k8s.storage.v1.StorageClass

kind: StorageClass
apiVersion: <http://storage.k8s.io/v1|storage.k8s.io/v1>
metadata:
  name: managed-premium-retain
provisioner: <http://kubernetes.io/azure-disk|kubernetes.io/azure-disk>
reclaimPolicy: Retain
parameters:
  storageaccounttype: Premium_LRS
  kind: Managed

// This will enable HTTPS through Azure's one-click automated certificate deployment.
    // The certificate is fully managed by Azure from provisioning to automatic renewal
    // at no additional cost to you.
    httpsEnabled: true,

ManagedCluster

ingressApplicationGateway

UserAssignedIdentity.Get

pulumi_azure_native.network.PublicIPAddress

error: cannot check existence of resource '/subscriptions/.../providers/Microsoft.Network/publicIPAddresses/...': status code 400, {"error":{"code":"InvalidApiVersionParameter","message":"The api-version '2020-11-01' is invalid. The supported versions are '2021-04-01,2021-01-01,2020-10-01,2020-09-01,2020-08-01,2020-07-01,2020-06-01,2020-05-01,2020-01-01,2019-11-01,2019-10-01,2019-09-01,2019-08-01,2019-07-01,2019-06-01,2019-05-10,2019-05-01,2019-03-01,2018-11-01,2018-09-01,2018-08-01,2018-07-01,2018-06-01,2018-05-01,2018-02-01,2018-01-01,2017-12-01,2017-08-01,2017-06-01,2017-05-10,2017-05-01,2017-03-01,2016-09-01,2016-07-01,2016-06-01,2016-02-01,2015-11-01,2015-01-01,2014-04-01-preview,2014-04-01,2014-01-01,2013-03-01,2014-02-26,2014-04'."}}

v20200801

pulumi plugin install resource azure v3.42.0
[resource plugin azure-3.42.0] installing
error: [resource plugin azure-3.42.0] downloading from : 403 HTTP error fetching plugin from <https://get.pulumi.com/releases/plugins/pulumi-resource-azure-v3.42.0-darwin-arm64.tar.gz>

pulumi up

does not have authorization to perform action 'Microsoft.Management/managementGroups/delete'

name: CI

# Controls when the action will run.
on:
  # Triggers the workflow on push or pull request events but only for the master branch
  push:
    branches: [master]
  pull_request:
    branches: [master]

  # Allows you to run this workflow manually from the Actions tab
  workflow_dispatch:

# A workflow run is made up of one or more jobs that can run sequentially or in parallel
jobs:

  Deploy_Dev:
    runs-on: [WinRunner]
    name: Deploy to Karma Lab Domain
    environment: KarmaLab
    steps:
      - uses: actions/checkout@v2

      - name: Integration Testing
        run: |
          ls

  Deploy_Corp:
    needs: [Deploy_Dev]
    runs-on: [WinRunner]
    name: Deploy to SEA Domain
    environment: SEA

    steps:
      - uses: actions/checkout@v2

      - name: Integration Testing
        env:
          STORAGE_ACCOUNT: ${{secrets.SEA_STORAGE_ACCNT}}
          STORAGE_TOKEN: ${{secrets.SEA_STORAGE_ACCN_PWD}}
        run: |
          $env:AZURE_STORAGE_ACCOUNT = $env.STORAGE_ACCOUNT
          $env:AZURE_STORAGE_SAS_TOKEN = $env.STORAGE_TOKEN
          pulumi login --cloud-url <azblob://pulumi>
        shell: PowerShell

const blobSAS = storage.listStorageAccountServiceSAS({
        accountName: storageAccountName,
        protocols: storage.HttpProtocol.Https,
        sharedAccessStartTime: "2021-08-08",//new Date(nowDate.getTime() - 60 * 60000).toISOString(),
        sharedAccessExpiryTime: "2021-10-10",//new Date(nowDate.getTime() + 600 * 60000).toISOString(),
        resource: storage.SignedResource.C,
        resourceGroupName: resourceGroupName,
        permissions: storage.Permissions.R + storage.Permissions.W + storage.Permissions.D + storage.Permissions.L + storage.Permissions.A + storage.Permissions.C + storage.Permissions.U,
        canonicalizedResource: "/blob/" + storageAccountName + "/" + storageContainerName,
    });
    return pulumi.interpolate `https://${storageAccountName}.<http://blob.core.windows.net/${storageContainerName}/?${blobSAS.then(x|blob.core.windows.net/${storageContainerName}/?${blobSAS.then(x> => x.serviceSasToken)}`;