pulumi-community #general

brainy-magician-83981

02/27/2019, 4:17 PM

Writing a AWS Lambda function to process S3 events. I'm using AWS Lambda Layers for code deployment. When the zip files associated with the layers are updated however, they get deployed to their S3 location but the associated layer resources are not picking up this change. So the lambda function is not getting the latest updated zip files. My workaround at the moment is to delete the layer resources by commenting the resource out of my pulumi script ... running

pulumi up

... then uncommenting to add the layer resources back ... and running

pulumi up

again. Is there a better way of handling this? Thx!

white-balloon-205

02/27/2019, 5:33 PM

@thousands-notebook-91098 @worried-engineer-33884 regarding your question about how to use data sources in Python - there’s an example here you can look at: https://github.com/pulumi/examples/blob/deff78c44de30ed63cd40e547eac42e1cb89fd52/azure-py-webserver/__main__.py#L72-L74

thousands-notebook-91098

02/27/2019, 5:33 PM

yessss I was right with the

await

thousands-notebook-91098

02/27/2019, 5:33 PM

my python-fu grows stronger

thousands-notebook-91098

02/27/2019, 5:34 PM

☯️

thousands-notebook-91098

02/27/2019, 5:35 PM

I'm curious how that async stuff works under the hood in terms of generating a declarative state and then applying it. Since imperative languages are generally serially interpreted I wonder how often people will run into these issues moving forward

jolly-lifeguard-22556

02/27/2019, 5:43 PM

Has anything changed recently in terms of how

@pulumi/docker

interacts with GCP container registry based on your credentials? I'm using a service account with full project permissions but am unable to push docker images:

Caller does not have permission 'storage.buckets.create'. To configure permissions, follow instructions at: <https://cloud.google.com/container-registry/docs/access-control>

. In the past this just worked and I didn't have to go through any extra steps or set up to be able to push up images

wonderful-yacht-97719

02/27/2019, 7:38 PM

any thoughts about a controller-based workflow for kubernetes? i.e. pulumi running in the cluster checking git repos for changes, then applying the changes when detected (and/or on a schedule)

wonderful-yacht-97719

02/27/2019, 7:38 PM

pull vs. push

incalculable-oil-55773

02/27/2019, 8:27 PM

Does anyone have any examples of non-trivial express apps deployed with Pulumi? I want to be able to run a small node app locally or on lambda, and I'm trying to figure out how to structure it without getting continual type errors.

jolly-lifeguard-22556

02/27/2019, 9:32 PM

Is there anything in Pulumi that would allow you to run an arbitrary Docker container as part of deployment? Basically the equivalent of a Kubernetes Job but without K8s in the picture.

busy-umbrella-36067

02/27/2019, 10:22 PM

Should a

pulumi refresh

detect drift of env vars for a kubernetes deployment/statefulset resource?

busy-umbrella-36067

02/27/2019, 10:26 PM

I have a weird stack state, Pulumi assumed the updates happened but in reality they failed. Subsequent updates show no planned changes even with a

pulumi refresh

worried-engineer-33884

02/27/2019, 10:37 PM

how do i use the result of a data source function as an input to a resource?

cold-coat-35200

02/28/2019, 3:30 PM

hi, I'm wondering why the StackReference getOutput returns with an Output type? Is it possible that it returns an unresolved output or the other stack is running and it will return the latest output when the referenced stack deploy finished?

cold-piano-21918

02/28/2019, 5:31 PM

Trying to use

ecs.get_cluster

in python. Is there a code sample that shows how to do this? Do I really have to create an async function just to get the value?

busy-pizza-73563

02/28/2019, 5:39 PM

Is there a way to programatically (re)define the "done" status of a resource? Use case: when creating a CRD managed by a kubernetes operator, I want to wait until the child resources are created by the operator.

great-dog-65117

02/28/2019, 6:00 PM

Hellow there! Im really interesed in the

python

API...I cant find how integrate pulumi code with ansible (or cloud-init)...it this feature supported?

millions-judge-24978

02/28/2019, 7:27 PM

Does the

k8s.helm.v2.Chart

package handle sub-charts specified via the parent's

requirements.yaml

file?

gorgeous-area-37785

02/28/2019, 7:43 PM

hello there, I'm starting to use pulumi, but I already have some code/state in terraform is it possible to migrate my current state to pulumi? (I couldn't find anything about this)

orange-tailor-85423

02/28/2019, 7:44 PM

I’m not seeing this UI in the Pulumi website:

orange-tailor-85423

02/28/2019, 7:44 PM

How do I navigate to that?

orange-tailor-85423

02/28/2019, 7:48 PM

nm found it

orange-tailor-85423

02/28/2019, 7:49 PM

Is this correct - Base Permissions Base permissions to all of the organization’s stacks, granted to all organization members. Members can be granted stack permissions from multiple sources (e.g. Teams) and will retain the highest level of permissions granted.

orange-tailor-85423

02/28/2019, 7:49 PM

Meaning Write at the org level will supersede READ at a stack level?

orange-tailor-85423

02/28/2019, 7:49 PM

Going to production soon and locking things down

white-balloon-205

02/28/2019, 7:50 PM

BTW - for others - this UI is available at https://app.pulumi.com/<yourorg>/settings/access for administrators of an Organization in the Pulumi console.

orange-tailor-85423

02/28/2019, 7:51 PM

thanks Luke

cold-piano-21918

02/28/2019, 8:23 PM

Are there any examples for python and ecs using

TaskDefinition

and

Service

? all the examples I can find are for JS using @aws-infra, which seems like a shortcut. Specifically creating a ecs service, the

network_configuration

part of the documention is not clear.

orange-policeman-59119

02/28/2019, 10:56 PM

Is it possible to merge or apply multiple config files? e.g.: We have some shared config in

Pulumi.review.yaml

and some extra config in

./.deployment/Pulumi.extra.yaml

. Is that possible? This is related to the use case I described earlier of having arbitrarily many stacks (stack-per-branch). When creating what GitLab calls review apps, we may, for example, generate random credentials to inject as secrets per-stack, but we would also have a bunch of static config stored in a shared file.