Azure / bicep

Bicep is a declarative language for describing and deploying Azure resources
MIT License
3.21k stars 745 forks source link

Bicep in VS Code won't display govcloud subscriptions #14834

Open alaskascooter opened 1 month ago

alaskascooter commented 1 month ago

Bicep version 0.29.47

Describe the bug Either by right-clicking and selecting deploy bicep file, or by using the deployment pane, I am unable to select a subscription in any govcloud region. An alert appears in VS Code (bottom right) that states no subscriptions found.

To Reproduce Attempt to deploy bicep file to azure govcloud.

Additional context Spoke with an individual on the Azure Discord server who suggested it might be a wrong ARM call to "GET" the subscriptions and the appropriate error isn't presenting. Attempted at 5:45PM Eastern on 8/13/2024 for any log searching.

shenglol commented 3 weeks ago

I couldn't reproduce this issue. @alaskascooter, the Bicep VS Code extension relies on the Azure Account VS Code extension for authentication. Have you tried logging in and selecting a tenant ID using the following command? image

alaskascooter commented 3 weeks ago

Thanks for trying. When I try the method you suggest, this is the error I receive. Would this indicate that it is the azure component giving me issues? I am able to browse resources in the only subscription I am assigned to using the Azure Resource browser. image

Thanks again.

shenglol commented 3 weeks ago

Can you access the national cloud portal (e.g., https://portal.azure.us)?

alaskascooter commented 3 weeks ago

Yes, clicking on that link I am taken to my portal home screen for azure gov and can see all my resources.

shenglol commented 3 weeks ago

It seems this might be a bug in the Azure Account VS Code extension. I recommend trying to run Azure: Sign Out and then Azure: Sign In to Azure Cloud to see if that resolves the issue.

If it still doesn't work, it might be worth reporting the issue at https://github.com/microsoft/vscode-azure-account/issues.

alaskascooter commented 3 weeks ago

Thanks, I've attempted that a few times now. I'll jump over there and see what they can do for us.

Thank you

alaskascooter commented 3 weeks ago

FYI, their troubleshooting page provided some steps required before posting an issue related to logins. It appears to have fixed it. Specifically, I think it was clearing the tenant id from cache and then reauthenticating, selecting the tenant, and then subscriptions. Now the Bicep deployment panel allows me to see all the resource groups within my subscription.

edit However, Bicep does allow me to see and select the subscription and RG, but when I attempt to deploy, it then says SubscriptionNotFound despite it being in the Deployment Scope window having been selected.

I will attempt via cli.

shenglol commented 2 weeks ago

it then says SubscriptionNotFound despite it being in the Deployment Scope window having been selected

Could you share a screenshot of the error? I'm trying to determine whether it's an issue with ARM or something on the client side.

alaskascooter commented 2 weeks ago

Here is the error within the bicep pane: image

And the Deployment Scope section: image

ok, this is weird. I just tried using the right-click deploy bicep in the cli and it ran. No errors. Well, it had errors, but now it's my actual code that is wrong, not the fact that it couldn't find the subscription.

I'm going to do some more troubleshooting and restarts. I'm also setting up a system outside the company network to see if it's something with corporate firewall tomfoolery.

shenglol commented 2 weeks ago

Sounds like this is a bug in deployment pane then. I'll take a deeper look into the root cause.