pulumi-community #azure

Channels

azure

white-match-80969

06/26/2021, 7:26 PM

Hi All! I can't seem to find a way to create App Service Managed Certificates using the newer Azure-Native API's (specifically in C#). In the older Azure API's there is a ManagedCertificate class, but it does not seem to exist in the new Azure-Native API's. I have found Certificate and WebAppPublicCertificate, but neither of these seem support the same use case. Can anyone provide any guidance on how to create App Service Managed Certificates on Azure-Native?

incalculable-printer-98305

06/28/2021, 3:53 AM

Hi All, unable to create state in azure blob.. Getting this error stack name: (dev) Sorry, could not create stack ‘dev’: could not create stack: An IO error occurred while writing the new snapshot file: blob (key “.pulumi/stacks/dev.json”) (code=Unknown): write error: -> github.com/Azure/azure-storage-blob-go/azblob.newStorageError, /Users/brew/Library/Caches/Homebrew/go_mod_cache/pkg/mod/github.com/!azure/azure-storage-blob-go@v0.13.0/azblob/zc_storage_error.go:42 ===== RESPONSE ERROR (ServiceCode=InvalidResourceName) ===== Description=The specifed resource name contains invalid characters. RequestId:14ac4b96-d01e-0129-05d0-6b0ac5000000 Time:2021-06-28T03:49:25.6010176Z, Details: Code: InvalidResourceName PUT https://securitydatabricks.blob.core.windows.net/securitydatabricks.blob.core.windows.net/securityaudit/.pulumi/stacks/dev.json?blockid=iWNUqgnHTOG%2FSRSfaF%2Fo7gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA%3D%3D&comp=block&timeout=61 Authorization: REDACTED Content-Length: [70] User-Agent: [go-cloud/blob/0.1.0 Azure-Storage/0.13 (go1.16.5; darwin)] X-Ms-Client-Request-Id: [b75d64ef-6480-4425-4e0a-6053b7173af0] X-Ms-Date: [Mon, 28 Jun 2021 03:49:25 GMT] X-Ms-Version: [2019-12-12]

mysterious-australia-14256

06/29/2021, 10:36 AM

Are there any dedicated modules to assist with creating an Azure Logic App Custom Connector or will I need to use a template deployment?

enough-butcher-66045

06/30/2021, 9:20 AM

Hey peeps, any real world examples of using WebAppFunction?

enough-butcher-66045

06/30/2021, 9:21 AM

I've gotten to the point where I can create a Function App and run it from a package -- but I'd like to be able to actually see the code and use the "test" functionality that you get with the functions

enough-butcher-66045

06/30/2021, 9:24 AM

I'm talking about this https://www.pulumi.com/docs/reference/pkg/azure-native/web/webappfunction/

enough-butcher-66045

06/30/2021, 9:51 AM

just to add to this... Whenever I try to create a new WebAppFunction I'm getting this.

azure-native:web:WebAppFunction (post-to-slack):
    error: Code="BadRequest" Message="Encountered an error (InternalServerError) from host runtime." Details=[{"Message":"Encountered an error (InternalServerError) from host runtime."},{"Code":"BadRequest"},{"ErrorEntity":{"Code":"
BadRequest","Message":"Encountered an error (InternalServerError) from host runtime."}}]

I'm trying this out (the ScriptRootPathHref is optional, gives me the same error without it)

var waf = new WebAppFunction("post-to-slack", new WebAppFunctionArgs
            {
                ResourceGroupName = rg.Name,
                Name = app.Name,
                FunctionName = "post-to-slack",
                Language = "node",
                FunctionAppId = "post-to-slack",
                ScriptRootPathHref = codeBlobUrl
            });

Not sure how to proceed, any help would be appreciated

enough-butcher-66045

06/30/2021, 10:43 AM

alright, after banging my head for a while, the problem was that I wasn't passing the configs in the right format. I compared the

pulumi import

result vs what I was sending and this is the right syntax for the Config:

Config = new Dictionary<string, Dictionary<string, string>[]>
                {
                    {
                        "bindings", new[]
                        {
                            new Dictionary<string, string>
                            {
                                {"authLevel", "function"},
                                {"direction", "in"},
                                {"name", "req"},
                                {"type", "httpTrigger"},
                            },
                            new Dictionary<string, string>
                            {
                                {"direction", "out"},
                                {"name", "res"},
                                {"type", "http"}
                            }
                        }
                    },
                },

enough-butcher-66045

06/30/2021, 11:46 AM

alright, for anyone else struggling with this... The trick is in the

Files

property.

victorious-exabyte-70545

06/30/2021, 10:21 PM

Anyone have experience adding an extension to an app service webapp with Pulumi?

victorious-exabyte-70545

06/30/2021, 10:21 PM

I am getting

error: Code="Failed" Message="The async operation failed."

victorious-exabyte-70545

06/30/2021, 10:23 PM

# WebAppSiteExtension(
#    f"my-site-extension",
#    name=""mysitename",
#    resource_group_name=resource_group.name,
#    site_extension_id="Datadog.AzureAppServices.DotNet",
#    opts=ResourceOptions(
#        depends_on=[app_service],
#        parent=app_service
#    )
# )

victorious-exabyte-70545

06/30/2021, 10:23 PM

Any help is appreciated.

future-kite-91191

07/01/2021, 4:13 AM

Hi! What is the best way to build & push a Dockerfile to Azure Container Registry that does NOT have AdminUserEnabled? (So only RBAC available in ACR)

cold-rocket-79504

07/01/2021, 1:54 PM

Hi, I've been using the network modules to build azure network environments - vnets, subnets, route tables etc, but I'm getting a spurious error when using the SubnetRouteTableAssociation resource. I wont include my code here, as the example itself on the pulumi gives the same error also, even when my stack file has no additional variables. The code I'm using is directly copied from https://www.pulumi.com/docs/reference/pkg/azure/network/subnetroutetableassociation/ and the error I'm getting is 'error: Exception calling application: 'NoneType' object has no attribute 'islower'' Has anyone seen this before?

glamorous-lifeguard-90201

07/02/2021, 12:09 AM

I have the following piece of code (taken from pulumi/examples/azure-ts-webserver): const networkInterface = new network.NetworkInterface(“server-nic”, { resourceGroupName, ipConfigurations: [{ name: “webserveripcfg”, subnet: { id: virtualNetwork.subnets[0].id }, privateIPAllocationMethod: network.IPAllocationMethod.Dynamic, publicIPAddress: { id: publicIp.id }, }], }); and it results in the error below. Someone can help me to understand how I should solve this?

glamorous-lifeguard-90201

07/02/2021, 12:09 AM

It is this line that causes the error: subnet: { id: virtualNetwork.subnets[0].id },

cool-egg-852

07/02/2021, 6:41 PM

Does anyone know how to use a

kubeconfig

per the examples given from a

ManagedCluster

as an input to a provider when using

aad

integration? When trying this, we end up with a URL for devicelogin we need to go to and enter a code in, but this doesn’t work for automation.

lemon-chef-20322

07/04/2021, 2:22 AM

Hi there. I just opened this issue. My question for this group is what the policy is for supporting the latest Azure API endpoints. I get that it's a tricky thing since there may be breaking changes.

mysterious-australia-14256

07/05/2021, 11:57 AM

Does anyone know how I can store an object of type Dictionary<string,object> in a YAML config file so that I can deserialize it into a dictionary using Pulumi.Config.RequireObject? For example my POCO class contains a property

public Dictionary<string, CustomApiConnectionParameterModel> ConnectionParameters { get; set; } = new Dictionary<string, CustomApiConnectionParameterModel>();

At the moment CustomApiConnectionParameterModel just looks like this

public class CustomApiConnectionParameterModel
{
    public CustomApiConnectionType Type { get; set; }
}

I want to be able to store a bunch of dictionary items as yaml so that I can pull them in.

mysterious-australia-14256

07/05/2021, 1:11 PM

When I create a Logic Apps Custom Connector in the portal there is the option to tell it to use an on-prem data gateway. If I export the created template I see the following "gateway" entry under connectionParameters

"resources": [
        {
            "type": "Microsoft.Web/customApis",
            "apiVersion": "2016-06-01",
            "name": "[parameters('customApis_tesconnector_name')]",
            "location": "uksouth",
            "properties": {
                "connectionParameters": {
                    "gateway": {
                        "type": "gatewaySetting",
                        "gatewaySettings": {
                            "dataSourceType": "CustomConnector",
                            "connectionDetails": []
                        },
                        "uiDefinition": {
                            "constraints": {
                                "tabIndex": 4,
                                "required": "true",
                                "capability": [
                                    "gateway"
                                ]
                            }
                        }
                    }
                },
                "brandColor": "#023169",
                "description": "Test Connector",
                "displayName": "[parameters('customApis_tesconnector_name')]",
                "iconUri": ""
            }
        }
    ]

Is it possible to achieve this with Pulumi. I have been looking at https://www.pulumi.com/docs/reference/pkg/azure-native/web/customapi/ but can't see how to do it. Note I am not trying to create a Gateway (which I believe is what https://www.pulumi.com/docs/reference/pkg/azure-native/web/connectiongateway/ is for) as we already have one, I just need to tell the connector to use one.

mysterious-australia-14256

07/05/2021, 9:34 PM

When I create a Logic App Connection I am able to specify ParameterValues as a Dictionary<string,string> as per the Pulumi docs

"parameterValues": {
          "authType": "[parameters('authType')]",
          "gateway": {
            "id": "[parameters('gateway_id')]"
          }
        }

I am currently trying to create a connection that depends on an on-prem data gateway. If I create this connection using the Logic App Designer in Visual Studio I can see the associated parameterValues as

"parameterValues": {
          "authType": "[parameters('authType')]",
          "gateway": {
            "id": "[parameters('gateway_id')]"
          }
        }

Does this mean that the parameterValues dictionary presented by Pulumi should be Dictionary<string,object> rather than Dictionary<string,string>? If not, how can I specify the gateway reference with the associated ID as depicted above? Thanks Alan

mysterious-australia-14256

07/06/2021, 9:42 AM

After using Pulumi.AzureNative.Resources.Deployment to deploy an ARM template, do I need to import the created resources so that Pulumi knows about them? Does Pulumi know about the objects it creates as part of an ARM template deployment? At the moment If I change the name of one of the objects being deployed (via the Parameters property in DeploymentPropertiesArgs), Pulumi creates a new version of the object but doesn't delete the original. Is this just one of the downsides of using a template to deploy rather than the native Pulumi commands?

enough-butcher-66045

07/07/2021, 3:31 AM

👋 if I want to rename a resource group (which I understand is not possible in Azure), is there a way Pulumi can help me with MOVING the resources to a different resource group instead of deleting/recreating?

mysterious-australia-14256

07/07/2021, 8:14 AM

How do I retrieve a secret from a KeyVault with AzureNative? The GetSecret method of the KeyVault module looked promising but the description for the Value property of SecretPropertiesResponse states The value of the secret. NOTE: ‘value’ will never be returned from the service, as APIs using this model are is intended for internal use in ARM deployments. Users should use the data-plane REST service for interaction with vault secrets. and this is what I am finding with my tests.

hundreds-optician-54090

07/07/2021, 12:15 PM

Has anyone resolved this error when working with resources in an alternative (government) Azure cloud?

Confidential Client is not supported in Cross Cloud request.

I've tried setting an

AZURE_AUTHORITY_HOST="<https://login.microsoftonline.us>"

environment variable to no effect. 🙁

icy-jordan-58549

07/07/2021, 4:36 PM

Resource type azure:keyvault/accessPolicy:AccessPolicy

any ideas what could cause this issue?

flaky-school-82490

07/07/2021, 7:50 PM

Opened this ticket to report missing Azure coverage in the Pulumi AzureAd API: https://github.com/pulumi/pulumi-azuread/issues/174 @tall-librarian-49374 do you think it would be a straightforward fix?

handsome-state-59775

07/09/2021, 5:10 AM

Is there a way to use use the AKS specialized GPU image with a node pool? I'm using Python.

limited-carpenter-34991

07/12/2021, 12:23 PM

Is there a mapping for azure-native namespaces and its resources/objects in corresponce to the azure resources ?

Title

limited-carpenter-34991

07/12/2021, 12:23 PM

Is there a mapping for azure-native namespaces and its resources/objects in corresponce to the azure resources ?

tall-librarian-49374

07/12/2021, 12:41 PM

The relation isn’t 1:1 so making such a map is challenging… I can see that your specific question has been answered below.

limited-carpenter-34991

07/12/2021, 1:31 PM

Sometimes it is a little bit challenging to identiy the root object of major azure resource.

For exmaple a function app is mapped to webapp. Why not using same names principals ? Or an application insights instance is mapped to component.

tall-librarian-49374

07/12/2021, 2:07 PM

We follow the names of ARM which has no notion of Function App. There is https://github.com/pulumi/pulumi-azure-native/issues/690 but had quite some pushback.

limited-carpenter-34991

07/12/2021, 3:13 PM

Ah ok

View count: 3