KeyVault reference in AzureAppConfiguration with Azure-Native

[Mewriick]

Hello,

I have problem with adding from C# key vault reference into azure app config. I followed #1034 (comment) and use this code

new KeyValue(<name>,
	new KeyValueArgs {
		ResourceGroupName = configurationStoreResourceGroupName,
		ConfigStoreName = configurationStoreName,
		KeyValueName =<value-name>,
		Value = $"{{\"uri\":\"https://<vault-name>.vault.azure.net/secrets/<key-vault-sercte-name>\"}}",
		ContentType = "application/vnd.microsoft.appconfig.keyvaultref+json;charset=utf-8"
	}
);

unfortunately I received this error

--------------------------------------------------------------------------------
RESPONSE 404: 404 Not Found
ERROR CODE UNAVAILABLE
--------------------------------------------------------------------------------
Response contained no body
--------------------------------------------------------------------------------

I have correctly setted permissions for KeyVault and also for AzureAppConfiguration (App Configuration Contributor)

Can you plase advise what is wrong?

[jbrezina]

The problem is when you use / in the key name.
For example the key MyApp/My Option results in the following in the PUT URL
...keyValues/MyApp/My Option
Notice, that api version is missing in the URL.

We tried to URL encode the / in the key name to %2F - MyApp%2FMy Option which resulted in the PUT URL
...keyValues/MyApp%252FMy%20Option?api-version=2024-05-01
Notice the % is encoded into %25. So when we add % into the key name, some encoding happens, but not in case there is only /. In my opinion you should always URL encode the key name.

[rquitales]

Thanks for the assist here @jbrezina. @Mewriick please let us know if this resolves your issue. Thanks.

[jbrezina]

This is a bug on the Pulumi side. Pulumi has to correctly encode the characters in the key name so it can be passed in the Azure REST API URL.

[rquitales]

Thanks for the call out. Yes, encoding the key name would be helpful here. I'll add this to our backlog and flag this to my team as well.

[rquitales]

Adding this code snippet here as it may help with a fix:

pulumi-azure-native/provider/pkg/azure/client_azcore.go

Lines 144 to 145 in 8993d7f

	urlValues := MapToValues(queryParams)
	// URL-unescape each value before encoding the URL (which encodes all values). Presumably, this