This message was deleted.

sparse-intern-71089

08/28/2023, 4:50 PM

This message was deleted.

billowy-army-68599

08/28/2023, 4:55 PM

how are you authing to azure?

crooked-scientist-50485

08/28/2023, 4:56 PM

I'm logged in via the AZ cli, but the variables mentioned above are set to the service principal I created

billowy-army-68599

08/28/2023, 4:59 PM

have you set the key permissions correctly? https://github.com/pulumi/examples/tree/master/secrets-provider/azure#create-an-azure-keyvault-key

➕ 1

billowy-army-68599

08/28/2023, 4:59 PM

specifically:

Copy code

az keyvault set-policy --name pulumi --object-id $YOUR_OBJECT_ID --key-permissions decrypt get create delete list update import backup restore recover encrypt

crooked-scientist-50485

08/28/2023, 5:05 PM

It uses RBAC authentication...

crooked-scientist-50485

08/28/2023, 5:06 PM

do I need to switch to using policies instead?

billowy-army-68599

08/28/2023, 5:06 PM

well that’s how I’ve had it working before, but likely your RBAC is not correct:

ForbiddenByRbac

- is pretty clear

crooked-scientist-50485

08/28/2023, 5:06 PM

it sure is 🙂

crooked-scientist-50485

08/28/2023, 5:06 PM

I'll give it a try

crooked-scientist-50485

08/28/2023, 5:16 PM

thank you 💐 switching to policy-based worked like a charm!

🎉 1

4 Views

Open in Slack

Previous Next

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.