Passing parameters from *.json file to Bicep VM DSC extension properly - Deploying domain controller #11696

uky2019 · 2023-09-01T12:08:32Z

uky2019
Sep 1, 2023

Hi everybody, I have another one that I cannot solve despite my googling around.

Please help with the following scenario:

I am trying to deploy virtual machine that will become a domain controller, I am trying to use VM extension with DSC and do not know how to pass parameters from my parameters file properly.

I googled around and all I can found is ARM template instructions like here:

https://github.com/Huachao/azure-content/blob/master/articles/virtual-machines/virtual-machines-extensions-configuration-samples-windows.md

But i do not know how to do this in bicep, I get error:

The password element of argument 'myFirstUserCreds' to configuration 'CreateNewADForest' does not match the required format. It should be as follows                                                                             The password element of argument 'myFirstUserCreds' to config
                {
                    "UserName" : "MyUserName",
                    "Password" : "PrivateSettingsRef:MyPassword"
                }.

Part of bicep file I am trying to use:

  resource VM_DSC_EXT 'Microsoft.Compute/virtualMachines/extensions@2023-03-01' = {
  parent: dcvm01
  name: 'Microsoft.Powershell.DSC'
  location: general.location
  properties: {
    autoUpgradeMinorVersion: true
    publisher: 'Microsoft.Powershell'
    type: 'DSC'
    typeHandlerVersion: '2.83'
    settings: {
      ModulesUrl: 'https://mystorageaccount.blob.${environment().suffixes.storage}/dsc/CreateNewADForest.zip?XXXX'
      ConfigurationFunction: 'CreateNewADForest.ps1\\CreateNewADForest' 
      Properties: {
        DomainName: domainstuff.DomainName
        AdminCreds: {
          UserName: domainstuff.admincredsusername
          Password: PrivateSettingsRef:MyPassword
        }
        SafeModeAdminCreds: {
          UserName: domainstuff.SafeModeAdminCredsusername
          Password: SafeModeAdminCredspassword
        }
        myFirstUserCreds: {
          UserName: domainstuff.myFirstUserCredsusername
          Password: myFirstUserCredspassword
        }
      }
      WmfVersion: 'latest'
      Privacy: {
        DataCollection: 'Enable'
      }
    }
    protectedSettings: {
      Items: {
        AdminPassword: admincredspassword
        SafeModeAdminPassword: SafeModeAdminCredspassword
        MyFirstUserPassword: myFirstUserCredspassword
      }
    }
  }
}