ComponentResource

InputList<T>

InputList

Apply()

“During some program executions, apply doesn’t run. For example, it won’t run during a preview, when resource output values may be unknown. Therefore, you should avoid side-effects within the callbacks. For this reason, you should not allocate new resources inside of your callbacks either, as it could lead to pulumi preview being wrong.”

Apply()

frontendEndpointArgs.Apply(endpoints =>
{
	....
	
	foreach (var frontend in endpoints)
	{
		if (frontend.HttpsConfiguration == null)
		{
			continue;
		}

		var httpsConfigurationArgs = new CustomHttpsConfigurationArgs
		{
			FrontendEndpointId = Output.Format($"/subscriptions/{currentSubscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/frontDoors/{frontDoorName}/frontendEndpoints/{frontend.Name}"),
			CustomHttpsProvisioningEnabled = true,
			CustomHttpsConfigurationConfig = new CustomHttpsConfigurationCustomHttpsConfigurationArgs
			{
				CertificateSource = "AzureKeyVault",
				AzureKeyVaultCertificateVaultId = frontend.HttpsConfiguration.Apply(fe => fe.AzureKeyVaultCertificateVaultId),
				AzureKeyVaultCertificateSecretName = frontend.HttpsConfiguration.Apply(fe => fe.AzureKeyVaultCertificateSecretName),
				AzureKeyVaultCertificateSecretVersion = frontend.HttpsConfiguration.Apply(fe => fe.AzureKeyVaultCertificateSecretVersion),
				//MinimumTlsVersion = "1.2"
			},
		};

		_ = frontend.Name.Apply(frontendName => 
			new CustomHttpsConfiguration($"{frontendName}-SslCertificate", httpsConfigurationArgs, new CustomResourceOptions
			{
				Provider = provider,
				Parent = parent,
			}));
	}

	....
});

BranchProtection

BranchProtectionV3

branch

pattern

__main__.py
azure-appservice.py

__main__.py

azure-appservice.py

pulumi up

pulumi up

pulumi up

Diagnostics:
  pulumi:pulumi:Stack (infra-dev):
    error: an unhandled error occurred: Program exited with non-zero exit code: -1

pulumi up

docker.Image

build

docker.RemoteImage

container_image = "wmlab"

# GETTING MY CONTAINER REGISTRY
rhdhv_container_registry = azure_native.containerregistry.Registry(
    "rhdhvContainerRegistry",
    admin_user_enabled=True,
    location="westeurope",
    network_rule_set=azure_native.containerregistry.NetworkRuleSetArgs(
        default_action="Allow",
    ),
    registry_name="rhdhvContainerRegistry",
    resource_group_name="genericRG1",
    sku=azure_native.containerregistry.SkuArgs(
        name="Premium",
    ),
    opts=pulumi.ResourceOptions(protect=True))

# OUTPUT THE CREDENTIALS TO GET THEM
acr_credentials = pulumi.Output.all("genericRG1", rhdhv_container_registry.name).apply(
    lambda args: azure_native.containerregistry.list_registry_credentials(
        resource_group_name=args[0],
        registry_name=args[1]
    )
)
admin_username = acr_credentials.username
admin_password = acr_credentials.passwords[0]["value"]

pulumi_kubernetes

usernameSecret

passwordSecret

self.argo_configmap = ConfigMap(
            resource_name='test_cm',
            metadata=ObjectMetaArgs(name='argocd-cm',
                                    namespace='argocd'),
            data={
                "type": "helm",
                "url": "<https://test.com:8085>",
                "name": "test-helm-repo",
                "usernameSecret": {
                    "name": "test-helm-repo-credentials",
                    "key": "username"
                },
                "passwordSecret": {
                    "name": "test-helm-repo-credentials",
                    "key": "password"
                }
            },

AssertionError: Unexpected type; expected a value of type `<class 'str'>` but got a value of type `<class 'dict'>` at resource `test_cm`, property `data.passwordSecret`: {'name': 'test-helm-repo-credentials', 'key': 'password'}

self.argo_configmap = ConfigMap(
            resource_name='test_cm',
            metadata=ObjectMetaArgs(name='argocd-cm',
                                    namespace='argocd'),
            data={
                "repositories": """- type: helm
  url: <https://test.com:8085>
  name: test-helm-repo
  usernameSecret:
      name: test-helm-repo-credentials
      key: username
  passwordSecret:
      name: test-helm-repo-credentials
      key: password
      """
            },

pulumi preview

pulumi_kubernetes.apiextensions.CustomResource

pulumi_kubernetes.yaml.ConfigFile

depends_on

pulumi up

no stack named 'myproject-dev*' found err?

up

config

refresh

pulumi stack select myorg/project/stack

error: constructing secrets manager of type "passphrase": unable to find either `PULUMI_CONFIG_PASSPHRASE` or `PULUMI_CONFIG_PASSPHRASE_FILE` when trying to access the Passphrase Secrets Provider; please ensure one of these environment variables is set to allow the operation to continue

default_account = gcp.service_account.Account("defaultAccount",
    AttributeError: module 'pulumi_gcp' has no attribute 'service_account'

go get <http://github.com/pulumi/pulumi-aws/sdk/v4/go/aws/wafv2|github.com/pulumi/pulumi-aws/sdk/v4/go/aws/wafv2>

go build <http://github.com/pulumi/pulumi-aws/sdk/v4/go/aws/wafv2|github.com/pulumi/pulumi-aws/sdk/v4/go/aws/wafv2>: /usr/local/go/pkg/tool/linux_amd64/compile: signal: killed

total        used        free      shared  buff/cache   available

Mem:           15Gi        14Gi       218Mi       1.0Mi       238Mi       174Mi

Swap:            0B          0B          0B

output<string>

job_vars = pulumi.Output.all(
            _redis_endpoint=cache.endpoint, # should be an Output string
            **job_specific_inputs, # dict
            **generic_job_inputs, # dict
        )
        pulumi.export("core", job_vars)

core                                 : output<string>

+ core                                 : {
      + analyzer_bucket                      : "analyzers-bucket-196f898"
      + analyzer_dispatched_bucket           : "dispatched-analyzer-bucket-5177198"