I can't seem to find a way to access the ARN

These errors are a bit cryptic. Any idea why port

8880

would be invalid? It'd be much more helpful if the stack trace pointed to something in my code.

error: Running program '/home/kenny/compute_software/infrastructure/pulumi-src' failed with an unhandled exception:
    error: Error: Invalid port: 8880
        at pulumi.all.apply (/home/kenny/compute_software/infrastructure/pulumi-src/node_modules/@pulumi/elasticloadbalancingv2/application.ts:142:28)
        at Output.<anonymous> (/home/kenny/compute_software/infrastructure/pulumi-src/node_modules/@pulumi/awsx/node_modules/@pulumi/pulumi/resource.js:277:47)
        at next (native)
        at /home/kenny/compute_software/infrastructure/pulumi-src/node_modules/@pulumi/awsx/node_modules/@pulumi/pulumi/resource.js:20:71
        at __awaiter (/home/kenny/compute_software/infrastructure/pulumi-src/node_modules/@pulumi/awsx/node_modules/@pulumi/pulumi/resource.js:16:12)
        at promise.then (/home/kenny/compute_software/infrastructure/pulumi-src/node_modules/@pulumi/awsx/node_modules/@pulumi/pulumi/resource.js:264:62)
    error: Running program '/home/kenny/compute_software/infrastructure/pulumi-src' failed with an unhandled exception:
    error: Error: Invalid port: 8880
        at pulumi.all.apply (/home/kenny/compute_software/infrastructure/pulumi-src/node_modules/@pulumi/elasticloadbalancingv2/application.ts:142:28)
        at Output.<anonymous> (/home/kenny/compute_software/infrastructure/pulumi-src/node_modules/@pulumi/awsx/node_modules/@pulumi/pulumi/resource.js:277:47)
        at next (native)
        at /home/kenny/compute_software/infrastructure/pulumi-src/node_modules/@pulumi/awsx/node_modules/@pulumi/pulumi/resource.js:20:71
        at __awaiter (/home/kenny/compute_software/infrastructure/pulumi-src/node_modules/@pulumi/awsx/node_modules/@pulumi/pulumi/resource.js:16:12)
        at promise.then (/home/kenny/compute_software/infrastructure/pulumi-src/node_modules/@pulumi/awsx/node_modules/@pulumi/pulumi/resource.js:264:62)
    error: an unhandled error occurred: Program exited with non-zero exit code: 1

On a positive note. We went from having to "schedule" environment deployments so that we could predict availability and schedule resources --> Learning about Pulumi Friday last week from an AWS webinar recording -> Implementing Pulumi stacks into two of our products over the weekend -> building and destroying 10+ stacks this week for various reasons. Saves so much time and energy and mistakes and frustration.

Is there a way to edit the TaskExecutionRole when using

cloud.Task

?

As in

const ffmpegThumbnailTask = new cloud.Task("ffmpegThumbTask", {
    build: "./",  // folder containing the Dockerfile
    memoryReservation: 512,
});

What is the best way to create a module which requires a

k8s.Provider

as an input? Taking a

pulumi.Input<k8s.Provider>

runs into issues with then being able to pass it along to resources provisioned in the module. The provider is originally a

pulumi.Output<k8s.Provider>

from a different module.

A kind note that AWS Lambda has runtime support for Python 3.7 as of Nov 2018. Please add python3.7 in aws.lambda.Runtime for the next release, thank u!

Will pulumi automatically generate the values for fields such as

sourceCodeHash

and

sourceCodeSize

for aws.lambda.Function?

Started using AWS Lambda Layers for the first time with Pulumi. When my zip FileAsset changes however, only the associated BucketObjects get updated ... the LayerVersions do not. So the lambda function is not pulling the latest layer versions. Is this a Pulumi issue or a limitation of AWS? Thx.

I'm presently a fairly extensive user of Jsonnet by way of the kube-prometheus, and monitoring-mixins projects. Is anyone from Pulumi interested in discussing how these use cases can be addressed with Pulumi?

I would like to serialize the

exports

from

pulumi

object especially string and write it to a bucket for other API’s to consume.

{ IstioIngressIPAddress:
       Output {
         __pulumiOutput: true,
         isKnown: Promise { <pending> },
         resources: [Function],
         promise: [Function],
         apply: [Function],
         get: [Function] },
      IdentityIngressIPAddress:
       Output {
         __pulumiOutput: true,
         isKnown: Promise { <pending> },
         resources: [Function],
         promise: [Function],
         apply: [Function],
         get: [Function] },
      ExternalNATIPAddress: '[object Object]' }

I am trying to serialize using

JSON.stringify

. How do I get a proper serialized json object?

Does StackReference only work with the Pulumi Cloud Platform? I'm currently using Pulumi with the file based state backup, but unless I'm missing something, I can not seem to get it to work, I've read through the documentation as well, and looked for samples, but there isn't much to find. So here's my scenario, I have a project, broken down by infra and app, the infra sets up ECS and references the ECR repository url of the app that's built and pushed. So there's a stack in app and one in infra. It would look like this:

/project/app/index.ts
/project/app/Pulumi.dev.yml
/project/infra/index.ts
/project/infra/Pulumi.dev.yml

One of the outputs from the app project is the repository url as

repositoryUrl

. I would like to access this from the infra project. This is what I tried

pulumi.StackReference("../app/dev").getOutput("repositoryUrl")

, but I realise this is not the way to do it. How would I go about doing this using the local state implementation?

Regarding https://github.com/pulumi/examples/blob/master/kubernetes-ts-exposed-deployment/index.ts, is there a way to get the unique hash from to the deployment name added to the pod labels? if i make two of these deployments to a namespace there is no unique label tying the pods back to their deployment.

What is the better way to poll for kubernetes resources that are created as part of a deployment? Say, my jenkins deployment creates a secret with jenkins credentials, and I want to put in as my stack output.

export const credentials = k8s.core.v1.Secret.get("jenkins-credentials", `${namespace}/jenkins-operator-credentials-${jenkinsName}`, {
         provider: kubernetes
}).data;

The code above does not output anything, because the secret is not created yet. Should I try to poll the secret? Is there a code example for that?

I have some trouble re-installing some helm chart using

pulumi-eks

, looks like pulumi won’t clean up kubernetes apis created when deleting resources, and when re-installing the helm chart I got error like:

kubernetes:apiregistration:APIService (kube-system/v1beta1.custom.metrics.k8s.io):
    error: Plan apply failed: <http://apiservices.apiregistration.k8s.io|apiservices.apiregistration.k8s.io> "<http://v1beta1.custom.metrics.k8s.io|v1beta1.custom.metrics.k8s.io>" already exists

which I don’t have any issue deleting/installing via

kubectl

myself.

Is there a way to subscribe an

aws.lambda.Function

instance to an SNS topic that was created external to a pulumi stack? The topic ARN would be passed in as a config parameter; i.e. an instance of

aws.sns.Topic

is not immediately available.

Has anyone seen this issue before?

aws:elasticloadbalancingv2/listener:Listener resource 'redactedListener' has a problem: "load_balancer_arn": required field is not set

- I am following the example from the

aws-ts-airflow

sample

I have a resource on my stack that can be created only on my build server (a blob). On my desktop, the file does not exists and Pulumi wants to delete this resource. What I want on my build machine, is to query the StackReference and see if the resource is present. If yes then I want to keep it.

if (fs.existsSync(fullFileName)) {
    // On the build server, I update the blob with the new artifact
    const blob = new azure.storage.Blob("myblob-b", {
                    name: fileName,
                    source: fullFileName,
                    resourceGroupName: resourceGroup.name,
                    storageAccountName: storageAccount.name,
                    storageContainerName: zipDeployContainer.name,
                    type: "block"
                })
} else {
    // On my local machine, the artifact does not exists but I want to keep it
    const stackRef = new pulumi.StackReference(`${organization}/${projectName}/${stackName}`);
    // How do I tell pulumi keep the resource from the stack reference
    const srblob = stackRef.getOutput("zipblob");
}

export const zipblob = blob;

If I create a docker:image and it builds, is there a build log stored anywhere, or do we need to save the output of the pulumi update ?

Looking at the chat history… There’s some ambivalence about supporting Helm-based deployments. I’d really like that to work well (and be supported in Python). We’re still evaluating Pulumi, but a really attractive part of Pulumi for me is that I can see how it’d enable us to transition from our current state (helm charts and other nonsense) to Pulumi being the new glue code that’s pulling in those per-service helm charts, to the glorious ideal state where the helm charts are replaced by Pulumi programs.

I am trying to port a new terraform provider to Pulumi using the pulumi-terraform bridge repo. I found the "updating Pulumi Providers" wiki page which is helpful. Is there a guide for starting a new Pulumi provider from terraform from scratch?

Hi, I'm trying to use pulumi with an existing EKS cluster

Can I create the kubernetes provider dynamically by cluster name?

I'm trying to accomplish something like:

const eksCluster = aws.eks.getCluster({name: 'cluster-name'})
const ns = new k8s.core.v1.Namespace('pulumi-test', {}, { provider: eksCluster.getProvider() })

However the

getCluster

fails with

Error: Missing required property 'roleArn'

Hi, just wondering if AWS default profiles are expected to work? I’ve got a named profile in

~/.aws/credentials

, but unless I move it to

default

, commands like

pulumi update

fail with

error: error validating provider credentials: error calling stsGetCallerIdentity InvalidClientTokenId: The security token included in the request is invalid.

For our platform… I’ve got a couple dozen microservices that’ll be deployed to 3+ different stacks (test, staging, prod -- all in different sets of GKE clusters). For each microservice, our CI pipeline looks like:

(calculate semver) 
    -> (build container, tag w/ semver, push to docker registry) 
        -> (static analysis & long-running tests) 
            -> (package helm chart w/ semver, publish to helm repo )

I was thinking I’d have a separate CD pipeline that ran the Pulumi program for deploying the service (triggered by the above CI pipeline completing). In that Pulumi program, the version of a microservice would be a part of the stack configuration. I’m assuming the Helm provider just passes the version string down to the helm cli, so I could use semver ranges to specify which version of a service belongs in each stack... something like, in the Pulumi program for svcA it’d have a config variable

svcA:version

, and it’d be set differently in each stack:

dev: >=1.1.0             # always grab the latest, even breaking changes
test: >=1.1.0,<2.0.0     # new features, but not breaking changes
staging: >=1.1.0,<1.2.0  # new bug fixes, but not new features.
production: 1.1.0        # pinned to 1.1.0

Am I setting myself up for future pain? Should I be thinking about the problem in a different way?

Is there an option to wait for kubernetes job completion? The use case is provisioning a rails environment - I'd like to run a rails db migration before deploying the rest of the containers

Anyone know how to obtain the resourceIds (AWS) per every api.method resource using (Cloud.API)? I've created an Authorizer.js that tags onto the Cloud.API (AWS API Gateway) ... but now I still need to be able to tag the custom authorizer to endpoints I want. I spit out a bunch of outputs from Cloud.API, found routes... but no mention of their respective resource Ids

Forgive me if this is dumb, Pulumi is my first intro to typescript. I am trying to create a k8s custom resource but my

@pulumi/kubernetes

doesn’t have

apiextensions.v1beta1.CustomResource

but it looks like its in the `v0.20.3`release I am using: https://github.com/pulumi/pulumi-kubernetes/blob/v0.20.3/sdk/nodejs/provider.ts#L3098