the examples of the official docs are too short to understand it

I have a Route53 record in a different AWS account from where our pulumi stack is deployed, and I need to be able to update this record as part of my pulumi deploy. I've created a provider to use as part of updating my record but I get an error when I run pulumi up, "no matching Route53Zone found". Has anyone needed to update a route53 record in a different AWS account with a new alb dns name?

dns_provider = aws.Provider(
    'dns',
    region = 'us-east-1',
    profile = 'my_local_aws_profile_for dev account',
    assume_role = aws.ProviderAssumeRoleArgs(
        role_arn = "my_arn_where_route53_record_resides"        
    )
)

record = aws.route53.Record(
    "data-viz",
    zone_id = aws.route53.get_zone(name = "my_domain.com."),
    name = "<http://myrecord.my_domain.com|myrecord.my_domain.com>",
    type = "CNAME",
    aliases = [aws.route53.RecordAliasArgs(
        name = alb.load_balancer.dns_name,
        zone_id = alb.load_balancer.zone_id,
        evaluate_target_health = True 
    )],
    opts=pulumi.ResourceOptions(provider = dns_provider)
)

I feel like this has to be an FAQ because I keep running into it but googling isn't helping. I get

ModuleNotFoundError

when running

pulumi up

on built in libraries like

import pulumi_eks

Does the pulumi CLI work with conda?

Hey. I’m getting

pulumi.config.ConfigMissingError

when running unit tests on infra that has

require

on some config options. Any tips for how to avoid that?

How I can retrieve the fully qualified name from a resporce? is there any generic output?

Hi, I am receiving multiple

warning: unable to detect a global setting for GCP Project;

despite having run

pulumi config set gcp:project project_name

any thoughts on how I can track down and resolve these warnings?

Hi, I’m trying to deploy multiple resources of the same kind with the dynamic provider. I thought thta each resource should be treated by an instance of my provider class. It seems that this does not work like a ‘normal’ python program: • I tried to write logs into multiple files, one for each of the resources that I create. Pulumi seems to ignore the code in the create method of the provider class, hence in the

create

method, I start get a logger with

logger = logging.getLogger()

. each of these loggers gets its own configuration with an individual file. However, only one file is created and everything is written there (as if only the last of the

logging.getLogger()

instances is really created. This is extremely confusing. • When using an

AuthorizationManagementClient

from

azure.mgmt.authorization

, I get really confusing

409 Conflict

responses that make me suspect that a similar thing like with the logger happens here as well. Could anyone with more experience with dynamic providers give me some insights?

Hi, Is there any way to export Pulumi logs to Elasticsearch, Logstash, and Kibana (ELK) stack ?

Hi everyone. I am a newbie in pulumi. I am having an issue. When I do pulumi login in GCP backend It appears an error: stderr: error: getting secrets manager: passphrase must be set with PULUMI_CONFIG_PASSPHRASE or PULUMI_CONFIG_PASSPHRASE_FILE environment variables When I do pulumi logout the deployment works - pulumi api automation. Does anyone have an idea how to fix this?

This message was deleted.

How I should reuse an output from one resource?

This message was deleted.

Hey guys, has anyone tried to implement unique ids in the URN of the resource with pulumi python? I'm working on a project where we are handling a naming convention but we need something that pulumi can provide us to solve this. I'll keep an eye out if anyone knows :D

Hi all, I'm looking for some guidance on an item being returned in state from provider in the pulumi python boilerplate at => https://github.com/pulumi/pulumi-component-provider-py-boilerplate/blob/main/provider/cmd/pulumi-resource-xyz/xyz_provider/staticpage.py. Specifically, the bucket. In schema.json for this example they designate it is an aws bucket resource but in the index.ts none of those properties are accessible so I'm curious what is point of returning the resource like this. The bucket is outputting an id but I would have expected it to be an object with the properties of aws bucket. Thanks 😃

Hi all 👋 I'm just getting started with both Pulumi and python, and I'm struggling to understand how I can read configuration from the stack yaml file 🤔 Trying to setup an Azure keyvault using the

azure-native

package. https://www.pulumi.com/registry/packages/azure-native/api-docs/keyvault/vault/ What I can't understand is if the package should implicitly understand that I have set the

tenantId

in the config file, or if I need to read it out in the python code and pass it along? And if so, how do I get that config value in code? No matter what I do, it's trying to read from a section prefixed by my application name... This is (part of) what I have in `Pulumi.stack-name.yaml`:

config:
  azure-native:tenantId: 123-123-123-123

How can i concatenate strings when using

pulumi.output.json_dumps

?

Hello there! I'm struggling a bit with the usage of the apply function. I'm provisioning an AWS account with the function

create_account

that returns an Output object (aws.organizations.Account). I'm then trying to pass the account id to another function because I need to render its value in json templates for IAM policies. Here is how I'm currently doing it:

config = pulumi.Config()
region = config.require('region')
name = config.require('name')

account = create_account(region=region, name=name)

account.id.apply(lambda account_id: create_iam_roles(account_id=account_id))

This is working perfectly but if I understood right, this is not a good practice to create resources in the apply. I saw in the doc that I should be able to pass this argument like below but it throws an error when I try to manipulate it as a string:

create_iam_roles(account_id=account.id.apply(lambda account_id: f"{account.id}))

Here is the manipulation I need to do with this string in the

create_iam_roles

function. Is there anything I miss?

#opening policy file
template_policy = file.read()

policy = json.loads(template_policy)
policy['Statement'][0]['Principal']['AWS'] = f"arn:aws:iam::{account_id}:root"

role = awsnative.iam.Role(
        assume_role_policy_document=policy,
        ....
    )

Thank you!

what is the correct way to do this?

image.png

image.png

basically, I'm trying to use

pulumi.Output.concat()

or

pulumi.Output.format()

for a key

this works well for values, but not for keys 😕

How can I debug

pulumi_command.local.Command

? For some reason, after altering the command and adding an

asset_paths

argument, creating (and updating) this Resource fails all the time. When I run the command outside of Pulumi it works fine and has a zero exit status. I want to find out which exit status is returned then, and if it's a Pulumi-internal error (I suspect so), I want to know which one.

Cross-Posting from general for vis https://pulumi-community.slack.com/archives/C84L4E3N1/p1674765729597779

Is there any guarantee to how my pulumi objects get mapped to values of a dictionary during creation? This seems to be consistent during development but when purging python cache i notice already created resource objects are re-ordered in the dictionary randomly sometimes causing resource changes. Using Python > 3.9

Is this a reliable pattern for conditional resources that may already exist in AWS but not in pulumi and if not then create it?

def conditional_role_not_exists():
    try:
        result = aws.iam.get_role("conditional_role_not_exists")
        if result.id:
            return
    except:
        pass
    # create if it does not exist
    aws.iam.Role("conditional_role_not_exists", args=aws.iam.RoleArgs(assume_role_policy="{}"))

conditional_role_not_exists()

Not really, if you do not execute the Role declaration in the code, the role will be deleted instead when , if it managed by Pulumi from a previous update. Pulumi and many other tools generate a declarative model of the resources, even though the code may look imperative. If you have a resource that that already exists but is not managed by Pulumi, import it into the stack instead. This is a one-time operation. You code just includes the part that declare the role (aws.iam.Role(.....) ).

How I can create a file in the current directory with the contents of an output?

I'm trying something like this