• w

    white-crayon-65245

    4 months ago
    hi all, I just ran into an odd situation where1. I successfully imported a gcp😄atabase resource via code 2. a few deploys later, that imported resource was
    delete-replacedd
    during a deploy without any changes to that resource's code I'm a bit stumped as to what could have caused this especially since imported resources are protected by default -- has anyone else seen anything similar?
    w
    1 replies
    Copy to Clipboard
  • f

    future-window-78560

    4 months ago
    Hey team! How to schedule a VM instance (GCP-GCE) to start and stop thru pulumi ?
  • a

    ancient-rose-25146

    4 months ago
    Hi, I have a use case which requires different serviceaccounts for different environments and I need to apply permissions to those service accounts. The issue is that when I apply a binding, it overwrites the bindings for the other environment. Is there a way to only add without overwriting current bindings? For example this is how I am currently doing it.
    const externalDnsGCPServiceAccount = new gcpNative.iam.v1.ServiceAccount(
      "external-dns-gcp-sa",
      {
        accountId: `external-dns-${environment}`,
      }
    );
    
    new gcp.projects.IAMBinding("external-dns-dns-admin-rb", {
      project: project,
      role: "roles/dns.admin",
      members: [
        externalDnsGCPServiceAccount.email.apply((s) => `serviceAccount:${s}`),
      ],
    });
    a
    p
    8 replies
    Copy to Clipboard
  • g

    gifted-cat-49297

    4 months ago
    Maybe someone have e2e example of setting up Api Gateway? (API+Gateway+Config+etc)
    g
    1 replies
    Copy to Clipboard
  • q

    quick-wolf-8403

    4 months ago
    Hi folks! I have set up a Cloud Run service following the examples here: https://www.pulumi.com/registry/packages/gcp/api-docs/cloudrun/service/ I would like it to update (redeploy) on a
    pulumi up
    if the docker image has changed. Do I need to change the value of the
    image
    string to trigger this? Or will it change if the tag is pointing to a new image? Or do I need to extract the SHA and pass that in?
    q
    g
    5 replies
    Copy to Clipboard
  • f

    future-window-78560

    4 months ago
    Hey Team!How can we create a GCP project through pulumi with the same PROJECT_ID on GCP different accounts? It is really important for me to know this since the resources I am creating thru pulumi IAC are utilized in the CICD pipeline, therefore I really need to have fixed Project_ID to avoid any manual changes and smooth CICD deployment.
  • k

    kind-island-70054

    4 months ago
    Hello ! I’m trying to deploy the firestore rules file I have through Pulumi. I use
    new gcp.firebaserules.Ruleset(
        "firestore-rules",
        {
          project: gcp.config.project,
          source: {
            files: [
              {
                content: fs
                  .readFileSync(path.resolve(__dirname, "../../firestore.rules"))
                  .toString(),
                name: "firestore.rules",
              },
            ],
          },
        },
        { dependsOn: services }
      );
    I have enabled the firebaserules service this way:
    new gcp.projects.Service("firebaserules", {
      service: "<http://firebaserules.googleapis.com|firebaserules.googleapis.com>",
    });
    But I receive a SERVICE_DISABLED error when I run pulumi up:
    [
          {
            "@type": "<http://type.googleapis.com/google.rpc.ErrorInfo|type.googleapis.com/google.rpc.ErrorInfo>",
            "domain": "<http://googleapis.com|googleapis.com>",
            "metadata": {
              "consumer": "projects/764086053860",
              "service": "<http://firebaserules.googleapis.com|firebaserules.googleapis.com>"
            },
            "reason": "SERVICE_DISABLED"
          }
        ]
    That project number is not mine weirdly… It also gives me this error message but I don’t think that it’s related to my problem, is it?
    Error creating Ruleset: googleapi: Error 403: Your application has authenticated using end user credentials from the Google Cloud SDK or Google Cloud Shell which are not supported by the <http://firebaserules.googleapis.com|firebaserules.googleapis.com>. We recommend configuring the billing/quota_project setting in gcloud or using a service account through the auth/impersonate_service_account setting. For more information about service accounts and how to use them in your application, see <https://cloud.google.com/docs/authentication/>. If you are getting this error with curl or similar tools, you may need to specify 'X-Goog-User-Project' HTTP header for quota and billing purposes. For more information regarding 'X-Goog-User-Project' header, please check <https://cloud.google.com/apis/docs/system-parameters>.
    Is there an additional service to enable that I don’t know about maybe? Has anybody encountered a similar error?
    k
    w
    3 replies
    Copy to Clipboard
  • h

    high-church-15413

    4 months ago
    hello: How do we enable dataplane in GKE autopilot? I am using gcp classic provider but did not see an config to do that.
    h
    n
    2 replies
    Copy to Clipboard
  • f

    future-window-78560

    4 months ago
    Hi there How can we download GCP service account key on creation thru pulumi??
    f
    1 replies
    Copy to Clipboard
  • w

    wet-soccer-72485

    4 months ago
    Has anyone seen
    UptimeCheckConfig
    be replaced each Pulumi preview and update, regardless of if there are changes?
    w
    p
    4 replies
    Copy to Clipboard