In other news I m trying to set up my newly created KeyVault

Question

In other news I m trying to set up my newly created KeyVault as a backend seeing as this is more to do with standard pulumi features than the azure provider I figured it might be appropriate here rather than the azure channel Running `pulumi new azure typescript secrets provider logflow logtostderr verbose 9` Results in a typical flow and I have created the key pulumi secrets and the KeyVault was created by a stack with local secrets and backend but trying to set up a new stack like the command above results in this ```created stack sdfsf Sorry could not create stack sdfsf secrets code=Unknown azure BearerAuthorizer WithAuthorization Failed to refresh the Token for request to https myvaultname StatusCode=0 Original Error adal Failed to execute the refresh request Error = Get dial tcp 169 254 169 254 80 connectex A socket operation was attempted to an unreachable network ``` I m actually fairly curious as to where that IP for the refresh token is coming from I ve had no such problems running `pulumi up` just by being logged in by virtue of az cli Edit resolved I did the hard work of doing everything except reading the last line of where it tells me that if I want to use az cli auth with keyvault secrets I need to set `AZURE KEYVAULT AUTH VIA CLI` to `true`

better-shampoo-48884 · Answer

Essentially it seems to be doing <https docs microsoft com en us azure active directory managed identities azure resources how to use vm token get a token using http> But I m running this from my laptop which is definitely not a machine running in Azure

better-shampoo-48884 · Answer

Right a bit of digging around figured it out So this is the thing secrets backend for pulumi gt keyvault Found that at That includes the instruction gt The default URL opener will use Dial which gets default credentials from the environment unless the AZURE KEYVAULT AUTH VIA CLI environment variable is set to true in which case it uses DialUsingCLIAuth to get credentials from the az command line Thus setting that environment variable on my machine made everything happy Should we perhaps update docs with this info

better-shampoo-48884 · Answer

And had I bothered to read the last line of documentation I would even have seen that it actually said exactly that Good job me closes fork