Pulumiを使用したワークロードの管理¶

pulumi config set datarobot:endpoint [https://app.datarobot.com/api/v2](https://app.datarobot.com/api/v2)
pulumi config set datarobot:apikey <your-api-token> --secret


サポートされている設定パスの完全なリストについては、[Pulumiレジストリのインストールガイド](https://www.pulumi.com/registry/packages/datarobot/installation-configuration/){ target=_blank }を参照してください。

### `ApiTokenCredential`を使用した資格情報の管理 {: #managing-credentials-with-apitokencredential }

プロバイダーの`ApiTokenCredential`リソースは、Pulumiのステートから管理されたDataRobotの資格情報レコードを作成します。これにより、資格情報のライフサイクルが、それが機能するアーティファクトやワークロードとともに宣言的に保持されます。

``` python
import pulumi
import pulumi_datarobot as datarobot

# コンテナ側のトークン。Pulumiシークレットとして保持されるため、ソースに残ることはありません。
container_token = pulumi.Config().require_secret("datarobotToken")

credential = datarobot.ApiTokenCredential(
    "agent-service-token",
    name="agent-service-token",
    description="agent-serviceワークロードが使用するAPIトークン",
    api_token=container_token,
)

import pulumi
import pulumi_datarobot as datarobot

artifact = datarobot.Artifact(
    "whoami-artifact",
    name="whoami-artifact",
    type="service",
    spec={
        "container_groups": [{
            "name": "default",
            "containers": [{
                "name": "whoami",
                "image_uri": "containous/whoami:latest",
                "port": 8080,
                "primary": True,
                "entrypoint": ["/whoami", "--port", "8080"],
                "readiness_probe": {"path": "/", "port": 8080, "initial_delay_seconds": 5},
            }]
        }]
    },
)

workload = datarobot.Workload(
    "hello-whoami",
    name="hello-whoami",
    artifact_id=artifact.artifact_id,
    runtime={
        "container_groups": [{
            "name": "default",
            "replica_count": 1,
            "containers": [{
                "name": "whoami",
                "resource_allocation": {"cpu": 1, "memory": "512MB"},
            }],
        }]
    },
)

pulumi.export("endpoint", workload.endpoint)

"""Pulumi program that stands up a service workload."""
import pulumi
import pulumi_datarobot as datarobot

# Third-party credential (for example, a model provider API key). Held as a Pulumi
# secret so it never lands in source. The DataRobot API token the container needs
# to call DataRobot's own APIs doesn't need this treatment -- see environment_vars below.
third_party_token = pulumi.Config().require_secret("modelProviderToken")

credential = datarobot.ApiTokenCredential(
    "model-provider-token",
    name="model-provider-token",
    description="Third-party model provider API token used by the agent-service workload",
    api_token=third_party_token,
)

artifact = datarobot.Artifact(
    "agent-service-artifact",
    name="agent-service-artifact",
    description="Agent service container artifact",
    type="service",
    spec={
        "container_groups": [{
            "containers": [{
                "name": "main",
                "image_uri": "ghcr.io/example/agent-service:0e90773",
                "port": 8000,
                "primary": True,
                "environment_vars": [
                    # Per-Workload DataRobot API token, resolved and injected automatically;
                    # no value is supplied here, and DATAROBOT_ENDPOINT needs no entry at
                    # all -- both are platform-managed. See Environment variable types.
                    {"source": "api-key"},
                    # Third-party credential, looked up from the managed credential record above.
                    {
                        "source": "dr-credential",
                        "name": "MODEL_PROVIDER_API_KEY",
                        "dr_credential_id": credential.id,
                        "key": "apiToken",
                    },
                ],
            }],
        }],
    },
)

workload = datarobot.Workload(
    "agent-service",
    name="agent-service",
    description="Agent service workload",
    importance="low",
    artifact_id=artifact.artifact_id,
    runtime={
        "container_groups": [{
            "replica_count": 1,
            "containers": [{
                "name": "main",
                "resource_allocation": {
                    "cpu": 2.0,
                    "memory": 5096 * 1024 * 1024,
                },
            }],
        }],
    },
    opts=pulumi.ResourceOptions(replace_on_changes=["artifact_id"]),
)

pulumi.export("credentialId", credential.id)
pulumi.export("artifactId", artifact.artifact_id)
pulumi.export("workloadId", workload.id)
pulumi.export("endpoint", workload.endpoint)