does anyone use cloud build to deploy cloud run? we add environment variables during build that aren’t knowable during pulumi up, e.g. the code version being deployed. this causes problems because when we run

pulumi up

, those environment variables are removed by pulumi because they’re not defined in our pulumi cloud run profile

No Datacatalog Tag resource in google-native (https://www.pulumi.com/registry/packages/google-native/api-docs/datacatalog/v1/)? It exists in pulumi-gcp (https://www.pulumi.com/registry/packages/gcp/api-docs/datacatalog/tag/)

I am trying to create a cloudbuild trigger using

pulumi_google_native.cloudbuild.v1

but get an error message saying “the project is not allowlisted to create regional triggers”. There seems to be 2 different api endpoints for cloudbuild triggers, one called projects.locations.triggers and one projects.trigger. https://cloud.google.com/build/docs/api/reference/rest Is there any way to create a trigger without location with pulumi gcp native, or do you need to use the location trigger?

Hey everyone! I did some googling on enabling/pausing the state of jobs in cloud scheduler - does anyone know if this is feasible with pulumi? Many thanks, this would be a great help.

Also...I have renamed the resource name (the first argument in a resource constructor) and pulumi up complains with a Error 409 that the resource already exists - what is the best practice on dealing with this? I have already: 1. used an alias 2. used delete_before_replace = True So I'm not sure why I would still get this issue? Would really love some insight into this!

Hey any example of automation API for GCP python??

Hi folks

wondering if anyone would know, if one creates a table in BQ using Pulumi, can the schema be updated in the case of adding a column after ?

Howdy folks! QQ does anyone know the status of this feature request to add createVersion to secretmanager API? I’m trying to avoid having to do this via console or my own script on the side https://github.com/pulumi/pulumi-google-native/issues/260

Hi, I am trying to set up a service account and assign it the role of

roles/storage.admin

for all buckets using Google Native. I see how it is done using GCP classic using

gcp.projects.IAMBinding

, but I can't seem to find the equivalent implementation on the native version. Any help would be appreciated.

Currently doing this myself (not with buckets, but API Gateway and Cloudfunctions) .. I’m doing the following steps • Create Service Account • Associate Service Account with API Gateway config and create the API Gateway • Create Cloud Function • Create Cloud Function IAM Policy, binding the Service Account I created in step 1 with

roles/cloudfunctions.invoker

The binding schema you pass to your IAM policy is just the GCP schema from here https://cloud.google.com/iam/docs/reference/rest/v1/Policy

Hey everyone! I am supposed to create a GCP bucket with private access (through pulumi), as per docs https://www.pulumi.com/registry/packages/gcp/api-docs/storage/bucket/#create there is an attribute public_access_prevention to support but pulumi gives an error on its implementation: • TypeError: _internal_init() got an unexpected keyword argument 'public_access_prevention'

Hey! Is there any example of pulumi- automation API with GCP??

FYI it appears the

@pulumi/google-native

provider has no support for Long-running operations. https://github.com/googleapis/gax-nodejs/blob/main/client-libraries.md#long-running-operations … so any resources that are dependent on a long running operation completing won’t work

I’ve created an issue on the repo here https://github.com/pulumi/pulumi-google-native/issues/403

I have a GKE cluster made with pulumi and i want to change the machine type of the nodepool. While i know that is not possible, i though i just add a nodepool in the array first, then migrate all the pods over, and then remove the first one from the array. But when I add a nodepool, pulumi wants to replace everything. This is my cluster code https://gist.github.com/roderik/0b949356750dac9426ff86985996bf20 any idea how i do this? I don’t want to setup up new cluster since i have huge pvc’s that are almost impossible to migrate.

Hoi ! quick question is there a way use alpha versions the gcp apis ? like the latest

gcloud alpha network-services

like for example ‘http-routes’ etc.

When defining a CloudSQL MySQL database using gcp.sql.DatabaseInstance, I'm not seeing where I can define MySQL flags (https://cloud.google.com/sql/docs/mysql/flags). Anyone know how these flags can be defined for a gcp.sql.DatabaseInstance ?

Hey. I am mounting filestore in gce, (with the correct firewalls) the GCE and filestore are created through pulumi but the mounting is giving a timeout error. When I am creating through the console, the mounting works. Any solution?

Hi all, Need some help I am trying to get a list of existing vm instances that are deployed through pulumi. In the google-native docs it says I need to do a list() request but I can't see how that is done. https://www.pulumi.com/registry/packages/google-native/api-docs/compute/v1/getinstance/

Hello, I'm trying to troubleshotting a stack update. Every time when I run

pulumi update

the process want to update my resource (db-instance) on my gcp even when diff operations shows that everything are the same. When I use

pulumi update --diff --json > diff-file.json

I can see the newState and oldState for resource is exactly the same but pulumi still want to update it with error like this:

... 1 error occurred:
        * Error, failed to update instance settings for : googleapi: Error 412: Condition does not match., staleData

Could anyone advice me how I could track it down?

Does anyone know what the correct syntax is for specifying an override for the composer config? In the UI itself the parts are section, key and value, but in C# at least it’s just a dictionary, and I’m not sure how it parses the section from the key. e.g. setting the secrets backend in composer to be secrets manager would look something like: Key:

"secrets.backend"

Value:

"airflow.providers.google.cloud.secrets.secret_manager.CloudSecretManagerBackend"

But I’m not sure about the key value. Should the separator be

.

,

:

, something else. Anyone know?

Hi, I have created database of postgresql instance. Adding allow_connections property to database as per docs,

allow_connections=True,

The code:

main = gcp.sql.DatabaseInstance("postgresinstance",
    database_version="POSTGRES_12",
    region="us-central1",
    deletion_protection=False,
   # deletion_protection=False,
    settings=gcp.sql.DatabaseInstanceSettingsArgs(

        tier="db-f1-micro",
    ))
    database = gcp.sql.Database("database", 
    instance=main.name,
    allow_connections=True,
    )

Any guide on how to get rid of this error: anaconda3/lib/python3.9/site-packages/pulumi_gcp/sql/database.py", line 386, in init self._internal_init(resource_name, *args, **kwargs) TypeError: _internal_init() got an unexpected keyword argument 'allow_connections'

I'm new to Pulumi and I'm having trouble importing an existing folder into my Pulumi stack:

bran@danforth infra % pulumi import google-native:cloudresourcemanager/v3:Folder non_production 250711497935
Previewing import (shared):
     Type                                             Name            Plan       Info
     pulumi:pulumi:Stack                              infra-shared               1 error
 =   └─ google-native:cloudresourcemanager/v3:Folder  non_production  import     1 error

Diagnostics:
  pulumi:pulumi:Stack (infra-shared):
    error: preview failed

  google-native:cloudresourcemanager/v3:Folder (non_production):
    error: Preview failed: property "foldersId"/"name" not found

Whats the right incantation here or is this a bug?

is there a way to create a GCP task queue and set it to paused with pulumi?

hi all, I just ran into an odd situation where 1. I successfully imported a gcp:Database resource via code 2. a few deploys later, that imported resource was

delete-replacedd

during a deploy without any changes to that resource's code I'm a bit stumped as to what could have caused this especially since imported resources are protected by default -- has anyone else seen anything similar?

Hey team! How to schedule a VM instance (GCP-GCE) to start and stop thru pulumi ?

Hi, I have a use case which requires different serviceaccounts for different environments and I need to apply permissions to those service accounts. The issue is that when I apply a binding, it overwrites the bindings for the other environment. Is there a way to only add without overwriting current bindings? For example this is how I am currently doing it.

const externalDnsGCPServiceAccount = new gcpNative.iam.v1.ServiceAccount(
  "external-dns-gcp-sa",
  {
    accountId: `external-dns-${environment}`,
  }
);

new gcp.projects.IAMBinding("external-dns-dns-admin-rb", {
  project: project,
  role: "roles/dns.admin",
  members: [
    externalDnsGCPServiceAccount.email.apply((s) => `serviceAccount:${s}`),
  ],
});

Maybe someone have e2e example of setting up Api Gateway? (API+Gateway+Config+etc)