Terraform with azure CLI - error building account

Question

using the provider block

provider "azurerm" {
  subscription_id = var.subscription_id
  version         = "=1.44"
}

and after successfully logging in with

az login

running

terraform plan

I get the following error:

Error: Error building account: Error getting authenticated object ID: Error parsing json result from the Azure CLI: Error waiting for the Azure CLI: exit status 2

on main.tf line 21, in provider "azurerm":
21: provider "azurerm" {

UPDATE:

If I change the provider block to:

provider "azurerm" {
 version = "~> 1.43"
}

and set the environment variables

ARM_USE_MSI=true
ARM_SUBSCRIPTION_ID=<...>
ARM_TENANT_ID=<...>
HTTP_PROXY=<...>
HTTPS_PROXY=<...>
http_proxy=<...>
https_proxy=<...>

than after executing terraform plan I get the following error:

Connection to 169.254.169.254 failed. No route to host.

which is very strange, as it seems to me, that a service endpoints IP is "hardcoded" into the terraform client.

Terraform v0.12.20 + provider.azurerm v1.44.0 + provider.random v2.2.1 azure-cli (2.0.33) — bayerb
– bayerb, Commented Feb 19, 2020 at 8:53
Do you use the CLI inside the VM? How do you use login with CLI? VM identity or service principal? — Charles Xu
– Charles Xu, Commented Feb 26, 2020 at 1:35
@CharlesXu: In the meantime I found out, that removing ARM_USE_MSI=true solves my problem. Anyway, thanks for the help! — bayerb
– bayerb, Commented Feb 27, 2020 at 9:05

Jamie D · Accepted Answer · 2020-10-19 17:16:40Z

5

Even though I was already logged in via az cli, forcing another:

az login

Resolved this for me.

answered Oct 19, 2020 at 17:16

Jamie D

2563 silver badges7 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Simon Peacock Over a year ago

I had to run az logout first, but then this worked for me.

bayerb · Accepted Answer · 2020-02-27 10:03:42Z

1

Removing variable

ARM_USE_MSI=true

Solved my problem.

This variable tells terraform to use Managed Service Identity. See the docs. The problem was, that the Azure Instance Metadata service endpoint(available on the above mentioned IP), that is used from that point, is only accessible from within a VM, and I was running the terraform from my desktop.

edited Feb 27, 2020 at 10:03

answered Feb 27, 2020 at 9:15

bayerb

6532 gold badges13 silver badges35 bronze badges

1 Comment

Charles Xu Over a year ago

Maybe you can show more things. For example, the reason why it solves your problem.

Suraj Rao · Accepted Answer · 2020-11-10 08:16:51Z

0

az login --tenant TENANT_ID

resolved by using tenant ID

Initially, I tried to log in with "az login" but got a similar error you posted.

edited Nov 10, 2020 at 8:16

Suraj Rao

29.7k11 gold badges96 silver badges104 bronze badges

answered Nov 10, 2020 at 8:13

sekhar reddy

1

Collectives™ on Stack Overflow

Terraform with azure CLI - error building account

3 Answers 3

1 Comment

1 Comment

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

1 Comment

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related