Hello! I am seeing no output in

pulumi stack ls

, even if

pulumi stack

shows current stack outputs. Currently, I'm using AWS S3 backend with the project name in

<orgName>/<projectName>/<stackName>

format. Are the organizations supported in S3 backend as well?

Is it possible to specify multiple instance types for a managed node group? The EKS seem to say yes (https://docs.aws.amazon.com/eks/latest/userguide/create-managed-node-group.html search for “instance types”), the pulumi docs support getting passed an array but specify that they only support one element being in the array (https://www.pulumi.com/docs/reference/pkg/eks/managednodegroup/#instancetypes_nodejs)

I guess another question: how do I specify the equivalent of

additionalUserData

in a ManagedNodeGroup? I can override the userData by supplying a LaunchTemplate to a managed node group, but then I lose all the built-in EKS node bootstrapping code

I’ve created an AWS CodePipeline using Pulumi. Now I have a Source action with a pending connection. Is there any way to complete the pending connection with Pulumi’s Github provider?

When creating a user, how do I access the Secret? it is always being output as [secret] for me if I try to export it (even in preview just to copy / paste it)

Is there a sample to use v4 SDK (“github.com/pulumi/pulumi-aws/sdk/v4/go/aws/elb”) to create NLB and attach EC2 instances.

This message was deleted.

Does anyone know how to fix a 409 (An update is in progress for resource) error when there are NO

pending_operations

? I’ve tried the stack export/import solution as well was

pulumi cancel

and NOTHING seems to be working?

Where is the pulumi equivalent of tf aws_ec2_transit_gateway_vpc_attachment in the dotnet sdk?

Is it possible to take an ASG that was created via an EKS cluster and modify it to be associated with an ALB? Basically what I want to do is manage an ALB outside of Kubernetes, but make sure that all of the nodes are part of the target group, regardless of any scale up/scale down events. I can get the ASG after the cluster has been created, but I can’t modify it

const asgName = onDemandNodeGroup.autoScalingGroupName;

  asgName.apply(name => {
    const asg = aws.autoscaling.Group.get(name, "onDemand-asg");
    asg.targetGroupArns = []; // can't set this, is readonly
  });

I’ve upgraded Pulumi from v2 to v3 using golang, and in this process, the type of

instanceTypes

for EKS NodeGroup objects has changed from a string to a string array, resulting in the following diff in preview:

instanceTypes : "c5.xlarge" => ["c5.xlarge"]

This causes Pulumi to want to replace the NodeGroup. Is there any way to have Pulumi automatically update this state so it doesn’t recreate the NodeGroup? (

pulumi refresh

did not pick this up)

is there a way to pass a list of tags from the config file to my golang program?

im trying to run pulumi from a machine that has roles to create infrastructure, is there a way to tell pulumi to use the machine roles instead of asking for aws credentials (secret key id and secret key)

Is it possible to set the value of

aws:skipMetadataApiCheck

using an environment variable?

How can I enable dynamic partitioning in aws.kinesis.FirehoseDeliveryStream?

For creating a AWS Transfer Server using Pulumi, is it not possible to create a server with

VPC

endpoint type with

internet facing

access?

I'm trying to get all of the outputs of a specific stack (s3 bucket id's) to be added to an IAM policy to allow access to them. This is what I'm thinking about:

s3_reference = pulumi.StackReference(f"s3")
buckets = << dictionary of all outputs from s3 stack>>
policy=pulumi.Output.all(all_bukcets=buckets).apply(lambda args: f"""{{
             {{
                 "Effect": "Allow",
                 "Action": ["s3:*"],
                 "Resource": [
                   << buckets go here >>
                 ]
              }},
}}

Does anybody have a good way of accomplishing this?

Hey y'all, I have this diff because the provider changed. If I run this, is it going to actually delete and re-create the group in the AWS api, or is that just going to replace it in the state?

employees (aws:iam:Group)
-- aws:iam/group:Group (delete-replaced)
    [id=Employees]
    [urn=urn:pulumi:production::fairwindsops::aws:iam/group:Group::employees]
    __defaults: []
    name      : "Employees"
    path      : "/"

A bunch of my resources are replaced every time I run

pulumi up

even though no changes have been made in their definitions. Is there a way to prevent this unnecessary churn? My pulumi program is using the python libraries if that makes any difference.

Hey folks. Running into a problem updating an ImageBuilder Recipe. I want to change which components a recipe is built with and update the version number. This can be accomplished through the console, but pulumi reports the following error:

Duplicate resource URN 'urn:pulumi:amis::amis::aws:imagebuilder/imageRecipe:ImageRecipe::asdf'; try giving it a unique name

. Any recommendations?

Hi all, is it possible to add a custom authorizer to an API created with

cloud-aws

?

Hello guys! I have a question: do you know why Pulumi is displaying this error ?

error: expected non-nil error with nil state during Create of urn:pulumi:squad-000::web::aws:ecs/service:Service::picking-v4-order-inspector

Hey folks, as of this morning, some of my pulumi projects don't compile. It seems that the

tagsAll

property no longer exists. Here's the error:

TSError: ⨯ Unable to compile TypeScript:
    index.ts(55,3): error TS2345: Argument of type '{ assumeRolePolicy: string; description: string; forceDetachPolicies: false; inlinePolicies: {}[]; managedPolicyArns: string[]; maxSessionDuration: number; path: string; tags: { role: string; }; tagsAll: { ...; }; }' is not assignable to parameter of type 'RoleArgs'.
      Object literal may only specify known properties, and 'tagsAll' does not exist in type 'RoleArgs'.
    index.ts(622,5): error TS2345: Argument of type '{ ami: string; associatePublicIpAddress: true; iamInstanceProfile: pulumi.Output<string>; keyName: string; instanceType: string; privateIp: string; vpcSecurityGroupIds: pulumi.Output<string>[]; subnetId: pulumi.Output<...>; tagsAll: { ...; }; tags: { ...; }; ebsBlockDevices: { ...; }[]; }' is not assignable to parameter of type 'InstanceArgs'.
      Object literal may only specify known properties, and 'tagsAll' does not exist in type 'InstanceArgs'.
    index.ts(659,5): error TS2345: Argument of type '{ ami: string; associatePublicIpAddress: true; iamInstanceProfile: pulumi.Output<string>; keyName: string; instanceType: string; privateIp: string; vpcSecurityGroupIds: pulumi.Output<string>[]; subnetId: pulumi.Output<...>; tagsAll: { ...; }; tags: { ...; }; ebsBlockDevices: { ...; }[]; }' is not assignable to parameter of type 'InstanceArgs'.
      Object literal may only specify known properties, and 'tagsAll' does not exist in type 'InstanceArgs'.
    
        at createTSError (/home/oz/dev/mono-repo/sre/network/node_modules/ts-node/src/index.ts:261:12)
        at getOutput (/home/oz/dev/mono-repo/sre/network/node_modules/ts-node/src/index.ts:367:40)
        at Object.compile (/home/oz/dev/mono-repo/sre/network/node_modules/ts-node/src/index.ts:558:11)
        at Module.m._compile (/home/oz/dev/mono-repo/sre/network/node_modules/ts-node/src/index.ts:439:43)
        at Module._extensions..js (node:internal/modules/cjs/loader:1138:10)
        at Object.require.extensions.<computed> [as .ts] (/home/oz/dev/mono-repo/sre/network/node_modules/ts-node/src/index.ts:442:12)
        at Module.load (node:internal/modules/cjs/loader:989:32)
        at Function.Module._load (node:internal/modules/cjs/loader:829:14)
        at Module.require (node:internal/modules/cjs/loader:1013:19)
        at require (node:internal/modules/cjs/helpers:93:18)

I'm on pulumi cli version 3.13, aws version 4.21.x. Any thoughts?

Anyone created ingress controllers in EKS through pulumi? If you have any useful documentation that can help along the way, do drop them in the comments!

Question about logging Lambda execution to Cloudwatch in AWS. In these examples, at which point would I specify the log group to log into if I want to manage it manually instead of using one that is created by default. A log group (named

"example"

) is even set up in the code examples, but as far as I can see remains unused. Or am I missing something? Is placing it in the

dependsOn

field sufficient?

regarding internet gateways — I don’t see an API for attaching an internet gateway to a VPC. Anyone have clues?

Is it possible to import this resource? I don't see it on this docs page, and I'm struggling to come up with an import command: https://www.pulumi.com/docs/reference/pkg/aws/iam/groupmembership/

How do I create an AWS RDS Postgres with Pulumi Golang? This package "github.com/pulumi/pulumi-aws/sdk/v4/go/aws/rds" only has a NewCluster() to create an Aurora cluster, not the AWS RDS.

Hey all, coming to you with a Lambda publishing and versioning question! Thanks in advance for any help

I realize the output an AWS ECR has a method buildAndPushImage, however if let say I already have logic around the docker building (or intend to expolit custom logic here) I want to pass the ECR output to docker build logic, but Output<AWSECR> isnt convertable to Input<ImageRegistry> - is this limitation due to the auth helper?