https://pulumi.com logo
Docs
Join the conversationJoin Slack
Channels
announcements
automation-api
aws
azure
blog-posts
built-with-pulumi
cloudengineering
cloudengineering-support
content-share
contribex
contribute
docs
dotnet
finops
general
getting-started
gitlab
golang
google-cloud
hackathon-03-19-2020
hacktoberfest
install
java
jobs
kubernetes
learn-pulumi-events
linen
localstack
multi-language-hackathon
office-hours
oracle-cloud-infrastructure
plugin-framework
pulumi-cdk
pulumi-crosscode
pulumi-deployments
pulumi-kubernetes-operator
pulumi-service
pulumiverse
python
registry
status
testingtesting123
testingtesting321
typescript
welcome
workshops
yaml
Powered by Linen
azure
  • a

    abundant-book-94104

    11/29/2021, 5:04 AM
    I'm working on setting up Azure Data Factory, but getting stuck on connecting to the repository. As I can't find any worked examples, I've trawled the source code and it would appear for Azure DevOps one would use the FactoryVSTSConfiguration, however it appears deprecated from the system. Only FactoryGitHubConfiguration is available Does Azure DevOps use the Github config?
    1 reply · 1 participant
  • f

    flaky-school-82490

    11/29/2021, 12:04 PM
    Hi @tall-librarian-49374 I am trying to set up authentication for a FunctionApp using WebAppAuthSettingsV2. How do I set the "Client secret value", aka the value for the MICROSOFT_PROVIDER_AUTHENTICATION_SECRET? Previously, I was able to set it with WebAppAuthSettings.MicrosoftAccountClientSecret, but I cannot find any relevant properties in WebAppAuthSettingsV2.
    t
    5 replies · 2 participants
  • a

    abundant-book-94104

    11/29/2021, 11:11 PM
    Is sentinel set up in the Azure Native library?
  • a

    abundant-book-94104

    11/30/2021, 11:37 AM
    If got the following to add private link to a DataFactory and getting an error autorest/azure: Service returned an error. Status=400 Code="MissingRequiredProperty" Message="Missing required property 'properties' on entity" This config is pretty much to the book for the end point example. Is this a bug?
    private_endpoint_connection = \
        azure_native.datafactory.PrivateEndpointConnection("DTG-SYD-DEV-ADS-ADF-Pvte-EP",
                                                           private_endpoint_connection_name="DTG-SYD-DEV-ADS-ADF-Pvte-EP",
                                                           factory_name="DTG-SYD-DEV-ADS-ADF-001",
                                                           properties=azure_native.datafactory.PrivateLinkConnectionApprovalRequestArgs(
                                                               private_link_service_connection_state=azure_native.datafactory.PrivateLinkConnectionStateArgs(
                                                                   description="Internal Connection only",
                                                                   status="Approved",
                                                                   actions_required="",
                                                               ),
                                                           ),
                                                           resource_group_name="DTG-SYD-DEV-ARG-Data",
                                                           )
    1 reply · 1 participant
  • f

    faint-tiger-16075

    11/30/2021, 10:08 PM
    I'm trying to deploy an App Service on a reserved Linux App Service Plan that runs .Net 5.0. I've tried setting
    netFrameworkVersion
    to
    v5.0
    and
    linuxFxVersion
    to
    DOTNET|5.0
    but neither of those properties seem to have an impact.... From the console I can still see an empty "stack" in the App Service configuration once deployed. Does anyone know what I need to do to set "stack" to ".NET" and Major (and Minor) Version to ".NET 5"?
    r
    3 replies · 2 participants
  • m

    magnificent-motherboard-76110

    12/02/2021, 8:18 PM
    when creating a
    dbformmysql
    server if it's needed to support
    ENCRYPTION='Y'
    during table creation, the
    infrastructure_encryption
    arg would be enough? or it must be configured using a Key Vault key?
  • m

    magnificent-motherboard-76110

    12/03/2021, 12:40 AM
    do you know if there'a any plan to provide
    dbformysql
    flexible server in azure native?
    t
    3 replies · 2 participants
  • r

    rich-cat-16319

    12/06/2021, 1:07 AM
    Hello pulumi azure experts. I'm looking for a way to do a slot swap on a linux AppService. the auto swap option is only available in non linux appservices. Does anyone know a way to achieve this? thanks!
  • c

    crooked-planet-47987

    12/06/2021, 8:04 PM
    Hi all, I am trying to create an Azure integration runtime in Data Factory Managed Virtual Network. When using the code below, I get an error like {"code":"ManagedVNetReferencedNotExist","message":"Invalid reference to the managed Virtual Network 'default'. The managed Virtual Network does not exist.","target":null,"details":null}}
    import pulumi
    import pulumi_azure_native as azure_native
    
    integration_runtime1 = azure_native.datafactory.IntegrationRuntime("integrationRuntime1",
        factory_name="df-my-test-0001",
        integration_runtime_name="integrationRuntime1",
        properties=azure_native.datafactory.ManagedIntegrationRuntimeArgs(
            compute_properties=azure_native.datafactory.IntegrationRuntimeComputePropertiesArgs(
                data_flow_properties=azure_native.datafactory.IntegrationRuntimeDataFlowPropertiesArgs(
                    compute_type="General",
                    core_count=8,
                    time_to_live=10,
                ),
                location="West Europe",
            ),
            managed_virtual_network=azure_native.datafactory.ManagedVirtualNetworkReferenceArgs(
                reference_name="default",
                type="ManagedVirtualNetworkReference",
            ),
            type="Managed",
        ),
        resource_group_name="rg-my-test-000",
        opts=pulumi.ResourceOptions(protect=True))
    So I assume the managed vnet need to be created first. However I am not able to find a respective resource provider in azure native / datafactory. Any ideas?
    a
    4 replies · 2 participants
  • a

    abundant-book-94104

    12/08/2021, 1:01 AM
    Does anyone have an example of how to define the values for identity in Data Factory? I've assumed this is for the managed Identity to connect to various resources
    identity=azure_native.datafactory.FactoryIdentityArgs(
        type="UserAssigned",
        user_assigned_identities=??
    What goes in the place of ??
    t
    2 replies · 2 participants
  • w

    wooden-lifeguard-41446

    12/10/2021, 2:28 PM
    Hi guys, Do we have a way to create Workspace-based Application Insight with AzureNative? I can see that in Azure Classic but can't find a way to do it in Azure Native. I tried with creating Diagnostic settings but it seems it's another thing. Appreciate any help on this. https://www.pulumi.com/registry/packages/azure-native/api-docs/insights/component/
    t
    m
    10 replies · 3 participants
  • c

    colossal-electrician-41559

    12/13/2021, 5:03 PM
    Good day all, I'm doing a very simple api on an app service. I'm using the the managed certs and so far the steps i believe i need are the following:
    const recordSet = new azure_native.network.RecordSet("recordSet", {
        cnameRecord: {
            cname: pulumi.interpolate`${app.defaultHostName}`,
        },
        metadata: {
            key1: "dev",
        },
        recordType: "CNAME",
        relativeRecordSetName: "dev",
        resourceGroupName: "rg",
        ttl: 60,
        zoneName: "<http://mycooldomain.com|mycooldomain.com>",
    });
    
    
    const webappbinding = new web.WebAppHostNameBinding("binding",{
        name: pulumi.interpolate`${app.name}`,
        resourceGroupName:resourceGroup.name,
        customHostNameDnsRecordType: 'CName',
        hostName:'<http://dev.mycooldomain.com|dev.mycooldomain.com>',
        hostNameType:'Verified',
        azureResourceType: 'Website'
    });
    
    
    const managedcertificate = new web.Certificate("cert",{
        //hostNames: app.hostNames,
        name:"devcert",
        canonicalName: "<http://dev.mycooldomain.com|dev.mycooldomain.com>",
        resourceGroupName: resourceGroup.name,
        serverFarmId: appServicePlan.id
    });
    
    
    const customDomain = new azure_native.appplatform.CustomDomain("customDomain",{
        appName: app.name,
        domainName: '<http://dev.mycooldomain.com|dev.mycooldomain.com>',
        properties:{
            certName: 'devcert',
            thumbprint: managedcertificate.thumbprint
        },
        resourceGroupName:resourceGroup.name,
        serviceName: "????"
    });
    My question is i can't figure out what it's referring to when it's asking for a 'serviceName' on the last line. If someone could point in the documentation where i would find the reference that would be amazing. Cheers!
    w
    a
    2 replies · 3 participants
  • p

    proud-dusk-33872

    12/13/2021, 10:28 PM
    Is changing a storage account kind from Storage to StorageV2 a supported operation?
    b
    5 replies · 2 participants
  • c

    cold-insurance-72507

    12/15/2021, 8:45 AM
    Hello everyone! 😀 I was wandering if there is a way to change the default auto naming behavior using the azure native provider. I would like to have the "-" before the random suffix. Something like this
    testproject-main-api-app-e2d426f4
    instead of the default that is
    testproject-main-api-appe2d426f4
    t
    2 replies · 2 participants
  • w

    wooden-lifeguard-41446

    12/17/2021, 9:20 AM
    Hello all, I was trying to create an Azure Automation Account using AzureClassic provider by following this document https://www.pulumi.com/registry/packages/azure/api-docs/automation/account/ , but it always give me this error
    checking for presence of existing Automation Account "automationaccountname" (Resource Group "resourcegroupname"): automation.AccountClient#Get: Failure responding to request: StatusCode=403 -- Original Error: autorest/azure: Service returned an error. Status=403 Code="AuthorizationFailed" Message="The client '<mailto:user@email.com|user@email.com>' with object id 'object-id' does not have authorization to perform action 'Microsoft.Automation/automationAccounts/read' over scope '/subscriptions/subid/resourceGroups/rg/providers/Microsoft.Automation/automationAccounts/automationaccountname' or the scope is invalid. If access was recently granted, please refresh your credentials."
    I already gave my self every permissions (Owner, Contributor, Runbook Operator). I can create it when using AzureNative Provider. The reason I don't want to go with AzureNative is that it only allows me to create the runbook content by using Content Link Uri. I appreciate any help on this!
  • r

    rhythmic-state-74305

    12/28/2021, 12:31 PM
    Hi All, i am having trouwle reading in a secret value from an azure keyvault and using it as input for example in a vm propertie (admin username)
  • r

    rhythmic-state-74305

    12/28/2021, 12:31 PM
    it looks like "AzureNative.KeyVault.GetSecret.Invoke" is not retrieving anything..
    b
    1 reply · 2 participants
  • r

    rhythmic-state-74305

    12/28/2021, 12:38 PM
    mm looks like it is not filling in the value.. i have to use rest calls to get this?
  • r

    rhythmic-state-74305

    12/28/2021, 2:00 PM
    is it possible to mix provider (Azure Classic/Azure Native?)
    t
    1 reply · 2 participants
  • c

    cool-jewelry-33023

    12/30/2021, 11:03 PM
    Hi everyone, long time no see 🙂 Does anybody know how to set a volume to be an empty directory when spinning up a container group on Azure (Azure Container Instance)? https://www.pulumi.com/registry/packages/azure-native/api-docs/containerinstance/getcontainergroup/#volumeresponse
  • r

    refined-guitar-81055

    12/31/2021, 2:31 PM
    Hi there hopefully somebody can help. I’m relatively new to Pulumi but understand some of the basics. I’m attempting to create the infrastructure in Azure to connect to from my home/office network. As a guide I am in general working through the following Microsoft Tutorial: https://docs.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal I can do this manually using the Azure Portal UI. I realise I can probably do this in a more succinct way but have worked through component by component to aid my understanding. To date I have managed to add (using AzureNative): • A Resource Group • A Virtual Network • A GatewaySubnet • The LocalNetworkGateway • A Public IP address • A VirtualNetworkGateway All of the above appear to deploy and so far as I can see show up in the Azure Portal with the correct configuration. I now need to add the Connection to the VirtualNetworkGateway but it isn’t obvious to me what I should add? https://www.pulumi.com/registry/packages/azure-native/api-docs/network/ There appear to be a number of options (VpnConnection, VpnGateway, VpnSite) but it is not clear to me which I should be adding as they appear to have dependencies on each other and not the VirtualNetworkGateway! Any advice would be appreciated!
    2 replies · 1 participant
  • r

    refined-guitar-81055

    01/03/2022, 5:25 PM
    Please excuse me if this is a dim question but I am new to Pulumi (and probably missing something). I have a working Azure DevOps pipeline running on a project in GitHub. I have managed to create a few basic resources in Azure etc. I’m now trying to use the Pulumi.AzureDevOps library to manipulate the VariableGroup within my DevOps project. The end game is to extract values from the VariableGroup so that I can using them but for the moment have been trying to run the default code found at this link: https://www.pulumi.com/registry/packages/azuredevops/api-docs/variablegroup/#example-usage. If I do a straightforward Copy/paste on the default code and run it I get an error on the pipeline: azuredevops:index:Project project error: the personal access token is required azuredevops:index:Project project 1 error Makes sense as I have not provided any access to DevOps but its not obvious to me how I would do this! To create Resources within Azure I passed a ServicePrincipal into the Pulumi@1 task using a variable (azureSubscription) and assume I should be doing something similar? Thanks for any assistance! PS I am ultimately looking to use: public static VariableGroup Get(string name, Input<string> id, VariableGroupState? state, CustomResourceOptions? opts = null) So if anybody had a working code example that would make life easier!
    b
    s
    3 replies · 3 participants
  • c

    colossal-room-15708

    01/06/2022, 10:41 PM
    Has anyone seen Pulumi "forget" an Azure Function App Setting? It's only one that's gone. It's in the code (I promise 😉 ) but it's not in the state file anymore and won't get applied to the Function.
    g
    6 replies · 2 participants
  • a

    abundant-potato-97520

    01/07/2022, 12:28 PM
    Hi, I was wondering if anyone could provide me with some guidance. I'm currently converting my solutions ARM template over to Pulumi. I have Pulumi creating a resource group, app service plan, web app, app insights, a CNAME and TXT record, a hostname binding and a managed certificate however I'm stuck now at the point where I want to update the hostname binding with the certificate thumbprint. Does anyone have any ideas on what this final step entails?
    b
    4 replies · 2 participants
  • r

    rhythmic-vegetable-87369

    01/11/2022, 5:43 AM
    Hi, I'm trying to use an image from one of my azure registries within the same subscription and create an azure container instance. Unless I include the "ImageRegistryCredentials" I'm unable to create an instance. It throws an exception indicating that I'm unauthorized. Is there a way by which I can achieve this without the "ImageRegistryCredentials" in pulumi?
    b
    1 reply · 2 participants
  • r

    rhythmic-vegetable-87369

    01/11/2022, 5:44 AM
  • a

    adorable-airport-36662

    01/11/2022, 8:59 AM
    Good day all, I'm trying to create an apikey for an appinsights following this guide. The first create looks good, but all the subsequent pulumi preview/up, I am getting issue where it will be
    create-replacement
    but actually nothing has changed in the appinsights nor the appinsights apikey. This is the diff logs:
    ++ azure:appinsights/apiKey:ApiKey (create-replacement)
        [id=/subscriptions/[id]/resourcegroups/[resourceGroupName]/providers/microsoft.insights/components/[resourceGroupName]/apiKeys/[keyId]]
        __meta               : "{"....":{"create":1800000000000,"delete":1800000000000,"read":300000000000,"update":1800000000000},"schema_version":"1"}"
        apiKey               : "[secret]"
        applicationInsightsId: "/subscriptions/[id]/resourceGroups/[resourceGroupName]/providers/Microsoft.Insights/components/[resourceGroupName]" => "/subscriptions/[id]/resourceGroups/[resourceGroupName]/providers/microsoft.insights/components/[resourceGroupName]"
        id                   : "/subscriptions/[id]/resourcegroups/[resourceGroupName]/providers/microsoft.insights/components/[resourceGroupName]/apiKeys/[keyId]"
        writePermissions     : []
    Does anyone have this issue as well? Any help is much appreciated! thanks!
    b
    3 replies · 2 participants
  • b

    better-shampoo-48884

    01/11/2022, 12:10 PM
    I'm having some issues using providers accross subscriptions - I've got a really simple provider ComponentResource that returns a new azure-native.Provider() called AzureProvider.
    const sub1 = AzureProvider("sub1") // returns provider for subscription 1 - where child zone should go
    const sub2 = AzureProvider("sub2") // returns provider for subscription 2 - where parent zone lives
    
    // Note: I use the same service principal + secret for both sub1 and sub2, and ensured that the SP has "DNS Zone Contributor" rights on the parent zone (sub2).
    My program sets up child dns zones - so the first thing I do is verify that I can connect to the Parent zone, then when that is successful I create the child zone, then update the parent zone with the NS records of the child. My problem is that when I run `Network.getZone()`while passing the appropriate provider - it executes the operation as me, rather than the provider specified. The same thing for the creation of the NS record using the same (sub2) provider. The creation of the zone (using sub1) does not have this problem.
    const parentZone = azure.network.getZoneOutput( {
        resourceGroupName: '<rg-name-redacted>', 
        zoneName: `${infra.deployment.domain.domainRoot}`
    }, {
        provider: sub2.instance
    
    })
    The reason I know this is that 1) The NS record shows in the logs as being created by me, while the child zone is created by the service principal I use for the "sub1" AzureProvider and 2) My colleagues get this error message when running the same code that works for me (I have access to the parent zone subscription, they do not):
    error: Error: invocation of azure-native:network:getZone returned an error: building auth config: obtain subscription(<subscription-guid-redacted>) from Azure CLI: Error parsing json result from the Azure CLI: Error waiting for the Azure CLI: exit status 1
            at Object.callback (D:\Dev\Pulumi\Project.infra\pulumi\purposes\azure-dns\node_modules\@pulumi\runtime\invoke.ts:161:33)
            at Object.onReceiveStatus (D:\Dev\Pulumi\Project.infra\pulumi\purposes\azure-dns\node_modules\@grpc\grpc-js\src\client.ts:338:26)
            at Object.onReceiveStatus (D:\Dev\Pulumi\Project.infra\pulumi\purposes\azure-dns\node_modules\@grpc\grpc-js\src\client-interceptors.ts:426:34)
            at Object.onReceiveStatus (D:\Dev\Pulumi\Project.infra\pulumi\purposes\azure-dns\node_modules\@grpc\grpc-js\src\client-interceptors.ts:389:48)
            at D:\Dev\Pulumi\Project.infra\pulumi\purposes\azure-dns\node_modules\@grpc\grpc-js\src\call-stream.ts:276:24
            at processTicksAndRejections (internal/process/task_queues.js:77:11)
    b
    1 reply · 2 participants
  • p

    proud-salesmen-31441

    01/12/2022, 9:14 AM
    Hey! Is there a way to both create and update a resource in a single "pulumi up"? I have a resource where I want to set one of its properties based on an ID generated by azure for that same resource, so I need to have the resource created before setting some properties on it.
    b
    2 replies · 2 participants
  • q

    quiet-hairdresser-18834

    01/12/2022, 5:30 PM
    Anyone create an API Connection with an on premise data gateway via pulumi?
    const connection = new web.Connection("SqlConnection", {
        connectionName: "SqlServer",
        resourceGroupName: resourceGroup,
        properties: {
            displayName: "SqlServer",
            api: {
                id: apiId,
            },
            parameterValues: {
                 server: sqlServer,
                 database: "Logicapps",
                 username: sqlUsername,
                 password: sqlPassword,
                 authType: "basic",
                 //gateway: {
                 //    id: "/subscriptions/"+ subscriptionId +"/resourceGroups/rg-LogicApps-DPTS/providers/Microsoft.Web/connectionGateways/gtwyvmsqlServer" 
                 //}, 
                 "gateway": "/subscriptions/" + subscriptionId + "/resourceGroups/rg-LogicApps-DPTS/providers/Microsoft.Web/connectionGateways/gtwyvmsqlServer",
            },
        },
    });
    The ARM templates I have seen (https://techcommunity.microsoft.com/t5/integrations-on-azure-blog/arm-template-for-creating-api-connection-to-on-premise-sql/ba-p/1450911) looks like it wants to create via
    gateway: {
      id: "/path/to/resource"
    }
    but when I try to mimic that in pulumi I get a casting exception and the docs (https://www.pulumi.com/registry/packages/azure-native/api-docs/web/connection/#apiconnectiondefinitionproperties) say that this field is a key:value field. Is there some sort of notation that can be used to send this or am I missing something?
Powered by Linen
Title
q

quiet-hairdresser-18834

01/12/2022, 5:30 PM
Anyone create an API Connection with an on premise data gateway via pulumi?
const connection = new web.Connection("SqlConnection", {
    connectionName: "SqlServer",
    resourceGroupName: resourceGroup,
    properties: {
        displayName: "SqlServer",
        api: {
            id: apiId,
        },
        parameterValues: {
             server: sqlServer,
             database: "Logicapps",
             username: sqlUsername,
             password: sqlPassword,
             authType: "basic",
             //gateway: {
             //    id: "/subscriptions/"+ subscriptionId +"/resourceGroups/rg-LogicApps-DPTS/providers/Microsoft.Web/connectionGateways/gtwyvmsqlServer" 
             //}, 
             "gateway": "/subscriptions/" + subscriptionId + "/resourceGroups/rg-LogicApps-DPTS/providers/Microsoft.Web/connectionGateways/gtwyvmsqlServer",
        },
    },
});
The ARM templates I have seen (https://techcommunity.microsoft.com/t5/integrations-on-azure-blog/arm-template-for-creating-api-connection-to-on-premise-sql/ba-p/1450911) looks like it wants to create via
gateway: {
  id: "/path/to/resource"
}
but when I try to mimic that in pulumi I get a casting exception and the docs (https://www.pulumi.com/registry/packages/azure-native/api-docs/web/connection/#apiconnectiondefinitionproperties) say that this field is a key:value field. Is there some sort of notation that can be used to send this or am I missing something?
View count: 3