I was very surprised today, when I found out that the

azure-nextgen

provider is not OSS: https://github.com/pulumi/pulumi-azure-nextgen/issues/36 One of the drivers why we have chosen pulumi also was the fact that it is OSS, unfortunately today I noticed that the main component we use is actually not. I’m not yet sure how to deal with it and I need to talk to the whole team about it, but this was very unexpected 😞

Hi @prehistoric-nail-50687 The provider itself is open source but the code generation behind it is not What component are you specifically referring to?

Does the Azure Devops (NextGen or otherwise) allow creation of a yaml pipeline, like Pipelines - Create (Azure DevOps Pipelines) | Microsoft Docs describes? Pipelines only seem to be in the NextGen api, where the PipelineArgs requires a BootstrapConfiguration that references a template by ID rather than just a yaml file and repo folder

Why does

ResourceGroup.Get()

require an ID? I don't see it being used in the spec.

In ARM templates,

Microsoft.Web/sites

and

Microsoft.KeyVault/vaults/secrets

both have objects called

properties

. However, in AzureNextGen, they are not treated the same. In

WebApp

, the properties object disappears completely and all the sub-objects are brought up a level. However, in

Secret

(KeyVault), there is

SecretProperties

. Why are these treated differently? Could

SecretPropertiesArgs

just merge into

Secret

?

anyone seen this behavior?

failed creating container: containers.Client#Create: Failure sending request: StatusCode=409 -- Original Error: autorest/azure: Service returned an error. Status=<nil> Code="PublicAccessNotPermitted" Message="Public access is not permitted on this storage account.

very easy to replicate: 1. create storage account with no public blob access;

pulumi up

2. alter the code to update storage account with public blob access and create a container;

pulumi up

Hi, I’m running into errors using AzureNextGen dotnet, it appears that Pulumi is receiving a blank error from ARM. I have 2 examples related to APIM, creating an ApiPolicy resource and creating a ProductApi resource. The output from Pulumi is the same in both scenarios:

error: autorest/azure: error response cannot be parsed: "" error: EOF

verbose logging doesn’t reveal anything extra

provider received rpc error Unknown: autorest/azure: error response cannot be parsed: "" error: EOF

Does anybody know a way to debug further. Is there somewhere in the Azure portal maybe that can shed some light on what’s failing?

Hi, does anyone know how to configure / retrieve as

Output

either the

AccessKey

or a

Private Endpoint Connection

for an Azure App Config instance? https://www.pulumi.com/docs/reference/pkg/azure-nextgen/appconfiguration/configurationstore/

Hey Azure NextGen users, There is a proposal which deprecated the

Latest

modules and introduces top-level resources instead. I’d appreciate your feedback on it! See this GitHub comment: https://github.com/pulumi/pulumi-azure-nextgen/issues/169#issuecomment-777458268

Hi, Does anyone know how to remove OS disk on VM delete for Azure NextGen? Using old provider I able to set _delete_os_disk_on_termination_ but I didn’t found nothing related for NextGen.

Why would I be unable to delete an access policy? It just hangs for 30 min. It keeps querying for it not to be found, but it's always found, so it just keeps trying.

To those familiar with importing existing resources - does that resource get deleted if you end up deleting the stack?

Hey, does anyone know how to create a Serverless tier Azure SQL Database, any advice would be appreciated? I am trying to create an Azure SQL database with Serverless billing, however whilst I can set the 

Pulumi.Azure.Sql.DatabaseArgs.Edition

 property to "GeneralPurpose" I can't see how to set ComputeModel to serverless. Here is the equivalent Azure command line call:

New-AzSqlDatabase -ResourceGroupName $resourceGroupName -ServerName $serverName -DatabaseName $databaseName  -ComputeModel Serverless -Edition GeneralPurpose -ComputeGeneration Gen5  -MinVcore 0.5 -MaxVcore 2 -AutoPauseDelayInMinutes 720

 as per this page: https://docs.microsoft.com/en-gb/azure/azure-sql/database/serverless-tier-overview#use-powershell Thanks!

Im trying to implement a blob trigger for an Azure function and I thought I could use a BlobEventSubscription. I provide an Azure function but I struggle to find out how and when this function is triggered using the BlobEventSubscription. I haven’t found any documentation about this so I thought i’d ask here. I haven’t decided when it should be triggered yet but most likely at creation of the blob. Im using JavaScript for this btw. Should I perhaps use EventGrid instead?

What is the equivalent of

SharedAccessSignature.SignedBlobReadUrl

in NG?

Hello all, trying to import an existing AzureAD Application and getting the following error - `error: azuread:index/application:Application resource 'test' has a problem: ExactlyOne: "display_name": one of

display_name,name

must be specified` `error: azuread:index/application:Application resource 'test' has a problem: ExactlyOne: "name": one of

display_name,name

must be specified`

error: Preview failed: one or more inputs failed to validate

Are there any examples of how to use c# to create

Azure Roles Assignments

for a resource? For Example: in the portal I can, from the Access Control blade for a database server, assigned the role of SQL DB Contributor to an App service) Thanks!

Hi everyone, we seem to get an error that has not existed earlier today in our Azure devops pipelines, Pulumi fails to do a dotnet restore and accessing our nuget packages. Has something changed today? We think we haven’t changed anything but may be wrong 🙂 We are using Azure nextgen by the way

Has anyone experienced issues creating new postgres server and then creating new databases and users at once? I get an

no pg_hba.conf entry for host...

error on a freshly provisioned server (in the same pulumi stack). If I then run pulumi up again, everything passes and I can create the database users (postgres roles) and their grants. It seems that the firewall rule im applying (allowing connectivity) gets applied / created too late.

Is there a way to the aks cluster config within a pulumi program for the service principal in use? Or do I have to get the config using the cli with

az aks get-credentials?

before running pulumi?

Is there a way to pass the name of an application being created (ex, a web app service) to its own app settings during creation?

Is there a way to upload files directly to a WebApp's storage instead of having to push the deployment file into a separate storage account?

Hello, is there a way how to purge keyvault secret with azure-nextgen?

I had to change my Azure Subscriptions after building a stack. So logged in the azure CLI again, blew away the stack (

pulumi stack rm <value>

) However i get a message saying it's still trying to use the old subscription:

azure-nextgen:resources:ResourceGroup (resourceGroup): error: autorest/azure: Service returned an error. Status=<nil> Code="ReadOnlyDisabledSubscription" Message="The subscription is disabled and therefore marked as read only. You

cannot perform any write actions on this subscription until it is re-enabled."

Is there anywhere else the old subscription is cached?

hi guys, wander if someone can help.? I'm trying to do a poc storing pulumi state into azure blob storage, but having issues with it not recognizing the account name I've setup in env variables....

RESOURCE_GROUP_NAME=rg-name
AZURE_STORAGE_ACCOUNT=sa-account-name
STORAGE_CONTAINER_NAME="pulumi-state"
CONNECTION_STRING=$(az storage account show-connection-string -n "$AZURE_STORAGE_ACCOUNT" -g $RESOURCE_GROUP_NAME -o tsv)
az storage container create -n "$STORAGE_CONTAINER_NAME" --connection-string "$CONNECTION_STRING"

- generate a sas token

end=`date -u -d "30 minutes" '+%Y-%m-%dT%H:%MZ'`
AZURE_STORAGE_SAS_TOKEN = $(az storage account generate-sas --permissions cdlruwap --account-name "$AZURE_STORAGE_ACCOUNT" --services qt --resource-types sc --expiry "$end" --output tsv)

this is the error am getting: /azdo_projects$ pulumi login azblob://pulumi-state error: problem logging in: unable to open bucket azblob://pulumi-state: azureblob.OpenBucket: accountName is required followed this example here but no luck : https://woivre.com/blog/2020/02/pulumi-store-your-state-in-azure-storage

we are migrating to

next-gen

in our Typescript project and can’t find any mention of

Certificate

under

keyvault

. does it live somewhere else now? this used to be under

azure.keyvault.Certificate

new keyvault lib: https://github.com/pulumi/pulumi-azure-nextgen/tree/master/sdk/nodejs/keyvault/latest old keyvault lib: https://github.com/pulumi/pulumi-azure/tree/master/sdk/nodejs/keyvault

Is there any way to update an existing resource without having Pulumi own it? I am trying to create an Azure App Service certificate, which requires adding an entry to a TXT record in DNS, however this TXT record already exists, with entries added already, and will continue to be updated outside of Pulumi so it's not practical to have this managed in Pulumi state

Hi, we have an issue with Event Grid (using Pulumi Azure nextgen) and topic subscriptions. Is there a way to conditionally test whether a given function (our event grid listener) is deployed before creating the subscription. Our code that create the subscription is here, and it fails due to the fact that the actual function is deployed in our Azure Devops CI/CD pipeline after running Pulumi up on a microservice

var viewUpdatesSubscription = new EventSubscription("viewUpdatesSubscription", new EventSubscriptionArgs
{
    Destination = new AzureFunctionEventSubscriptionDestinationArgs()
    {
        EndpointType = EndpointType.AzureFunction.ToString(),
        MaxEventsPerBatch = 1,
        ResourceId =
            signalrNegotiator.FunctionAppResourceId.Apply(
                id => $"{id}/functions/ViewUpdatesTopicSubscriber"),
    },
    EventSubscriptionName = coreRandomSuffix.Apply(random => $"view-updates-subscription-{random}"),
    Scope = viewUpdatesTopicId, // eventSubscriptionScope,
});