Question How to create database specific users when using `a

Question

Question How to create database specific users when using `azure sql SQLServer` and inside of it some `azure sql Database`s with pulumi

rhythmic-finland-36256 · Answer

The `SQLServer` has an admin user but I m missing the way of creating specific users for the databases I create inside the server to hand those restricted users to some service container instance that should use the database Technically it works with the SQL admin user but I want each service to have a dedicated user to its database

rhythmic-finland-36256 · Answer

Doing this outside of the pulumi context or even manually destroys all mechanisms of passing the credentials to the service

rhythmic-finland-36256 · Answer

I found this blog post by < tall librarian 49374> which also has an example application here but it also uses the admin credentials inside the `AppService`

tall-librarian-49374 · Answer

Yes guilty

rhythmic-finland-36256 · Answer

Thanks for that blog post No blaming intended

tall-librarian-49374 · Answer

You should totally create non admin users I guess you should probably have a SQL script for this and run it out of pulumi program

rhythmic-finland-36256 · Answer

I d like to automate that inside the pulumi program but looking for a good way to do it For terraform there is this `nullresource` hack that executes code <https stackoverflow com questions 54326033 add azure sql user with terraform>

tall-librarian-49374 · Answer

If you need a hack you could make a dynamic provider for this

rhythmic-finland-36256 · Answer

As we have a real programming language and access to all server names and credentials we should be able to execute this logic from within the pulumi program and even create some random passwords for those users

rhythmic-finland-36256 · Answer

My question is more if I need to do such a hack or if there are easier ways of executing code I m wondering what I need to take care of to work nicely within the preview phase I assume this could cause some issues as the code can only be executed when in the real execution

rhythmic-finland-36256 · Answer

I read about `isDryRun` but not sure if that s a good practice for that

tall-librarian-49374 · Answer

A dynamic provider would take care of this It s not really a hack just that it s manual work

rhythmic-finland-36256 · Answer

Yes sure This is not a failure of pulumi but more of a missing feature on the azure api I guess

rhythmic-finland-36256 · Answer

I m fine with implementing this part

rhythmic-finland-36256 · Answer

Then I ll have a look at the DynamicProvider documentation Thanks for this direction thumbsup

tall-librarian-49374 · Answer

In terms of Azure this is clearly a data plane thing ARM doesn t know about SQL users

tall-librarian-49374 · Answer

Like you can t create a Blob with ARM But you can with Pulumi slightly smiling face

tall-librarian-49374 · Answer

There is <https github com pulumi pulumi mysql> so I guess there could be a provider for SQL Server Database

tall-librarian-49374 · Answer

Some examples of dynamic providers and

rhythmic-finland-36256 · Answer

Thanks I ll have a look at those

better-rainbow-14549 · Answer

i started on a dynamic provider for sql server but never finished it

better-rainbow-14549 · Answer

hit variuos issues with trying to create MSI users from external provider but i ve since found a workaround