pulumi-community #general

bitter-island-28909

01/24/2019, 9:00 PM

or do I need to drop down to

aws:ecs.TaskDefinition

and define all the apparatus myself?

damp-pillow-67781

01/24/2019, 11:49 PM

anyone knows why two default storageclasses got created when creating eks cluster?

Copy code

NAME                                                      PROVISIONER             AGE
gp2 (default)                                             <http://kubernetes.io/aws-ebs|kubernetes.io/aws-ebs>   6m
online-sandbox-yding-eks-cluster-gp2-vg7p51nj (default)   <http://kubernetes.io/aws-ebs|kubernetes.io/aws-ebs>   4m

early-musician-41645

01/25/2019, 12:45 AM

When creating a

new eks.Cluster

how can I add scaling policies, e.g. "scale up when average CPU utilization is > 70%" ?

adventurous-kilobyte-12973

01/25/2019, 12:57 AM

Hello, I accidentally RM'd some stacks and don't have a way to track the resources associated with them. Is there a way to recover stacks so I can pulumi destroy the resources?

red-lamp-97876

01/25/2019, 3:03 PM

say I want to implement a new Azure resource in Pulumi (app gateway), what's the best starting point to learn? I understand it's based of the Terraform provider but I'm at a loss when I see something like

super("azure:core/resourceGroup:ResourceGroup", name, inputs, opts);

. Where does this id key come from?

hundreds-dog-50002

01/25/2019, 4:55 PM

Hello comunity of Pulumi, I have one question. Is there a way that pulumi doesn’t append an id on every resources after running

pulumi up

early-musician-41645

01/25/2019, 7:36 PM

How do I get the cluster's name when I do a

new eks.Cluster

? E.g. the string that would appear in the list returned by

aws eks list-clusters

bitter-island-28909

01/25/2019, 7:59 PM

Hey all, just wanted to share a pattern I discovered that I think is pretty cool. I asked earlier this week if it were possible to iterate over resources (e.g, to make sure they all had a specific tag defined.) It turns out that’s not really possible, but I actually like this approach even better. First, you define a little helper class called PulumiContext, like the one in this gist: https://gist.github.com/levand/0b77a9dec11b46bb9e3b71d77204d7ca Then, we create all of our Pulumi resources using that context:

Copy code

var ctx = new util.PulumiContext().withProps( { tags: { Environment: pulumi.getStack() } });

// This bucket automatically has an Environment tag because it was created using the context defined above
let logs = ctx.r(aws.s3.Bucket, "logs", {
    bucket: `logs-${pulumi.getStack()}-<http://.myapp.com|.myapp.com>`
});

👍 1

bitter-island-28909

01/25/2019, 7:59 PM

You can also use the context to create super lightweight components, with no OO code required. For example:

Copy code

function myCluster(ctx, name) {
    ctx = ctx.withComponent("myorg:cluster", name)
             .withProps({tags: { Cluster: name } });

    // all resources created using this context now share a component, and all have the "Cluster" tag set
    // note that if we passed in a context with the "Environment" tag it'll still have that, merged in nicely.
    let primary = ctx.r(aws.ec2.Instance, "primary", {
        instanceType: "t2.micro",
        ami: "ami-xxxxxxxx"
    });

    let replicas = [];
    for(var i=0; i <= 3; i++) {
        replicas[i] = ctx.r(aws.ec2.Instance, `replica-${i}`,{
            instanceType: "t2.micro",
            ami: "ami-xxxxxxxx"
        });
    }

    return {primary, replicas};
}

var cluster = myCluster(ctx, "testCluster");

💥 2

millions-judge-24978

01/25/2019, 9:07 PM

I am using the

pulumi-cloud

for AWS

Service

resource, and am getting constant diffs in my previews. It appears the only change is the tag for the docker image in the ECS task definition. I am making no changes to the dockerfile though, and it has contents that are not changing. What could be causing this?

red-lamp-97876

01/25/2019, 9:36 PM

is it possible to set configuration values in the global

Pulumi.yaml

file and override the values if needed in the

Pulumi.{stack}.yaml

busy-umbrella-36067

01/25/2019, 9:56 PM

Have you guys sent out T-Shirts already?

brainy-magician-83981

01/26/2019, 10:32 PM

Hello! I"m looking for a pulumi article that is similar to this serverless example for setting a domain to direct to your AWS API Gateway service endpoints: https://serverless.com/blog/api-gateway-multiple-services/

brainy-magician-83981

01/26/2019, 10:34 PM

Setting up for staging deploy for: prod, staging, and dev

orange-policeman-59119

01/27/2019, 12:34 AM

I have a few questions for the folks at Pulumi so I'm going to create a couple threads 😅 First: What is the data flow for secrets? 1. The user encrypts the plaintext secret using a Pulumi CLI command, which places a ciphertext in the YAML file. 2. The Pulumi CLI encrypts the secret by ...? (obtaining a key from the server, or transmitting the plaintext to Pulumi?) 3. The cipher used is a symmetric (?) block cipher (AES-?) or an asymmetric cipher?

➕ 1

orange-policeman-59119

01/27/2019, 12:34 AM

Second & third: Devops-y questions 1. What is the support for multiple environments, e.g.: I'd prefer that we have say, 3 accounts instead of 1 account with 3 stacks, is that possible - how do API keys work in this case? What does Pulumi recommend to handle secrets across environments and say, prohibit a "Staging" environment API key from being used to deploy to the "Production" environment? 2. We use GitLab review apps to deploy many branches to Kubernetes, each as their own independent version of our entire backend/frontend, so we often have many versions of our pre-staging infrastructure running simultaneously. What would Pulumi recommend to handle this case? Are these considered their own "stacks", and would the pricing then be dependent on how many

white-balloon-205

01/27/2019, 9:23 PM

Great questions @orange-policeman-59119! Each ha some depth to it - I'll make sure we get back to you (and the rest of the list) with full answers tomorrow (and we'll look into adding the answers into docs were important topics aren't answered)!

brainy-magician-83981

01/28/2019, 4:53 AM

My stack AWS SQS resource is not showing a link to the AWS console in the Resources tab. All my other AWS resources do have a console link. Opening the SQS resource details shows everything from the arn and id. The id is a clickable link. I can open the SQS from my AWS console. Just wanted to report it in case it was a bug. Thanks!

sparse-intern-71089

01/28/2019, 5:06 AM

This message was deleted.

better-rainbow-14549

01/28/2019, 12:41 PM

Copy code

~  kubernetes:extensions:Ingress reader-services-ingress updating error: No matching service found for ingress rule: "/"

better-rainbow-14549

01/28/2019, 12:42 PM

i'm getting that a ton that i've never seen before, sometimes it just does it for 10 minutes and never terminates

gray-city-50684

01/28/2019, 2:20 PM

I’m creating a Kubernetes cluster on Azure with Pulumi, and also the underlying: azure.ad.Application, azure.ad.ServicePrincipal and azure.ad.ServicePrincipalPassword objects. On the first

pulumi up

it always fails with the error bellow. On second run of

pulumi up

it succeeds.

gray-city-50684

01/28/2019, 2:20 PM

Copy code

error: Plan apply failed: Error creating/updating Managed Kubernetes Cluster "xxx" (Resource Group "yyy"): containerservice.ManagedClustersClient#CreateOrUpdate: Failure sending request: StatusCode=400 -- Original Error: Code="ServicePrincipalNotFound" Message="Service principal clientID: a-b-c-d not found in Active Directory tenant e-f-g-h, Please see <https://aka.ms/acs-sp-help> for more details."

bitter-island-28909

01/28/2019, 3:28 PM

Is there an easy way to get at the current git SHA of the repository containing my Pulumi code (such as is displayed in the web UI) from within my JS code? I’d like to use it to tag docker containers as well.

faint-motherboard-95438

01/28/2019, 4:40 PM

Hi there, I’m managing a few static objects in my google bucket with pulumi (https://www.terraform.io/docs/providers/google/r/storage_bucket_object.html) but I just hit a problem when my source object is updated, pulumi does not detect the file has changed and does not update it. How should I manage it so that it knows the source file has changed (maybe with a md5 or something) ?

busy-umbrella-36067

01/28/2019, 6:20 PM

How are stacks priced if they are constantly being created/destroyed? I want to make sure that each stack created doesn’t incur a $30 charge. E.g. Doing a stack for each PR but always have < 10 stacks at any given time since PR’s get closed.

early-musician-41645

01/28/2019, 7:39 PM

What can I do in this situation? I've created an EKS cluster but for some reason the ASG is not tracked in my stack. I'm now stuck with a partial stack where if I try to

pulumi up

I get this:

Copy code

Updating (tableau/online-sandbox-vpc-0d18addcc5815ae23):

     Type                            Name                                                  Status                  Info
     pulumi:pulumi:Stack             eks-cluster-online-sandbox-vpc-0d18addcc5815ae23
 -   └─ aws:ec2:LaunchConfiguration  online-sandbox-2-eks-cluster-nodeLaunchConfiguration  **deleting failed**     1 error

Diagnostics:
  aws:ec2:LaunchConfiguration (online-sandbox-2-eks-cluster-nodeLaunchConfiguration):
    error: Plan apply failed: deleting urn:pulumi:online-sandbox-vpc-0d18addcc5815ae23::eks-cluster::eks:index:Cluster$aws:ec2/launchConfiguration:LaunchConfiguration::online-sandbox-2-eks-cluster-nodeLaunchConfiguration: ResourceInUse: Cannot delete launch configuration online-sandbox-2-eks-cluster-nodeLaunchConfiguration-dc81314 because it is attached to AutoScalingGroup online-sandbox-2-eks-cluster-6c6f620d-NodeGroup-132ENU1JW8B2B
        status code: 400, request id: 596c44a8-2334-11e9-97f9-6729550f923e

and

pulumi destroy

similarly fails:

Copy code

Destroying (tableau/online-sandbox-vpc-0d18addcc5815ae23):

     Type                            Name                                                  Status                  Info
     pulumi:pulumi:Stack             eks-cluster-online-sandbox-vpc-0d18addcc5815ae23
 -   └─ aws:ec2:LaunchConfiguration  online-sandbox-2-eks-cluster-nodeLaunchConfiguration  **deleting failed**     1 error

Diagnostics:
  aws:ec2:LaunchConfiguration (online-sandbox-2-eks-cluster-nodeLaunchConfiguration):
    error: Plan apply failed: deleting urn:pulumi:online-sandbox-vpc-0d18addcc5815ae23::eks-cluster::eks:index:Cluster$aws:ec2/launchConfiguration:LaunchConfiguration::online-sandbox-2-eks-cluster-nodeLaunchConfiguration: ResourceInUse: Cannot delete launch configuration online-sandbox-2-eks-cluster-nodeLaunchConfiguration-dc81314 because it is attached to AutoScalingGroup online-sandbox-2-eks-cluster-6c6f620d-NodeGroup-132ENU1JW8B2B
        status code: 400, request id: 336158ed-2334-11e9-bcbc-199ef247c334

bitter-island-28909

01/28/2019, 8:02 PM

how can I force “delete before replace” behavior on a given resource (e.g, subnets which can’t have the same CIDR)? Pulumi can clearly do this automatically for certain resource types, I somehow am just missing the flag to make it happen manually in the docs 🙂 edit: nevermind, I think it would work automatically in the common case. I ran into this because I renamed it, in which case “delete before create” wouldn’t have helped. Manually deleting the old one in the console fixed it.

red-lamp-97876

01/28/2019, 9:26 PM

I’m trying to build a resource provider and I’m getting an

impossible type assertion

. Any ideas?

damp-pillow-67781

01/28/2019, 11:26 PM

I got some consistent error with desired capacity, any idea on that? I'm pretty sure my desired capacity is set not to 2, and don't know where the number 2 comes from.

Copy code

creating urn:pulumi:online-sandbox-3-vpc-0d18addcc5815ae23::eks-cluster::eks:index:Cluster$aws:cloudformation/stack:Stack::online-sandbox-3-eks-cluster-nodes: ROLLBACK_COMPLETE: ["The following resource(s) failed to create: [NodeGroup]. . Rollback requested by user." "Desired capacity:2 must be between the specified min size:5 and max size:50 (Service: AmazonAutoScaling; Status Code: 400; Error Code: ValidationError; Request ID: 11dbc817-2351-11e9-b1a7-a7ac0bb420e5)"]