plain-rainbow-89145
05/06/2025, 2:12 PMacoustic-tiger-77630
05/06/2025, 7:48 PMwarning: unable to convert HCL example for Pulumi entity '#/functions/%szpa:index/getPraConsoleController:getPraConsoleController'. The example will be dropped from any generated docs or SDKs: 1 error occurred:
* [python] #-functions-%szpa:index-getPraConsoleController:getPraConsoleController.pp:2,5-7: unsupported attribute 'id'; unsupported attribute 'id', and 1 other diagnostic(s)
warning: unable to convert HCL example for Pulumi entity '#/functions/%szpa:index/getAppConnectorController:getAppConnectorController'. The example will be dropped from any generated docs or SDKs: 1 error occurred:
* [python] #-functions-%szpa:index-getAppConnectorController:getAppConnectorController.pp:1,5-7: unknown property 'id' among [microtenantId microtenantName name]; , and 2 other diagnostic(s)
warning: unable to convert HCL example for Pulumi entity '#/functions/%szpa:index/getPRAApproval:getPRAApproval'. The example will be dropped from any generated docs or SDKs: 1 error occurred:
* [python] failed to convert HCL for #/functions/%szpa:index/getPRAApproval:getPRAApproval to python: #-functions-%szpa:index-getPRAApproval:getPRAApproval.pp:0,57-2,2: cannot assign expression of type { emailIds: string } to location of type {
emailIds: list(output(string) | string) | output(list(string)) | output(list(string)?)?,
id: output(string) | output(string?) | string?,
}
| output({ emailIds: list(string)?, id: string? }): ;
brash-stone-71192
05/07/2025, 9:23 AMbrash-stone-71192
05/07/2025, 9:35 AMpgFunction, err := postgresql.NewFunction(ctx, "pg-function-test", &postgresql.FunctionArgs{
Schema: pgSchema.Name,
Name: pulumi.String("pg_function_test"),
Args: postgresql.FunctionArgArray{
&postgresql.FunctionArgArgs{
Name: pulumi.String("pid"),
Type: pulumi.String("integer"),
},
},
Returns: pulumi.String("boolean"),
Language: pulumi.String("plpgsql"),
SecurityDefiner: pulumi.Bool(true),
Volatility: pulumi.String("VOLATILE"),
Strict: pulumi.Bool(true),
Body: pulumi.String(`AS $$
...
$$
SET search_path = pg_catalog;`),
}, pulumi.Provider(pgProvider))
bulky-oil-97030
05/08/2025, 8:15 AMmany-furniture-46304
05/08/2025, 8:28 AMUnless otherwise stated within the documentation of a specific resource, this provider's results are not sufficiently random for cryptographic use.
Looking at RandomString, the docs say for sensitive random values please use random_password.
However, there is no mention on RandomPassword about using it for uniques as a random value for password. Can anyone support whether it is safe to use Random Password
to create and manage passwords?
Thanks in advance!ancient-dream-54685
05/08/2025, 12:38 PM__my_output
?adamant-autumn-75882
05/08/2025, 6:33 PMadamant-autumn-75882
05/08/2025, 6:33 PMadamant-autumn-75882
05/08/2025, 6:53 PMfamous-ambulance-44173
05/08/2025, 8:58 PMsubnets:
- name: ext-az1
...
- name: ext-az2
...
attachments:
- name: tgw-attachment
# some parameters
- name: cwan-attachment
# some parameters
routeTables:
- name: private
routes:
- destination: 0.0.0.0/0
nextHop: igw
- destination: ::/0
nextHop: igw
- destination: 10.0.0.0/8
nextHop: tgw@tgw-attachment # or cwan@cwan-attachment
- destination: subnet@ext-az1.ipv4
nextHop: vpce-123456
- destination: subnet@ext-az1.ipv6
nextHop: vpce-123456
- destination: 10.1.0.0/24
nextHop: pcx@tag:Name=MyPeering,Environment=Prod
- destination: 10.2.0.0/24
nextHop: pcx@ssm:/my/peering/id
what do you think about the syntax? how would you improve it / make clearer for the user?sticky-translator-61903
05/08/2025, 9:50 PMbored-vegetable-38523
05/09/2025, 10:50 AMfamous-ambulance-44173
05/11/2025, 6:02 PMvgw = awscc.ec2.VpnGateway(
"vgw",
tags=VPC.build_tags(
config.common_tags,
config.virtual_private_gateway.tags,
Name=f"{config.name}-vgw",
),
amazon_side_asn=config.virtual_private_gateway.asn,
type="ipsec.1",
**config.virtual_private_gateway.extra_args,
opts=ResourceOptions(parent=self.vpc),
)
attachment = awscc.ec2.VpcGatewayAttachment(
"vgw",
opts=ResourceOptions(parent=vgw),
vpc_id=self.vpc.id,
vpn_gateway_id=vgw.id,
)
so far so good, resources are created successfully.
Then, I update ASN on VpnGateway, which should trigger replacement.
here is what diff shows:
└─ aws-native:ec2:Vpc vpc
+- ├─ aws-native:ec2:VpnGateway vgw replace [diff: ~amazonSideAsn]
~ │ ├─ aws-native:ec2:VpcGatewayAttachment vgw update [diff: ~vpnGatewayId]
which is correct. however, if fails
aws-native:ec2:VpnGateway (vgw):
error: operation DELETE failed with "GeneralServiceException": Vpn Gateway is not in the correct state (Service: Ec2, Status Code: 400, Request ID: 34ada6f3-5619-4a5e-8dda-6d82916501ff) (SDK Attempt Count: 1)
because it must delete VpcGatewayAttachment
first.
how do I signal to pulumi that before attempting to delete aws-native:ec2:VpnGateway
, it must delete its children, e.g. aws-native:ec2:VpcGatewayAttachment
?
I am pretty sure TF does it correctly.
I tried playing around with deleted_with
but I couldn't achieve the outcome I am looking for.rhythmic-toothbrush-3026
05/12/2025, 7:51 AMmaxSizeBytes: ' -1'
instead of just -1modern-spring-15520
05/12/2025, 6:51 PMmodern-spring-15520
05/12/2025, 6:51 PMcolossal-jackal-46826
05/13/2025, 3:13 AMbland-dinner-39530
05/13/2025, 6:50 PMPulumi.stack.yaml
config, what key/phrase/secret is it using to encrypt the values in the yaml file? I have looked though ~/.config/pulumi
and i cant find anything that resembles a secret....would it be someone else on disk? is it a default? Thanks!mammoth-memory-47255
05/13/2025, 11:01 PMmammoth-memory-47255
05/13/2025, 11:02 PMaverage-optician-67817
05/14/2025, 12:56 AMmammoth-memory-47255
05/14/2025, 11:54 AMbumpy-plastic-18391
05/14/2025, 3:34 PMimportant-yak-39641
05/14/2025, 7:23 PMfrontend_trigger = gcp.cloudbuild.Trigger(
"frontend-trigger",
name="frontend-trigger",
github={
"owner": github_repo["owner"],
"name": github_repo["repo"],
"push": {
"branch": "^main$",
}
},
filename="frontend/infra/cloudbuild.yaml",
substitutions={
"_REGION": gcp_region, # set to us-west-1
"_REPO": docker_repo, # set to frontend
},
)
when i run pulumi up, i'm getting:
Diagnostics:
pulumi:pulumi:Stack (frontend-dev):
error: update failed
gcp:cloudbuild:Trigger (frontend-trigger):
error: sdk-v2/provider2.go:509: sdk.helper_schema: Error creating Trigger: googleapi: Error 400: Request contains an invalid argument.: provider=google-beta@8.25.0
error: 1 error occurred:
* Error creating Trigger: googleapi: Error 400: Request contains an invalid argument.
i checked all the arguments for frontend_trigger
against the Google source documentation and can't seem to find anything wrong.
am i missing something dumb here?lively-stone-61804
05/14/2025, 11:52 PME0514 22:00:43.551374 229 plugins.go:600] GitHub rate limit exceeded for <https://api.github.com/repos/pulumiverse/pulumi-time/releases/tags/v0.1.1>, try again in 6m52.448632995s. You can set GITHUB_TOKEN to make an authenticated request with a higher rate limit.
pulumi:providers:time default_0_1_1_github_/api.github.com/pulumiverse/pulumi-time error: Could not automatically download and install resource plugin 'pulumi-resource-time' at version v0.1.1, install the plugin using `pulumi plugin install resource time v0.1.1 --server <github://api.github.com/pulumiverse/pulumi-time>`: error downloading provider time to file: failed to download plugin: time-0.1.1: rate limit exceeded: 403 HTTP error fetching plugin from <https://api.github.com/repos/pulumiverse/pulumi-time/releases/tags/v0.1.1>
I’ve tried setting GITHUB_TOKEN to a PAT as the error message suggests, but that just gives an error that the PAT doesn’t have access to the repo. I configured the PAT to have permissions to public repos, but the public repo in this case would be Pulumi or Pulumiverse, not one under my user. I'm not seeing anything on GitHub for making a token that specifically has access to other people's public repos. Anyone know how to solve this?
@ previewing update....E0514 23:35:54.453200 245 plugins.go:600] GitHub rate limit exceeded for <https://api.github.com/repos/pulumiverse/pulumi-time/releases/tags/v0.1.1>, try again in 26m47.546835696s. Your current GITHUB_TOKEN doesn't allow access to the repository, so we disabled it for this request. You can set GITHUB_TOKEN to a different token to make a request with a higher rate limit.
pulumi:providers:time default_0_1_1_github_/api.github.com/pulumiverse/pulumi-time error: Could not automatically download and install resource plugin 'pulumi-resource-time' at version v0.1.1, install the plugin using `pulumi plugin install resource time v0.1.1 --server <github://api.github.com/pulumiverse/pulumi-time>`: error downloading provider time to file: failed to download plugin: time-0.1.1: rate limit exceeded: 403 HTTP error fetching plugin from <https://api.github.com/repos/pulumiverse/pulumi-time/releases/tags/v0.1.1>
delightful-flower-9890
05/15/2025, 3:40 AMmodern-nail-38649
05/15/2025, 12:54 PMpulumi import
on a big GCP project 😅
It’s called StackForge — and it instantly converts a live GCP project into:
✅ A clean Pulumi YAML file (Main.yaml
)
✅ A fully hydrated Pulumi state file (stackName.json
)
✅ Optional GCS upload — no deploy or apply needed
🛑 No Terraformer
🛑 No dependency chaos
🛑 No manual reverse-IaC
🎥 Demo (2 min): http://x-itm.com/demo.mp4
🔐 Trial access: https://x-itm.com/stackforge-trial/
(Request access key)
Would love to hear what you think — and open to early feedback or testing if anyone here wants to try it.full-ability-261
05/16/2025, 11:41 AMsalmon-teacher-15783
05/16/2025, 4:10 PM// Add pulumi Alias to move to the new Type -- <https://www.pulumi.com/docs/concepts/options/aliases/>
roleOpts := append(opts, pulumi.Aliases([]pulumi.Alias{
// Combination of name and type is enough to be unique.
{Name: pulumi.String(strings.ToLower(roleName)),
// Previous to refactor - created the type snowflake:index:Role.
Type: pulumi.String("snowflake:index:Role"),
},
}))
role, err := snowflake.NewAccountRole(ctx, strings.ToLower(roleName), &snowflake.AccountRoleArgs{
Name: pulumi.String(roleName),
}, roleOpts...)
if err != nil {
return nil, nil, err
}
Is there something wrong with my Alias?