HCIBox: Cloud Deployment ARM Validation Failing about azure_arc HOT 5 CLOSED

@mmorrison57 I had this same issue, once I assigned myself Key Vault Administrator and Storage Account Contributor, then did another custom template deployment, and incremented the storage account and key vault values by 1 (or just delete the ones that were created in the past deployment) it still failed but it at least created the resources. After that, go to the re-validation page and hit "try again" and it will assign the key vault permissions and pass the Azure Resource validation, then you can hit try again (again) and it will pass the cluster validation. :)

cc: @dkirby-ms, the deploy doc for jumpstart only says key vault admin right now, it should also include storage account contributor like is listed in the hci docs.

from azure_arc.

We've observed this happening frequently since 2402 release. Use the "Try Again" button from the validation page in portal to retry the validation and it should go through without issue.

from azure_arc.

Unfortunately the "Try Again" button is grayed out, since the validation itself is not successful. I have redeployed new HCI Boxes a few times and still am hitting errors in the validation phase. THe other error I am seeing multiple times is below:

(401) {"error":"invalid_client","error_description":"AADSTS7000229: The client application 8XXXXXXXXXXXXXXXXXXXX is missing service principal in the tenant 7XXXXXXXXXXXXXXXXXXXXXXXX. See instructions here: https://go.microsoft.com/fwlink/?linkid=2225119 Trace ID: 8fb4398a-b57b-459e-9dc9-31750c300300 Correlation ID: 4e5443f9-e414-4e22-bbc7-827335333a7d Timestamp: 2024-03-07 01:12:53Z","error_codes":[7000229],"timestamp":"2024-03-07 01:12:53Z","trace_id":"8fb4398a-b57b-459e-9dc9-31750c300300","correlation_id":"4e5443f9-e414-4e22-bbc7-827335333a7d","error_uri":"https://login.microsoftonline.com/error?code=7000229"} (Code: InternalHttpClientError)

I have ensured that the Key Vault Admin role has been attached to the subscriptions before ARM validation.

from azure_arc.

Please check other permissions too against this list. https://learn.microsoft.com/en-us/azure-stack/hci/deploy/deployment-arc-register-server-permissions

In particular check that Microsoft.AzureStackHCI provider has been assigned properly per the doc.

Please also share your C:\HCIBox\Logs\ folder zipped up here.

from azure_arc.

Addressed and closed in #2456

from azure_arc.