If got the following to add private link to a DataFactory and getting an error autorest/azure: Service returned an error. Status=400 Code="MissingRequiredProperty" Message="Missing required property 'properties' on entity" This config is pretty much to the book for the end point example. Is this a bug?

private_endpoint_connection = \
    azure_native.datafactory.PrivateEndpointConnection("DTG-SYD-DEV-ADS-ADF-Pvte-EP",
                                                       private_endpoint_connection_name="DTG-SYD-DEV-ADS-ADF-Pvte-EP",
                                                       factory_name="DTG-SYD-DEV-ADS-ADF-001",
                                                       properties=azure_native.datafactory.PrivateLinkConnectionApprovalRequestArgs(
                                                           private_link_service_connection_state=azure_native.datafactory.PrivateLinkConnectionStateArgs(
                                                               description="Internal Connection only",
                                                               status="Approved",
                                                               actions_required="",
                                                           ),
                                                       ),
                                                       resource_group_name="DTG-SYD-DEV-ARG-Data",
                                                       )

I'm trying to deploy an App Service on a reserved Linux App Service Plan that runs .Net 5.0. I've tried setting

netFrameworkVersion

to

v5.0

and

linuxFxVersion

to

DOTNET|5.0

but neither of those properties seem to have an impact.... From the console I can still see an empty "stack" in the App Service configuration once deployed. Does anyone know what I need to do to set "stack" to ".NET" and Major (and Minor) Version to ".NET 5"?

when creating a

dbformmysql

server if it's needed to support

ENCRYPTION='Y'

during table creation, the

infrastructure_encryption

arg would be enough? or it must be configured using a Key Vault key?

do you know if there'a any plan to provide

dbformysql

flexible server in azure native?

Hello pulumi azure experts. I'm looking for a way to do a slot swap on a linux AppService. the auto swap option is only available in non linux appservices. Does anyone know a way to achieve this? thanks!

Hi all, I am trying to create an Azure integration runtime in Data Factory Managed Virtual Network. When using the code below, I get an error like {"code":"ManagedVNetReferencedNotExist","message":"Invalid reference to the managed Virtual Network 'default'. The managed Virtual Network does not exist.","target":null,"details":null}}

import pulumi
import pulumi_azure_native as azure_native

integration_runtime1 = azure_native.datafactory.IntegrationRuntime("integrationRuntime1",
    factory_name="df-my-test-0001",
    integration_runtime_name="integrationRuntime1",
    properties=azure_native.datafactory.ManagedIntegrationRuntimeArgs(
        compute_properties=azure_native.datafactory.IntegrationRuntimeComputePropertiesArgs(
            data_flow_properties=azure_native.datafactory.IntegrationRuntimeDataFlowPropertiesArgs(
                compute_type="General",
                core_count=8,
                time_to_live=10,
            ),
            location="West Europe",
        ),
        managed_virtual_network=azure_native.datafactory.ManagedVirtualNetworkReferenceArgs(
            reference_name="default",
            type="ManagedVirtualNetworkReference",
        ),
        type="Managed",
    ),
    resource_group_name="rg-my-test-000",
    opts=pulumi.ResourceOptions(protect=True))

So I assume the managed vnet need to be created first. However I am not able to find a respective resource provider in azure native / datafactory. Any ideas?

Does anyone have an example of how to define the values for identity in Data Factory? I've assumed this is for the managed Identity to connect to various resources

identity=azure_native.datafactory.FactoryIdentityArgs(
    type="UserAssigned",
    user_assigned_identities=??

What goes in the place of ??

Hi guys, Do we have a way to create Workspace-based Application Insight with AzureNative? I can see that in Azure Classic but can't find a way to do it in Azure Native. I tried with creating Diagnostic settings but it seems it's another thing. Appreciate any help on this. https://www.pulumi.com/registry/packages/azure-native/api-docs/insights/component/

Good day all, I'm doing a very simple api on an app service. I'm using the the managed certs and so far the steps i believe i need are the following:

const recordSet = new azure_native.network.RecordSet("recordSet", {
    cnameRecord: {
        cname: pulumi.interpolate`${app.defaultHostName}`,
    },
    metadata: {
        key1: "dev",
    },
    recordType: "CNAME",
    relativeRecordSetName: "dev",
    resourceGroupName: "rg",
    ttl: 60,
    zoneName: "<http://mycooldomain.com|mycooldomain.com>",
});


const webappbinding = new web.WebAppHostNameBinding("binding",{
    name: pulumi.interpolate`${app.name}`,
    resourceGroupName:resourceGroup.name,
    customHostNameDnsRecordType: 'CName',
    hostName:'<http://dev.mycooldomain.com|dev.mycooldomain.com>',
    hostNameType:'Verified',
    azureResourceType: 'Website'
});


const managedcertificate = new web.Certificate("cert",{
    //hostNames: app.hostNames,
    name:"devcert",
    canonicalName: "<http://dev.mycooldomain.com|dev.mycooldomain.com>",
    resourceGroupName: resourceGroup.name,
    serverFarmId: appServicePlan.id
});


const customDomain = new azure_native.appplatform.CustomDomain("customDomain",{
    appName: app.name,
    domainName: '<http://dev.mycooldomain.com|dev.mycooldomain.com>',
    properties:{
        certName: 'devcert',
        thumbprint: managedcertificate.thumbprint
    },
    resourceGroupName:resourceGroup.name,
    serviceName: "????"
});

My question is i can't figure out what it's referring to when it's asking for a 'serviceName' on the last line. If someone could point in the documentation where i would find the reference that would be amazing. Cheers!

Is changing a storage account kind from Storage to StorageV2 a supported operation?

Hello everyone! 😀 I was wandering if there is a way to change the default auto naming behavior using the azure native provider. I would like to have the "-" before the random suffix. Something like this

testproject-main-api-app-e2d426f4

instead of the default that is

testproject-main-api-appe2d426f4

Hello all, I was trying to create an Azure Automation Account using AzureClassic provider by following this document https://www.pulumi.com/registry/packages/azure/api-docs/automation/account/ , but it always give me this error

checking for presence of existing Automation Account "automationaccountname" (Resource Group "resourcegroupname"): automation.AccountClient#Get: Failure responding to request: StatusCode=403 -- Original Error: autorest/azure: Service returned an error. Status=403 Code="AuthorizationFailed" Message="The client '<mailto:user@email.com|user@email.com>' with object id 'object-id' does not have authorization to perform action 'Microsoft.Automation/automationAccounts/read' over scope '/subscriptions/subid/resourceGroups/rg/providers/Microsoft.Automation/automationAccounts/automationaccountname' or the scope is invalid. If access was recently granted, please refresh your credentials."

I already gave my self every permissions (Owner, Contributor, Runbook Operator). I can create it when using AzureNative Provider. The reason I don't want to go with AzureNative is that it only allows me to create the runbook content by using Content Link Uri. I appreciate any help on this!

Hi All, i am having trouwle reading in a secret value from an azure keyvault and using it as input for example in a vm propertie (admin username)

it looks like "AzureNative.KeyVault.GetSecret.Invoke" is not retrieving anything..

mm looks like it is not filling in the value.. i have to use rest calls to get this?

is it possible to mix provider (Azure Classic/Azure Native?)

Hi everyone, long time no see 🙂 Does anybody know how to set a volume to be an empty directory when spinning up a container group on Azure (Azure Container Instance)? https://www.pulumi.com/registry/packages/azure-native/api-docs/containerinstance/getcontainergroup/#volumeresponse

Hi there hopefully somebody can help. I’m relatively new to Pulumi but understand some of the basics. I’m attempting to create the infrastructure in Azure to connect to from my home/office network. As a guide I am in general working through the following Microsoft Tutorial: https://docs.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal I can do this manually using the Azure Portal UI. I realise I can probably do this in a more succinct way but have worked through component by component to aid my understanding. To date I have managed to add (using AzureNative): • A Resource Group • A Virtual Network • A GatewaySubnet • The LocalNetworkGateway • A Public IP address • A VirtualNetworkGateway All of the above appear to deploy and so far as I can see show up in the Azure Portal with the correct configuration. I now need to add the Connection to the VirtualNetworkGateway but it isn’t obvious to me what I should add? https://www.pulumi.com/registry/packages/azure-native/api-docs/network/ There appear to be a number of options (VpnConnection, VpnGateway, VpnSite) but it is not clear to me which I should be adding as they appear to have dependencies on each other and not the VirtualNetworkGateway! Any advice would be appreciated!

Please excuse me if this is a dim question but I am new to Pulumi (and probably missing something). I have a working Azure DevOps pipeline running on a project in GitHub. I have managed to create a few basic resources in Azure etc. I’m now trying to use the Pulumi.AzureDevOps library to manipulate the VariableGroup within my DevOps project. The end game is to extract values from the VariableGroup so that I can using them but for the moment have been trying to run the default code found at this link: https://www.pulumi.com/registry/packages/azuredevops/api-docs/variablegroup/#example-usage. If I do a straightforward Copy/paste on the default code and run it I get an error on the pipeline: azuredevopsindexProject project error: the personal access token is required azuredevopsindexProject project 1 error Makes sense as I have not provided any access to DevOps but its not obvious to me how I would do this! To create Resources within Azure I passed a ServicePrincipal into the Pulumi@1 task using a variable (azureSubscription) and assume I should be doing something similar? Thanks for any assistance! PS I am ultimately looking to use: public static VariableGroup Get(string name, Input<string> id, VariableGroupState? state, CustomResourceOptions? opts = null) So if anybody had a working code example that would make life easier!

Has anyone seen Pulumi "forget" an Azure Function App Setting? It's only one that's gone. It's in the code (I promise 😉 ) but it's not in the state file anymore and won't get applied to the Function.

Hi, I was wondering if anyone could provide me with some guidance. I'm currently converting my solutions ARM template over to Pulumi. I have Pulumi creating a resource group, app service plan, web app, app insights, a CNAME and TXT record, a hostname binding and a managed certificate however I'm stuck now at the point where I want to update the hostname binding with the certificate thumbprint. Does anyone have any ideas on what this final step entails?

Hi, I'm trying to use an image from one of my azure registries within the same subscription and create an azure container instance. Unless I include the "ImageRegistryCredentials" I'm unable to create an instance. It throws an exception indicating that I'm unauthorized. Is there a way by which I can achieve this without the "ImageRegistryCredentials" in pulumi?

Good day all, I'm trying to create an apikey for an appinsights following this guide. The first create looks good, but all the subsequent pulumi preview/up, I am getting issue where it will be

create-replacement

but actually nothing has changed in the appinsights nor the appinsights apikey. This is the diff logs:

++ azure:appinsights/apiKey:ApiKey (create-replacement)
    [id=/subscriptions/[id]/resourcegroups/[resourceGroupName]/providers/microsoft.insights/components/[resourceGroupName]/apiKeys/[keyId]]
    __meta               : "{"....":{"create":1800000000000,"delete":1800000000000,"read":300000000000,"update":1800000000000},"schema_version":"1"}"
    apiKey               : "[secret]"
    applicationInsightsId: "/subscriptions/[id]/resourceGroups/[resourceGroupName]/providers/Microsoft.Insights/components/[resourceGroupName]" => "/subscriptions/[id]/resourceGroups/[resourceGroupName]/providers/microsoft.insights/components/[resourceGroupName]"
    id                   : "/subscriptions/[id]/resourcegroups/[resourceGroupName]/providers/microsoft.insights/components/[resourceGroupName]/apiKeys/[keyId]"
    writePermissions     : []

Does anyone have this issue as well? Any help is much appreciated! thanks!

I'm having some issues using providers accross subscriptions - I've got a really simple provider ComponentResource that returns a new azure-native.Provider() called AzureProvider.

const sub1 = AzureProvider("sub1") // returns provider for subscription 1 - where child zone should go
const sub2 = AzureProvider("sub2") // returns provider for subscription 2 - where parent zone lives

// Note: I use the same service principal + secret for both sub1 and sub2, and ensured that the SP has "DNS Zone Contributor" rights on the parent zone (sub2).

My program sets up child dns zones - so the first thing I do is verify that I can connect to the Parent zone, then when that is successful I create the child zone, then update the parent zone with the NS records of the child. My problem is that when I run `Network.getZone()`while passing the appropriate provider - it executes the operation as me, rather than the provider specified. The same thing for the creation of the NS record using the same (sub2) provider. The creation of the zone (using sub1) does not have this problem.

const parentZone = azure.network.getZoneOutput( {
    resourceGroupName: '<rg-name-redacted>', 
    zoneName: `${infra.deployment.domain.domainRoot}`
}, {
    provider: sub2.instance

})

The reason I know this is that 1) The NS record shows in the logs as being created by me, while the child zone is created by the service principal I use for the "sub1" AzureProvider and 2) My colleagues get this error message when running the same code that works for me (I have access to the parent zone subscription, they do not):

error: Error: invocation of azure-native:network:getZone returned an error: building auth config: obtain subscription(<subscription-guid-redacted>) from Azure CLI: Error parsing json result from the Azure CLI: Error waiting for the Azure CLI: exit status 1
        at Object.callback (D:\Dev\Pulumi\Project.infra\pulumi\purposes\azure-dns\node_modules\@pulumi\runtime\invoke.ts:161:33)
        at Object.onReceiveStatus (D:\Dev\Pulumi\Project.infra\pulumi\purposes\azure-dns\node_modules\@grpc\grpc-js\src\client.ts:338:26)
        at Object.onReceiveStatus (D:\Dev\Pulumi\Project.infra\pulumi\purposes\azure-dns\node_modules\@grpc\grpc-js\src\client-interceptors.ts:426:34)
        at Object.onReceiveStatus (D:\Dev\Pulumi\Project.infra\pulumi\purposes\azure-dns\node_modules\@grpc\grpc-js\src\client-interceptors.ts:389:48)
        at D:\Dev\Pulumi\Project.infra\pulumi\purposes\azure-dns\node_modules\@grpc\grpc-js\src\call-stream.ts:276:24
        at processTicksAndRejections (internal/process/task_queues.js:77:11)

Hey! Is there a way to both create and update a resource in a single "pulumi up"? I have a resource where I want to set one of its properties based on an ID generated by azure for that same resource, so I need to have the resource created before setting some properties on it.

Anyone create an API Connection with an on premise data gateway via pulumi?

const connection = new web.Connection("SqlConnection", {
    connectionName: "SqlServer",
    resourceGroupName: resourceGroup,
    properties: {
        displayName: "SqlServer",
        api: {
            id: apiId,
        },
        parameterValues: {
             server: sqlServer,
             database: "Logicapps",
             username: sqlUsername,
             password: sqlPassword,
             authType: "basic",
             //gateway: {
             //    id: "/subscriptions/"+ subscriptionId +"/resourceGroups/rg-LogicApps-DPTS/providers/Microsoft.Web/connectionGateways/gtwyvmsqlServer" 
             //}, 
             "gateway": "/subscriptions/" + subscriptionId + "/resourceGroups/rg-LogicApps-DPTS/providers/Microsoft.Web/connectionGateways/gtwyvmsqlServer",
        },
    },
});

The ARM templates I have seen (https://techcommunity.microsoft.com/t5/integrations-on-azure-blog/arm-template-for-creating-api-connection-to-on-premise-sql/ba-p/1450911) looks like it wants to create via

gateway: {
  id: "/path/to/resource"
}

but when I try to mimic that in pulumi I get a casting exception and the docs (https://www.pulumi.com/registry/packages/azure-native/api-docs/web/connection/#apiconnectiondefinitionproperties) say that this field is a key:value field. Is there some sort of notation that can be used to send this or am I missing something?

This current version where I just set "gateway" as a field gives me a different error of "The gateway reference connection parameter is missing for the on-premise connection request." which does not help me a lot 😄

Hey all. Is there a way to set what manifests as ServicePrincipalOauth2PermissionScope on service principals?

I need to endow a ServicePrincipal with such power but am failz