Skip to content
This repository was archived by the owner on Feb 2, 2022. It is now read-only.
This repository was archived by the owner on Feb 2, 2022. It is now read-only.

Error during deployment #176

Open
Open
@mgreisen

Description

@mgreisen

Seeing this error during deployment.

Assigning Key Vault roles
adding Read permission
granting permissions
args: az keyvault secret set --description "v312 Service Principal authentication credentials" --file /mnt/d/released-cli/v3.1/raft_sdk/.tmp/sp.json --name RaftServicePrincipal --vault-name v312-raft-6e2b-kv
std error: ERROR: Caller is not authorized to perform action on resource.
If role assignments, deny assignments or role definitions were changed recently, please observe propagation time.
Caller: appid=04b07795-8ddb-461a-bbee-02f9e1bf7b46;oid=78cd9cd1-7446-4a3e-85b2-63375f97deaa;iss=https://sts.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/
Action: 'Microsoft.KeyVault/vaults/secrets/setSecret/action'
Resource: '/subscriptions/da3e8787-6e2b-4cae-b201-6e4cd71be189/resourcegroups/v312-raft/providers/microsoft.keyvault/vaults/v312-raft-6e2b-kv/secrets/raftserviceprincipal'
Assignment: (not found)
Vault: v312-raft-6e2b-kv;location=centralus


Even though we are waiting for the service principal to be visible in AAD there still seems to be a timing issue,
Re-running the deploy step always works.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions