To be able to use a wildcard certificate I need to go through the steps shown in the Azure portal on the image. My question how do I add it to keyVault in Pulumi? I got the following code when importing the cert

CertificateOrder = new CertificateOrder("mycert", new CertificateOrderArgs
{
    AutoRenew = true,
    KeySize = 2048,
    Location = "global",
    Name = "mycert",
    ProductType = "WildCard",
    ResourceGroupName ="myresourcegroup",
    ValidityInYears = 1,
});

but there is no keyVaultId to be found. But Web.Certificate has KeyVaultId

var cert= new AzureNative.Web.Certificate("cert", new AzureNative.Web.CertificateArgs
{
  KeyVaultId = KeyVault.Id,
  ...
}

So how can I hook them together? I should probably use https://www.pulumi.com/registry/packages/azure/api-docs/keyvault/certificate/ Correct? But how?

var exampleCertificate = new Azure.KeyVault.Certificate("exampleCertificate", new Azure.KeyVault.CertificateArgs
{
    KeyVaultId = KeyVault.Id,
    KeyVaultCertificate = new Azure.KeyVault.Inputs.CertificateCertificateArgs
    {
        Contents = "??", //what would go in here? CertificateOrder.?
        Password = "??"
    }
});

There is a keyvault connection it seams but how do I set it?

var thereIsAKeyVaultConnection = CertificateOrder.Certificates.First().Apply(x => x.KeyVaultId);

So there's a

keyvault

module in the API: https://www.pulumi.com/registry/packages/azure-native/api-docs/keyvault/

Yes I want to be in the native stack I found out today. And Ill look at this tomorrow but now its almost 24:00 were I live so Ill get back to this tomorrow. I apreciate all your help!

No worries! Feel free to leave me questions when you do get back on; async works for me.

Hi @sticky-exabyte-94099 were you able to solve this? Please share. Thanks

How are you getting the ID? Can you share a bit of code?

@green-intern-53931 hi sorry I had to postpone working on this since it was taking to much effort. But now I'm sitting down again and will try this all out again... when I have this working (or not) I´ll ping you here again

Thanks @sticky-exabyte-94099 Hi @great-queen-39697 I get the Id from the key vault resource like this

keyVaultId: vault.id

import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const certificate = new azure_native.web.Certificate("certificate", {
    hostNames: ["ServerCert"],
    location: "East US",
    name: "testc6282",
    password: "<password>",
    resourceGroupName: "testrg123",
    keyVaultId: vault.id;
});

create the key vault resource like this

import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const vault = new azure_native.keyvault.Vault("vault", {
    location: "westus",
    properties: {
        accessPolicies: [{
            objectId: "00000000-0000-0000-0000-000000000000",
            permissions: {
                certificates: [
                    "get",
                    "list",
                    "delete",
                    "create",
                    "import",
                    "update",
                    "managecontacts",
                    "getissuers",
                    "listissuers",
                    "setissuers",
                    "deleteissuers",
                    "manageissuers",
                    "recover",
                    "purge",
                ],
                keys: [
                    "encrypt",
                    "decrypt",
                    "wrapKey",
                    "unwrapKey",
                    "sign",
                    "verify",
                    "get",
                    "list",
                    "create",
                    "update",
                    "import",
                    "delete",
                    "backup",
                    "restore",
                    "recover",
                    "purge",
                ],
                secrets: [
                    "get",
                    "list",
                    "set",
                    "delete",
                    "backup",
                    "restore",
                    "recover",
                    "purge",
                ],
            },
            tenantId: "00000000-0000-0000-0000-000000000000",
        }],
        enabledForDeployment: true,
        enabledForDiskEncryption: true,
        enabledForTemplateDeployment: true,
        sku: {
            family: "A",
            name: "standard",
        },
        tenantId: "00000000-0000-0000-0000-000000000000",
    },
    resourceGroupName: "sample-resource-group",
    vaultName: "sample-vault",
});