pulumi-community #python

nutritious-airline-70839

12/04/2019, 10:07 AM

Hi there! Is there the

awsx

for pulumi for python?

nutritious-airline-70839

12/04/2019, 10:08 AM

...if so, how do I install it?

astonishing-spoon-27005

12/04/2019, 4:10 PM

crosswalk is typescript-only at the moment 😞

nutritious-airline-70839

12/04/2019, 4:39 PM

okay, thanks!

clean-engineer-75963

12/05/2019, 10:05 PM

Creating an AWS tag from the name value of a Kubernetes output:

Copy code

tags={
    "Name": f"{config.require('cluster.name')}_"
            f"{base_namespace.metadata['name'].apply(lambda x: str(x))}_backups",
}

Is giving me this tag:

Copy code

clustername_<pulumi.output.Output object at 0x7f1d972fa160>_backups

clever-nest-47198

12/05/2019, 10:11 PM

thats because the name is only a string within the apply function

clean-engineer-75963

12/05/2019, 10:15 PM

How am I supposed to be doing this?

clever-nest-47198

12/05/2019, 10:16 PM

theres way simpler ways than this ^ but this is the easiest to explain I think

Untitled

mysterious-egg-7415

12/06/2019, 2:06 AM

Use `pulumi.Output.concat()`:

Copy code

cluster_name = config.require("cluster.name")

tags = {
    "Name": pulumi.Output.concat(cluster_name, "_", base_namespace.metadata['name'], "_backups")
}

clever-nest-47198

12/06/2019, 1:38 PM

ah yeah thats way cleaner

clean-engineer-75963

12/06/2019, 5:17 PM

Anyone have tips for getting a reference to a Kubernetes Pod created by a deployment? The Pod's name isn't known, so core.v1.Pod.get doesn't seem like it will work.

clean-engineer-75963

12/06/2019, 7:01 PM

Are incomplete Python docs a known problem? For example, https://www.pulumi.com/docs/reference/pkg/python/pulumi_vault/: the pulumi-vault provider has root-level resources, but docs are only generated for subpackages.

clean-engineer-75963

12/06/2019, 10:32 PM

I think pulumi_vault might be badly broken. I don't seem to be able to import

Token

, from this file: https://github.com/pulumi/pulumi-vault/blob/master/sdk/python/pulumi_vault/token.py

clean-engineer-75963

12/10/2019, 12:15 AM

I tried to create a Pulumi resource inside a context manager (

with

block) and it doesn't seem to be respecting the context. Details to follow...

clean-engineer-75963

12/13/2019, 11:33 PM

One of my pulumi-managed Kubernetes Deployments was mysteriously deleted from Kubernetes, presumably by pulumi, and now pulumi doesn't think it needs to recreate it.

clean-engineer-75963

12/16/2019, 10:13 PM

I'm still struggling with port-forwarding to a pod during Pulumi setup, but am making progress. Here's the code I have currently:

Copy code

PORT_FORWARD = None

def get_vault_port_forward_address(vault_deployment_metadata):
    """Wait for a Vault Pod to become leader, port-forward to it, and return its address."""

    namespace = vault_deployment_metadata["namespace"]
    vault_component = vault_deployment_metadata["labels"]["component"]

    def get_ready_vault_pod():
        kubernetes.config.load_kube_config()
        client = kubernetes.client.CoreV1Api()

        while True:
            pods = client.list_namespaced_pod(
                namespace,
                label_selector=f"component={vault_component}",
            )

            for pod in pods.items:
                for status in pod.status.conditions:
                    if status.type == "Ready" and status.status == "True":
                        return pod.metadata.name

            time.sleep(2)

    # TODO: This port-forward will run for the remainder of the Pulumi program.
    # Find a way to tear it down as soon as we're done with it. The pulumi
    # programming model makes this tough.
    global PORT_FORWARD
    PORT_FORWARD = pexpect.spawn(
        "kubectl",
        ["-n", namespace, "port-forward", get_ready_vault_pod(), "8200:8200"],
        ignore_sighup=True)
    PORT_FORWARD.expect_exact("Forwarding from 127.0.0.1:8200 -> 8200\r\n")
    PORT_FORWARD.expect_exact("Forwarding from [::1]:8200 -> 8200\r\n")

    return "<https://127.0.0.1:8200>"

# Vault provider to be used via port-forward.
vault_provider = pulumi_vault.Provider(
    "vault-provider",
    address=vault_deployment.metadata.apply(
        get_vault_port_forward_address),
    skip_tls_verify=True,
    token="my-token",
)

I'm using a function in an apply to start the port-forward during initialization of the vault provider. Unfortunately I'm closing over a global variable so the port-forward persists outside of the apply.

better-actor-92669

12/17/2019, 12:41 PM

Hi guys. Very simple question. I need to get the value of my gcp default region via pulumi config

Copy code

from pulumi import Config, export, get_project, get_stack, Output,\
    ResourceOptions

config = Config(None)

compute.Instance(...,
                 zone=config.get('gcp:region') + '-' +
                      zone_matcher.get(count + 1, 'a'),
                )

But it doesn't work, however in my stack's yaml file it is set up

Copy code

config:
  gcp:project: some-project
  gcp:region: europe-west3

When I do

config.require()

it says that 'some-projectgcpregion' is not setup, and this is correct since I only set up secrets on some-projects level. Gcp region is under config key.

Copy code

error: Missing required configuration variable 'some-project:gcp:region'
        please set a value using the command `pulumi config set some-project:gcp:region <value>`

How can I get the value of the project's default gcp:region?

limited-honey-31480

12/19/2019, 4:50 PM

anyone have any examples of use of GCP DNS,SQL,NoSQL,Machine Learning or any other IA plataform to spare on python?

colossal-plastic-46140

12/20/2019, 6:25 PM

Hi I was hoping I could get some eyes on this issue I filed a while back https://github.com/pulumi/pulumi/issues/3596. I used to have a work around for this, but now with 1.7.1, it appears to have returned.

bright-orange-69401

12/22/2019, 9:09 PM

Does the import feature of Pulumi actually work ? I've tried over several AWS resources, the latest one being S3 : never managed to import a single thing. I got the following error message after running

pulumi preview

on the S3 example template I attached:

Diagnostics:

pulumipulumiStack (nuage-admin-dev):

error: preview failed

awss3Bucket (nuage-test):

error: Preview failed: importing arnawss3::nuage test Error importing AWS S3 bucket policy: InvalidARNError: invalid ARN

caused by: invalid Amazon S3 ARN, unknown resource type, arnawss3:::nuage-test

__main__.py

bumpy-restaurant-1466

12/24/2019, 4:09 AM

I’m exploring using Pulumi for our infrastructure but am concerned about the heavy emphasis on Typescript. Is there anything with Pulumi that can be done with Typescript but not Python?

orange-australia-91292

12/26/2019, 3:57 PM

Hi. New to Pulumi, I want to try it out, see how it fits compared to the-other-one. Working in Python. First question…

orange-australia-91292

12/26/2019, 3:59 PM

Are these the docs: https://www.pulumi.com/docs/reference/pkg/python/pulumi_aws/s3/ ? Are there better docs, easier to navigate? Looking to create a bucket and it took a lot of scrolling to find the proper method

orange-australia-91292

12/26/2019, 5:14 PM

I see there are a couple of issues in the docs repo to improve on Python, though they seem to have been put on hold indefinitely. Oh, well.

orange-australia-91292

12/28/2019, 6:56 AM

I’m doing:

Copy code

import pulumi
from pulumi_aws import s3

s3.Bucket.get("pm-images", "arn:aws:s3:::pm-images")

and I get back

Copy code

error: Preview failed: importing arn:aws:s3:::pm-images: Error importing AWS S3 bucket policy: InvalidARNError: invalid ARN
caused by: invalid Amazon S3 ARN, unknown resource type, arn:aws:s3:::pm-images

orange-australia-91292

12/28/2019, 6:56 AM

as far as I can tell from the docs, this should work

orange-australia-91292

12/28/2019, 6:57 AM

“pm-images” is some random public bucket I found on Google. I did the same thing with one of my buckets and got back the same error

orange-australia-91292

12/28/2019, 7:04 AM

hm.

aws s3api get-bucket-policy --bucket pm-images

returns access denied, however the same thing on my own bucket says that the policy doesn’t exist. Which is correct, there is no policy

orange-australia-91292

12/28/2019, 7:10 AM

Nope, I get the same error with a bucket that does have a policy set. And I can retrieve it with aws-cli using the same profile as the one used by pulumi.

orange-australia-91292

12/28/2019, 11:59 AM

I get the same error when trying to set public access policy on a bucket that is created a few lines before:

Copy code

s3.BucketPublicAccessBlock(
            resource_name=f"{frontend_bucket_name}_block_public_access",
            bucket=bucket.arn,
            block_public_acls=True,
            ignore_public_acls=True,
            restrict_public_buckets=True,
            block_public_policy=True,
        )

where

bucket

is a resource that was just created by Pulumi with

s3.Bucket()