pulumi-community #azure

azure

brainy-ocean-92780

01/14/2021, 7:30 PM

#azure I have multiple stacks; Dev, Test, Production. The Dev and Test stacks reference a shared stack; SharedStack, where they have a common AppConfiguration with keys and values that are designated to each stack by their label. Is there a way when standing up a new stack, say Performance, that would allow me to insert AppConfiguration records into the SharedStack while the Performance stack is stood up?

brainy-ocean-92780

01/14/2021, 7:31 PM

I assume I could do this via Azure Rest API, but would prefer to have Pulumi do it for me.

witty-market-32785

01/15/2021, 7:23 PM

Hi all! There's an way to enable https and set CustomHttpsConfiguration property of a FrontDoor using Pulumi? I found this ARM example but I can't found anything in docs and Pulumi2ARM can't convert.

brave-winter-60074

01/18/2021, 11:38 AM

How do you add rules to the cdn with pulumi? A rule that makes deeplinking in React possible when hosting on storage account and with a cdn in front with az cli i will write this -> # #create redirect url for 404 to index.html to enable deeplinking az cdn endpoint rule add -n “${random}cdnendpoint” -g $resourceGroupName --profile-name “${random}cdn” --rule-name sparewrite --order 2 --action-name “UrlRewrite” --source-pattern ‘/’ --destination /index.html --preserve-unmatched-path false --match-variable UrlFileExtension --operator LessThan

brave-winter-60074

01/18/2021, 2:55 PM

We cannot compile azure next gen doc the example usage of cdn in endpoint in our IDE (RIDER) The parameter section with sub arguments doesn’t work. Any Ideas? from this page… https://www.pulumi.com/docs/reference/pkg/azure-nextgen/cdn/endpoint/

prehistoric-nail-50687

01/18/2021, 7:42 PM

I use

operationalinsights.getWorkspace()

to get the id of a `Log Analytics workspace`:

const insightsWorkspaceId = operationalinsights
  .getWorkspace({
    resourceGroupName: `tal-env-ci`,
    workspaceName: `tal-logs`,
  })
  .then((w) => w.id);

and use it to create a new

DiagnosticSetting

new monitoring.DiagnosticSetting(
      `diagnostic-setting`,
      {
        name: `diagnostic-setting`,
        targetResourceId: app.id,
        logAnalyticsWorkspaceId: insightsWorkspaceId,
        logs: [ ...

This works fine, but for some reason, Pulumi wants to update the

DiagnosticSetting

with every single run (even if nothing changes in the whole stack). The reason seems to be, that

getWorkspace()

returns the the workspace ID with some characters in upper case, but when it gets saved, it changes to lowercase (see

Microsoft.OperationalInsights

~ logAnalyticsWorkspaceId: "/subscriptions/fd90a697-afda-4fdd-9b9e-2bdffe0d2601/resourceGroups/tal-env-ci/providers/Microsoft.OperationalInsights/workspaces/tal-logs" => "/subscriptions/fd90a697-afda-4fdd-9b9e-2bdffe0d2601/resourcegroups/tal-env-ci/providers/microsoft.operationalinsights/workspaces/tal-logs"

Is this a known problem, is there any way around it?

magnificent-television-29869

01/19/2021, 1:28 PM

Hi all Im new here, but been getting used to pulumi, and I do actually like it, however I am currently experiencing an issue with latest:listStorageAccountKeys where i get a 404, anyone have an ideer what to look for and what might actually be wrong ?

tall-needle-56640

01/19/2021, 5:42 PM

Is there a next gen equivalent for

Pulumi.Azure.Storage.Blob

? I can't find it in Pulumi or the Azure rest spec.

brave-winter-60074

01/20/2021, 2:45 PM

Should Pulumi be able to import swagger version 3 api’s in a api managment api. We get the following error?

rapid-oil-61997

01/21/2021, 5:10 PM

Hi, I have been facing a strange error when using pulumi cli. Has anyone of you encountered this before ?

$ pulumi up
 error: malformed resource value: id must be a string

brainy-ocean-92780

01/22/2021, 6:30 PM

#azure what is it about standing up a redisCache that takes so long? Is there a way to speed that up?

glamorous-helmet-50600

01/22/2021, 9:46 PM

For someone who's starting to use Pulumi to provision a platform on Azure, would you recommend using the next-gen provider or the terraform one?

fancy-jelly-61092

01/25/2021, 10:20 AM

I'm struggling to setup a reverseFqdn for a public IP address in Azure due to required order of operations. I want an IP address to point to a "vanity" domain FQDN, and the domain to be an A record. To do that I appear to need to 1) Create the IP address, 2) Setup the A record to point to the IP address, then finally 3) update the IP address with the FQDN. Of course, given declarative nature of Pulumi I cannot update the same resource in multiple places. How do I work around this? If it matters, I'm using the Terraform-based Azure provider

glamorous-helmet-50600

01/25/2021, 11:02 AM

Hi guys, is there any particular reason why creating a certificate resource using next-gen requires keyvault? The terraform provider allows to create based on a pfxblob (based64 encoded string), it didn't work for me tho

brave-winter-60074

01/25/2021, 12:50 PM

I tried importing a CDN Endpoint since I am not able to get the documentation example to compile from Azure Next-gen https://www.pulumi.com/docs/reference/pkg/azure-nextgen/cdn/endpoint/. But it seems it uses the same construct of nested objects which C# doesn’t like. Any ideas how to get this to work??

glamorous-helmet-50600

01/25/2021, 5:07 PM

Is it just me or the pulumi service won't show the links to the actual resources when they're created via next-gen?

glamorous-helmet-50600

01/25/2021, 11:12 PM

How do you guys normally manage your app settings when using Pulumi + Azure DevOps? I was trying to go for a hybrid approach where some settings would be set by pulumi (e.g., dependencies on other resources) and others by the pipeline. So far doesn't seem to be a good approach so I'd like to know how you guys do it.

red-lighter-44012

01/27/2021, 5:04 PM

Im looking at configuring an Azure FQDN for the kubernetes ingress. Something along those lines https://docs.microsoft.com/en-us/azure/aks/ingress-tls#add-an-a-record-to-your-dns-zone The question is, how can this be achieved using Pulumi? I need to retrieve the ingress IP somehow. And then update it and set the

dns name

. TL DR: How do I look up an existing k8s Service (LoadBalancer) created via a helm chart (ingress controller)?

faint-dog-16036

01/27/2021, 8:15 PM

Anyone else run into this? I'm trying to set the secrets provider to Azure key vault, and I get the following error:

error: open keeper <azurekeyvault://foo.vault.azure.net/keys/pulumi>: failed to Dial default KeyVault: Invoking Azure CLI failed with the following error:

There's no output after the

, even if I throw in like

--logtostderr -v=10

. This is with

AZURE_KEYVAULT_AUTH_VIA_CLI

set to

true

. If I don't have it set to true, the program just hangs when I try to switch.

brave-winter-60074

01/28/2021, 10:30 AM

Regarding API Management with azure next gen, should it be possible to import more than one openapi under the same path? Its possible in the console to import another function app api (openapi specced) under an all-ready existing API. But we cannot find out how to do this with pulumi. Our use case is that all apis will have the path /api and then each function aps openapi is imported in this. Pulumi code that fails if i use the same path. So that the Apis will have same path such as this:

<https://api-management-zg057f.azure-api.net/api/v1/customers/v1>
<https://api-management-zg057f.azure-api.net/api/v1/incidents/v1/{shortId}/comments>

brainy-ocean-92780

01/28/2021, 10:24 PM

Hello! I'm not sure if I'm missing something here, but is there a way to configure the "manage backup" settings and retention policies for a sql server database in Pulumi?

bitter-bear-28592

02/01/2021, 5:56 AM

Hello everyone, is there an easy way to copy over Connection Strings from one app service to another? Encountering the following type error:

glamorous-helmet-50600

02/01/2021, 12:58 PM

Is there a way to easily inspect what's going on when running

Pulumi up

? I'd like to be able to debug/step through but I'm not sure if/how this is possible.

glamorous-helmet-50600

02/01/2021, 3:08 PM

Using next-gen, after I create a storage account I have access to a PrimaryEndpoints property, but being an Output<EndpointsResponse> I can't access what I really want, which is the "Blob" property. What would be the appropriate way to retrieve that? doing myStgAccount.PrimaryEndpoints.Blob doesn't work and I've not came across any examples that would show how this is meant to be done. Thanks

glamorous-helmet-50600

02/01/2021, 9:54 PM

Hey guys I'm trying to create a CosmosDB account using next-gen but it looks like the DatabaseAccountOfferType property is not accepting a string as the example in the docs and it's not clear how to do it properly (IntelliSense not being very helpful).

✅ 1

fancy-umbrella-67692

02/01/2021, 11:12 PM

Anyone else ever seen this? pulumi😛roviders:azure (default_3_45_0): error: could not read plugin [C:\Users\[REDACTED]\.pulumi\plugins\resource-azure-v3.45.0\pulumi-resource-azure.exe] stdout: EOF I'm using TypeScript sdk NodeJS: 15.7.0 Pulumi: 2.19.0 Pulumi Azure Plugin: 3.45 To test it, I uninstalled NodeJs and Pulumi, rebooted, reinstalled both, latest versions. The did a

pulumi new

selected azure typescript, all the defaults, then

pulumi preview

and I get the above error. Related to this github issue I logged a while back: https://github.com/pulumi/pulumi-azure/issues/707

brainy-ocean-92780

02/02/2021, 10:45 PM

Soooooooooooooooo I'm trying to have an aliased database to switch from db name "A" to db name "B". I aliased them both to "C". This is outlined in the documentation here: https://www.pulumi.com/docs/intro/concepts/programming-model/#aliases However I get the following error: "error: post-step event returned an error: failed to normalize URN references:"

brainy-ocean-92780

02/03/2021, 4:12 PM

Okay new question, same scenario as the above. I now following the above process can see my resource being marked as "Replaced" however if I add table "T" to database "A" then perform the alias and replace with database "B", my table "T" goes away. So I'm curious what the purpose of alias is if it does not retain the resources internal composition?

boundless-airport-99052

02/03/2021, 5:04 PM

Hello. Do pulumi plan to support Microsoft Graph API ? Today, it’s the only way to manage Azure PIM (privileged identity management)

tall-needle-56640

02/04/2021, 9:07 PM

The arm2pulumi converter always assumes that the resource group already exists and generates:

var resourceGroupVar = Output.Create(GetResourceGroup.InvokeAsync(new GetResourceGroupArgs
{
    ResourceGroupName = resourceGroupNameParam,
}));

However, if the developer wants resource group creation to be part of their Pulumi stack, the obvious code would be

var resourceGroupVar = new ResourceGroup(...);

The problem is that these return different types,

Output<GetResourceGroupResult>

and

ResourceGroup

, so if I wanted to switch from one to the other, all the other generated code results in errors because

Output.Apply()

isn't needed (or allowed) anymore. Looking closer, I determine that I can do this to avoid the errors.

var resourceGroupVar = Output.Create(new ResourceGroup(...));

But I'd only want to code it this way to avoid rewriting the converted code. I'd much prefer to treat all my resources the same (i.e. The return object is not of type

Output<T>

. To be more consistent, would it be possible to create

GetResourceGroup.Invoke()

that returned type

GetResourceGroupResult

Title

tall-needle-56640

02/04/2021, 9:07 PM

The arm2pulumi converter always assumes that the resource group already exists and generates:

var resourceGroupVar = Output.Create(GetResourceGroup.InvokeAsync(new GetResourceGroupArgs
{
    ResourceGroupName = resourceGroupNameParam,
}));

However, if the developer wants resource group creation to be part of their Pulumi stack, the obvious code would be

var resourceGroupVar = new ResourceGroup(...);

The problem is that these return different types,

Output<GetResourceGroupResult>

and

ResourceGroup

, so if I wanted to switch from one to the other, all the other generated code results in errors because

Output.Apply()

isn't needed (or allowed) anymore. Looking closer, I determine that I can do this to avoid the errors.

var resourceGroupVar = Output.Create(new ResourceGroup(...));

But I'd only want to code it this way to avoid rewriting the converted code. I'd much prefer to treat all my resources the same (i.e. The return object is not of type

Output<T>

. To be more consistent, would it be possible to create

GetResourceGroup.Invoke()

that returned type

GetResourceGroupResult

sparse-park-68967

02/05/2021, 8:39 PM

Hey Dan. IIRC the arm2pulumi converter only generates the

invokeAsync

when location is not specified for resources in the arm templates and it tries to determine by querying the resource group. We are about to add support for inferring the default location from the resource group (i.e. fix https://github.com/pulumi/pulumi-azure-nextgen/issues/6 - should be in the next release) directly in the provider. In which case arm2pulumi would no longer generate the

invokeAsync

anymore and hopefully all other references can stick to the resource-group name instead. Are there other situations outside of location inference that the

invokeAsync

is being called for you?

tall-needle-56640

02/07/2021, 8:32 PM

I'm not sure that issue addresses this as the resource group location doesn't need to be present in ARM templates (we just use

resourcegroup().location

), but I'd be happy to require one in the config if it meant I could avoid

InvokeAsync

sparse-park-68967

02/08/2021, 6:17 PM

ah yes, sorry I missed the obvious

resourcegroup().location

use case - this will emit the

invokeAsync

. If you omit it in the arm template, invokeAsync will be avoided since the provider will take care of that resolution itself in the next release

👍 1

View count: 3