[Key Vault] Using Key Vault quickly after create fails

Description

When creating a Key Vault using az keyvault create with a randomly selected DNS entry, then subsequently running az keyvault certificate create it will often fail stating: Max retries exceeded attempting to connect to vault. The vault may not exist or you may need to flush your DNS cache and try again later.

The error only happens for a short time following initial creation. This causes scripts which create Key Vaults to be rather unstable.

I would expect that Key Vault create would only successfully complete after it is able to reach the newly created Key Vault instance.

---

Environment summary

Install Method: How did you install the CLI? (e.g. pip, interactive script, apt-get, Docker, MSI, nightly)
Answer here: source

CLI Version: What version of the CLI and modules are installed? (Use az --version)
Answer here: azure-cli (2.0.6+dev)

OS Version: What OS and version are you using?
Answer here: OS X

Shell Type: What shell are you using? (e.g. bash, cmd.exe, Bash on Windows)
Answer here: bash

[schaabs]

There is a fix available for this. Currently it is in our preview command module, available as an Azure CLI Extension. To install the preview run the command:

az extension add -n keyvault-preview

In this preview extension the ‘az keyvault create’ command has been updated to a long running command. It will now block until the DNS entries have propagated. Please try it out and verify that it fixes the problem you’re encountering.

More information on the keyvault-preview extension can be found here https://github.com/azure/azure-keyvault-cli-extension/.

[mcwienczek]

Thanks @kamoljan, I ended up doing sleep 10 to wait for vault to get up 😉