Demo of integrating the native Azure Pulumi provider with the Microsoft Azure SDK

This example lives in the pulumi/examples repository. Check out just this directory to use it:

$ git clone --filter=blob:none --sparse https://github.com/pulumi/examples pulumi-examples
$ git -C pulumi-examples sparse-checkout set azure-py-call-azure-sdk
$ cd pulumi-examples/azure-py-call-azure-sdk

The native Azure Pulumi provider exposes the entire resource model of Azure Resource Manager. Each resource can be created, updated, deleted, or refreshed (read).

However, Azure API has many endpoints that don’t map to our resource model. For examples, finding resources given some filter criteria is not supported directly.

However, you can easily integrate an Azure SDK call inside your Pulumi program using the same programming language. We provide a helper function authorization.get_client_token() that returns a valid authentication token for the same login context that the Pulumi provider is using.

This example demonstrates how to use such integration to lookup a role definition ID based on its name and scope. It then creates a role assignment for the resulting definition to allow pulling container images from a registry.

Prerequisites#

1. Install Pulumi
2. Configure Azure credentials
3. Install Python

Deploying the example#

1. Create a new stack:

   pulumi stack init dev

2. Login to Azure CLI (you will be prompted to do this during deployment if you forget this step):

   az login

3. Set the Azure region location to use:

   pulumi config set azure-native:location WestUS

4. Install dependencies:

   python3 -m venv venv
   source venv/bin/activate
   pip install -r requirements.txt

5. Deploy the stack:

   pulumi up

   Previewing changes:
   ...
   Performing changes:
   ...
   Resources:
      + 4 created

Cleaning up#

Once you’re finished experimenting, you can destroy your stack and remove it to avoid incurring any additional cost:

pulumi destroy
pulumi stack rm