BYO-KV: Unable to use packer key vault from different resource group than packer rg

14 views
Skip to first unread message

G K

unread,
Oct 19, 2023, 5:08:41 PM10/19/23
to Packer
Hello, 

I am using packer 1.8.7 and using packer-plugin-arm. 

TL;DR; 
can BYO Key-vault be in different resource group than packer resource group? Basically, build_key_vault_name's resource group is not same as build_resource_group_name mentioned in packer config.
-------

My packer build resource group and packer key vault resource group is different. When I am trying to run packer, it is giving this error. It seems it looks for KV in packer resource group. 

The resource write operation failed to complete successfully, because it reached terminal provisioning state 'Failed'.\",\r\n    \"details\": [\r\n      {\r\n        \"code\": \"KeyVaultAccessForbidden\",\r\n        \"message\": \"Key Vault https://testkv-eastus.vault.azure.net/secrets/packerKeyVaultSecret/klkasd either has not been enabled for deployment or the vault id provided, /subscriptions/<>/resourceGroups/<>/providers/Microsoft.KeyVault/vaults/testkv-eastus, does not match the Key Vault's true resource id.\"\r\n      }\r\n    ]\r\n  }\r\n}"}]


Thank you in advance.
Reply all
Reply to author
Forward
0 new messages