尝试使用 Azure ARM 中的引用函数创建基于资源属性的防火墙规则时出现无效 Json 错误

Question

I am creating azure firewall DNAT rules as part of an azure devops pipeline. I dont want to specify the public IP manually, i want to pull this value from the properties of the public nic. This way if we clone the pipeline, or rebuild, we dont have to update the IP address.

This is just an excerpt from the ARM template. This first example works.

"destinationAddresses": [
            "52.180.91.89"
]

My attempt to replace it is below. Please note that the public IP is created in the ARM template so I am not referencing the full path to the resource.

"destinationAddresses": "[reference(variables('arm_firewall_buildagentip')).ipAddress]"

The error i am receiving is below. Its returning the correct value, but I am not sure how to format it so it can be accepted in the firewall rule.

##[error]BadRequest: {
  "error": {
    "code": "InvalidRequestFormat",
    "message": "Cannot parse the request.",
    "details": [
      {
        "code": "InvalidJson",
        "message": "Error converting value \"52.180.91.89\" to type 'System.Collections.Generic.List`1[System.String]'. Path 'properties.natRuleCollections[0].properties.rules[1].destinationAddresses', line 1, position 2880."
      }
    ]
  }
} undefined

Answer 1

you have 2 options, convert it to array :

"[array(reference(variables('arm_firewall_buildagentip')).ipAddress)]"

or you can use the property that accepts a string :

"destinationAddressPrefix": "[reference(variables('arm_firewall_buildagentip')).ipAddress]"