https://pulumi.com logo
Powered by
s

sparse-insurance-40223

09/26/2018, 10:05 AM
what's the deal with azure role assignments... I've had to specify the name like this :
Copy code
const mppbuildRoleAssignment = new azure.role.assignment("mppbuild", {
    name: "00000000-0000-0000-0000-000000000000",
    principalId: adServicePrincipal.id,
    scope: config.mppbuild.then(x => x.id),
    roleDefinitionName: "Reader"
});
but i get things like:
Copy code
azure:role:assignment: mppbuild
error: Plan apply failed: authorization.RoleAssignmentsClient#Create: Failure responding to request: StatusCode=400 -- Original Error: autorest/azure: Service returned
an error. Status=400 Code="RoleAssignmentUpdateNotPermitted" Message="Tenant ID, application ID, principal ID, and scope are not allowed to be updated."
am i doing something fundamentally wrong?
config.mppbuild in this context is from :
Copy code
export let mppbuild: Promise<azure.containerservice.GetRegistryResult> = azure.containerservice.getRegistry({ ...
Powered by