fair enough

The latest-version link should be updated later today.

Is there a way for pulumi to not add the random hex after a resource name? Esp for docker image tags

Is there a simple way to make everything else in a stack depend on it without explicitly using

dependsOn

everywhere? We have multiple stacks e.g. identity, infrastructure, app. In the

app

package, we may have multiple stacks deploying to the same cluster from the

infrastructure

stack. So in the

app

, we want to first ensure a stack-named k8s namespace as a prerequisite for all other components. Do we need to use

dependsOn

for everything or is there a simpler way to just make sure the namespace is created first?

Docs feedback from a newish user that is starting to get along:

@important-leather-28796 thanks so much for the great and detailed feedback!

What's the difference between

aws.iam.RolePolicy

and

aws.iam.Policy

? Does

RolePolicy

automatically do the policy attachment?

BTW I think IAM Roles would be a great place for awsx to improve. It's always so painful figuring out the right combination of things to create an AWS Role.

I’m seeing

no resource plugin 'af'

and not sure how I’m introducing it. I’ve created a

CustomResource

, is it pulling it off the beginning of the name for it?

Hi, how should I pass a nested structure with array of outputs from resources? Example:

const samlProvider = new aws.iam.SamlProvider('saml_provider', {...})

const oktaAssumePolicy = pulumi.output(aws.iam.getPolicyDocument({
  statements: [{
    principals: [{
      type: "Federated",
      identifiers: [samlProvider.arn]
    }]
  }]
}))

Note the

statements->principals->identifiers

Question about importing existing resources. Other than manually editing a state file, is there a way to do this? What happens if I do a “pulumi refresh” with an empty state file? Will it sort of “import” any of the resources that it finds that match?

I've created an Azure Typescript project which currently creates a single VM. I'm now trying to add DSC configuration but I'm starting to get stuck. I have a zipped Powershell script in a GitHub repo and I have had a look at the documentation, but I can't figure out how to reference the zip file URL and configuration function like you would in an ARM template. Can anyone help or are there any examples I could take a look at?

is anyone able to advise on how the kubernetes dashboard can be created in pulumi? i am able to create a working cluster with the following config, and then i have exported the

kubeconfig

property.

const cluster = new eks.Cluster(`${name}-cluster`, {
    vpcId: vpc.vpcId,
    subnetIds: vpc.subnetIds,
    desiredCapacity: 1,
    minSize: 1,
    maxSize: 3,
    // storageClasses: "gp2",
    deployDashboard: true,
})

export const kubeconfig = cluster.kubeconfig

the output gives me the server address in the kubeconfig json structure:

kubeconfig: { clusters: [ { cluster: { server: <servername here> } ] }

... but if i go to the URL, it gives me the following response:

{
  "kind": "Status",
  "apiVersion": "v1",
  "metadata": {},
  "status": "Failure",
  "message": "forbidden: User \"system:anonymous\" cannot get path \"/\"",
  "reason": "Forbidden",
  "details": {},
  "code": 403
}

can anyone see what i am doing wrong here?

Hi, I’m trying to create an EKS cluster and get this error:

Method handler checkConfig for /pulumirpc.ResourceProvider/CheckConfig expected but not provided
    Method handler diffConfig for /pulumirpc.ResourceProvider/DiffConfig expected but not provided
    unable to recognize "/var/folders/28/z072xy4d5970vkd6l3vb_r780000gn/T/tmp-32396RlquTqkLiKdX.tmp": Unauthorized
    unable to recognize "/var/folders/28/z072xy4d5970vkd6l3vb_r780000gn/T/tmp-32396RlquTqkLiKdX.tmp": Unauthorized
    unable to recognize "/var/folders/28/z072xy4d5970vkd6l3vb_r780000gn/T/tmp-32396RlquTqkLiKdX.tmp": Unauthorized
    unable to recognize "/var/folders/28/z072xy4d5970vkd6l3vb_r780000gn/T/tmp-32396RlquTqkLiKdX.tmp": Unauthorized
    unable to recognize "/var/folders/28/z072xy4d5970vkd6l3vb_r780000gn/T/tmp-32396RlquTqkLiKdX.tmp": Unauthorized

Is it safe to store stack definition JSON file in git or any other recommendations for keeping state synced for local use?

And note on that, it seems to be impossible right now to set the dir for state keeping. This would be a useful feature for CI situations, where I want to store this state in some special location, rather than in

~/.pulumi/stacks/

.

Another question, not Pulumi related, but relevant. Does anyone know how to reset minikube quickly? The delete/create is too slow. For when I was working with Ansible and Vagrant a lot, I used to just snapshot the VM and then rollback, which was super fast. But I don't see this option with minikube.

In an Azure Webapp, how do I enable App Service authentication with an existing AD application? (Selecting the Express config with an existing AD App via the portal) I have created an azure.ad.Application and azure.ad.ServicePrincipal but I can't find how to add the "Sign in and read user profile" to the application

there's a linebreak after $latest on https://pulumi.io/latest-version now

Downloading https://get.pulumi.com/releases/sdk/pulumi-v0.17.1 -windows-x64.zip

the update script in powershell is broken because of it

The remote server returned an error: (403) Forbidden.

Any tips on testing pulumi Kubernetes deployments?

And any general Kubernetes tips are welcome too. I’m new to Kubernetes, and not sure what and how to test.

Would love to be able to run pulumi programmatically and then store snapshots and test via jest.

Maybe snapshot of changes to be applied. But also snapshots of the Kubernetes cluster state. Or namespace state.

getting

error: could not load plugin for azure provider 'urn:pulumi:development::development::pulumi:providers:azure::default': failed to locate compatible plugin

any ideas please?

works on windows, that error message on linux

With a certmanager installation, we need to install the custom CRDs before running the helm chart. Is there a pulumi-way of doing things here?

## IMPORTANT: you MUST install the cert-manager CRDs **before** installing the
## cert-manager Helm chart
$ kubectl apply \
    -f <https://raw.githubusercontent.com/jetstack/cert-manager/release-0.6/deploy/manifests/00-crds.yaml>

https://github.com/helm/charts/tree/master/stable/cert-manager#installing-the-chart