Hopefully a quick question: Is there a good way in Pulumi for setting deletion order/dependencies?

In order to delete the public IP, disassociate/detach the Public IP address from the resource.

run into this kind of issue a lot trying to delete/clean things up.

Anyone had issues with using managed service identity as the auth to run Pulumi rather than a service principal? I have set the "ARM_USE_MSI" env variable, but it's failing with the error below:

System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation.

---> System.AggregateException: One or more errors occurred. (Status(StatusCode="Unknown", Detail="invocation of azure-nextgen:authorization/latest:getClientConfig returned an error: transport is closing", DebugException="Grpc.Core.Internal.CoreErrorDetailException: {"created":"@1628073936.146857126","description":"Error received from peer ipv4:127.0.0.1:43909","file":"/var/local/git/grpc/src/core/lib/surface/call.cc","file_line":1063,"grpc_message":"invocation of azure-nextgen:authorization/latest:getClientConfig returned an error: transport is closing","grpc_status":2}"))

---> Grpc.Core.RpcException: Status(StatusCode="Unknown", Detail="invocation of azure-nextgen:authorization/latest:getClientConfig returned an error: transport is closing", DebugException="Grpc.Core.Internal.CoreErrorDetailException: {"created":"@1628073936.146857126","description":"Error received from peer ipv4:127.0.0.1:43909","file":"/var/local/git/grpc/src/core/lib/surface/call.cc","file_line":1063,"grpc_message":"invocation of azure-nextgen:authorization/latest:getClientConfig returned an error: transport is closing","grpc_status":2}")

Hello everyone, hope that someone can help us. We are using Pulumi for all our Azure infrastructure but in the last couple of weeks we have had several of theese errors where it doesn’t help to export remove from pending operations and import again. How can we get this to work?

Is this an error in pulumi or what can we do to get further?

Hi, I have created a webapp using https://www.pulumi.com/docs/reference/pkg/azure-native/web/webapp/ Im now trying to add a custom domain to this. Is this the correct method https://www.pulumi.com/docs/reference/pkg/azure-native/appplatform/customdomain/

Hi folks, in about an hour we're going to be running a webinar on Azure Infrastructure as Software with TypeScript, hosted by Matt Stratton, one of our Developer Advocates. You can join for free here: https://www.bigmarker.com/pulumi/Azure-Infrastructure-as-Software-with-TypeScript-db14f093eacf656ef6cdd7fc

Hi, only when running in Azure DevOps, I get an error on `pulumi up --yes --stack Development`:

azure.BearerAuthorizer#WithAuthorization: Failed to refresh the Token for request

I'm using the method with custom scripts (lots of reasons, I cannot change to the task). For this I have the following

Dockerfile

FROM <http://mcr.microsoft.com/dotnet/sdk:5.0|mcr.microsoft.com/dotnet/sdk:5.0> AS base
USER root
RUN apt-get update -y
RUN apt-get install -y
RUN curl -sL <https://deb.nodesource.com/setup_14.x> | bash -
RUN apt-get install -y nodejs
RUN npm i -g yarn
RUN curl -sL <https://aka.ms/InstallAzureCLIDeb> | bash

a `setupPulumi.sh`:

#!/bin/bash

# exit if a command returns a non-zero exit code and also print the commands and their args as they are executed
set -e -x
# Download and install pulumi
curl -fsSL <https://get.pulumi.com/> | bash
export PATH=$PATH:$HOME/.pulumi/bin
# Login into pulumi. This will require the PULUMI_ACCESS_TOKEN environment variable
pulumi login

and the following pipeline definition:

pool:
  vmImage: 'ubuntu-latest'

container: 'justanoldman/devops:net5-nodejs14-yarn-azcli'

// ...

- task: Bash@3
  displayName: Install pulumi
  inputs:
    workingDirectory: $(Build.SourcesDirectory)
    targetType: inline
    script: |
      chmod +x ./Infrastructure/pipelines/*.sh
      ./Infrastructure/pipelines/setupPulumi.sh
  env:
    PULUMI_ACCESS_TOKEN: $(PulumiToken)
    ARM_CLIENT_SECRET: $(DeploymentClientAppSecret)
    ARM_SUBSCRIPTION_ID: $(DeploymentTargetSubscriptionId)
    ARM_CLIENT_ID: $(DeploymentClientAppId)
    ARM_TENANT_ID: $(DeploymentClientTenantId)

- task: CmdLine@2
  displayName: Installing node packages
  inputs:
    workingDirectory: $(Build.SourcesDirectory)/Infrastructure/azureresources
    script: |
      yarn install
	  
// ...

- task: CmdLine@2
  displayName: Update Azure resources excluding B2C
  inputs:
    workingDirectory: $(Build.SourcesDirectory)/Infrastructure/azureresources
    script: |
      /home/vsts_azpcontainer/.pulumi/bin/pulumi up --yes --stack Development
  env:
    PULUMI_ACCESS_TOKEN: $(PulumiToken)
    ARM_CLIENT_SECRET: $(DeploymentClientAppSecret)
    ARM_SUBSCRIPTION_ID: $(DeploymentTargetSubscriptionId)
    ARM_CLIENT_ID: $(DeploymentClientAppId)
    ARM_TENANT_ID: $(DeploymentClientTenantId)

I'm using Typescript as the host language for Pulumi. When I run the steps manually in the same docker image locally, I do not get this error. Any idea, anyone?

Good day #azure. I've only just recently joined the Pulumi Slack community and I'm looking forward to some great info and hopefully contributing as well. I have a question right out of the box. Does anyone have any experience with using Pulumi in the context of defining and implementing Azure Landing Zones. I've been aware of them for some time, but haven't had an opportunity or need to work with them, so I'm just getting my head around them at the moment. It seems that MS already has some templates for creating Landing Zones using ARM Templates and Terraform, but I haven't seen any info on either Pulumi templates or even best practices around using Pulumi for them. Thanks in advance for any info you can provide.

Quick question - should pulumi up on an azure function app delete the function files hosted in that function app? it seems to this for me.

Is there an equivalent Route Table Association method in Azure Native? https://www.pulumi.com/docs/reference/pkg/azure/network/subnetroutetableassociation/

Hi #azure, Trying to do a pulumi up. It involves a Sql Server db. There aren't any changes to the sql server but it's still trying to do a replace. This is going to cause some issues for our pipeline. I was wondering if there have been recent changes either with Pulumi or Azure that might have done this? The last working pulumi up that we have done was 29-Jul-2021.

Hi All! i have this question im trying to setup an app service environment v3 with pulumi but is see the azure native is using a version of the api "2020-12-01" that doesnt yet contain the specs. When do you upgrade this api spec?

o wow

never mind i see i can target the different api versions in code..

i am not getting this idea of output<subnetresponse>

i used a getat(0) to retrieve the first subnet of a virtual network and then i need the id property..

figured it out

needed to apply it to unwrap the subnetresponse form the output

has anyone with the current version succeeded in pushing an image to an ACR? the current example at https://www.pulumi.com/docs/reference/pkg/docker/image/ is out-of-date as is the one at https://www.pulumi.com/blog/build-publish-containers-iac/.

Registry

no longer has

.adminUsername

or

.adminPassword

properties. and the other method - which would be preferable, anyway - with creating a service-principal and using that performs the role assignment like this:

const spAuth = new azure.authorization.Assignment("myauth", {
    scope: registry.id,
    roleDefinitionName: "acrpush",
    principalId: sp.id,
});

but

Assignment

has changed to

RoleAssignment

and the later doesn't get a

roleDefinitionName

, but a

roleDefinitionId

. Yet there is no API to get a roleDefintionId by name or to list all role definitions so I could filter for the one with the matching name.

does anyone have a working example for deploying a docker image to an app service not using

adminUserEnabled

, but managed identities as described here?

hey 👋 anyone having issues with Azure Database for Postgresql method call:

database = azure_native.dbforpostgresql.Database(
    "test-database",
    server_name = "my-test-database",
    charset="UTF8",
    collation="English_United States.1252",
    database_name="test_database",
    resource_group_name=example_resource_group.name,
)

returns

Code="ResourceNotFound" Message="The Resource 'Microsoft.DBforPostgreSQL/servers/my-test-database' under resource group 'exampleresourcegroupda3e1ab3' was not found. For more details please go to <https://aka.ms/ARMResourceNotFoundFix>"

The resource group name is correct, so is the subscription id, tenant id, etc.

👋 hi all Any clues on what could be causing this? I'm trying to change the secret provider. failed to Dial default KeyVault: failed to get oauth token from MSI: MSI not available

It was a permissions issue, I think this one really needs a bit of improving around messaging

Hello, I’m using

<http://github.com/pulumi/pulumi-azure-native/sdk/go/azure/dbforpostgresql/v20210601preview|github.com/pulumi/pulumi-azure-native/sdk/go/azure/dbforpostgresql/v20210601preview>

to create a PostgreSQL Flexible server, but I can’t find how to create a database (like this Terraform resource https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/postgresql_flexible_server_database). Is it something that will be generated from the API like the rest of the resources or is it something that should be manually added (like for configuration in https://github.com/pulumi/pulumi-azure-native/pull/727)?

Does anyone happen to have working code for log forwarding from Azure to Datadog?

Is there a supported (Pulumi-ish) way of calling an Azure REST API that's not covered by the provided APIs? (I'm looking to call stop/stop/restart on a web app)

Hi everyone, is it possible to combine a stacks outputs to a single rich object instead of having 15 lines of requireOutput in stacks depending on some shared data from a stack creating these? I get this error when trying creating a object with some type as output…

Hi everyone, I have a question regarding the pulumi upload of files into a static azure container for web hosting: I have all my files zipped in a location and need to unzip these on the Azure storage, is there any way to do this? All I have found were Archives but these seem to pack a directory and move it and not unwrap it on the destination site. Thanks in advance

Hi everyone, I have created logic app with pulumi but dont know exactly how to create outlook or office365 connection, i found solution with powershell but I want somthing with pulumi, pls if you have any idea share with us Thanks in advance!

#azure question, is it bad practice to use the normal azure provider and the azure native provider in combination when writing azure pulumi code?