Hello all! Newbie here. Thanks in advance for any help! I'm attempting to set a cname record (via pulumi) with an alias pointing to an azure CDN endpoint. Setting the CNAME record is no issue:

this.cnameRecord = new network.RecordSet(this.baseName, {
            cnameRecord: {
                cname: "<http://domain.io|domain.io>",
            },
            privateZoneName: "<http://domain.io|domain.io>",
            recordType: "CNAME",
            relativeRecordSetName: "recordCNAME",
            resourceGroupName: "<http://domain.io|domain.io>", 
            ttl: 3600,
        }, { parent: this.endpoint });

However, I seem unable to find any way to add an alias here. Prior to assure-native, this seems to have been done with 'targetResourceId: "some.endpoint"'. This doesn't exist in the azure-native RecordSetArgs interface. I'm hoping somebody could point me in the right direction. I've been trying to find some other way of doing it with no success. Thank you so much!

What’s the difference between the npm packages @pulumi/azure and @pulumi/azure-native?

I need to enable correlation for Azure Insights, azure.appinsights.Insights does not seem to have those properties. How do I do the following using pulumi?

// excerpt of the config section of the JavaScript SDK snippet with correlation
// between client-side AJAX and server requests enabled.
cfg: { // Application Insights Configuration
    instrumentationKey: "YOUR_INSTRUMENTATION_KEY_GOES_HERE"
    disableFetchTracking: false,
    enableCorsCorrelation: true,
    enableRequestHeaderTracking: true,
    enableResponseHeaderTracking: true,
    correlationHeaderExcludedDomains: ['<http://myapp.azurewebsites.net|myapp.azurewebsites.net>', '*.<http://queue.core.windows.net|queue.core.windows.net>']
    /* ...Other Configuration Options... */
}});

Basically I want distributed tracing where one pulumi projects calls another using http and I want to see that call as a line between them in the application map in insights.

Hi, I’ve successfully used Pulumi Typescript to setup an Azure Linux VM. I’d like see what ideas people have about automating the network security of the VM - in particular block port 80, open 443 - thought ip tables, or standing up an Azure Load balancer? Also wanted to setup a SSL certificate, again could be on the VM say in apache, with certbot/letsencrypt with temp DNS by http://xip.io/ or maybe this could be done on the loadbalancer. While I know I can/have written shell or Ansible scripts to do this on the VM, I was hoping there was a more elegant

Pulumic

way to automate this? Sorry if this scenario has been asked before, but I could not find an answer. Thanks in advance for any advice or pointers here.

When is run following in pulumi

import * as msRestNodeAuth from "@azure/ms-rest-nodeauth";

msRestNodeAuth.loginWithServicePrincipalSecret(
    "clientId", 
     "clientSecret", 
     "tenentId",
)

I get

Invalid client secret is provided

but it's running running fine standalone with node, someone have similiar problem?

Anyone know if it is possible to reference your `azure-native:subscriptionId`variable from the yaml config from inside code?

config.get(subscriptionId)

would only look under the context of the project name

As a part of our ongoing preparation to GA of the native Azure provider, we are considering a (hopefully last) major change: renaming modules away from direct ARM names to more common product-and-SDK-style names. For example,

CosmosDB

instead of

DocumentDB

, or splitting

Frontdoor

and

TrafficManager

from

Network

. I’d appreciate if you could read the issue below and 👍 if you think it’s a good idea or comment with any concerns. Thank you! https://github.com/pulumi/pulumi-azure-native/issues/690

Hi Everyone I hope you're doing well. I've only just started using Pulumi for the first time, looking to use it to help deploy a third party solution 14 websites, db, redis, solr among other things. I've setup a C# app to generate a ManagedCluster with windows and linux pools. No issues there, but I'm trying to understand how I can tell Kubernetes.Core.V1.Service / Kubernetes.Apps.V1.Deployment or ConfigGroup to use the ManagedCluster I've created. Trying to use those, the system tells me error: configured Kubernetes cluster is unreachable: unable to load Kubernetes client configuration from kubeconfig file: invalid configuration: no configuration has been provided, try setting KUBERNETES_MASTER environment variable I guess I need to pass the cluster into those things or expose the kubeconfig in some way? If anyone can give some advice or point me in the direction of some documentation it would be a big help.

Hi guys, what's the best way to have dependencies referenced within a ComponentResource? It's not clear from the documentation. Can I just pass Output parameters to my component's constructor? Basically I have a component that can either re-use a cosmosDB account or create a new one if none is provided.

you can definitely pass output parameters as inputs to new resources. Not 100% sure exactly what you mean here, but:

const rg = new azure.resource.ResourceGroup("myrg")
const newResource = new azure.resource({resourceGroup: rg.name, location: rg.location}) works beautifully, and ensures that newResource is dependent on rg :)

in this case I have a class that extends ComponenResource, would that work?

honestly, not sure what a ComponentResource is 😄

@glamorous-helmet-50600 I've tried to keep my ComponentResources true to the same pattern as the main pulumi resources. So I create an {name}Args object into the component resource file. That Args object contains all the things you depend on as

Output<T>

parameters. That's possibly specific to C# though

This is a bit.. wonky. I've got my test-infra resource group where i bring things up and down. I tore down aks ++, and now about to bring it up - but it fails immediately as it's about to start working. The reason is that this fails:

aksStack.cluster[thisCluster.name].kubeconfig = await azure.containerservice.listManagedClusterAdminCredentials({resourceGroupName: aksStack.parameters.name, resourceName: aksStack.cluster[thisCluster.name].parameters.name})

And the reason from the error message is that the cluster it refers to (in this case the one named

aks.paramters.name

) doesn't exist. Because of course it doesn't. I've tried using

aks.name

,

aks.name.apply(name => name)

, pulumi.interpolate`${aks.name}` (where aks is the result of the creation of the cluster resource) to try to ensure that there's a dependency - but it seems pulumi just doesn't care. I must be missing something obvious - and I can't set "dependsOn" for this either because it's not a resource, so.. thoughts?

what is the difference between

ManagedCluster

and

ContainerService

?

with

pulumi_azure_native.storage

, i'm unable to extract

account_name

from an

StorageAccount

for use in supplying the same field name for

FileShare

what's the azure-native equivalent of

az storage account show-connection-string

?

Anyone know how I can turn on and configure diagnostics on an AKS cluster? I see it for containerservice but not managedcluster..

any plans on making azure locations and AKS K8s versions available as enums (python)?

Has anyone experienced any issues with Azure Blob state storage recently? I've started seeing an error when Pulumi tries to write a checkpoint.json file, it throws this error - "This request is not authorized to perform this operation using this permission." initially I thought it was a SaS token issue, but the deployment is actually working and the state file gets written correctly, it just can't create the checkpoint file for some reason.

Has anyone tried to create a Serverless cosmosdb with azure native, or azure classic for that matter, specifically in C#?

What's people's ideas around PartitionKey setting for a Table (not SqlContainer) in Cosmos... it doesn't appear to be in the API... have people just integrated the SDK?

Not sure if this is something worth mentioning @tall-librarian-49374 but it's a bit confusing on the outputs... A FunctionApp URL can't change unless you delete it and rebuild it. Yet... any change to the function app in pulumi, and pulumi seems to think that's a possibility. It's not a "problem" in the stack, but the preview isn't great as anything that depends on something from the functionapp will now show as being changed, which is confusing.... Is that worth a ticket in github?

Hello, does anybody know how to use a specific version of a plugin from the CLI? The

import

using azuread 3.x branch is broken so I need to use a 2.6.x version; however, it’s a bit unpleasant to

rm

the latest version, install the 2.6.1, import, then install the latest 3.X over and over again any time I need to import something from AAD

How would you upload custom dependencies from node_modules used in an Azure function to Azure? Right now I have an inline function but I assume there is something similar in @pulumi/azure to how you could do it with AWS using assets. Is azure.appservice.ArchiveFunctionApp the one I want?

Hi 👋 I'm having trouble setting up a public dns-zone with azure native; and I'm uncertain where to ask for help. Is this the right place?

If not, sorry for bothering 🙂

Hi 😉 is it possible to get a role definition list like with the cli?

az role definition list

Hi everyone! What do you think is the best way to seed data into a cosmos container after its creation? Would it make sense to use myContainer.Apply(c => /*use the azure SDK here to insert data*/)?