Closed rchan26 closed 2 months ago
Logging in with Pulumi...
error: problem logging in: read ".pulumi/meta.yaml": blob (key ".pulumi/meta.yaml") (code=Unknown): ===== RESPONSE ERROR (ErrorCode=AuthorizationPermissionMismatch) =====
Description=This request is not authorized to perform this operation using this permission.
RequestId:1bc516ad-001e-00a9-0b3e-f19e7f000000
Time:2023-09-27T12:31:46.4507379Z, Details: (none)
This is basically because to use pulumi login azblob://....
you need "Storage Blob Data Contributor" access. See here and here.
I think there might be something wrong with the current code because I do get "✅ User has 'Storage Blob Data Contributor' permissions on this subscription" but actually when I run az role assignment list --include-inherited --assignee "$USER_ID" --role "Storage Blob Data Contributor"
then it just gives me []
as output.
Whereas for az role assignment list --include-inherited --assignee "$USER_ID" --role "Contributor"
(a role I do have) I get a json kind of output.
I think once that works it should get through the setup.sh script fine and then all you need to do is the second part which is:
AZURE_KEYVAULT_AUTH_VIA_CLI=true pulumi up -y
. And hopefully it will work?
Thats where I've got to
Pulumi scripts now work for both full slack bot and api bot. See #132
I've broken something in the hack_week
set up so we might need to delete and recreate in order to regain access but have asked for help in a relevant issue on the pulumi repo so hopefully I can fix this.
Things we still want to deal with are:
Did in #196