Updating Service Fabric / VMSS storage account keys

Question

When a new Service Fabric is created on Azure with a template, it uses this snippet of json -

"name": "[concat('VMDiagnosticsVmExt', '_', variables('vmNodeType0Name'))]",
"properties": {
  "type": "IaaSDiagnostics",
  "autoUpgradeMinorVersion": true,
  "protectedSettings": {
    "storageAccountName": "[parameters('SupportStorageAccountName')]",
    "storageAccountKey": "[parameters('SupportprotectedAccountKey1')]",
    "storageAccountEndPoint": "https://core.windows.net/"

I want to update the storageAccountKey as part of our security procedures, but I can't work out how to change them.

I've tried applying the change via a template but I get the error

"code": "OperationNotAllowed",
"message": "VM Scale Set extensions of handler 
'Microsoft.Azure.ServiceFabric.ServiceFabricNode' 
can be deleted only at the time of VM Scale Set deletion."

And I can't find anything in PowerShell that will connect and let me change that

Is this possible?

Neil Sant Gat Neil Sant Gat · Accepted Answer · 2017-04-06T00:36:19

Did you use the same template as the one you originally used to deploy Service Fabric? The error message sounds like only the scale set is specified in the template, and Service Fabric is blocking it because not including the service fabric extension in the template would remove service fabric from the scale set.

Updating Service Fabric / VMSS storage account keys

1 Answers