https://pulumi.com logo
Docs
Join the conversationJoin Slack
Channels
announcements
automation-api
aws
azure
blog-posts
built-with-pulumi
cloudengineering
cloudengineering-support
content-share
contribex
contribute
docs
dotnet
finops
general
getting-started
gitlab
golang
google-cloud
hackathon-03-19-2020
hacktoberfest
install
java
jobs
kubernetes
learn-pulumi-events
linen
localstack
multi-language-hackathon
office-hours
oracle-cloud-infrastructure
plugin-framework
pulumi-cdk
pulumi-crosscode
pulumi-deployments
pulumi-kubernetes-operator
pulumi-service
pulumiverse
python
registry
status
testingtesting123
testingtesting321
typescript
welcome
workshops
yaml
Powered by Linen
azure
  • v

    victorious-exabyte-70545

    02/10/2022, 8:20 PM
    Ideally those lines would be inline and the script not in blobstore.
  • v

    victorious-exabyte-70545

    02/10/2022, 8:23 PM
    This looks interesting:
  • v

    victorious-exabyte-70545

    02/10/2022, 8:23 PM
    https://www.pulumi.com/registry/packages/command/
  • p

    prehistoric-kite-30979

    02/16/2022, 11:00 PM
    I dont think
    .get
    works in the TS azure-native plugin for Outputs… /thread
    • 1
    • 5
  • e

    elegant-plumber-85706

    02/17/2022, 11:33 AM
    Hello Everybody, I'm trying to create some database in a Postgres Flexible server but I got some weird error. Can you be kind and help me about this, please? https://github.com/pulumi/pulumi-azure-native/issues/1520
  • b

    bitter-bear-28592

    02/19/2022, 11:19 AM
    Hello, Trying to create an azure devops pipeline via pulumi and getting the following error:
    error: Code="InvalidRequestValue" Message="Value cannot be null.\r\nParameter name: Organization Name is empty" Target="ValidateAzurePipelineObject"
    I don't see from the documentation where this value can be input as an argument, any help is appreciated 🙂
  • m

    most-portugal-2672

    02/19/2022, 7:37 PM
    Hi there Friends, Do you know if/when "Azure Virtual Network Manager" support is likely to be added ? It's a new feature on preview albeit an extremely important feature. https://docs.microsoft.com/en-us/rest/api/networkmanager/ https://azure.microsoft.com/en-us/services/virtual-network-manager/ Any thoughts would be appreciated.
  • m

    millions-journalist-34868

    02/20/2022, 12:23 PM
    If you are using azure native provider, you always have access to latest resources https://www.pulumi.com/registry/packages/azure-native/api-docs/network/networkmanager/
    ☝️ 1
  • m

    millions-journalist-34868

    02/22/2022, 9:04 PM
    I wrote an article that talks about provisioning an Azure SQL Database with Active Directory authentication configured. It also shows an example of using the new Command provider in preview. The source code used in the article is available in this GitHub repository. Many thanks to those who help me by answering my questions to write this article.
    🎉 1
    🙌 2
    l
    • 2
    • 4
  • h

    high-leather-15669

    02/23/2022, 4:20 PM
    Hello, I want to create/manage stacks using Pulumi automation API using a Azure Storage Account. I can do this over pulumi CLI, but haven't found any docs/examples to do this over the Automation API, could someone be so kind to point it for me? Thank you!
  • c

    clever-byte-21551

    02/23/2022, 6:14 PM
    I was trying to migrate from 1.11.0 to 1.59.0 in azure native and I noticed that since this upgrade my AKS cluster is being recreated over and over again it says there’s a change in agentPoolProfiles, the way we create our AKS clusters is configuring a single agentPoolProfile on the 
    ManagedCluster
     and we create a coupe of additional agent pools using the 
    NewAgentPool
     api. I suspect that this causes us to recreate the cluster, when I downgraded the provider plugin it was back to normal We keep seeing this diff in the logs:
    aks updated [diff: ~agentPoolProfiles]
    I don’t want to add to ignoreChanges the agentPoolProfiles because this will hinder our ability to mutate the stack
    • 1
    • 5
  • b

    better-forest-70644

    03/03/2022, 8:55 AM
    Is PostgreSQL Flexible Server is available in the Azure Native right now ? I have searched for it and couldn't able to find that. But got some information that it's available in a preview (@pulumi/azure-native/dbforpostgresql/v20200214preview). So is it ok the use that preview to create PostgreSQL Flexible Server ?
    g
    • 2
    • 1
  • h

    happy-parrot-60128

    03/03/2022, 10:19 AM
    Time-sensitive announcement for anyone using Azure Container Apps Microsoft are migrating their namespace during March so please review the following guide to help transition through the breaking changes: https://github.com/pulumi/pulumi/discussions/9099
  • c

    clean-alarm-24426

    03/07/2022, 2:58 PM
    Good morning all. My Google-Fu is just not working recently. I'm setting up a fairly simple stack where I want to set resource names based on data set in an Azure Pipeline. That data could potentially come from a YAML defined parameter, a YAML defined variable, or an Azure Pipeline variable group. Can someone point me to some documentation about how to access this data from inside the Pulumi .NET app? Do I need to run a PowerShell script to set environment variables? Does the Pulumi AZ Pipelines task provide a mechanism to do this that I've just missed? Is there a method that is considered best practice?
    f
    • 2
    • 3
  • a

    abundant-book-94104

    03/09/2022, 6:08 AM
    In Azure there are function Apps and functions. Does pulumi have functions as a component of azure to be created? I'm not seeing it and I'm not 100% sure what's the difference, but they are there
    t
    c
    • 3
    • 3
  • l

    little-apartment-30401

    03/09/2022, 2:54 PM
    Anyone have any good patterns for providing a “library” engineers can import so they get all their resource tagging for free?
    • 1
    • 2
  • f

    future-air-70511

    03/09/2022, 5:17 PM
    Has anyone successfully added an azure app service site extension leveraging Pulumi? https://www.pulumi.com/registry/packages/azure-native/api-docs/web/webappsiteextension/
  • b

    brave-florist-53599

    03/09/2022, 7:44 PM
    Hello, I tried to search slack for this issue https://github.com/pulumi/pulumi-azure-native/issues/1557.
    MachineLearningDatastore: Unable to parse request body One or more validation errors occured
    Has it been seen before?
  • l

    lively-gigabyte-52811

    03/14/2022, 1:30 PM
    Hello, currently trying to convert some arm templates to pulumi using arm2pulumi. Seems like it has some problems with my template variables. What is the current state of arm2pulumi and will you open source it? Would love to contribute. My customer has quite a library of arm templates, so it would be nice to have the cli available.
    g
    • 2
    • 4
  • m

    millions-journalist-34868

    03/15/2022, 10:48 PM
    If someone could confirm this is the right way of getting the tenant id https://github.com/pulumi/pulumi/discussions/9126, that would be great.
    g
    • 2
    • 1
  • b

    bulky-kite-69343

    03/17/2022, 8:37 PM
    Just curious if anyone else has ran into this when trying to provision multiple subnets against a vnet with azure-native
    Diagnostics:
      azure-native:network:Subnet (scanning):
        error: autorest/azure: Service returned an error. Status=<nil> Code="AnotherOperationInProgress" Message="Another operation on this or dependent resource is in progress. To retrieve status of the operation use uri: <https://management.azure.com/subscriptions/***/providers/Microsoft.Network/locations/***/operations/***?api-version=2020-11-01>." Details=[]
    I am kinda stumped it always seems to deploy 3 of 8 subnets each time and fails on the rest all with the same error.
    g
    • 2
    • 2
  • w

    wooden-receptionist-75654

    03/21/2022, 11:37 AM
    Hi Guys, I have a question about Azure AKS Preview features. How can I use it with Pulumi cdk? For example
    oidcIssuerProfile
    g
    • 2
    • 1
  • l

    limited-rainbow-51650

    03/21/2022, 3:15 PM
    I'm working with our internal IT department to set up a Service Principal which has permissions to manage membership in a single Azure AD group. The Pulumi code I have is this:
    export function configureAzureADMembership(memberArgs: MemberArgs[]) {
        let azureSsoGithubGroup = azuread.getGroupOutput({
            displayName: "Azure - SSO - Github",
            securityEnabled: true,
        });
    
        memberArgs.map((memberInfo) => {
            let user = azuread.getUserOutput({
                userPrincipalName: memberInfo.email
            });
    
            // new azuread.GroupMember(`github-sso-${memberInfo.username}`, {
            //     groupObjectId: azureSsoGithubGroup.id,
            //     memberObjectId: user.id,
            // });
        })
    }
    Before even managing the membership, I'm testing that user and group lookup work correctly. The service principal has permission
    Directory.Read.All
    , as documented here: https://www.pulumi.com/registry/packages/azuread/api-docs/getgroup/#api-permissions Even with this level of access, I still get this error on each user or group lookup:
    Authorization_RequestDenied: Insufficient privileges to complete the operation.
    I triple checked the values of the authentication config settings for
    azuread:clientId
    ,
    azuread:clientSecret
    and
    azuread:tentantId
    and they are correct. Anyone an idea what I might be missing?
    • 1
    • 1
  • b

    best-state-21371

    03/23/2022, 3:04 AM
    I am new to Kubernetes but long time azure user, I am curious if anyone is running large k8 setup on azure. We are looking to build a large multi-tenant app on k8s and trying to estimate costs. We have 500-1k tenants, we would be doing 3-4 pods per tenant (is this a bad idea?). I would love anyone’s experience
  • l

    limited-holiday-6625

    03/24/2022, 8:06 PM
    Hey everyone, we are using Pulumi for our Azure resources setup. One of the features we are trying to implement involve making copies of our Azure Database and File Shares from one resource group to another. It seems very easy to copy an existing database, but I cant' figure out the best way to make a copy of a FIleShare. Is there a recommended easy way to do this? Currently I am looking at using
    azcopy
    but I then i need to generate SAS tokens (which I think I can do in Pulumi, but seems like quite a lot of work to do something relatively simple).
  • c

    chilly-plastic-75584

    03/29/2022, 1:31 AM
    Trying to work through database accounts creation with pulumi and running into one resource that just won't cooperate. Getting this from my linter:
    cannot use bp (variable of type *documentdb.PeriodicModeBackupPolicy) as pulumi.Input value in struct literal: missing method ElementTypecompilerInvalidIfaceAssign
    Trying to do:
    dbacct, err := documentdb.NewDatabaseAccount(ctx, "databaseAccount"+environment, &documentdb.DatabaseAccountArgs{
    			AccountName: pulumi.String(cfgDatabaseAcct.Name),
    			ApiProperties: &documentdb.ApiPropertiesArgs{
    				ServerVersion: pulumi.String(cfgDatabaseAcct.ServerVersion),
    			},
    			BackupPolicy: bp,
    }
    I defined bp
    bp := &documentdb.PeriodicModeBackupPolicy{
    			PeriodicModeProperties: &documentdb.PeriodicModeProperties{
    				BackupIntervalInMinutes:        &cfgDatabaseAcct.BackupIntervalInMinutes,
    				BackupRetentionIntervalInHours: &cfgDatabaseAcct.BackupRetentionIntervalInHours,
    			},
    			Type: cfgDatabaseAcct.BackupType,
    		}
    I adjusted PeriodicModeProperties to be a pointer based on object definition (the autogenerated example seems wrong?). Any ideas?
  • m

    mysterious-australia-14256

    03/29/2022, 3:03 PM
    Hi, I am trying to add a policy to an API Management Operation using
    new AzureNative.ApiManagement.ApiOperationPolicy
    The API Management instance is running on the consumption tier but I can add a policy manually without issue. When I try the above though I receive the error
    cannot check existence of resource '/subscriptions/xxx/resourceGroups/xxx/providers/Microsoft.ApiManagement/service/xxx/apis/xxx/operations/xxx/policies/xxx': status code 400, {"error":{"code":"MethodNotAllowedInPricingTier","message":"Method not allowed in this pricing tier","details":null}}
    Is this a known limitiation? Thanks Alan
    l
    • 2
    • 2
  • s

    sparse-pilot-48357

    03/29/2022, 9:47 PM
    Hey 👋, I'm trying to provision a server and DB for PGSQL, and the flexible server deployed fine (using
    Pulumi.AzureNative.DBforPostgreSQL.V20200214Preview
    but I'm getting this error on the database (using
    Pulumi.AzureNative.DBforPostgreSQL.V20210601
    )
    var pgDb = new PGSQLDB.Database($"foo", new PGSQLDB.DatabaseArgs()
            {
                Charset = "UTF8",
                Collation = "English_United States.1252",
                ResourceGroupName = resourceGroup.Name,
                ServerName = pgsqlServer.Name,
                DatabaseName = "foo"
            });
    azure-native:dbforpostgresql/v20210601:Database (foo):
        error: resource partially created but read failed autorest/azure: Service returned an error. Status=404 Code="ResourceNotFound" Message="The requested resource of type 'Microsoft.DBforPostgreSQL/flexibleServers/databases' with name 'foo' was not found.": Code="InternalServerError" Message="An unexpected error occured while processing the request. Tracking ID: '**redacted**'"
    A few questions 🙂 - am I using the right namespaces? Is there any way of getting more info than that
    InternalServerError
    (I tried
    --verbose=9
    to no avail). I found https://github.com/pulumi/pulumi-azure-native/issues/1126, but I don't think it's quite it...
    g
    • 2
    • 4
  • l

    limited-carpenter-34991

    04/05/2022, 2:45 PM
    The new azure front door is now released and the old one was changed to azure front door classic https://azure.microsoft.com/de-de/blog/introducing-the-new-azure-front-door-reimagined[…]dern-apps-and-content/?WT.mc_id=twitter-0000-azureadvocates Is the new azure front door available inside pulumi azure native ? Inside the documentation i can't find any hint on it? https://www.pulumi.com/registry/packages/azure-native/api-docs/network/
    g
    • 2
    • 4
  • s

    straight-sunset-92336

    04/06/2022, 8:51 AM
    I'm trying to import one of the Builtin Azure Policy Definitions to use it in a Policy Assignment, but have some difficulties with the import. According to the documentation the import should be like this:
    pulumi import azure-native:authorization:PolicyDefinition <name> /subscriptions/<subid>/providers/Microsoft.Authorization/policyDefinitions/<definitionid>
    But the Builtin definitions are not in any subscriptions. Tested running this:
    pulumi import azure-native:authorization:PolicyDefinition ActivityLogStreamToLogAnalytics /subscription/<one of my subscription id's>/providers/Microsoft.Authorization/policyDefinitions/2465583e-4e78-4c15-b6be-a36cbc7c8b0f
    But it fails:
    error: Preview failed: resource '/subscription/<one of my subscription id's>/providers/Microsoft.Authorization/policyDefinitions/2465583e-4e78-4c15-b6be-a36cbc7c8b0f' does not exist
    Any idea how I can get this definition imported?
    g
    o
    • 3
    • 4
Powered by Linen
Title
s

straight-sunset-92336

04/06/2022, 8:51 AM
I'm trying to import one of the Builtin Azure Policy Definitions to use it in a Policy Assignment, but have some difficulties with the import. According to the documentation the import should be like this:
pulumi import azure-native:authorization:PolicyDefinition <name> /subscriptions/<subid>/providers/Microsoft.Authorization/policyDefinitions/<definitionid>
But the Builtin definitions are not in any subscriptions. Tested running this:
pulumi import azure-native:authorization:PolicyDefinition ActivityLogStreamToLogAnalytics /subscription/<one of my subscription id's>/providers/Microsoft.Authorization/policyDefinitions/2465583e-4e78-4c15-b6be-a36cbc7c8b0f
But it fails:
error: Preview failed: resource '/subscription/<one of my subscription id's>/providers/Microsoft.Authorization/policyDefinitions/2465583e-4e78-4c15-b6be-a36cbc7c8b0f' does not exist
Any idea how I can get this definition imported?
g

great-queen-39697

04/06/2022, 9:12 PM
I don't, but I'm asking internally.
o

orange-policeman-59119

04/06/2022, 9:25 PM
azure-role-assignment_ts.ts
Hey @straight-sunset-92336, Hmm. Import creates code & state to manage the resource, but I believe the built-in roles are immutable & can't be modified by Pulumi. I don't see that role definition when I run the Azure CLI, either, so I wonder if this might be behind a feature flag. Is this a recently added role definition to Azure? I found some code we use to manage Azure IAM here at Pulumi, and it looks like this is how we create role assignments. I modified it a bit and pasted it in as a snippet above.
s

straight-sunset-92336

04/07/2022, 6:48 AM
I created a ticket and got an answer that it isn't possible to import the builtin definitions.
View count: 7