+   pulumi:pulumi:Stack                   
 +   ├─ aws:ec2:SecurityGroup             
 +   ├─ aws:kms:Key                       
 +   ├─ aws:iam:Role                      
 +   └─ eks:index:Cluster                 
 +      ├─ eks:index:ServiceRole          
 +      │  ├─ aws:iam:Role                 
 +      │  ├─ aws:iam:RolePolicyAttachment 
 +      │  ├─ aws:iam:RolePolicyAttachment 
 +      │  └─ aws:iam:RolePolicyAttachment 
 +      ├─ aws:eks:Cluster                 
 +      ├─ pulumi:providers:kubernetes     
 +      ├─ pulumi:providers:kubernetes     
 +      ├─ aws:ec2:SecurityGroup           
 +      ├─ eks:index:VpcCni                
 +      ├─ aws:ec2:SecurityGroupRule       
 +      ├─ aws:ec2:SecurityGroupRule       
 +      ├─ aws:ec2:SecurityGroupRule       
 +      ├─ aws:ec2:SecurityGroupRule       
 +      ├─ aws:ec2:SecurityGroupRule       
 +      ├─ aws:iam:OpenIdConnectProvider   
 +      └─ kubernetes:core/v1:ConfigMap

service_role

skip_default_node_group=True

service_role=<aws.iam.Role obj.>

service_role

service_role

user_data

rolePolicyAttachment:RolePolicyAttachment

import pulumi_aws as aws

role = iam.Role("role")  # dummy role

for idx, arn in enumerate(
        [
            "arn:aws:iam::aws:policy/AmazonSESFullAccess",
            "arn:aws:iam::aws:policy/AmazonSageMakerFullAccess",
            "arn:aws:iam::aws:policy/AmazonS3FullAccess",
        ]
    ):
        aws.iam.RolePolicyAttachment(
            f"{self._config.name}-{idx}-app-role-extension",
            args=aws.iam.RolePolicyAttachmentArgs(policy_arn=arn, role=role.id),
            opts=self._opts,
        )
        aws.iam.RolePolicyAttachment(
            f"{self._config.name}-{idx}-scheduler-role-extension",
            args=aws.iam.RolePolicyAttachmentArgs(
                policy_arn=arn, role=role.id
            ),
            opts=self._opts,
        )

import pulumi_aws as aws

role = iam.Role("role")  # dummy role
ses_policy = aws.iam.Policy("ses-pol")
s3_policy = aws.iam.Policy("s3-pol")
lambda_invoke_policy = aws.iam.Policy("lambda-pol")

for idx, arn in enumerate(
        [
            ses_policy.arn,
            lambda_invoke_policy.arn,
            "arn:aws:iam::aws:policy/AmazonSageMakerFullAccess",
            s3_policy.arn,
        ]
    ):
        aws.iam.RolePolicyAttachment(
            f"{self._config.name}-{idx}-app-role-extension",
            args=aws.iam.RolePolicyAttachmentArgs(policy_arn=arn, role=role.id),
            opts=self._opts,
        )
        aws.iam.RolePolicyAttachment(
            f"{self._config.name}-{idx}-scheduler-role-extension",
            args=aws.iam.RolePolicyAttachmentArgs(
                policy_arn=arn, role=role.id
            ),
            opts=self._opts,
        )

PolicyAttachment

"arn:aws:iam::aws:policy/AmazonSageMakerFullAccess",

pulumi up

pulumi refresh

ImportError: dlopen(/infrastructure/venv/lib/python3.10/site-packages/grpc/_cython/cygrpc.cpython-310-darwin.so, 0x0002): tried: '/infrastructure/venv/lib/python3.10/site-packages/grpc/_cython/cygrpc.cpython-310-darwin.so' (mach-o file, but is an incompatible architecture (have 'x86_64', need 'arm64e'))
    It looks like the Pulumi SDK has not been installed. Have you run pip install?
    If you are running in a virtualenv, you must run pip install -r requirements.txt from inside the virtualenv.

sarolebinding = gcp.projects.IAMBinding(
            f"sa-role-binding-{self.projectName}-owner",
            role=self.role,
            project=self.project.name,
            members=[f"serviceAccount:{self.service_account.email}"],
        )
        return sarolebinding

Request `Set IAM Binding for role "projects/app-burger-nonprod-wzj/roles/projectOwner" on "project \"app-burger-nonprod-wzj\""` returned error: Error applying IAM policy for project "app-burger-nonprod-wzj": Error setting IAM policy for project "app-burger-nonprod-wzj": googleapi: Error 400: Invalid service account (<pulumi.output.Output object at 0x7fbf29648640>)., badRequest

ImportError: dlopen(/blah/venv/lib/python3.9/site-packages/grpc/_cython/cygrpc.cpython-39-darwin.so, 0x0002): tried: '/blah/venv/lib/python3.9/site-packages/grpc/_cython/cygrpc.cpython-39-darwin.so' (mach-o file, but is an incompatible architecture (have 'x86_64', need 'arm64e'))

<stackname>.get_output('foo')

KubeEnvironmentArgs

azure-native:web/v20210301:KubeEnvironment (env):
    error: Code="BadRequest" Message="KubeEnvironment is invalid.  Must specify either AksResourceID or ArcConfiguration or 'type' must be 'Managed'." Details=[{"Message":"KubeEnvironment is invalid.  Must specify either AksResourceID or ArcConfiguration or 'type' must be 'Managed'."},{"Code":"BadRequest"},{"ErrorEntity":{"Code":"BadRequest","ExtendedCode":"51021","Message":"KubeEnvironment is invalid.  Must specify either AksResourceID or ArcConfiguration or 'type' must be 'Managed'.","MessageTemplate":"{0} is invalid.  {1}","Parameters":["KubeEnvironment","Must specify either AksResourceID or ArcConfiguration or 'type' must be 'Managed'."]}}]

debug_error_string = "{"created":"@1653589486.232131000","description":"Error received from peer ipv4:127.0.0.1:64115","file":"src/core/lib/surface/call.cc","file_line":904,"grpc_message":"Cannot read properties of undefined (reading 'map')","grpc_status":2}"

-v=9

up

pulumi.output.Output object

"""A Google Cloud Python Pulumi program"""

import pulumi
import pulumi_gcp as gcp

cloud_resource_manager_api = gcp.projects.Service('crm_api', service="<http://cloudresourcemanager.googleapis.com|cloudresourcemanager.googleapis.com>")
project = gcp.organizations.get_project_output(opts=pulumi.InvokeOptions(parent=cloud_resource_manager_api))
cloud_run_api = gcp.projects.Service('cloud_run_api', disable_dependent_services=True, disable_on_destroy=True, project=project.id.apply(lambda project_id: project_id), service="<http://run.googleapis.com|run.googleapis.com>")

pulumi update

AttributeError: 'Service' object has no attribute 'status'

pulumi.export('api_url', cloud_run_api_output.status.url)

cloud_run_api_output.statuses[0]

Diagnostics:
  hcloud:index:Server (master-1):
    error: hcloud:index/server:Server resource 'master-1' has a problem: Attribute must be a whole number, got 47074. Examine values at 'Server.PlacementGroupId'.
    error: hcloud:index/server:Server resource 'master-1' has a problem: Attribute must be a whole number, got 1710474. Examine values at 'Server.Networks'.

import pulumi_hcloud as hcloud

network = hcloud.Network("cluster-net",
  ip_range="10.0.1.0/24",
)
master_group = hcloud.PlacementGroup("masters", type="spread")

for i in range(3):
    node = hcloud.Server(
        f"master-{i+1}",
        backups=False,
        location="hel1",
        server_type="CX21",
        image="ubuntu-20.04",
        networks=[{
            "network_id": network.id,
        }],
        placement_group_id=master_group.id
    )
    hcloud.Rdns(
        f"master-{i+1}",
        server_id=node.id,
        ip_address=node.ipv4_address,
        dns_ptr=f"master-{i+1}.<http://kube.golyalpha.tk|kube.golyalpha.tk>"
    )

rabbitmq_chart = Chart(
    'rabbitmq-chart',
    ChartOpts(
        resource_prefix=stack_name,
        chart='rabbitmq',
        version="8.16.2",

def transformation(args: ResourceTransformationArgs):
    if args.type_ == "kubernetes:helm:template":
        return ResourceTransformationResult(
            props=args.props,
            opts=ResourceOptions.merge(args.opts, ResourceOptions(
                ignore_changes=["ChartOpts"],
            )))