T" to database "A" then perform the alias and replace with database "B", my table "T" goes away. So I'm curious what the purpose of alias is if it does not retain the resources internal composition?

Hello. Do pulumi plan to support Microsoft Graph API ? Today, it’s the only way to manage Azure PIM (privileged identity management)

The arm2pulumi converter always assumes that the resource group already exists and generates:

var resourceGroupVar = Output.Create(GetResourceGroup.InvokeAsync(new GetResourceGroupArgs
{
    ResourceGroupName = resourceGroupNameParam,
}));

However, if the developer wants resource group creation to be part of their Pulumi stack, the obvious code would be

var resourceGroupVar = new ResourceGroup(...);

The problem is that these return different types,

Output<GetResourceGroupResult>

and

ResourceGroup

, so if I wanted to switch from one to the other, all the other generated code results in errors because

Output.Apply()

isn't needed (or allowed) anymore. Looking closer, I determine that I can do this to avoid the errors.

var resourceGroupVar = Output.Create(new ResourceGroup(...));

But I'd only want to code it this way to avoid rewriting the converted code. I'd much prefer to treat all my resources the same (i.e. The return object is not of type

Output<T>

. To be more consistent, would it be possible to create

GetResourceGroup.Invoke()

that returned type

GetResourceGroupResult

.

I was very surprised today, when I found out that the

azure-nextgen

provider is not OSS: https://github.com/pulumi/pulumi-azure-nextgen/issues/36 One of the drivers why we have chosen pulumi also was the fact that it is OSS, unfortunately today I noticed that the main component we use is actually not. I’m not yet sure how to deal with it and I need to talk to the whole team about it, but this was very unexpected 😞

Hi @prehistoric-nail-50687 The provider itself is open source but the code generation behind it is not What component are you specifically referring to?