HELLO; EVERYBODY

Hi! I'm working on packaging the Pulumi ecosystem in nixpkgs, and I'm not finding any documentation explaining how to use pulumi-terraform-bridge to wrap an already-built terraform provider (which we have many already packaged)

Hey all! I'm on community rotation this week. Happy to answer any questions; and eager to see what you're building 🙂

set the channel topic: set the channel topic: Ask any question about Pulumi! This week's community helper: @green-alligator-37269 On rotation: Monday–Friday Tag for anything you’re stuck on! See the FAQ at: https://www.pulumi.com/docs/support/faq/

Hello Is there any Channel or Mailing list, I would like to share the pulumini provider/package. Ultimately I would like to contribute to registy, however I would let do the actual cloud provider? This the Pulumi provider for nebisu pypi.org/project/pulumi-nebius Thank you! PS: Apologies my ignorance if Ive not looked at guidelines

Hello, I seem to be having some trouble with my account. All of a sudden all of my CLI commands started throwing 500 errors. Attempting to login from a browser is doing the same. I was able to reset my password but everything is still all 500 errors. I don't see any reported outages on the status page. I submitted a ticket through the support page, but figured I'd check in here in case that is down too. Thanks in advance for any help!

resource hooks seem broken on non-AWS ? I am trying to use a resource hook in Go with Hetzner Cloud (hcloud). To the best of my understanding, I adapted the Go example at pulumi.com/docs/…/hooks#… from AWS to Hetzner Cloud and I get the following error:

error: after hook "health-check" failed:
rpc error: code = Unavailable desc = error reading from server: EOF

I opened issue github.com/pulumi/pulumi/issues/24158 Am I doing something wrong or is there a bug ? thanks!

Question on ESC + GCP secrets: my Pulumi program creates a secret in GCP Secret Manager (a value it computes itself, e.g. from another resource), and I also have my ESC environment importing that same secret back via fn:open:gcp-secrets, so I can read it as config. How is the ordering supposed to work here? My stack's Pulumi.yaml links the ESC environment, so opening the environment (and evaluating that import) happens before the program runs, but the program is what creates the secret in the first place. On a first-ever deploy the secret doesn't exist yet, so opening the environment fails outright and the program never gets a chance to run and create it. Is there a recommended pattern for this, or do you just have to temporarily remove the import, deploy once, then add it back?

I'm prepping for a little demo in a few days, and using providers I haven't used before. The synced-folder provider is giving me a little trouble: my AWS provider is using a named profile, but I can't specify that in the synced-folder provider, so it's always failing when I used

managedObjects: false

, because the command (

aws sync...

) isn't specifying

--profile <myprofile>

. I presume that there's no way around this and I should either use

managedObjects: true

, or sync the files myself? It's not hard to sync the files, I'm just checking that my understanding is correct.

set the channel topic: set the channel topic: Ask any question about Pulumi! This week's community helper: @green-answer-22914 On rotation: Monday–Friday Tag for anything you’re stuck on! See the FAQ at: https://www.pulumi.com/docs/support/faq/

Hey, Pulumi now can run your HCL. @ancient-oxygen-11013 is demoing this Wednesday 3pm ET as well as taking questions and showing off things like Pulumi Cloud as a Terraform state backend, your TF modules in the Private Registry, and so on. I'll be there taking question. Any questions you want answered? pulumi.com/events/pulumi-for-all-your-iac-terraform-hcl#…

pulumi config get xx:yy error: getting user info from api.pulumi.com: [500] Internal Server Error anyone else? 😇 status.pulumi.com doesn't report anything

Hey! I'm creating a wrapper of Pulumi for another language, is there any documentation regarding that? I ask that because I am looking for something similar to a spec or which services should be implemented when creating a new lib.

set the channel topic: set the channel topic: Ask any question about Pulumi! This week's community helper: @steep-plastic-74107 On rotation: Monday–Friday Tag for anything you’re stuck on! See the FAQ at: https://www.pulumi.com/docs/support/faq/

HCL in Pulumi ( and related features ) workshop is starting at top of hour ( 12 noon pst ): pulumi.com/events/pulumi-for-all-your-iac-terraform-hcl#…

This is my first time trying to use pulumi. Trying to use it with python. The command

pulumi new oci-python

errors out:

Installing dependencies...
  × Failed to build `grpcio==1.51.3`
  ...
      ModuleNotFoundError: No module named 'pkg_resources'

Is this a known issue? How can I get past this error?

Using pulumi v3.259.0

Is there a recommended way to determine the current secrets provider of a stack? I know how to change it, but currently to figure out the current value I'm exporting a stack and rummaging through the JSON. What's better than that?

set the channel topic: set the channel topic: Ask any question about Pulumi! This week's community helper: @modern-spring-15520 On rotation: Monday–Friday Tag for anything you’re stuck on! See the FAQ at: https://www.pulumi.com/docs/support/faq/

Hello Channel. Here to answer your question this week. Also if you missed the first session, our HCL in pulumi cloud video is up here.

Currently, app.pulumi.com constantly drops association between my account and my company org, forcing a logout and login only to drop it again after a couple of minutes. Using SSO via Atlassian, and I remember there was an issue some months ago with exactly that. Anybody else?

Hello! We're on the enterprise plan and our account seems to have archived today, when clicking reactivate subscription, nothing happens. Please help 🙏

Hey, I'm performing my annual vendor security assessments, how do I access Pulumi's SOC2 report?

there seem to be a problem with token management on app.pulumi.com/user/settings/tokens - triple dot button doesn't do anything and makes it impossible to invalidate old tokens, not a problem for me but someone who's token leaked would be in hot water

set the channel topic: set the channel topic: Ask any question about Pulumi! This week's community helper: @numerous-book-75463 On rotation: Monday–Friday Tag for anything you’re stuck on! See the FAQ at: https://www.pulumi.com/docs/support/faq/

Hi everyone! Quick question - My GitHub identity is linked to wrong Pulumi account, and our org only has one IDP with Pulumi. How do I reassociate it with correct account? Please help!!!

Hey Guys, My team is currently buidling client-driven dynamic infrastructure using the Pulumi Automation API. For example, when a tenant enables SMTP, a short-lived task provisions the required queues. We have the general design in place, but we’d appreciate some guidance on how to structure the Pulumi stacks. We’re considering: • One stack per tenant • One stack per resource family .e.g. separate SMTP or SFTP stacks • One shared

dynamic-infra

stack I'm aware that we can use

target

and

targetDependents

to make deployment's well-scoped regardless of which ownership boundary we decide on but wondering if there are any gotcha's to look out for. Would be great to discuss the pros and cons of each approach.

Hi everyone! My company is trying to get in touch with Pulumi's sales team. Does anyone know the right contact email for this? Thanks!

Hi team, I’m migrating from Terraform to Pulumi and am new to Pulumi. In Terraform, we have an ECS module that accepts the image tag as an input. During deployment, CI pushes a new image and runs something like:

terraform apply -var="image_tag=<new-tag>"

The image tag is therefore a deployment-time input rather than persistent environment configuration. I’m trying to understand the idiomatic Pulumi equivalent. I know I can use stack configuration but

pulumi up --config imageTag=...

persists the value to the stack config, whereas I’d prefer not to persist something that changes on every deployment. I could use an environment variable, but I’d prefer a more explicit input mechanism where a missing value produces a clear validation error. Is there an idiomatic way in Pulumi to pass ephemeral/runtime inputs to

pulumi up

, similar to

terraform apply -var

, without persisting them as stack configuration?

I am curious about nomenclature: with “control plane” and “data plane” in mind (blurb) how does Pulumi fit into the picture? Intuitively I’d put it into the control plane but that terminology doesn’t seem to be used much in the documentation. What are your thoughts?