Hi all, kind of a basic question i guess… how would we detect if pulumi is running in Preview, Up or Destroy mode from our Python project?

Hi all, after reading this post https://www.pulumi.com/blog/cumundi-guest-post/ I figured I'd be able to do something like

opts=ResourceOptions(
                parent=self,
                aliases=[{'parent': pulumi.ROOT_STACK_RESOURCE}],
            ),

when moving a ressource from having no parent to having one. However this just seems to fail as aliases seems to require a 'name' parameter. Am I understanding something wrong here?

Hi, Im working on Uptime healthchecks in gcp, and using the

gcp.monitoring.UptimeCheckConfig

class, when I'm a trying to

pulumi up

the resource, I get the error:

creating UptimeCheckConfig: googleapi: Error 400: Name must begin with 'projects/{project_id}/groups/{group_id}', got: project/PROJECT_ID/groups/

but I don't understand what name there is referring to? There is no keyword argument call name and I don't see anything on this formed written in the examples on the document page. Help will be appreciated!

I've noticed before that pulumi automatically installs things as they're needed. Now though, I've both added a new library to my requirements.txt, and changed the version requirements on another, and neither is getting picked up after doing

pulumi up

.

┌─[jamesph@Jamess-MBP] - [~/Documents/winfrastructure/aws] - [Fri Mar 17, 12:42]
└─[$]> venv/bin/pip freeze
Arpeggio==1.10.2
attrs==22.1.0
dill==0.3.5.1
grpcio==1.47.0
parver==0.3.1
protobuf==4.21.5
pulumi==3.39.3
pulumi-aws==5.17.0
pulumi-aws-native==0.29.0
PyYAML==6.0
semver==2.13.0
six==1.16.0
┌─[jamesph@Jamess-MBP] - [~/Documents/winfrastructure/aws] - [Fri Mar 17, 12:44]
└─[$]> cat requirements.txt
pulumi>=3.0.0,<4.0.0
pulumi-aws-native==0.52.0
pulumi-aws>=5.17.0,<6.0.0
pulumi-twingate>=0.0.43
┌─[jamesph@Jamess-MBP] - [~/Documents/winfrastructure/aws] - [Fri Mar 17, 12:44]
└─[$]> cat Pulumi.yaml
name: aws
description: AWS
runtime:
    name: python
    options:
        virtualenv: venv

(Observe the much earlier version of pulumi-aws-native, and the missing pulumi-twingate.) I could manually call pip install, but I'd like to know why this isn't working

Does anyone have an example of using image_pull_secrets in a PodSpecArgs class? I've tried both image_pull_secrets=[LocalObjectReferenceArgs(name="secret_name")], and a plain dictionary [{"name": "secret_name"}] .. and it continues to attempt anonymous access to the container registry.

secret_name being a secret created using kubectl (and docker login outputs).

👋 unable to debug

error: failed to discover plugin requirements: creating virtual environment at /Users/workspace/venv: signal: killed

when doing

pulumi up

, anybody ran into this before?

seems to be something with python, getting this too

error: failed to discover plugin requirements: calling "python -m pip list -v --format json": signal: killed

Hi Folks, I've discovered what seems to be a bug (perhaps I'm not creating the code in a "friendly" way), it looks to be some kind of race condition. I thought I'd post here before creating an issue in Github. Code:

"""An AWS Python Pulumi program"""
import iam
import pulumi
from pulumi import automation as auto
import pulumi_aws as aws
import sys


def pulumi_function():
    
    main_vpc = aws.ec2.Vpc(resource_name="main-vpc", cidr_block="10.0.0.0/16")

     
    subnet_ids = []
    for index, zone in enumerate(aws.get_availability_zones().names):
        vpc_subnet=aws.ec2.Subnet(f"subnet_{zone}", 
                                      vpc_id=main_vpc.id, cidr_block=f"10.0.{index}.0/24",
                                      availability_zone=zone)
        subnet_ids.append(vpc_subnet.id)
 
    eks_cluster = aws.eks.Cluster('eks-cluster', role_arn=iam.eks_role.arn,tags={'Name': 'pulumi-eks-cluster','Owner': 'xxx' },
    vpc_config=aws.eks.ClusterVpcConfigArgs(
        # public_access_cidrs=['0.0.0.0/0'],
        subnet_ids=subnet_ids
    ),
    )




    # pulumi.export('vpc_id', main_vpc.id)

destroy = False
args = sys.argv[1:]
if len(args) > 0:
    if args[0] == "destroy":
        destroy = True


project_name = "eks_project"
stack_name = "dev"

stack = auto.create_or_select_stack(stack_name=stack_name,
                                    project_name=project_name,
                                    program=pulumi_function)

print(f"Successfully initialized stack: {stack_name}")


if destroy:
    print("destroying stack...")
    stack.destroy(on_output=print)
    print("stack destroy complete")
    sys.exit()


stack.set_config("aws:region", auto.ConfigValue(value="eu-west-2"))
stack.up(on_output=print)

Error I get when I run (via python not the Pulumi CLI):

(venv) xxxx@xxxxs-MBP pulumi % python __main__.py        
Successfully initialized stack: dev
Updating (dev):

 +  pulumi:pulumi:Stack eks_project-dev creating (0s)
 +  aws:ec2:Vpc main-vpc creating (0s)
 +  pulumi:pulumi:Stack eks_project-dev creating (0s) error: python inline source runtime error: Task <Task pending name='Task-235' coro=<register_resource.<locals>.do_register() running at /Users/xxxx/projects/pulumi/venv/lib/python3.9/site-packages/pulumi/runtime/resource.py:811> cb=[<TaskWakeupMethWrapper object at 0x1065e2e50>()]> got Future <Future pending> attached to a different loop
 +  pulumi:pulumi:Stack eks_project-dev creating (0s) error: an unhandled error occurred: python inline source runtime error: Task <Task pending name='Task-235' coro=<register_resource.<locals>.do_register() running at /Users/xxxx/projects/pulumi/venv/lib/python3.9/site-packages/pulumi/runtime/resource.py:811> cb=[<TaskWakeupMethWrapper object at 0x1065e2e50>()]> got Future <Future pending> attached to a different loop
@ updating....
 +  aws:ec2:Vpc main-vpc created (1s)
@ updating.......
 +  pulumi:pulumi:Stack eks_project-dev **creating failed (0.49s)** 2 errors

There is more stack trace / diagnostics here

Hi There, I am really stuck in a Pulumi/Python/Kubernetes issue... I really need help or hints. Used command:

pulumi up

System: • pulumi version ◦ v3.55.0 • kubectl version ◦ Client Version: version.Info{Major:"1", Minor:"25", GitVersion:"v1.25.6+k3s1", GitCommit:"9176e03c5788e467420376d10a1da2b6de6ff31f", GitTreeState:"clean", BuildDate:"2023-01-26T004747Z", GoVersion:"go1.19.5", Compiler:"gc", Platform:"linux/amd64"} ◦ Kustomize Version: v4.5.7 ◦ Server Version: version.Info{Major:"1", Minor:"25", GitVersion:"v1.25.3+k3s1", GitCommit:"f2585c1671b31b4b34bddbb3bf4e7d69662b0821", GitTreeState:"clean", BuildDate:"2022-10-25T195938Z", GoVersion:"go1.19.2", Compiler:"gc", Platform:"linux/amd64"} • python version ◦ Python 3.11.2 • OS ◦ Ubuntu 20.04.5 LTS Output:

>>> pulumi up

Previewing update (black_ant)

Type                                    Name                         Plan       Info

pulumi:pulumi:Stack                     blackant-pulumi-black_ant               3 messages

└─ pkg:index:App                        app

├─ pkg:index:frontend-deployment     frontend

~      │  └─ kubernetes:apps/v1:Deployment  blackant_frontendDeployment  update     [diff: ~spec]

+      └─ pkg:index:frontend-service        frontend                     create

+         └─ kubernetes:core/v1:Service     blackant_frontendService     create

Diagnostics:

pulumi:pulumi:Stack (blackant-pulumi-black_ant):

Outputs:

+ frontend: "frontend"

Do you want to perform this update? yes

Updating (black_ant)

Type                                    Name                         Status                  Info

pulumi:pulumi:Stack                     blackant-pulumi-black_ant    **failed**              1 error

└─ pkg:index:App                        app

└─ pkg:index:frontend-deployment     frontend

~         └─ kubernetes:apps/v1:Deployment  blackant_frontendDeployment  **updating failed**     [diff: ~spec]; 1 error

Diagnostics:

kubernetes:apps/v1:Deployment (blackant_frontendDeployment):

error: update of resource blackant-components/frontend failed because the Kubernetes API server reported that it failed to fully initialize or become live: deployments.apps "frontend" not found

pulumi:pulumi:Stack (blackant-pulumi-black_ant):

error: update failed

Outputs:

+ frontend: "frontend"

Resources:

5 unchanged

Duration: 7s

app.py

import os

import pulumi
from pulumi import ResourceOptions

from modules.app.deployment.frontend_deployment import Frontend
from modules.app.service.frontend_service import FrontendService


class App(pulumi.ComponentResource):
    def __init__(self, name, opts=None):
        super().__init__('pkg:index:App', name, None, opts)

        frontend = Frontend(
            replica_count=3,
            version="latest", # prod_version,
            canary=False,
            opts=ResourceOptions(parent=self)
        )

        frontend_service = FrontendService(
            opts=ResourceOptions(
                parent=self,
                depends_on=[frontend]
            )
        )

frontend_deployment.py

import pulumi
from pulumi import Config, ResourceOptions
from pulumi_kubernetes.apps.v1 import Deployment, DeploymentSpecArgs
from pulumi_kubernetes.core.v1 import PodTemplateSpecArgs, PodSpecArgs, ContainerArgs, EnvVarArgs, ContainerPortArgs, \
    Service, ServiceSpecArgs, ServicePortArgs, LocalObjectReferenceArgs
from pulumi_kubernetes.meta.v1 import ObjectMetaArgs, LabelSelectorArgs

from modules.app.deployment.blackant_deployment import BlackantDeployment


class Frontend(BlackantDeployment):
    def __init__(self, replica_count, version, canary, opts=None):
        
        super().__init__("frontend", version, replica_count, canary, None, opts)
        

        cfg = Config()

        blackant_frontend_deployment = Deployment(
            "blackant_frontendDeployment",
            api_version="apps/v1",
            kind="Deployment",
            metadata=ObjectMetaArgs(
                name=self._fullname,
                labels={
                    "app": "blackant",
                    "tier": "frontend",
                },
                namespace="blackant-components",
            ),
            spec=DeploymentSpecArgs(
                replicas=replica_count,
                selector=LabelSelectorArgs(
                    match_labels={
                        "tier": "frontend",
                    },
                ),
                template=PodTemplateSpecArgs(
                    metadata=ObjectMetaArgs(
                        labels={
                            "tier": "frontend",
                        },
                    ),
                    spec=PodSpecArgs(
                        image_pull_secrets=[LocalObjectReferenceArgs(name="blackant-image-pull-secret")],
                        containers=[
                            ContainerArgs(
                                name="blackant-frontend",
                                image=f"{cfg.require('docker_registry')}/system/frontend:{version}",
                                env=[
                                    EnvVarArgs(
                                        name="CANARY",
                                        value=canary.__str__()
                                    ),
                                ]
                            )
                        ],
                    ),
                ),
            ),
            opts=ResourceOptions(parent=self)
        )
        print("REALLY AFTERRR")

blackant_deployment.py

from typing import Mapping, Awaitable

import pulumi
from pulumi import Config, Output, ResourceOptions

from modules.util.configuration_resolver import ConfigurationResolver


class BlackantDeployment(pulumi.ComponentResource):

    def __init__(
            self,
            name: str,
            version: str,
            replica_count: int,
            canary: bool,
            props: Mapping[str, Awaitable | Output] | None = None,
            opts: ResourceOptions | None = None
    ):
        super().__init__(f'pkg:index:{name}-deployment{"" if not canary else "-canary"}', name, props, opts)

        self._fullname = f'{name}{"" if not canary else "-canary"}'

Thanks in advance, Milan

Hi, Im trying to create a user for my postgres db, that has some of the privileges that the postgres superuser has. My db run in GCP, and I have created my db instance and db with

pulumi_gcp.sql

. I have found the library

pulumi_postgresql

, but I find it hard to get it to work from the documentation. I have made tried making the resource

pulumi_postgresql.Grant

:

grants_to_user = postgresql.Grant("user-GRANTS",
        database=database.name,
        object_type="database",
        privileges=["SELECT"],
        role=db_role.name,
    )

where

db_role.name

is made with

pulumi_postgresql.Role

:

db_role= postgresql.Role('DB-ROLE',
        login=True,
        roles=["SELECT"],
        password = 'PASSWORD'
    )

They both grant the same error:

error: 1 error occurred:
        * error detecting capabilities: error PostgreSQL version: dial tcp [::1]:5432: connect: connection refused

I find it hard to debug this error, so I was wondering if anyone have a solution for the problem? Any help is greatly appreciated! Best Regards Elias

Is there a way to skip pulumi from running

pulumi plugin install

when installing Pip/python pulumi libraries out of band? (e.g. we're using Pipfile). For context here, in this instance, pulumi is being managed via the asdf tool, but the global version is not set (on purpose) so we can rely on the

.tool-versions

file. This means when pulumi is invoked from the cwd of the project's original

Pulumi.yaml

file this is not a problem, but when pipenv goes to install it uses a tmp directory which does not contain the

.tool-versions

file. I'd rather install these plugins via

pulumi plugin install

instead, if possible.

[pipenv.exceptions.InstallError]:         File "/tmp/pip-install-qcukotzg/pulumi-aws_d0831f623f8341148f9146396ab524dc/setup.py", line 18, in run
[pipenv.exceptions.InstallError]:           check_call(['pulumi', 'plugin', 'install', 'resource', 'aws', PLUGIN_VERSION])
[pipenv.exceptions.InstallError]:         File "/usr/lib/python3.10/subprocess.py", line 369, in check_call
[pipenv.exceptions.InstallError]:           raise CalledProcessError(retcode, cmd)
[pipenv.exceptions.InstallError]:       subprocess.CalledProcessError: Command '['pulumi', 'plugin', 'install', 'resource', 'aws', '5.32.0']' returned non-zero exit status 126.
[pipenv.exceptions.InstallError]:       [end of output]
[pipenv.exceptions.InstallError]:

Is there a way to use poetry with the Pulumi GitHub action? Our program requires poetry but I am not sure how to integrate that into a workflow.

Is it more idiomatic in Python to use the

args=

keyword and pass in an instantiated WhateverArgs class or use each arg from that class in the constructor of the resource? I notice a lot of TypeScript examples have the second parameter be the entire object of args (class), but a lot of python examples use the named keyword arguments of args as part of the resources' constructor arguments...

Hey everyone! i'm new to pulumi. I was trying to fetch all the stack config values dynamically but couldn't find a way to do so in the docs. Am I missing something or is it not possible to get all the stack config values dynamically?

I am working with the Python keycloack provider and am looking for some guidance on the

password_policy

key https://www.pulumi.com/registry/packages/keycloak/api-docs/realm/#password_policy_python and its allowed/accepted values. For example, the keycloak server has an password policy in the UI

Not Recently Used

. If I want to use that value in password_policy, should it be

notRecentlyUsed(3)

? I looked through the keycloak docs search for anything under

PasswordPolicy

but didn’t come across that value https://www.keycloak.org/docs-api/21.0.1/javadocs/index-all.html Would greatly appreciate it if someone has any functional examples around that bit.

Hi everyone. I’m fairly new to Pulumi and Python. Have done some simple examples etc. Now I’m doing my first bigger setup, at least bigger then the tutorial on how to create a simple Azure object. When I do google searches etc I came up with the following in Python for an Azure VM:

<https://pastebin.com/MFzmv47L>

Now it complains about multiple parts. So for example the os_profile part should be

os_profile=azure_native.compute.OSProfileArgs(
        admin_password="{your-password}",
        admin_username="{your-username}",
        computer_name="myVM",
    ),

so I should use the xyzArgs function. I can do that but why are so many examples not using the Args but the way I use it in the pastebin? Is there two ways of doing it? One prefered about the other? Or is the non Args way for for the old Azure Provider and Args for the azure native one? Just trying to understand why.

Hello Everyone. I am trying to use GCP cloud deploy to deploy on Cloud Run . I see the sample code here: https://www.pulumi.com/registry/packages/gcp/api-docs/clouddeploy/target/ I am bit confused about how do we actually pass on the image name for Cloud Run? Any help is highly appreciated.

primary = gcp.clouddeploy.Target("primary",
    location="us-west1",
    annotations={
        "my_first_annotation": "example-annotation-1",
        "my_second_annotation": "example-annotation-2",
    },
    description="basic description",
    execution_configs=[gcp.clouddeploy.TargetExecutionConfigArgs(
        usages=[
            "RENDER",
            "DEPLOY",
        ],
        execution_timeout="3600s",
    )],
    labels={
        "my_first_label": "example-label-1",
        "my_second_label": "example-label-2",
    },
    project="my-project-name",
    require_approval=False,
    run=gcp.clouddeploy.TargetRunArgs(
        location="projects/my-project-name/locations/us-west1",
    ),
    opts=pulumi.ResourceOptions(provider=google_beta))

Hello! I'm trying to get a kms key using its alias, basically the first line of this example: https://www.pulumi.com/registry/packages/aws/api-docs/kms/getkey/#example-usage I get the following error: Exception: invoke of awskms/getKeygetKey failed: invalid value for key_id (must be a KMS Key ID) () I'm using pulumi 3.60.1 with python. Thanks in advance for your help! Posted in #aws

I believe there is an issue with VSCode's intellisense when using

get_<some-resource>_output()

(for example

s3.get_bucket_output()

). The first screenshot is what autosuggestion shows using Python. The second one is using TypeScript instead. Is there any way to fix this ?

Question getting the actual value after using get_output, what is the preferred way? I´ve tried the following snippet, using apply on the output, which does not seem to work;

stack = pulumi.StackReference(aca_stack_ref)

default_domain = stack.get_output("default_domain").apply(lambda x: x)

default_domain_arr = default_domain.split(".")

....

Which returns the following when ran; default_domain_arr = default_domain.split(".") ^^^^^^^^^^^^^^^^^^^^^^^^^ TypeError: 'Output' object is not callable

I'm trying to learn Pulumi but this issue has been driving my mad - already spent 6 hours trying to find the right way to pass the bucket name in the even pattern - please can someone look into this I've tried a variety of variations to get the bucket name but all produce the same error: The line that's giving me grief is:

pulumi.Output.all(bucket.id).apply(lambda y: f"{y}")

- also tried:

import json
import pulumi
import pulumi_aws as aws

# Create an AWS resource (S3 Bucket)
bucket = aws.s3.Bucket('kollective-data')

# Export the name of the bucket
pulumi.export('bucket_name', bucket.id)

# Create an event rule to watch for events.
s3_rule = aws.cloudwatch.EventRule("rule",
                                   event_pattern=json.dumps({"source": ["aws.s3"],
                                                             "detail-type": ["Object Created"],
                                                             "bucket": [pulumi.Output.all(bucket.id).apply(lambda y: f"{y}")],
                                                             "object": {
                                                                 "key": [{
                                                                     "prefix": "user-data/roger/"
                                                                 }
                                                                 ]
                                                             }

                                                             })
                                   )

Hello! I'm Trying to create VM using pulumi_azure_native pulumi python on azure. I want to copy directory that vm.Can you please suggest me what is the best way to copy directory on that vm via pulumi_azure_native pulumi python. Thanks in advanced.

Hi, every one ,What’s the difference between using

pulumi_aws_apigateway

and

pulumi_aws.apigateway

?

Thanks, Team Pulumi for this amazing tool. https://www.pulumi.com/ai/

Does Pulumi Kubernete CustomResource for Python allow setting the "others" input? KongClusterPlugin CRD has a required plugin field on the same level as metadata, and the default definition doesn't allow setting. It appears that only the Typescript version allows it. https://www.pulumi.com/registry/packages/kubernetes/api-docs/apiextensions/customresource/#inputs https://docs.konghq.com/kubernetes-ingress-controller/2.9.x/references/custom-resources/#kongclusterplugin

Hi, how would I implement a preview of changes for a dynamic resource? We have a dynamic resource provider that writes content to files, when calling

pulumi preview --diff

I would like to see the specific lines in the file that have changed.

Hello team, Did anyone has that error before : awsiamRole (lambdaRole): error: could not validate provider configuration: 1 error occurred: there is no problem in local but in gitlab pipeline it has that error

Hi team. When I use

aws.apigateway.get_resource

, I want to know how to wait for a resource to be created before obtaining its attribute using Pulumi. Here is my code.

rest_api = aws.apigateway.RestApi(
    resource_name="login",
    name="login",
    body=ApiFile("login.yaml").body,
)

# This may be failed , I think is caused by the resource had not been created
resource = aws.apigateway.get_resource(
    rest_api_id=rest_api.id,
    path="/login",     
)

What does mapCase mean in the pulumi aws schema?

"aws:iam/getPolicyDocumentStatementCondition:getPolicyDocumentStatementCondition": {
            "properties": {
                "test": {
                    "type": "string",
                    "language": {
                        "python": {
                            "mapCase": false
                        }
                    }
                },