Hello 🙂 I'm working on Pulumi automation that successfully deploys private AKS cluster, I'd like to do some post-installation setup of K8S (ingress, certmanager, argo, etc). As this is private cluster API is not available in the Internet (I also create VPN VM to have manual access to vnet ). With

az cli

I'd do all necessary kubectl/helm commands using

az aks command invoke

and it works nice manually. I could not find method to start

command invoke

in

azure-native.containerservice

method set (similar to azure-native.compute.VirtualMachineRunCommandByVirtualMachine) . Do U know any other way how to do setup on private cluster or can provide some pro-tips? thanks 🙂

Has anyone had issues with the azure dev ops pipelines Pulumi task not setting the Pulumi access token? My runs occasionally randomly fail and won't set the token to authenticate to Pulumi. Once it happens I have to rebuild that agent it ran on them it is good.

@curved-eye-56312 is that in this resource? https://www.pulumi.com/registry/packages/azure-native/api-docs/compute/virtualmachineextension/#inputs

Hello 👋 I think there might be an issue with

azure-native:network:LoadBalancer

, and would love some clarity. Specifically I am trying to add IP addresses in the

BackendAddressPool

field, but these are not reflected in Azure portal and the backend has no IP addresses. Your examples don't actually populate IP addresses. I see some others use the more specific

azure-native:network:LoadBalancerBackendAddressPool

but I cannot use this as my

LoadBalancer

rules need to reference the backend pool, which it cannot do unless I create it in the LoadBalancer. Any pointers at all would be much appreciated, thank you!

Hello All, I am trying to retrieve my Azure subscription ID within Pulumi using the typescript

azure-native

library and using the

getClientConfig({})

function. But i am getting the following error response

Error: invocation of azure-native:authorization:getClientConfig returned an error: getting authenticated object ID: Error parsing json result from the Azure CLI: Error retrieving running Azure CLI: WARNING: This command or command group has been migrated to Microsoft Graph API. Please carefully review all breaking changes introduced during this migration: <https://docs.microsoft.com/cli/azure/microsoft-graph-migration>

Is there another way to retrieve the subscription ID or to avoid it all together, i need it for child processes that are referenced via azure ID

Are there any workarounds to the really slow TypeScript type checking time for the azure-native SDK? There is almost 2million lines of type defs loaded which means the fs and parsing time for a simple program is almost 6 seconds on my MBP

Hello, any example on getting/creating service bus queues?

this is what i tried so far

but i still get an unhandled error

Status=404 Code="EntityNotFound" Message="Queue does not exist"

Hi Team, I am creating Azure resources using Pulumi and .Net code. It was working fine earlier but now throwing following error ...runtime: VirtualAlloc of 8192 bytes failed with errno=1455 2022-06-29T062303.6799320Z fatal error: out of memory 2022-06-29T062303.6799446Z 2022-06-29T062303.6799668Z runtime stack: 2022-06-29T062303.6815219Z runtime.throw({0x265343d, 0xc18c848000}) 2022-06-29T062303.6815922Z /opt/hostedtoolcache/go/1.17.11/x64/src/runtime/panic.go:1198 +0x76 2022-06-29T062303.6816312Z runtime.sysUsed(0xc18c848000, 0x2000) ..................

Is there any way to enable Synapse Link in Azure Cosmos DB containers using Pulumi and .Net code?

Trying to run https://www.pulumi.com/registry/packages/azuread/api-docs/applicationpassword/#look-up but I just cannot for the life of me figure out the format of the ID here. Specifically I have no idea what type should be in

{objectId}/{type}/{subId}

. edit: nevermind, for obvious reasons one cannot import this between different stacks from Azure 🙂

Is authenticating to Azure storage account backends (

azblob://<container>

) using Azure AD credentials supported or does it always need to be an Access Key/SAS token?

any suggestions on how to fix this?

hello everyone, Im working on a pulumi project that was using

HttpFuncion

of

@pulumi/azure/appservice

(azure classic), I dont see that Class available anymore on pulumi docs… is there anything close from what HttpFunction was? or should I upgrade my code base to

FunctionAppFunction

class? Thanks!

also, if someone have some good example for simple http azure functions I would be thankful!

I’m trying to create missing queue names in azure service bus, but i keep getting this error

Grpc.Core.RpcException: Status=404 Code="EntityNotFound" Message="Queue does not exist"

the docs also does not show enough examples

i have a try catch wrapped around the get but pulumi still fails and does not go to the catch block

has anyone successfully added their own user assigned managed identity to an AKS cluster, if so - how'd you go about it? I figured it might be the "IdentityProfile" property of the ManagedCluster object - but I'm not sure what to populate that with. I've got the object and client ID of the UserAssignedManagedIdentity - just don't know where to inject/throw it 🙂

Good morning Pulumiers! I get the following type of error message when creating some role assignments - it doesn't always happen - lets say 10% of the time - has anyone else faced this and found a decent solution? azure-nativeauthorizationRoleAssignment role-assignment-IntTtlkjRG-sub-reader creating error: autorest/azure: Service returned an error. Status=400 Code="PrincipalNotFound" Message="Principal 674703a701db4af69e55e63efb7dfdfb does not exist in the directory 2a2d14a0-3c63-4c0a-ae25-b3145783fcbc. Check that you have the correct principal ID. If you are creating this principal and then immediately assigning a role, this error might be related to a replication delay. In this case, set the role assignment principalType property to a value, such as ServicePrincipal, User, or Group. See https://aka.ms/docs-principaltype"

Hi Team, How can we achieve below CLI in .Net and Pulumi code. My requirement is to deploy Dapr component files with Azure container app. Can we achieve with DaprComponentArgs?

az containerapp env dapr-component set --name ENVIRONMENT_NAME --resource-group RESOURCE_GROUP_NAME --dapr-component-name pubsub --yaml "./pubsub.yaml"

I am getting following error when tried to use Pulumi.AzureNative.Web.V20210301 to create KubeEnvironment for ContainerApp deployment pulumiprovidersazure-native default_1_60_0 error: no resource plugin 'pulumi-resource-azure-native' found in the workspace at version v1.60.0 or on your $PATH, install the plugin using

pulumi plugin install resource azure-native v1.60.0

So my scenario is this: I am writing a stack (using azure native library) to deploy a microservice into an azure environment where a Front Door instance has been set up by another stack. I want to add a backend objects, health probe, load balancer and routing rules for the microservice. Can I do that with Network.FrontDoor? Previous attempt by another dev assumed this wasn't possible so he did it by adding an AzurePowershell step in the pipeline. Would be much nicer to be able to do this via Pulumi

I guess there was some changes to the azure CLI, but can anyone else confirm whether or not they are getting a

ObjectId

from this call? I’m not, and I am not sure if thats how it always was (the other three fields are present)?

This message was deleted.

This message was deleted.

i’m using azure native, is there a way to reference a resource in another subscription in pulumi. I tried the below but get an error saying `request failed /subscriptions/MY_SUB_ID/resourceGroups/%2Fsubscriptions%2FMY_OTHER_SUB_ID%2FresourceGroups%2Fcontainer-apps-production/providers/Microsoft.ContainerRegistry/registries/elaway:`:

var registry = Output.Tuple<string, string>("/subscriptions/MY_OTHER_SUB_ID/resourceGroups/container-apps-production", registryName)
                 .Apply(
                     items =>
                         Pulumi.AzureNative.ContainerRegistry.GetRegistry.InvokeAsync(
                             new() {
                                 ResourceGroupName = items.Item1,
                                 RegistryName      = items.Item2
                             }
                         )
                 );

Our program creates two Cosmos DB data plane RBAC role assignments (similar to, yet distinct from, the standard Azure RBAC role assignment). These are created using the

SqlResourceSqlRoleAssignment

type from the

DocumentDB

namespace. It seems Cosmos is only able to create one of these at a time. One of them succeeds, the other gets:

error: Code="PreconditionFailed" Message="There is another user operation in progress which requires an exclusive lock on [orgflow-runner-runner-cdb]. Please retry after sometime.\r\nActivityId: af360631-3ac5-470a-897a-ba45563aabc7, Microsoft.Azure.Documents.Common/2.14.0"

If I retry the

pulumi up

then the next time the other one gets created. Now, our IaC code is very decomposed, with different microservices each owning and contributing their own chunks to the resource tree, and these two role assignments live in different and completely decoupled parts of the code. Therefore it’s not really feasible to have one of them simply do

DependsOn

on the other to serialize their creation. How can we solve this problem?

Hi, I posted this question in the general channel about AppSettings getting deleted from an Azure Function app during an unrelated update. If anyone can help I would be very grateful. https://pulumi-community.slack.com/archives/C84L4E3N1/p1657549693249239

what role do I need to give a service principal to use it to create azure ad apps? I created one with the role "owner", but I get a 403 when I try to use it creating an azure ad app.