Template Validation Error - Error: Code=InvalidTemplate; Message=Deployment template validation failed:

See also questions close to this topic

• What is the RM version cmdlet for: Get-AzureDeployment

  I'm trying to do an IP changeover and I'm looking to get the Virtual IP of all our app service instances.

  So far I've put together the following powershell script:

  $apps = Get-AzureRmWebApp 
  Foreach($app in $apps) 
  { 
    Write-Output "$($app.Name)|$($app.OutboundIpAddresses)"
  
    ($app | Get-AzureDeployment -Slot Production).VirtualIPs[0].Address
  
    break;
  }
  

  But I'm stuck at the Get-AzureDeployment step - I think there should be a RM version of this, but I can't find it.

  Related GitHub issue - this indicates it does exist: https://github.com/Azure/azure-powershell/issues/1648

  I'm trying to get to the Virtual Ip Address as per the below screenshot:

  
• Microsoft Azure: How to change subscriptions in a script that iterates through resources across multiple subscriptions

  I have seen similar threads for Azure CLI and I'm using Azure PowerShell console NOT CLI. My understanding is that Set-AzureRmContext only sets the context of the script for a given session. Is there a way to switch the context in the middle of the session? Background- I have a script that goes through each resource it is creating and the resources are spread across multiple subscriptions. As it is iterating through rows, I need it to change subscription. I'm doing it by name (would be ideal) Using Set-AzureRmContext in each iteration is not working as I run this. Simple Set and Get AzureRmContext test tells me that it fails to switch subscription context. So not sure how to proceed from here.

  What I am using:

  $resourceDetail = Import-csv $inputFile
  $index = 1
  $resourceDetail | foreach {
      Write-host "checking row $index"
      #subscription check and select
      $row = $_   
      $subscriptionName = $_.subscription
      $location = $_.location
      Write-Host "Subscription Name: $subscriptionName"
      Set-AzureRmContext -subscriptionId $subscriptionName
      Write-Host "subscription scope $subscriptionName"
      index = index +1
  }
  

  

  
• Is there an Integrated Security=SSPI option for Send-MailMessage?

  I have a table storing email variables/values that are called through powershell queries in my script.

  Send-MailMessage -From $From_Email -To $To_Email -Subject $Job_Success_Email_Subject -Body $Email_Body -SmtpServer $SmtpServer -port $SmtpPort -Credential $SmtpCredentials -usessl
  

  I am mainly interested in the Username/Password credentials being passed from DB, but i have been getting this error when using Get-Credential:

  $SmtpCredentials = Get-Credential
  

  Send-MailMessage : The SMTP server requires a secure connection or the client was not authenticated. The server response was: Authentication required

  if i pass in my credentials from DB like this instead:

  $SmtpPassword = $SmtpPassword | ConvertTo-SecureString -AsPlainText -Force
  
  $SmtpCredentials = New-Object System.Management.Automation.PSCredential($SmtpUser,$SmtpPassword)
  

  Note: the password is NOT encrypted for now just for testing purposes!

  i get these 2 errors:

  New-Object : Cannot find an overload for "PSCredential" and the argument count: "2".

  and then i get a Credential popup login, and if i enter nothing, i get this error:

  Send-MailMessage : Cannot validate argument on parameter 'Credential'. The argument is null or empty. Provide an argument that is not null or empty, and then try the command again.

  if I do enter the credentials manually, i get this instead:

  Send-MailMessage : The SMTP server requires a secure connection or the client was not authenticated. The server response was: Authentication required

  I know this error has threads discussed and answered, but I have gone through all possible solutions, such as usessl and the ConvertTo-SecureString -AsPlainText -Force but its not working. I have also tried [string][ValidateNotNullOrEmpty()]$SmtpPassword but that seems to have no effect either.

  So for now, in order to ensure that its not an issue with the credentials itself, i would like to test with something like Integrated Security=SSPI like sql connection string allows but for the Send-Mail command
• AWS equivalent for Azure Resourcegroup

  Azure Resource group is one thing which ties one complete stack together, so in case you want to know what your complete stack looks like just open up your RG and all resources are there(not talking about very big stacks ). Do we have any service in AWS like this ??
• Check if run command is running

  I am working in a very restricted environment where certain run commands are set to run as both post installation scripts and on a schedule. Issue is that these break my post installation script. I would like to handle these errors gracefully, ideally catch and retry them, or check to see if they are running i.e ps aux | grep bla and wait till its finished executing.

  Any ideas?
• company branding doesn't work for password page in Azure Portal

  I've created company branding from the Azure portal for my application.

  This is working as expected for the first page i.e, the username page. When I click on next for the password page, the custom branding disappears and default Microsoft background appears.

  I want the branding to be continued for the password page also so that there would be consistency.
• Azure ARM: Is a parent resource only complete after child resources complete?

  In the ARM documentation, it's clear that a child resource isn't implicitly dependant on the parent resource i.e. you need to add a dependsOn declaration.

  However it isn't clear whether a parent resource is dependant on child resources implicitly i.e. do all the children need to complete before the parent is marked as complete?

  Or is the child resource declaration simply for convenience to keep the names short i.e. so you don't need to specify the fully scoped name.
• ARM - Map an existing application insights resource to the app-service

  I need to map an existing application insights resource from a different resource group to an app-service

  I'm creating an app-service as part of the ARM template. Could you please let me know, how will i be able to map it.

  PFB my template using which i'm trying to create a new app-service,

  {
    "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
  "serverFarmName": {
    "type": "string",
    "defaultValue": "asp-prod-brand-digital-onlinesetup-shared"
  },
  "serverFarmResourceGroup": {
    "type": "string",
    "defaultValue": "rg-prod-brand-digital-onlinesetup-shared"
  },
  "ss-prod-brand-digitial-onlinesetup-govAdminLogin": {
    "type": "string",
    "minLength": 1
  },
  "ss-prod-brand-digitial-onlinesetup-govAdminLoginPassword": {
    "type": "securestring"
  },
  "db-prod-brand-digital-onlinesetup-govName": {
    "type": "string",
    "minLength": 1
  },
  "db-prod-brand-digital-onlinesetup-govCollation": {
    "type": "string",
    "minLength": 1,
    "defaultValue": "SQL_Latin1_General_CP1_CI_AS"
  },
  "db-prod-brand-digital-onlinesetup-govEdition": {
    "type": "string",
    "defaultValue": "Standard",
    "allowedValues": [
      "Basic",
      "Standard",
      "Premium"
    ]
  },
  "db-prod-brand-digital-onlinesetup-govRequestedServiceObjectiveName": {
    "type": "string",
    "defaultValue": "S2",
    "allowedValues": [
      "Basic",
      "S0",
      "S1",
      "S2",
      "P1",
      "P2",
      "P3"
    ],
    "metadata": {
      "description": "Describes the performance level for Edition"
    }
  }},
    "variables": {
  "ap-prod-brand-digital-onlinesetup-govName": "[concat('ap-prod-brand-digital-onlinesetup-gov', uniqueString(resourceGroup().id))]",
  "ss-prod-brand-digitial-onlinesetup-govName": "[concat('ss-prod-brand-digitial-onlinesetup-gov', uniqueString(resourceGroup().id))]"},
    "resources": [
  {
    "name": "[variables('ap-prod-brand-digital-onlinesetup-govName')]",
    "type": "Microsoft.Web/sites",
    "location": "australiasoutheast",
    "apiVersion": "2015-08-01",
    "dependsOn": [ ],
    "tags": {
      "[concat('hidden-related:', resourceId(parameters('serverFarmResourceGroup'), 'Microsoft.Web/serverFarms', parameters('serverFarmName')))]": "Resource",
      "displayName": "ap-prod-brand-digital-onlinesetup-gov"
    },
    "properties": {
      "name": "[variables('ap-prod-brand-digital-onlinesetup-govName')]",
      "serverFarmId": "[resourceId(parameters('serverFarmResourceGroup'), 'Microsoft.Web/serverFarms', parameters('serverFarmName'))]"
    }
  },
  {
    "name": "[variables('ss-prod-brand-digitial-onlinesetup-govName')]",
    "type": "Microsoft.Sql/servers",
    "location": "[resourceGroup().location]",
    "apiVersion": "2014-04-01-preview",
    "dependsOn": [ ],
    "tags": {
      "displayName": "ss-prod-brand-digitial-onlinesetup-gov"
    },
    "properties": {
      "administratorLogin": "[parameters('ss-prod-brand-digitial-onlinesetup-govAdminLogin')]",
      "administratorLoginPassword": "[parameters('ss-prod-brand-digitial-onlinesetup-govAdminLoginPassword')]"
    },
    "resources": [
      {
        "name": "AllowAllWindowsAzureIps",
        "type": "firewallrules",
        "location": "[resourceGroup().location]",
        "apiVersion": "2014-04-01-preview",
        "dependsOn": [
          "[resourceId('Microsoft.Sql/servers', variables('ss-prod-brand-digitial-onlinesetup-govName'))]"
        ],
        "properties": {
          "startIpAddress": "0.0.0.0",
          "endIpAddress": "0.0.0.0"
        }
      },
      {
        "name": "[parameters('db-prod-brand-digital-onlinesetup-govName')]",
        "type": "databases",
        "location": "[resourceGroup().location]",
        "apiVersion": "2014-04-01-preview",
        "dependsOn": [
          "[resourceId('Microsoft.Sql/servers', variables('ss-prod-brand-digitial-onlinesetup-govName'))]"
        ],
        "tags": {
          "displayName": "db-prod-brand-digital-onlinesetup-gov"
        },
        "properties": {
          "collation": "[parameters('db-prod-brand-digital-onlinesetup-govCollation')]",
          "edition": "[parameters('db-prod-brand-digital-onlinesetup-govEdition')]",
          "maxSizeBytes": "1073741824",
          "requestedServiceObjectiveName": "[parameters('db-prod-brand-digital-onlinesetup-govRequestedServiceObjectiveName')]"
        }
      }
    ]
  }],
    "outputs": {}
  }
  

  I need to map the existing application insights to the app-service "ap-prod-brand-digital-onlinesetup-gov", which is part of the existing ARM-template.

  Please advice on the same.
• ARM template - Mapping application insights/app-service-plan of a different resource group

  I'm trying to create 3 resource groups using ARM template

  1. rg-prod-remserv-digital-onlinesetup-shared
  2. rg-prod-remserv-digital-onlinesetup-gov
  3. rg-prod-remserv-digital-onlinesetup-non-gov

  Creating the following resources in each of the respective resource groups,

  1. rg-prod-remserv-digital-onlinesetup-shared

     • An app-service plan, asp-prod-remserv-digital-onlinesetup-shared

     • An application insights resource, ai-prod-remserv-digital-onlinesetup-shared

  2. rg-prod-remserv-digital-onlinesetup-gov

     • An app-service, which uses the app-service plan and application-insights resource from the shared resource group (i.e rg-prod-remserv-digital-onlinesetup-shared)

  3. rg-prod-remserv-digital-onlinesetup-non-gov

     • An app-service, which uses the app-service plan and application-insights resource from the shared resource group (i.e rg-prod-remserv-digital-onlinesetup-shared)

  Please advice, How do i create a dependency so that all these are created once while executing my ARM template.

  The code is available in the following path,

  https://github.com/Manjunath-Jayaram/ARM-MultipleResourceGroups
  
• Attach a NIC to an existing VM using powershell or arm template

  Can this be done through nic template or vm extension?

  How to add a NIC to an Azure Virtual Machine (ARM)

  In this link it is achieved with a Powershell script.
• Can we connect to Azure VM remotely which is different Virtual Network

  I have 2 Azure VMs , say VM1 and VM2. I have logged into VM1 through RDP. Now my requirement is to connect to VM2 from VM1 through powershell and run some commands remotely.

  When I run the below command :

  $UserName = "<IP>\username"
  $Password = ConvertTo-SecureString "password@123" -AsPlainText -Force
  $psCred = New-Object System.Management.Automation.PSCredential($UserName, $Password)
  $s = New-PSSession -ComputerName <IP> -Credential $psCred
  

  It is giving the following error :

  New-PSSession : [] Connecting to remote server failed with the following error message : WinRM cannot complete the operation. Verify that the specified computer name is valid, that the computer is accessible over the network, and that a firewall exception for the WinRM service is enabled and allows access from this computer. By default, the WinRM firewall exception for public profiles limits access to remote computers within the same local subnet. For more information, see the about_Remote_Troubleshooting Help topic.

  I have tried all the solutions which I found on internet, but none solved my problem.

  The VirtualNetwork/Subnet of both the VMs is different and both of them do no have public IP and DNS name(which is a business requirement and cannot be changed) . So I'm using Private IP to login.Location of both the VMs is also different.

  Is there a possibility that this might be the reason?
• Retrieve private IP of azure Linux machine using power-shell

  How can I retrieve private IP address of an Azure Linux VM through power-shell?
• Powershell Pester Test: Error in test scripts: Parameter Binding Error

  New to Powershell scripting so sorry if I'm not explaining myself very well. I am testing a script using Pester. When I test the script I get this message:

  "Error occurred in test script 'Path to test script'
  ParameterBindingException: A parameter cannot be found that matches parameter name'Directory'.
  at <ScriptBlock>, 'Path to test script':Line 37
  at <ScriptBlock>, C:\Program Files\WindowsPowerShell\Modules\Pester\Pester.psm1: line 854
  at Invoke-Pester<End>, C:\Program Files\WindowsPowerShell\Modules\Pester\Pester.psm1: line 854"
  

  So that's the error. Im not sure what this means. Is something wrong with my script on line 37? I checked it and it seems fine:

  $Folders = Get-ChildItem -Path $Path -Directory -Recurse -Exclude $Excludes | %{
  

  If anybody would give me some clarification, it would be much appreciated.

  Would posting the entire script be helpful?
• How can I upload generic test data into SonarQube?

  I've run some Pester tests on a few PS scripts and output the results to a file. With that file, I've created a script to convert the contents of that file into the generic test format accepted by SonarQube (can be found here: https://docs.sonarqube.org/display/SONAR/Generic+Test+Data)

  I am only able to push code coverage results into SQ through Jenkins builds and I'm having trouble showing the results of the Pester test which are reflected in an XML file in the acceptable by SQ (Pester test -> Pester Output -> Python Script -> coverage file in SQ accepted format)

  Every time I run the jenkins build and I get my results in SQ, it seems that either SQ analyzed the PowerShell scripts itself or the it won't read the coverage file which I've created.

  My sonar-project.properties file looks like so:

  #project metadata
  sonar.projectKey=Test:Pester2Sonar-Test
  sonar.projectName=Test:Pester2Sonar-Test
  sonar.projectVersion=1.0
  
  # Comma-separated paths to directories with sources (required)
  sonar.sources=.
  # Language; if both (or more) languages need to be scanned, remove this 
  property
  
  # Encoding of sources files
  sonar.sourceEncoding=UTF-8
  

  For some more context, the output of one of my Pester tests showed 91.94% code coverage, and once I managed to push it to SonarQube, SonarQube had it down as 90.1%.

  If there exists a plain and simple example of this sort of pipeline, please share!

  Thanks
• Publish Nunit Test Results in Post Always Section

  I'm trying to run a pipeline that does some Pester Testing and publish the NUnit results.

  New tests were introduced and for whatever the reason, Jenkins no longer publishes the test results and errors out immediately after the powershell script. Hence, it doesn't get to the nunit publish piece. I receive this:

  ERROR: script returned exit code 128 Finished: FAILURE

  I've been trying to include the publish in the always section of the post section of the Jenkinsfile, however, I'm running into problems on how to make that NUnit test file available.

  I've tried establishing an agent and unstash the file (even though it probably won't stash if the powershell script cancels the whole pipeline). When I use agent I get the following exception:

  java.lang.NoSuchMethodError: No such DSL method 'agent' found among steps

  Here is the Jenkinsfile:

  pipeline {
  agent none
  
  environment {
      svcpath = 'D:\\svc\\'
      unitTestFile = 'UnitTests.xml'
  }
  stages {
      stage ('Checkout and Stash') {
      agent {label 'Agent1'}
      steps {
          stash name: 'Modules', includes: 'Modules/*/**'
          stash name: 'Tests', includes: 'Tests/*/**'
          }
      }
      stage ('Unit Tests'){
      agent {label 'Agent1'}
      steps {
          dir(svcpath + 'Modules\\'){deleteDir()}
          dir(svcpath + 'Tests\\'){deleteDir()}
          dir(svcpath){
          unstash name: 'Modules'
          unstash name: 'Tests'
          }
          dir(svcpath + 'Tests\\'){
          powershell """
  
          \$requiredCoverageThreshold = 0.90
  
          \$modules = Get-ChildItem ../Modules/ -File -Recurse -Include *.psm1
  
          \$result = Invoke-Pester -CodeCoverage \$modules -PassThru -OutputFile ${unitTestFile} -OutputFormat NUnitXml
  
          \$codeCoverage = \$result.CodeCoverage.NumberOfCommandsExecuted / \$result.CodeCoverage.NumberOfCommandsAnalyzed
  
          Write-Output \$codeCoverage
  
          if (\$codeCoverage -lt \$requiredCoverageThreshold) {
              Write-Output "Build failed: required code coverage threshold of \$(\$requiredCoverageThreshold * 100)% not met. Current coverage: \$(\$codeCoverage * 100)%."
              exit 1
          } else {
              write-output "Required code coverage threshold of \$(\$requiredCoverageThreshold * 100)% met. Current coverage: \$(\$codeCoverage * 100)%."
          }
          """
          stash name: 'TestResults', includes: unitTestFile
          nunit testResultsPattern: unitTestFile
          }
      }
      }
  }
  post {
      always {
      echo 'This will always run'
      agent {label 'Agent1'}
      unstash name: 'TestResults'
      nunit testResultsPattern: unitTestFile
      }
      success {
      echo 'This will run only if successful'
      }
      failure {
      echo 'This will run only if failed'
      }
      unstable {
      echo 'This will run only if the run was marked as unstable'
      }
      changed {
      echo 'This will run only if the state of the Pipeline has changed'
      echo 'For example, if the Pipeline was previously failing but is now successful'
      }
  }
  }
  

  Any and all input is welcome! Thanks!