Demo of integrating the native Azure Pulumi provider with the Microsoft Azure SDK

This example lives in the pulumi/examples repository. Check out just this directory to use it:

$ git clone --filter=blob:none --sparse https://github.com/pulumi/examples pulumi-examples
$ git -C pulumi-examples sparse-checkout set azure-go-call-azure-sdk
$ cd pulumi-examples/azure-go-call-azure-sdk

The native Azure Pulumi provider exposes the entire resource model of Azure Resource Manager. Each resource can be created, updated, deleted, or refreshed (read).

However, Azure API has many endpoints that don’t map to our resource model. For examples, finding resources given some filter criteria is not supported directly.

However, you can easily integrate an Azure SDK call inside your Pulumi program using the same programming language. We provide a helper function authorization.GetClientToken() that returns a valid authentication token for the same login context that the Pulumi provider is using.

This example demonstrates how to use such integration to lookup a role definition ID based on its name and scope. It then creates a role assignment for the resulting definition to allow pulling container images from a registry.

Prerequisites#

1. Install Pulumi
2. Configure Azure credentials
3. Install Go

Deploying the example#

1. Create a new stack:

   pulumi stack init dev

2. Log in to the Azure CLI (you will be prompted to do this during deployment if you forget this step):

   az login

3. Set the Azure region location to use:

   pulumi config set azure-native:location WestUS

4. Install dependencies:

   go mod download

5. Run pulumi up to preview and deploy changes:

   pulumi up

   Previewing changes:
   ...
   Performing changes:
   ...
   Resources:
       ~ 1 updated
       3 unchanged

Cleaning up#

Once you are done, you can destroy all of the resources, and the stack:

pulumi destroy
pulumi stack rm