Bicep DSC extension deployment - The resource namespace 'subscriptions' is invalid

[Jetelaczek]

Hello,

I am deploying servers using Bicep template which contains following resources - network cards, VMs, Availability Sets, Shutdown Schedule and last one is the DSC extension (see below). When I start this deployment using 'New-AzResourceGroupDeployment' all looks good, template gets validated and everything get deployed except below DSC extension...

Powershell returns an error which does not tell me much. I was Googling whole afternoon, but haven't found anything appropriate. If anyone has any idea, thanks:

New-AzResourceGroupDeployment: C:\Users\Tomass\Scripts\Server.ps1:36
Line |
36 | New-AzResourceGroupDeployment -Verbose -Name "ServerDeployment" `
| ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| 15:29:05 - The deployment 'ServerDeployment' failed with error(s). Showing 2 out of 2 error(s). Status Message: The resource namespace 'subscriptions' is invalid. (Code:InvalidResourceNamespace) Status Message: The
| resource namespace 'subscriptions' is invalid. (Code:InvalidResourceNamespace) CorrelationId: 922762c3-3be9-4f89-b3c2-d24ce2b37140

##########################################################################
##########################################################################
##########################################################################

resource DscExtension 'Microsoft.Compute/virtualMachines/extensions@2021-07-01' = [for item in Par_Servers: {
name: '${item.NodeName}/Microsoft.Powershell.DSC'
location: Par_Location
dependsOn: [
Resource_VMs
]
properties: {
publisher: 'Microsoft.Powershell'
type: 'DSC'
typeHandlerVersion: '2.77'
autoUpgradeMinorVersion: true
protectedSettings: {
Items: {
registrationKeyPrivate: listkeys(Var_DSC.AutoAccountResourceID, '2021-06-22').Keys[0].value
}
}
settings: {
Properties: [
{
Name: 'RegistrationKey'
Value: {
UserName: 'PLACEHOLDER_DONOTUSE'
Password: 'PrivateSettingsRef:registrationKeyPrivate'
}
TypeName: 'System.Management.Automation.PSCredential'
}
{
Name: 'RegistrationUrl'
Value: reference(Var_DSC.AutoAccountResourceID, '2021-06-22').RegistrationUrl
TypeName: 'System.String'
}
{
Name: 'NodeConfigurationName'
Value: 'DscServerConfig.${item.NodeName}'
TypeName: 'System.String'
}
{
Name: 'ConfigurationMode'
Value: 'ApplyandMonitor'
TypeName: 'System.String'
}
{
Name: 'RebootNodeIfNeeded'
Value: true
TypeName: 'System.Boolean'
}
{
Name: 'ActionAfterReboot'
Value: 'ContinueConfiguration'
TypeName: 'System.String'
}
{
Name: 'ConfigurationModeFrequencyMins'
Value: 15
TypeName: 'System.Int32'
}
{
Name: 'RefreshFrequencyMins'
Value: 30
TypeName: 'System.Int32'
}
]
}
}
}]

[kilasuit]

My imediate guess would be to look at this Var_DSC.AutoAccountResourceID and see if you don't have a duplicate & unneeded subscriptions entry in that resulting string

[brwilkinson]

It would be helpful to share some more of your template. e.g. include the Var_DSC variable.

[Jetelaczek]

Hi Ben,

Sure thing!

Server.txt

[Jetelaczek]

Good morning (at least in Prague:) @kilasuit and thanks for your suggestion - still don't understand why, but it works afret removing that initial '/subscriptions/' from the variable...does not make much sense to me - when I check full 'path' to my automation account:

/subscriptions/***/resourceGroups/RG-Showcase-SupportStuff/providers/Microsoft.Automation/automationAccounts/AA-Name

Original:

var Var_DSC = {
AutoAccountResourceID: '/subscriptions/${subscription().id}/resourceGroups/${Par_AaResourceGroupName}/providers/Microsoft.Automation/automationAccounts/${Par_AutomationAccountName}'
}

New (working):

var Var_DSC = {
AutoAccountResourceID: '${subscription().id}/resourceGroups/${Par_AaResourceGroupName}/providers/Microsoft.Automation/automationAccounts/${Par_AutomationAccountName}'
}

[brwilkinson]

you can review the subscription() function here:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-functions-scope#subscription

You can view the alternate outputs:

• id
• subscriptionid

{
  "id": "/subscriptions/{subscription-id}",
  "subscriptionId": "{subscription-id}",
  "tenantId": "{tenant-id}",
  "displayName": "{name-of-subscription}"
}

[Jetelaczek]

Thanks, clear now!