pulumi-community #azure

azure

mammoth-agency-10350

06/17/2022, 1:02 AM

Attempting to use the

Pulumi@1

Azure Devops Task with an Azure storage account backend, I receive the following error:

##[error]Couldn't determine which login method to use. This task extension supports Pulumi Service backend and self-managed backends. Learn more at <https://www.pulumi.com/docs/intro/concepts/state>.

I am providing the AZURE_STORAGE_CONTAINER env var (it's sourced form a variable group above). The code here implies that with this env provided, the azure backend should be picked. Am I missing an input or is there a working example someone could provide? I've also tried both linux and windows agents.

steps:
  - task: Pulumi@1
    inputs:
      azureSubscription: <service principal connection>
      command: 'up'
      cwd: '$(ProjectDirectory)/'
      stack: '${{ parameters.stack }}'
      args: '--yes'
    env:
      PULUMI_CONFIG_PASSPHRASE: $(Pulumi.Passphrase)
      AZURE_STORAGE_CONTAINER: $(Pulumi.StorageContainer)
      AZURE_STORAGE_ACCOUNT: $(Pulumi.StorageAccount)
      AZURE_STORAGE_KEY: $(Pulumi.StorageKey)

swift-hamburger-98290

06/17/2022, 12:12 PM

Regarding

azure-native

, the typescript and python libraries are 100% identical? Or are there any differences? I think before

azure-native

, the typescript SDK was superior.

lively-gigabyte-52811

06/20/2022, 8:55 AM

I’m looking for ResourceProviderRegistration https://www.pulumi.com/registry/packages/azure/api-docs/core/resourceproviderregistration/ equivalent in

azure-native

. I was searching the

azure-native

api-docs but didn’t find anything. So I w It seems that I need to register the provider manually when I add DiagnosticSettings to resources. Initially I thought the registration happens automatically on first use. Does anyone have more insights and experience with ProviderRegistration? The goal is that our users don’t have to enable the providers manually before they run the pulumi programs (Which is what we do at the moment 🙂 ).

freezing-article-56695

06/21/2022, 6:50 PM

Hello 🙂 I'm working on Pulumi automation that successfully deploys private AKS cluster, I'd like to do some post-installation setup of K8S (ingress, certmanager, argo, etc). As this is private cluster API is not available in the Internet (I also create VPN VM to have manual access to vnet ). With

az cli

I'd do all necessary kubectl/helm commands using

az aks command invoke

and it works nice manually. I could not find method to start

command invoke

azure-native.containerservice

method set (similar to azure-native.compute.VirtualMachineRunCommandByVirtualMachine) . Do U know any other way how to do setup on private cluster or can provide some pro-tips? thanks 🙂

rough-window-15889

06/22/2022, 3:03 PM

Has anyone had issues with the azure dev ops pipelines Pulumi task not setting the Pulumi access token? My runs occasionally randomly fail and won't set the token to authenticate to Pulumi. Once it happens I have to rebuild that agent it ran on them it is good.

curved-eye-56312

06/22/2022, 3:25 PM

message has been deleted

creamy-judge-53688

06/23/2022, 9:16 AM

Hello 👋 I think there might be an issue with

azure-native:network:LoadBalancer

, and would love some clarity. Specifically I am trying to add IP addresses in the

BackendAddressPool

field, but these are not reflected in Azure portal and the backend has no IP addresses. Your examples don't actually populate IP addresses. I see some others use the more specific

azure-native:network:LoadBalancerBackendAddressPool

but I cannot use this as my

LoadBalancer

rules need to reference the backend pool, which it cannot do unless I create it in the LoadBalancer. Any pointers at all would be much appreciated, thank you!

flaky-yak-39108

06/24/2022, 11:57 AM

Hello All, I am trying to retrieve my Azure subscription ID within Pulumi using the typescript

azure-native

library and using the

getClientConfig({})

function. But i am getting the following error response

Error: invocation of azure-native:authorization:getClientConfig returned an error: getting authenticated object ID: Error parsing json result from the Azure CLI: Error retrieving running Azure CLI: WARNING: This command or command group has been migrated to Microsoft Graph API. Please carefully review all breaking changes introduced during this migration: <https://docs.microsoft.com/cli/azure/microsoft-graph-migration>

Is there another way to retrieve the subscription ID or to avoid it all together, i need it for child processes that are referenced via azure ID

☝️ 1

curved-pharmacist-41509

06/27/2022, 7:22 AM

Are there any workarounds to the really slow TypeScript type checking time for the azure-native SDK? There is almost 2million lines of type defs loaded which means the fs and parsing time for a simple program is almost 6 seconds on my MBP

gentle-airplane-84691

06/29/2022, 11:25 AM

Hello, any example on getting/creating service bus queues?

gentle-airplane-84691

06/29/2022, 11:26 AM

this is what i tried so far

gentle-airplane-84691

06/29/2022, 11:26 AM

but i still get an unhandled error

Status=404 Code="EntityNotFound" Message="Queue does not exist"

ancient-solstice-53934

06/29/2022, 12:23 PM

Hi Team, I am creating Azure resources using Pulumi and .Net code. It was working fine earlier but now throwing following error ...runtime: VirtualAlloc of 8192 bytes failed with errno=1455 2022-06-29T06:23:03.6799320Z fatal error: out of memory 2022-06-29T06:23:03.6799446Z 2022-06-29T06:23:03.6799668Z runtime stack: 2022-06-29T06:23:03.6815219Z runtime.throw({0x265343d, 0xc18c848000}) 2022-06-29T06:23:03.6815922Z /opt/hostedtoolcache/go/1.17.11/x64/src/runtime/panic.go:1198 +0x76 2022-06-29T06:23:03.6816312Z runtime.sysUsed(0xc18c848000, 0x2000) ..................

ancient-solstice-53934

06/29/2022, 1:28 PM

Is there any way to enable Synapse Link in Azure Cosmos DB containers using Pulumi and .Net code?

most-mouse-38002

06/29/2022, 2:33 PM

Trying to run https://www.pulumi.com/registry/packages/azuread/api-docs/applicationpassword/#look-up but I just cannot for the life of me figure out the format of the ID here. Specifically I have no idea what type should be in

{objectId}/{type}/{subId}

. edit: nevermind, for obvious reasons one cannot import this between different stacks from Azure 🙂

creamy-judge-53688

06/30/2022, 1:07 PM

Is authenticating to Azure storage account backends (

azblob://<container>

) using Azure AD credentials supported or does it always need to be an Access Key/SAS token?

gentle-airplane-84691

06/30/2022, 11:50 PM

any suggestions on how to fix this?

happy-apartment-33291

06/30/2022, 11:59 PM

hello everyone, Im working on a pulumi project that was using

HttpFuncion

@pulumi/azure/appservice

(azure classic), I dont see that Class available anymore on pulumi docs… is there anything close from what HttpFunction was? or should I upgrade my code base to

FunctionAppFunction

class? Thanks!

happy-apartment-33291

07/01/2022, 12:00 AM

also, if someone have some good example for simple http azure functions I would be thankful!

gentle-airplane-84691

07/01/2022, 12:04 AM

I’m trying to create missing queue names in azure service bus, but i keep getting this error

Grpc.Core.RpcException: Status=404 Code="EntityNotFound" Message="Queue does not exist"

the docs also does not show enough examples

gentle-airplane-84691

07/01/2022, 12:04 AM

i have a try catch wrapped around the get but pulumi still fails and does not go to the catch block

damp-honey-93158

07/01/2022, 3:02 PM

has anyone successfully added their own user assigned managed identity to an AKS cluster, if so - how'd you go about it? I figured it might be the "IdentityProfile" property of the ManagedCluster object - but I'm not sure what to populate that with. I've got the object and client ID of the UserAssignedManagedIdentity - just don't know where to inject/throw it 🙂

damp-honey-93158

07/04/2022, 8:18 AM

Good morning Pulumiers! I get the following type of error message when creating some role assignments - it doesn't always happen - lets say 10% of the time - has anyone else faced this and found a decent solution? azure-native:authorization:RoleAssignment role-assignment-IntTtlkjRG-sub-reader creating error: autorest/azure: Service returned an error. Status=400 Code="PrincipalNotFound" Message="Principal 674703a701db4af69e55e63efb7dfdfb does not exist in the directory 2a2d14a0-3c63-4c0a-ae25-b3145783fcbc. Check that you have the correct principal ID. If you are creating this principal and then immediately assigning a role, this error might be related to a replication delay. In this case, set the role assignment principalType property to a value, such as ServicePrincipal, User, or Group. See https://aka.ms/docs-principaltype "

ancient-solstice-53934

07/04/2022, 11:27 AM

Hi Team, How can we achieve below CLI in .Net and Pulumi code. My requirement is to deploy Dapr component files with Azure container app. Can we achieve with DaprComponentArgs?

az containerapp env dapr-component set --name ENVIRONMENT_NAME --resource-group RESOURCE_GROUP_NAME --dapr-component-name pubsub --yaml "./pubsub.yaml"

ancient-solstice-53934

07/04/2022, 4:34 PM

I am getting following error when tried to use Pulumi.AzureNative.Web.V20210301 to create KubeEnvironment for ContainerApp deployment pulumi😛roviders:azure-native default_1_60_0 error: no resource plugin 'pulumi-resource-azure-native' found in the workspace at version v1.60.0 or on your $PATH, install the plugin using

pulumi plugin install resource azure-native v1.60.0

tall-gold-53021

07/05/2022, 8:40 AM

So my scenario is this: I am writing a stack (using azure native library) to deploy a microservice into an azure environment where a Front Door instance has been set up by another stack. I want to add a backend objects, health probe, load balancer and routing rules for the microservice. Can I do that with Network.FrontDoor? Previous attempt by another dev assumed this wasn't possible so he did it by adding an AzurePowershell step in the pipeline. Would be much nicer to be able to do this via Pulumi

most-mouse-38002

07/05/2022, 4:19 PM

I guess there was some changes to the azure CLI, but can anyone else confirm whether or not they are getting a

ObjectId

from this call? I’m not, and I am not sure if thats how it always was (the other three fields are present)?

sparse-intern-71089

07/07/2022, 9:00 AM

This message was deleted.

sparse-intern-71089

07/07/2022, 11:08 AM

This message was deleted.

glamorous-waitress-51149

07/07/2022, 11:55 AM

i’m using azure native, is there a way to reference a resource in another subscription in pulumi. I tried the below but get an error saying `request failed /subscriptions/MY_SUB_ID/resourceGroups/%2Fsubscriptions%2FMY_OTHER_SUB_ID%2FresourceGroups%2Fcontainer-apps-production/providers/Microsoft.ContainerRegistry/registries/elaway:`:

var registry = Output.Tuple<string, string>("/subscriptions/MY_OTHER_SUB_ID/resourceGroups/container-apps-production", registryName)
                 .Apply(
                     items =>
                         Pulumi.AzureNative.ContainerRegistry.GetRegistry.InvokeAsync(
                             new() {
                                 ResourceGroupName = items.Item1,
                                 RegistryName      = items.Item2
                             }
                         )
                 );

Title

glamorous-waitress-51149

07/07/2022, 11:55 AM

var registry = Output.Tuple<string, string>("/subscriptions/MY_OTHER_SUB_ID/resourceGroups/container-apps-production", registryName)
                 .Apply(
                     items =>
                         Pulumi.AzureNative.ContainerRegistry.GetRegistry.InvokeAsync(
                             new() {
                                 ResourceGroupName = items.Item1,
                                 RegistryName      = items.Item2
                             }
                         )
                 );

thought this might work which it kinda does but then says

Duplicate resource URN 'urn:pulumi:staging::jctest::pulumi:providers:azure-native::production'; try giving it a unique name

var registry = Output.Tuple<string, string>("container-apps-production", registryName)
                .Apply(
                    items =>
                        Pulumi.AzureNative.ContainerRegistry.GetRegistry.InvokeAsync(
                            new()
                            {
                                ResourceGroupName = items.Item1,
                                RegistryName = items.Item2
                            },
                            new InvokeOptions()
                            {
                                Provider = new Provider("production",
                                    new ProviderArgs() { SubscriptionId = "MY_OTHER_SUB" })
                            }
                        )
                );

that did work but each provider needed to have a unique name

but now i have 3

pulumi:providers:azure-native

resources

var registry = Output.Tuple<string, string>("container-apps-production", registryName)
                .Apply(
                    items =>
                        Pulumi.AzureNative.ContainerRegistry.GetRegistry.InvokeAsync(
                            new()
                            {
                                ResourceGroupName = items.Item1,
                                RegistryName = items.Item2
                            },
                            new InvokeOptions()
                            {
                                Provider = new Provider("production-container-registry",
                                    new ProviderArgs() { SubscriptionId = "my_other_sub" })
                            }
                        )
                );

            var credentials = Output
                .Tuple<string, string>(
                    "container-apps-production",
                    registryName)
                .Apply(
                    items =>
                        ListRegistryCredentials.InvokeAsync(
                            new()
                            {
                                ResourceGroupName = items.Item1,
                                RegistryName = items.Item2,
                            },
                            new InvokeOptions()
                            {
                                Provider = new Provider("production-registry-credentials",
                                    new ProviderArgs() { SubscriptionId = "my_other_sub" })
                            }
                        )
                );

maybe i can create one instance and pass it each objects above and then i only have 2 azure native provider resources?

tall-librarian-49374

07/07/2022, 1:33 PM

You need to define a Provider once and then reuse it for all resource options. Provide is a type of resource, so it should be named uniquely.

var myProvider = new Provider("production",
                                    new ProviderArgs() { SubscriptionId = "MY_OTHER_SUB" });
...
new InvokeOptions() { Provider = myProvider }

glamorous-waitress-51149

07/07/2022, 1:34 PM

cool, that’s what i did in the end 🙂 thanks!

tall-librarian-49374

07/07/2022, 1:34 PM

Also, you can pass outputs directly to args if you use a different form of a function, e.g.

GetRegistry.Invoke

instead of

GetRegistry.InvokeAsync

. You won’t need an Apply then.

glamorous-waitress-51149

07/07/2022, 1:38 PM

yeah i’m not sure why I have that

Output.Tuple

as the values passed in are normal strings

tall-librarian-49374

07/07/2022, 1:39 PM

🙂 ah okay, definitely remove them then

glamorous-waitress-51149

07/07/2022, 1:39 PM

var registry2 =
                Pulumi.AzureNative.ContainerRegistry.GetRegistry.Invoke(
                    new()
                    {
                        ResourceGroupName = "container-apps-production",
                        RegistryName = registryName
                    },
                    new InvokeOptions
                    {
                        Provider = provider
                    }
                );
            
var loginServer2 = registry2.Apply(x => x.LoginServer);

how’s that? 🙂

tall-librarian-49374

07/07/2022, 1:49 PM

👍

glamorous-waitress-51149

07/07/2022, 1:49 PM

nice! thanks for the tips

View count: 6