I am deploying things onto GCC High. I was able t...
# azure
b
I am deploying things onto GCC High. I was able to deploy an AKS environment, but i started making a bucket and writing stuff to a storage container, and couldn't get it to use the high endpoints. I found something that suggested i needed to create and pass a provider into the functions.
Copy code
azure_provider = Provider("azure-provider", environment="AzureUSGovernment")
resource_group = resources.ResourceGroup(
    "resource_group",
    opts=ResourceOptions(provider=azure_provider)
)
That worked mostly, but with the Resource Group, it gives the following
Copy code
The configured Azure environment 'AzureUSGovernment' does not match the determined environment 'usgovernment'.
    When authenticating using the Azure CLI, the configured environment needs to match the one shown by 'az account show'.
    You can change environments using 'az cloud set --name <environment>'.
I can't find where it is 'determining'
usgovernment
Every place i can find is set to AzureUSGovernment.
Copy code
vscode ➜ /workspaces/aks_cluster (main) $ az account show 
{
  "environmentName": "AzureUSGovernment",
Copy code
vscode ➜ /workspaces/aks_cluster (main) $ env | grep -i gov
AZURE_STORAGE_DOMAIN=<http://blob.core.usgovcloudapi.net|blob.core.usgovcloudapi.net>
AZURE_CLOUD_ENVIRONMENT=AzureUSGovernment
PULUMI_AZURE_NATIVE_ENVIRONMENT=AzureUSGovernment
ARM_ENVIRONMENT=AzureUSGovernment
I removed all the opts, that was specifing the provider, and that seems to let it just trust my az login however, azure-nativestorageBlob (adminKubeconfigBlob): error: POST https://management.azure.com/subscriptions/XXXX/resourceGroups/XXXX/providers/Microsoft.Storage/storageAccounts/shredinf/listKeys this implies that the Blob commands aren't using the endpoints in the environment. (management.azure.com is wrong)
m
That might be a bug. Could you file an issue at https://github.com/pulumi/pulumi-azure-native/issues? Thank you!
b
I'm still making progress, still not sure its not my config...got to the point where i think it gets past those issues, and just has trouble writing to a blob. If i hit something that i can blame pulumi for, ill make a bug. (or maybe once i figure out what config works, ill put it in as a feature request to 'simplify' it for dummies like me 🙂 )
m
yes please! simplification and better docs are always great.
Responded on the issue yesterday FYI