https://pulumi.com logo
Docs
Join the conversationJoin Slack
Channels
announcements
automation-api
aws
azure
blog-posts
built-with-pulumi
cloudengineering
cloudengineering-support
content-share
contribex
contribute
docs
dotnet
finops
general
getting-started
gitlab
golang
google-cloud
hackathon-03-19-2020
hacktoberfest
install
java
jobs
kubernetes
learn-pulumi-events
linen
localstack
multi-language-hackathon
office-hours
oracle-cloud-infrastructure
plugin-framework
pulumi-cdk
pulumi-crosscode
pulumi-deployments
pulumi-kubernetes-operator
pulumi-service
pulumiverse
python
registry
status
testingtesting123
testingtesting321
typescript
welcome
workshops
yaml
Powered by Linen
aws
  • t

    tall-beard-99429

    06/04/2021, 1:28 PM
    I have a parent AWS account that has 2 child AWS accounts. 1 for prod and 1 for staging, the parent account has the user attached to it (currently) for pulumi to use. How can I make it so that we have both the parent and 1 of the children in use so that I can configure things for the production or staging environment?
    b
    • 2
    • 47
  • e

    echoing-zebra-28421

    06/04/2021, 3:50 PM
    Does anyone have an example where multiple routes from apigatewayv2 are implemented? for example:
    const api = new awsx.apigateway.API(`airship-api-${NODE_ENV}`, {
      routes: [
        {
          path: "/",
          method: "GET",
          eventHandler: async (event: APIGatewayProxyEvent) => ({
            statusCode: HttpStatus.OK,
            body: "Hello, API Gateway V4!",
          }),
        },
        {
          path: "/api/named_users/associate",
          method: "POST",
          eventHandler: async (event: APIGatewayProxyEvent): Promise<any> => ({
            statusCode: HttpStatus.OK,
            body: JSON.stringify(await handleSetNamedUser(event)),
            isBase64Encoded: false,
          }),
        },
        {
          path: "/api/channels/tags",
          method: "POST",
          eventHandler: async (event: APIGatewayProxyEvent) => ({
            statusCode: HttpStatus.OK,
            body: JSON.stringify(await handleSetTags(event)),
            isBase64Encoded: false,
          }),
        },
      ],
    });
    I want to  make something if
  • e

    elegant-pager-5412

    06/07/2021, 6:30 AM
    Hey guys! Is it possible to enable high throughput FIFO queues with Pulumi at the moment?
    g
    • 2
    • 1
  • e

    elegant-pager-5412

    06/07/2021, 6:51 AM
    Another question, do I have to import resources once per stack? It seems like Pulumi is attempting to create my imported resources 🤔
  • g

    gray-hamburger-90102

    06/07/2021, 10:24 AM
    Hey, I'm using
    aws.directconnect.GatewayAssociationProposal
    to initiate a cross-account connection to a direct connect gateway. The problem I have though is that once I have accepted the proposal, Pulumi still tries to delete this resource when destroying the stack...
    aws:directconnect:GatewayAssociationProposal (assocToMainDcGateway):
        error: deleting urn:pulumi:web-testing::web-platform-vpc::aws:directconnect/gatewayAssociationProposal:GatewayAssociationProposal::assocToMainDcGateway: 1 error occurred:
            * error deleting Direct Connect Gateway Association Proposal (49017cb1-925c-4ffb-aef2-4cdf0a853795): DirectConnectClientException: Direct Connect Gateway Association Proposal 49017cb1-925c-4ffb-aef2-4cdf0a853795 is not found
    Is there a way to create a resource in Pulumi, but not register it to the Pulumi state?
    b
    • 2
    • 2
  • m

    mammoth-king-17479

    06/07/2021, 4:23 PM
    Has anyone successfully updated the entries list of a ManagedPrefixList resource? Having issues with the versioning.
    * error updating EC2 Managed Prefix List (pl-05402b9da4effacda): InvalidParameterValue: The specified value for version is not valid. The value must be greater than (1).
            	status code: 400, request id: c0d7b1b0-272b-4a22-a290-31752d07e859
    g
    • 2
    • 2
  • h

    happy-angle-19851

    06/08/2021, 5:29 AM
    message has been deleted
    b
    • 2
    • 2
  • g

    green-musician-49057

    06/09/2021, 5:05 PM
    How are folks automating RDS/Aurora rollbacks? Restoring from an RDS snapshot creates a new db/cluster, so if the restore is done manually (via AWS console or cli), the pulumi stack state subsequently needs to be updated. Is there an elegant way to drive the rollback from pulumi itself?
    • 1
    • 1
  • b

    bored-table-20691

    06/09/2021, 8:46 PM
    What’s the general recommendation for changing versions of a component when AWS doesn’t support it? For example, I created an Aurora Postgres RDS at version 12.4, but I realize I actually want it at 10.14. Pulumi sees this as just a version update (it does not see it as a replace), but then it ends up with this error from AWS:
    * Failed to modify RDS Cluster (aurora-postgres-ssa-tenants): InvalidParameterCombination: Cannot upgrade aurora-postgresql from 12.4 to 10.14
    Should I just manually delete the RDS and then do a refresh? Something else?
    l
    • 2
    • 2
  • c

    colossal-battery-24701

    06/10/2021, 11:19 AM
    Hey guys, I tried to update description of my security group and found that while running the update, it tried to delete the previous one. I did not want to delete the security group as I was using this with RDS and I stopped the update with Cmd+C. Now the problem is whenever I run
    pulumi up
    with other update code, I get
    completing deletion from previous update
    . But I don’t want to do this. how do I cancel this?
    h
    b
    • 3
    • 10
  • t

    tall-beard-99429

    06/10/2021, 2:31 PM
    How do i get the current details from state? For example, I want to do
    aws.iam.User.get(user.name)
    but without passing the ID, and just get the state that is in pulumi rather than a live API call
  • a

    adamant-translator-31969

    06/10/2021, 6:54 PM
    Hi! When I want to modify RDS instance, it will be replace. But when it create replacement, a message 'error creating RDS DB Instance: DBInstanceAlreadyExists: DB Instance already exists' appears. is there some solutions to this?
    💡 1
    b
    • 2
    • 3
  • t

    tall-beard-99429

    06/11/2021, 10:38 AM
    Hi, i'm struggling to use providers to create resources on different AWS accounts, does anyone have a good guide / tutorial showing how to do it? I am passing a provider, but it creates the resources on the same account so I assume the provider is incorrect
    b
    c
    • 3
    • 4
  • m

    millions-furniture-75402

    06/11/2021, 2:27 PM
    When declaring and EC2 instance per two different availability zones, I need to determine which private subnet id in the VPC is available in the availability zone for that EC2 instance. Is there a way to do this by interrogating the resources?
    b
    l
    • 3
    • 7
  • t

    thousands-art-36850

    06/14/2021, 2:30 PM
    Hi everyone! I’m facing an issue when trying to reference an AWS ECS Cluster from another stack. I have a stack that exports the id of that cluster and another one that should use that cluster when creating an ECS FargateService. I tried to use get method to get that cluster by id, but the type of the cluster that’s being returned
    aws.ecs.Cluster
    is not compatible with what’s required when creating an ECS FargateService
    awsx.ecs.Cluster
    . Any suggestions / guidance would be appreciated, thanks in advance! (more details in 🧵 )
    b
    a
    • 3
    • 19
  • a

    alert-raincoat-81485

    06/14/2021, 7:44 PM
    Hello Team, I am trying to understand broader way of pulumi apply call here. i have to statically define pulumi apply call for each instance of the class as shown in an example. when i loop on the apply, it picks up the last instance of class but skips the previous. is there anyway we can use the pulumi apply call dynamically and do not have to define statically for n number of instances of class?
    import pulumi
    import pulumi_aws as aws  
    
    asg_name = {}
    class ASG():
    
        def __init__(self):
            self.name = name 
    
        # Creating Autoscaling.
        asg_name[name] = aws.autoscaling.Group(.....defs....)
    
    inst1 = ASG(idx1)
    inst2 = ASG(idx2)  
    inst3 = ASG(idx3)
    
    defineASG(a,inst_type)
        ## Boto API create EC2 tags ## 
    
    asg_id = {}
    asg_id['idx1'] = autoScale['idx1'].name.apply(
        lambda a: defineASG(asg=a, inst_type='idx1')
    
    asg_id['idx2'] = autoScale['idx2'].name.apply(
        lambda a: defineASG(asg=a, inst_type='idx2')
    
    asg_id['idx3'] = autoScale['idx3'].name.apply(
        lambda a: defineASG(asg=a, inst_type='idx3')
    l
    • 2
    • 7
  • p

    purple-plumber-90981

    06/14/2021, 11:33 PM
    hi room, i am seeing
    pulumi up
    trying to replace my current-state aws providers with an older provider version (even though i have the newer version of the plugin installed) … wondering how this is controlled and how i can get my
    pulumi up
    to not downgrade my providers (details in thread)
    l
    • 2
    • 15
  • a

    adamant-translator-31969

    06/15/2021, 6:13 PM
    Hi! When I modify RDS instance class, Pulumi tries to delete and replace my instance. this will make my tables in my db disappear. I need to modify my instance as AWS make ... only update... someone tried to do this?
    b
    • 2
    • 5
  • n

    nice-airport-15607

    06/16/2021, 3:26 PM
    I’m not sure if this is only for aws, or if its for other services also, but I’m running into an issue when trying to deploy my aws resources, instead of updating, it’s trying to create new ones. This used to update, but now its trying to create new resources. Does anyone know how to trace back to what happened, and point back to the original resources?
    b
    • 2
    • 2
  • b

    billions-orange-71472

    06/16/2021, 4:01 PM
    Hello, everyone.I've got an issue, so let me ask a question. To create AWS resources, I tried to perform
    pulumi up
    on an EC2 instance via instance profile with AdministratorAccess policy attached.I encountered following error when exec.
    Previewing update (main)
    
    View Live: <https://app.pulumi.com/xxxxxx/pulumi-go/main/previews/866e47e5-b3e3-45c4-85e7-14478267abea>
    :
    Diagnostics:
      aws:iam:Role (sample-role):
        error: 1 error occurred:
            * error configuring Terraform AWS Provider: no valid credential sources for Terraform AWS Provider found.
        
        Please see <https://registry.terraform.io/providers/hashicorp/aws>
        for more information about providing credentials.
        
        Error: NoCredentialProviders: no valid providers in chain. Deprecated.
            For verbose messaging see aws.Config.CredentialsChainVerboseErrors
    After I created IAM user to generate AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY and configured to ~/.aws/credentials, It worked properly. Sorry to ask such a basic question, but can' I perform 'pulumi up' with instance profile??
    b
    • 2
    • 3
  • c

    colossal-plastic-46140

    06/16/2021, 4:39 PM
    Hi Folks, I have a question about https://www.pulumi.com/docs/reference/pkg/aws/s3/bucket/#bucketwebsite and the routing_rules property. is there any reason there is not specific typed object for this?
  • a

    adamant-translator-31969

    06/16/2021, 5:03 PM
    Hi! I have an stack with rds cluster with the name rds-component. When I run newly this part of code
    const instanceCluster = new aws.rds.Cluster('rds-component', Args.cluster, opts);
    next error appears.
    Previewing update (develop):
         Type                 Name              Plan        Info
         pulumi:pulumi:Stack  qdevelop  running     }
    panic: fatal: An assertion has failed
    goroutine 242 [running]:
    <http://github.com/pulumi/pulumi/sdk/v3/go/common/util/contract.failfast(...)|github.com/pulumi/pulumi/sdk/v3/go/common/util/contract.failfast(...)>
    	/Users/runner/work/pulumi/pulumi/sdk/go/common/util/contract/failfast.go:23
    <http://github.com/pulumi/pulumi/sdk/v3/go/common/util/contract.Assert(...)|github.com/pulumi/pulumi/sdk/v3/go/common/util/contract.Assert(...)>
    	/Users/runner/work/pulumi/pulumi/sdk/go/common/util/contract/assert.go:26
    <http://github.com/pulumi/pulumi/pkg/v3/resource/deploy.processIgnoreChanges|github.com/pulumi/pulumi/pkg/v3/resource/deploy.processIgnoreChanges>(0xc001ca1650, 0xc0013b04e0, 0xc0016b7e30, 0x1, 0x1, 0x1, 0xc, 0xc000de1b00)
    	/Users/runner/work/pulumi/pulumi/pkg/resource/deploy/step_generator.go:1122 +0x590
    <http://github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*stepGenerator).generateSteps(0xc001bf5d40|github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*stepGenerator).generateSteps(0xc001bf5d40>, 0x7f390afd4500, 0xc0016b7ec0, 0x1, 0xc001373500, 0xc0005d79f8, 0x44a937, 0xc001728900)
    	/Users/runner/work/pulumi/pulumi/pkg/resource/deploy/step_generator.go:240 +0x2529
    <http://github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*stepGenerator).GenerateSteps(0xc001bf5d40|github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*stepGenerator).GenerateSteps(0xc001bf5d40>, 0x7f390afd4500, 0xc0016b7ec0, 0x7f390afd4500, 0xc0016b7ec0, 0x1, 0x2, 0x469540)
    	/Users/runner/work/pulumi/pulumi/pkg/resource/deploy/step_generator.go:152 +0x5a
    <http://github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*deploymentExecutor).handleSingleEvent(0xc001736018|github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*deploymentExecutor).handleSingleEvent(0xc001736018>, 0x20d25e0, 0xc0016b7ec0, 0x0, 0x2)
    	/Users/runner/work/pulumi/pulumi/pkg/resource/deploy/deployment_executor.go:372 +0x13f
    <http://github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*deploymentExecutor).Execute.func3(0xc001728900|github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*deploymentExecutor).Execute.func3(0xc001728900>, 0xc001736018, 0xc00172a810, 0x2100dd0, 0xc001378900, 0x0, 0x0, 0x2100e78, 0xc001374f60, 0x0, ...)
    	/Users/runner/work/pulumi/pulumi/pkg/resource/deploy/deployment_executor.go:242 +0x20c
    <http://github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*deploymentExecutor).Execute(0xc001736018|github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*deploymentExecutor).Execute(0xc001736018>, 0x2100e78, 0xc001374f60, 0x7f390b2dc398, 0xc001b80780, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, ...)
    	/Users/runner/work/pulumi/pulumi/pkg/resource/deploy/deployment_executor.go:258 +0x7e5
    <http://github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*Deployment).Execute(...)|github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*Deployment).Execute(...)>
    	/Users/runner/work/pulumi/pulumi/pkg/resource/deploy/deployment.go:405
    <http://github.com/pulumi/pulumi/pkg/v3/engine.(*deployment).run.func1|github.com/pulumi/pulumi/pkg/v3/engine.(*deployment).run.func1>(0x210b368, 0xc001b80780, 0xc00016fcc0, 0x2100e78, 0xc001374f60, 0xc001374f01, 0xc00172a5b0, 0xc0017283c0)
    	/Users/runner/work/pulumi/pulumi/pkg/engine/deployment.go:260 +0x287
    created by <http://github.com/pulumi/pulumi/pkg/v3/engine.(*deployment).run|github.com/pulumi/pulumi/pkg/v3/engine.(*deployment).run>
    	/Users/runner/work/pulumi/pulumi/pkg/engine/deployment.go:245 +0x308
    • 1
    • 2
  • m

    millions-furniture-75402

    06/17/2021, 6:09 PM
    https://www.pulumi.com/docs/reference/pkg/aws/acmpca/certificate/ I use this example, but I don’t see a certificate in PCA that it says it created. Pulumi’s state thinks the resource is created, but the web console doesn’t link to the cert.
    • 1
    • 1
  • m

    millions-furniture-75402

    06/17/2021, 7:30 PM
    I’m trying to configure Trusted Devices in AWS Workspaces. It looks like the enum for device type
    DeviceTypeWindows
    and
    DeviceTypeOSX
    in
    workspaceAccessProperties
    have a 3rd value supported,
    TRUST
    but it’s only mentioned in a comment about the properties, it’s not in the SDK’s documented types: https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/workspaces.html#WorkSpaces.Client.modify_workspace_access_properties
    response = client.modify_workspace_access_properties(
        ResourceId='string',
        WorkspaceAccessProperties={
            'DeviceTypeWindows': 'ALLOW'|'DENY',  # should also have |'TRUST'
            'DeviceTypeOsx': 'ALLOW'|'DENY',      # should also have |'TRUST'
            'DeviceTypeWeb': 'ALLOW'|'DENY',
            'DeviceTypeIos': 'ALLOW'|'DENY',
            'DeviceTypeAndroid': 'ALLOW'|'DENY',
            'DeviceTypeChromeOs': 'ALLOW'|'DENY',
            'DeviceTypeZeroClient': 'ALLOW'|'DENY',
            'DeviceTypeLinux': 'ALLOW'|'DENY'
        }
    )
    To restrict WorkSpaces access to trusted devices (also known as managed devices) with valid certificates, specify a value of TRUST . For more information, see Restrict WorkSpaces Access to Trusted Devices .
    With that problem, is there any way I can bypass the validation below that’s blocking me, and attempt to apply the “invalid” value?
    aws:workspaces:Directory (client-experience-workspaces-directory):
        error: aws:workspaces/directory:Directory resource 'client-experience-workspaces-directory' has a problem: expected workspace_access_properties.0.device_type_osx to be one of [ALLOW DENY], got TRUST. Examine values at 'Directory.WorkspaceAccessProperties.DeviceTypeOsx'.
    • 1
    • 1
  • t

    tall-beard-99429

    06/18/2021, 9:03 AM
    https://www.pulumi.com/docs/reference/pkg/aws/ec2clientvpn/endpoint/ Where does
    aws_acm_certificate.root_cert.arn
    come from?
    b
    • 2
    • 8
  • g

    gentle-monitor-55086

    06/18/2021, 5:25 PM
    where are the docs for lamda.CallbackFunction ? Using it like this.
    import {lambda} from "@pulumi/aws";
    ...
    new lambda.CallbackFunction...
    but at the aws lambda docs page there's no "CallbackFunction" defined
    n
    • 2
    • 3
  • g

    great-sunset-355

    06/19/2021, 6:49 AM
    Hi,does anyone know how can I resolve value from SSM parameter in pulumi? We have bunch of secrets stored in SSM and I do not want to move them out.
    l
    • 2
    • 10
  • b

    billowy-whale-42059

    06/20/2021, 4:44 AM
    Hey hey ! Me & my teammates are eagerly waiting for the v3.46.0 aws provider to be integrated (See issue); I've opened a PR (to the upstream-v3.45.0 branch, though, as I don't have permissions to create new ones) if it helps: https://github.com/pulumi/terraform-provider-aws/pull/63 Would really appreciate if this could be integrated in the near future. Thanks a ton for your hard work and awesome product !
    b
    b
    • 3
    • 4
  • c

    colossal-plastic-46140

    06/21/2021, 1:38 PM
    Hi, using the pulumi-aws sdk for python. I just updated to 4.8.0, and pulumi 3.5.1, and I am unable to run a pulumi up for s3 aws bucket that has routing rules. The preview passes, but on up I get the following error.
    * updating urn:pulumi:s3-bucket::pulumi-aws-s3::pulumi:providers:aws$aws:s3/bucket:Bucket::us-east-1-bucket: 1 error occurred:
    	* json: cannot unmarshal object into Go value of type []*s3.RoutingRule
    From what I can tell is that there isnt an args for routing rules, and it expects a json string, which has me confused. Is there supposed to be something along the lines of RoutingRulesArgs?
  • c

    colossal-plastic-46140

    06/21/2021, 2:35 PM
    It turns out that this is expecting the routing_rules as a string which is kinda unfortunate
Powered by Linen
Title
c

colossal-plastic-46140

06/21/2021, 2:35 PM
It turns out that this is expecting the routing_rules as a string which is kinda unfortunate
View count: 1