ARM Deployment using KeyVault and certificates for Azure Data Lake Store -


i want create hdi/spark cluster accesses azure data lake store using arm templates , azure key vault.

so far created cluster manually , stored arm template. tried populate sensitive values azure key vault struggeling how pass in "identitycertificate" correctly.

i followed steps create certificate , everything: https://github.com/azure/azure-quickstart-templates/tree/master/201-hdinsight-datalake-store-azure-storage , steps upload certificate keyvault: https://blogs.technet.microsoft.com/kv/2016/09/26/get-started-with-azure-key-vault-certificates/

however, referenceing keyvault secret in arm template ends in error:

{ "status": "failed", "error": { "code": "resourcedeploymentfailure", "message": "the resource operation completed terminal provisioning state 'failed'.", "details": [ { "code": "invaliddocumenterrorcode", "message": "deploymentdocument 'ambariconfiguration_1_7' failed validation. error: 'error while getting access datalake storage account gbhdi: specified network password not correct.\r\n.'" } ] } }

doing manually in azure portal using same certificate etc. works fine tried set "identitycertificate" parameter manually using base64 encoded value of certificate did not work either value would need pass parameter if hard-code it?

any other ideas on this?

thanks in advance, -gerhard

seems found issue , related failed arm deployments leave fragments of hdi cluster , new deployments not overwrite these fragments use old settings

after deleting cluster (which not working anyway) deploy expected.

however, worth mentioning certificate has stored in keyvault secret , not key , has base64 encoded!

here powershell script used:

#add certificate keyvault  $base64cert = [system.convert]::tobase64string((get-content $certfilepath -encoding byte)) $base64cert | out-file $certfilepath.replace(".pfx", ".base64.txt") $cer3 = set-azurekeyvaultsecret -vaultname $vaultname -name $certname -  secretvalue (convertto-securestring –string $base64cert –asplaintext –force)

hope helps other people facing same issue!

-gerhard


Comments

Post a Comment

Popular posts from this blog

Is there a better way to structure post methods in Class Based Views -

i'm using class based views in django , never specify url in ajax calls , omit action parameter in form because know these requests go through post method of class based view. notice view - profile page make many requests depending on user updating on page - post method become convoluted , if/else mess example: def post(self, request, *args, **kwargs): # handle user changing available date if request.post.get('availabledate') != none: self.updateavailabledate(request) return jsonresponse({'result':'success'}) if request.post.get('newprojectname') != none: creative_user = creativeuserprofile.objects.get(id = request.user.id) project = project.create_project(creative_user, request.post['newprojectname']) project.save() return jsonresponse({'projectid': project.id }) if request.post.get('projectimage') != none , request.files['file']: proj...
Read more

performance - Why is XCHG reg, reg a 3 micro-op instruction on modern Intel architectures? -

i'm doing micro-optimization on performance critical part of code , came across sequence of instructions (in at&t syntax): add %rax, %rbx mov %rdx, %rax mov %rbx, %rdx i thought had use case xchg allow me shave instruction , write: add %rbx, %rax xchg %rax, %rdx however, dimay found agner fog's instruction tables , xchg 3 micro-op instruction 2 cycle latency on sandy bridge, ivy bridge, broadwell, haswell , skylake. 3 whole micro-ops , 2 cycles of latency! 3 micro-ops throws off 4-1-1-1 cadence , 2 cycle latency makes worse original in best case since last 2 instructions in original might execute in parallel. now... cpu might breaking instruction micro-ops equivalent to: mov %rax, %tmp mov %rdx, %rax mov %tmp, %rdx where tmp anonymous internal register , suppose last 2 micro-ops run in parallel latency 2 cycles. given register renaming occurs on these micro-architectures, though, doesn't make sense me done way. why wouldn't register renamer ...
Read more

c# - Asp.net web api : redirect unauthorized requst to forbidden page -

im trying redirect unauthorized request forbidden page instead i'm getting forbidden page in response body , how can fix ? here's startup class : app.createperowincontext(storecontext.create); app.createperowincontext<applicationusermanager>(applicationusermanager.create); app.createperowincontext<applicationsigninmanager>(applicationsigninmanager.create); app.usecookieauthentication(new cookieauthenticationoptions { authenticationtype = defaultauthenticationtypes.applicationcookie, expiretimespan = timespan.fromdays(30), }); app.useexternalsignincookie(defaultauthenticationtypes.externalcookie); app.usetwofactorsignincookie(defaultauthenticationtypes.twofactorcookie, timespan.fromminutes(5)); app.usetwofactorrememberbrowsercookie(defaultauthenticationtypes.twofactorrememberbrowsercookie); the method im trying reach : [httpget] [authorize(roles = "admin")] public string getcurrentusername() { return userman...
Read more