Really Works?

[alexwiedermann]

Hi,

I tried create a servicefabric using your example and everything created was well. But service fabric stil waiting for nodes.

Can you give me some tip?

[TrevorVonSeggern]

No I haven't got it working yet either. I was having the same issue you are. It is still very much a work in progress. I think the reason why the nodes can't connect is that the certificate settings are not properly set/installed.

[alexwiedermann]

Thanks, I will try changing azurerm_service_fabric_cluster to azurerm_template_deployment, this a workaround.

[deanoporter]

I got this working, the issue was certificates.

Edit lines 214-215 with the relevant thumbprint.

Then also the certificate information at the bottom from line 269 down.

The only thing I haven't managed to get working is the "load_balancer_inbound_nat_rules_ids", but if you comment it out, the terraform apply will complete.

[alexwiedermann]

I got this working, the issue was certificates.

Edit lines 214-215 with the relevant thumbprint.

Then also the certificate information at the bottom from line 269 down.

The only thing I haven't managed to get working is the "load_balancer_inbound_nat_rules_ids", but if you comment it out, the terraform apply will complete.

And he did not keep waiting for nodes?

[deanoporter]

Nope, everything apart form the LB NAT completes.

The hosts baseline upgrade takes a while to complete, though.

[TrevorVonSeggern]

@deanoporter Could you create a PR for the changes you made for the certificate information?

[alexwiedermann]

@TrevorVonSeggern Mine terraform with servicefabric working almost of things. Him create the fabric, virtual machine scale set, deploy fabric in the nodes but a xml configuration file not found. It's kind of difference of yours because i using Linux but can help.

[deanoporter]

@deanoporter Could you create a PR for the changes you made for the certificate information?

Hey Trevor, I'm quite new to Github so just trying to figure out how to setup the PR.

I've managed to get the LB inbound NAT rules working, but now am trying to setup the addon feature for the EventStoreService in the Fabric Settings.

[deanoporter]

My work can be found here

https://github.com/deanoporter/Terraform

[alexwiedermann]

There's no repositories on your account

[alexwiedermann]

@deanoporter Could you create a PR for the changes you made for the certificate information?

Hey Trevor, I'm quite new to Github so just trying to figure out how to setup the PR.

I've managed to get the LB inbound NAT rules working, but now am trying to setup the addon feature for the EventStoreService in the Fabric Settings.

Just use ServiceFabric 6.5+ this feature is default after this version.

[deanoporter]

Repo is now public.

Once you have added the nodes you need to copy the cert into the root CA store from personal and then restart the scale set.

The baseline update then completes and the status will change to Ready.

[Rohit-Stackroute]

@deanoporter @TrevorVonSeggern How are you guys creating certificates ? Please suggest me the step for that.

[deanoporter]

Just using a self signed from an Azure Keyvault

On 2019-09-18 13:23, Rohit Ghosh wrote:

@deanoporter [1] @TrevorVonSeggern [2] How are you guys creating certificates ? Please suggest me the step for that.

-- You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub [3], or mute the thread [4].

Links:

[1] https://github.com/deanoporter [2] https://github.com/TrevorVonSeggern [3] https://github.com/TrevorVonSeggern/ServiceFabric_Terraform/issues/3?email_source=notifications&email_token=AMQFMPGEXYA7SVUSOKLTKVTQKIMVXA5CNFSM4HOP5DE2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD6736EQ#issuecomment-532659986 [4] https://github.com/notifications/unsubscribe-auth/AMQFMPHS52YQPSQMK5K6CHDQKIMVXANCNFSM4HOP5DEQ