`const stack = await LocalWorkspace createStack ` `stackName

Question

`const stack = await LocalWorkspace createStack ` `stackName ` `projectName ` `program createPulumiProgram stackName ` ` ` `projectSettings ` `name projectName ` `runtime nodejs ` `description projectName ` `backend ` `url azblob ` ` ` ` ` `stackSettings ` ` stackName ` `secretsProvider azurekeyvault <http vault azure net keys |vault azure net keys > ` `config ` ` azure location Constants AZURE CONFIG location ` ` azure environment Constants AZURE CONFIG environment ` ` azure clientId Constants AZURE CONFIG clientId ` ` azure clientSecret secret Constants AZURE CONFIG clientSecret ` ` azure subscriptionId Constants AZURE CONFIG subscriptionId ` ` azure tenantId Constants AZURE CONFIG tenantId ` ` ` ` ` ` ` `envVars ` ` AZURE STORAGE KEY ` ` AZURE STORAGE ACCOUNT ` ` AZURE KEYVAULT AUTH VIA CLI false ` ` ` ` ` Error is as follows CommandError code 255 stdout Created stack statictest stderr error passphrase must be set with PULUMI CONFIG PASSPHRASE or PULUMI CONFIG PASSPHRASE FILE environment variables err at Object createCommandError Users veerasamy001 Projects 3Labs cloud self service portal node modules pulumi pulumi automation errors js 71 17 at ChildProcess lt anonymous gt Users veerasamy001 Projects 3Labs cloud self service portal node modules pulumi pulumi automation cmd js 63 40 at ChildProcess emit node events 378 20 at Process ChildProcess handle onexit node internal child process 290 12 commandResult CommandResult stdout Created stack statictest n stderr error passphrase must be set with PULUMI CONFIG PASSPHRASE or PULUMI CONFIG PASSPHRASE FILE environment variables n code 255 err undefined I am actually facing the above issue even though I have emvironment variables for Azure Blob storage Any help would be much appreciated

red-match-15116 · Answer

It looks like you re missing the top level secretsProvider setting See this thread for more details <https pulumi community slack com archives C019YSXN04B p1620424551253500 thread ts=1620350166 244800 amp cid=C019YSXN04B>

red-match-15116 · Answer

You ll need something like the following ```const secretsProvider = azurekeyvault <http vault azure net keys |vault azure net keys > const stack = await LocalWorkspace createStack stackName projectName program createPulumiProgram stackName secretsProvider projectSettings name projectName runtime nodejs description projectName backend url azblob stackSettings stackName secretsProvider config azure location Constants AZURE CONFIG location azure environment Constants AZURE CONFIG environment azure clientId Constants AZURE CONFIG clientId azure clientSecret secret Constants AZURE CONFIG clientSecret azure subscriptionId Constants AZURE CONFIG subscriptionId azure tenantId Constants AZURE CONFIG tenantId envVars AZURE STORAGE KEY AZURE STORAGE ACCOUNT AZURE KEYVAULT AUTH VIA CLI false ```

bumpy-agent-19616 · Answer

Thanks for the suggestion first of all but got the issue `stderr error open keeper failed to Dial default KeyVault Invoking Azure CLI failed with the following error ERROR Please run az login to setup account n +` this time < red match 15116> Any suggestions

bumpy-agent-19616 · Answer

``` AZURE KEYVAULT AUTH VIA CLI false ``` Tried changing it to true as well but didn t help much

red-match-15116 · Answer

Hmm yeah unfortunately I don t have much azure specific knowledge

bumpy-agent-19616 · Answer

Oh I see Is this somehow related to this <https github com pulumi pulumi issues 6597>

red-match-15116 · Answer

Possibly although it seems that you are setting the `AZURE KEYVAULT AUTH VIA CLI` env var and it s still not working and that seemed to work in that specific bug report