has anybody tried storing a integer in your stack configuration file, and read it back, only to discover that it is a

str

? I know that the YAML spec allows for specifying an “int” type, which I’ve done in `Pulumi.dev.yaml`:

config:
  test:az_count: !!int 3

I’ve tested PyYAML and read back the YAML and confirmed that

test:az_count

is read back as an int, but when I try in Pulumi to get the config, I get an str instead:

error: Program failed with an unhandled exception:
    Traceback (most recent call last):
      File "/Users/jf/.../pulumi/./__main__.py", line 37, in <module>
        for i in range(0, vars.az_count):
    TypeError: 'str' object cannot be interpreted as an integer

here’s `vars.py`:

import pulumi

config = pulumi.Config()
az_count = config.get('az_count')

I’ve found 2 workarounds, but honestly I am disappointed and would expect that

config.get

would just return you the right type: 1. use

config.get_int()

so that you dont even need to (in fact it does not matter!) specify

!!int 3

2. use

int()

on the value u read back from

config.get()

Guys, is there any examples on how to use micro-stacks in python?

qn for folks using micro-stacks here: • do you use one common venv? • do you check in your venv into source control?

Hi Folks, I want to extend the stack object from the pulumi automation. There are helper fuctions (create_stack, etc.). My question is, is the right way to do this, use LocalWorkspace as the parent class?

question for the Pulumi folks (and whoever’s in the know): are there plans to have a list be exportable in Pulumi? I’m hoping to be able to export a list from a stack so that I can simply iterate through the list from another stack - instead of having to essentially maintain the same list of names (“list-item-1”, “list-item-2", etc.) across 2 projects. My use case is to be able to export a list of subnet ids from a

vpc

project, to another project that needs the list of subnet ids. Based on https://www.pulumi.com/docs/reference/pkg/python/pulumi/#stack-exports-1 and seeing

pulumi.export(_name: str_, _value: Any_)

, I was thinking that I could export a list… but nope:

pulumi:pulumi:Stack (acm-us):
    error: Program failed with an unhandled exception:
    Traceback (most recent call last):
      File "/Users/jf/.../pulumi/acm/./__main__.py", line 40, in <module>
        pulumi.export(cert_arns, cert_arns)
      File "/Users/jf/.../pulumi/venv/lib/python3.10/site-packages/pulumi/resource.py", line 1282, in export
        res.output(name, value)
      File "/Users/jf/.../pulumi/venv/lib/python3.10/site-packages/pulumi/runtime/stack.py", line 158, in output
        self.outputs[name] = value
    TypeError: unhashable type: 'list'

UPDATE: this has been resolved. A big thank you to @billowy-army-68599 for the help! Looking back at the code above again, I also see where I went wrong:

pulumi.export(cert_arns, cert_arns)

should have been

pulumi.export("cert_arns", cert_arns)

! argh….

Hello all! I'm very new to pulumi, and can't find how to configure a basic trigger for google cloud builds. I have this code:

trigger = Trigger(
    resource_name="pulumi-trigger",
    filename="Dockerfile",
    trigger_template=TriggerTriggerTemplateArgs(
        repo_name="my_repo",
        tag_name="tag-*",
    ),
)

Unfortunately, I can not find how to configure this trigger using a dockerfile (a google cloud config file is expected instead). I would like to do something that behaves exactly as :

gcloud beta builds triggers create cloud-source-repositories --repo my_repo --tag-pattern tag-* --dockerfile Dockerfile --name pulumi-trigger

Any idea how to do so ? the API reference has just got me lost so far

has anybody tried to get the current aws region in your code and discovered that you get

None

instead? I’m seeing that at the command line, pulumi has no issues with `pulumi config get aws:region`… so I try to do the same with

config.get('aws:region')

, but for some reason I get

None

(verified using

print()

)

In TypeScript, I can do:

import {config} from '@pulumi/gcp';
const foo = `${config.project}/${config.zone}`;

How to I achieve the same in Python?

When writing a pulumi program spanning over multiple Python modules, is there a way to use relative imports or absolute imports with a package name prefix? So far the only way I found is to mimic this https://github.com/pulumi/examples/tree/master/gcp-py-network-component But that's pretty misleading as we rely on top level module names: we don't know if "import foo" means "import the foo module of the pulumi program" or "import the foo package from the dependencies"

Hey, I'm getting the following error when trying to create a Dynamic Provider in pulumi (using

pulumi up

):

Diagnostics:
  pulumi:pulumi:Stack (<my-stack>):
    /Users/<my-path>/venv/lib/python3.10/site-packages/grpc/_server.py:456: RuntimeWarning: coroutine 'invoke.<locals>.do_rpc' was never awaited
      return None, False
    RuntimeWarning: Enable tracemalloc to get the object allocation traceback

  pulumi-python:dynamic:Resource (foo):
    error: Exception calling application: There is no current event loop in thread 'ThreadPoolExecutor-0_0'.

and I had no issues with my stack before adding my Dynamic Provider. I've tried with multiple providers but not even the simple

Random

example from the documentation

Hi, I'm curious what the dangers of lifting a value from an output are? Assuming that we limit it to

.get()

outputs or Stackreferences, how safe would something like this be (which does work for k8s `ConfigMap.get()`:

import typing
import pulumi
from pulumi.runtime.sync_await import _sync_await
T_co = typing.TypeVar("T_co", covariant=True)
def extract(o: pulumi.Output[T_co]) -> T_co:
    if not _sync_await(o.is_known()):
        raise RuntimeError("Output is not known yet")
    return _sync_await(o.future())

(using the hidden

_sync_await

for convenience to lift out an awaitable)

Hi Everyone, what will be the new implementation for network.NetworkInterfaceSecurityGroupAssociation & network.NetworkInterfaceApplicationSecurityGroupAssociation in azure-native python. Since i'm doing migration from azure-classic to azure-native in python. Someone can help on this much appreciated.

Hi friends 👋 Wanted to share this issue for anyone using VS Code and/or Pylance and seeing warnings about `__main__.py`: https://github.com/pulumi/pulumi/issues/11590

Can't reproduce, but if this leads to proper modules and relative imports, then it'd be fantastic news!

Is there a way to use relative imports in Python Pulumi programs? I know we can import other modules using an absolute reference: https://github.com/pulumi/pulumi/issues/1641#issuecomment-453263416 But that's misleading: • When reading import, are how we supposed to determine what's internal to the pulumi program vs. what's external? • Tools like isort believe those imports are 3rd party, so we cannot group the program's internal import together when using it Did somebody found a workaround I missed?

Hi all. I’m using Pulumi with Python and Azure and doing my first steps and experiments. Now some of my resources are named so that they have the stack name within. For example my resource groups for dev and prd are named: abc-dev-datanlplf-01 abc-prd-datanlplf-01 now when I want those names in the config is it possible to have it with the stage name as a variable .. so something like abc-{stage}-datanlplf-01 ? Or do I need to use the full name in the config without variables?

Hello All, I am trying to use Pulumi Secrets to store and create AWS Secrets Manager Secrets that can be retrieved by lambda functions at run time. When I am passing the value via config.require_secret() to the SecretVersion object, it is storing the secret as a pulumi output object (<pulumi.output.Output object at 0x103762fe0>) rather than the plain text secret. I have tried using apply(), but get the same result. What is the proper way to accomplish this with pulumi?

config = pulumi.Config()

X_CP_API_ID = config.require_secret('X_CP_API_ID')

X_CP_API_KEY = config.require_secret('X_CP_API_KEY')

X_ECM_API_ID = config.require_secret('X_ECM_API_ID')

X_ECM_API_KEY = config.require_secret('X_ECM_API_KEY')

cradlepoint_api = {

"X-CP-API-ID": X_CP_API_ID,

"X-CP-API-KEY": X_CP_API_KEY,

"X-ECM-API-ID": X_ECM_API_ID,

"X-ECM-API-KEY": X_ECM_API_KEY,

"Content-Type":"application/json"

}

cradlepoint_secret = aws.secretsmanager.Secret("lambda/cradlepoint_api")

cradlepoint_secret_version = aws.secretsmanager.SecretVersion("lambda/cradlepoint_api",

secret_id = cradlepoint_secret.arn,

secret_string = str(cradlepoint_api)

)

Thanks!

Hey everyone, I'm building a repo that contains multiple pulumi projects and I ran into the same issue described here and here, that is to say, you can't import in

__main__.py

modules from parent directories. Mostly the solutions that have been suggested are: • Either hack sys.path in some way or another, • Install the pulumi repo itself as a package as described in this thread I was wondering if in the meantime, someone had come up with a preferrable solution

hey, what am I missing here?

Why is Pulumi typing resource arguments using @pulumi.input_type-decorated SomethingArgs classes instead of a simple TypedDict? TypedDict are much lighter to use and would allow arguments composition the same way we can do using the args objects in TypeScript. Am I missing something?

When using the Automation API, how can I pass configuration values that are not simple strings? According to the implementation it is not possible: https://github.com/pulumi/pulumi/blob/master/sdk/python/lib/pulumi/automation/_config.py#L29 🤔

Is there a way to get a list of resources in the stack with python? Something equivalent to

pulumi stack --show-urns

For context, I'm generating a yaml file with a list of existing AWS resources, then I want to import the resources defined in the yaml file if they don't already exist in the pulumi state. If they do exist, I just want to manage them as an existing pulumi resource. I feel like I'm possibly missing something obvious but I can't seem to figure out how to inspect the stack resources in a python script.

Hello all, I am working with AWS RDS right now, and I want to manipulate with creating schemas, users, etc. I’m using pulumi_aws.rds.Instance for creating and pulumi_postgresql for changes. How can I provide such variables as postgresql:host, postgresql:username and postgresql:password from the python runtime to the environment? I didn’t find any variable in the pulumi_postgresql library related to authentication, so, as I know, this library takes it from the environment.

Hey All: Does Pulumi azure-native for LoadBalancer support passing Network interface as input? i can see from documentation it accepts LoadBalancerBackendAddress which takes ip-address as input. https://www.pulumi.com/registry/packages/azure-native/api-docs/network/loadbalancer/#loadbalancerbackendaddress - My use case is i want to attach network interface to backend pool of load balancer. Any quick help/reference link is appreciated.

Hello all, Let me have o two projects in the directory: my_company/my_project_1 and my_company/my_project_2. In my_project_1, I create a lot of subnets, and I need to use them in my_project_2. Are there any possibilities of using variables of created resources from my_project_1 in a runtime of my_project_2?

Does pulumi automation API support async/await?We are facing issues while calling stack.up() method?

Hi all, I am using the azure.compute.Extension and am having an issue referencing another resource. The resource takes a settings parameter that is a string. Within this I am trying to reference another resource, but this is failing:

user_assigned_identity = azure.authorization.UserAssignedIdentity(
    f"{stack_name}-identity",
    name=f"{stack_name}-identity",
    location=resource_group.location,
    resource_group_name=resource_group.name,
    tags=tags)


azure.compute.Extension(
    "KeyVaultExtension",
    name="KeyVaultExtension",
    virtual_machine_id=vm.id,
    publisher="Microsoft.Azure.KeyVault",
    type="KeyVaultForLinux",
    type_handler_version="2.0",
    settings=json.dumps(
        {
            "secretsManagementSettings": {
                "pollingIntervalInS": "30",
                "certificateStoreName": "MY",
                "linkOnRenewal": False,
                "certificateStoreLocation": "/var/lib/waagent/Microsoft.Azure.KeyVault",
                "observedCertificates": [
                    f"{kv_uri}/secrets/certificate",
                    f"{kv_uri}/secrets/certificate"
                ]
            },
            "authenticationSettings": {
                "msiEndpoint": "<http://169.254.169.254/metadata/identity>",
                "msiClientId": user_assigned_identity.client_id
            }
        }
    ),
    opts=ResourceOptions(
        depends_on=[vm]
    )
)

Where I can find an example os using the output of a resource as an input of another resource in python?