CODEWITHSUNDEEP
azureterraformterraform-provider-azure
bayerb
bayerb

Reputation: 643

Terraform with azure CLI - error building account

using the provider block

provider "azurerm" {
  subscription_id = var.subscription_id
  version         = "=1.44"
}

and after successfully logging in with

az login

running

terraform plan

I get the following error:

Error: Error building account: Error getting authenticated object ID: Error parsing json result from the Azure CLI: Error waiting for the Azure CLI: exit status 2

on main.tf line 21, in provider "azurerm":
21: provider "azurerm" {

UPDATE:

If I change the provider block to:

provider "azurerm" {
 version = "~> 1.43"
}

and set the environment variables

ARM_USE_MSI=true
ARM_SUBSCRIPTION_ID=<...>
ARM_TENANT_ID=<...>
HTTP_PROXY=<...>
HTTPS_PROXY=<...>
http_proxy=<...>
https_proxy=<...>

than after executing terraform plan I get the following error:

Connection to 169.254.169.254 failed. No route to host.

which is very strange, as it seems to me, that a service endpoints IP is "hardcoded" into the terraform client.

Upvotes: 9

Views: 12336

Answers (3)

sekhar reddy
sekhar reddy

Reputation: 1

az login --tenant TENANT_ID

resolved by using tenant ID

Initially, I tried to log in with "az login" but got a similar error you posted.

Upvotes: 0

Jamie D
Jamie D

Reputation: 256

Even though I was already logged in via az cli, forcing another:

az login

Resolved this for me.

Upvotes: 5

bayerb
bayerb

Reputation: 643

Removing variable

ARM_USE_MSI=true

Solved my problem.

This variable tells terraform to use Managed Service Identity. See the docs. The problem was, that the Azure Instance Metadata service endpoint(available on the above mentioned IP), that is used from that point, is only accessible from within a VM, and I was running the terraform from my desktop.

Upvotes: 1

Related Questions