pulumi-community #general

billions-lock-73409

03/18/2019, 1:48 AM

How are people structuring their larger pulumi infrastructure projects? I think I’ve abstracted the pieces of my application a bit too far and have circular dependencies happening now, is it common to just have all your infrastructure in a single file (IAM roles, lambdas, ECS task def. etc)?

curved-tent-22690

03/18/2019, 12:58 PM

Hi, I tried this example https://github.com/pulumi/examples/tree/master/cloud-ts-voting-app . it works fine with this configuration

Copy code

config:
  aws:region: us-west-2
  cloud-aws:useFargate: "true"
  cloud:provider: aws
  voting-app:redisPassword:
    secure: AAABAClasQmklI5a4Nk4CBUJMlJYa6rzbw5ZuEykGpArD3DT4zBElAB1IC8Z3w==

curved-tent-22690

03/18/2019, 12:59 PM

However, if I changed

cloud-aws:useFargate

cloud-aws:ecsAutoCluster

, it results

Copy code

502 Bad Gateway

nginx/1.15.8

colossal-room-15708

03/18/2019, 1:54 PM

I was wondering if people have any good guidance on testing pulumi scripts during build? Or do you just run

pulumi preview

and have a human review the changes?

better-rainbow-14549

03/18/2019, 3:03 PM

error: azurekeyvault/keyVaultKeyVault resource 'test' has a problem: expected sku.0.name to be one of [standard premium], got Standard

better-rainbow-14549

03/18/2019, 3:03 PM

thanks!

millions-judge-24978

03/18/2019, 4:52 PM

Is there a way to add

docker build

parameters to https://pulumi.io/reference/pkg/nodejs/@pulumi/docker/index.html#buildAndPushImageAsync? i.e.

docker build --network host

adamant-dress-73325

03/18/2019, 5:42 PM

Hi, Is there a way for the pulumi/awsx package to support TLS protocol on NetworkListener? It looked like a nice abstraction but I was unable to figure it out.

orange-policeman-59119

03/18/2019, 6:12 PM

What's the canonical way to inject dynamic configuration? Use case: Our CI/CD process will in two separate runners: 1. build, tag, and push an image with the SHA1 of the repo 2. (in a more privileged runner later) use the SHA1 of the repo as the image tag for a Kubernetes deployment The runner can't mutate the Pulumi config (or commit it) between steps. Is the canonical solution to

pulumi config set

before

pulumi up

... or?

important-leather-28796

03/18/2019, 7:38 PM

Any strategies for running/cleaning up k8s job as a

dependsOn

for the remainder of a deployment? I’m expecting one job to be run per deployment, and I know I’ve run into unique job name problems, as well as cleanup problems in past attempts. Another concern is that the job (db migration) may end up taking some time in the future - thinking about bigger column or table migrations and timeouts. Any thoughts/strategies that are working well?

damp-book-35965

03/18/2019, 7:39 PM

How can I add taints to a given node in k8s through pulumi ? Did not find any examples @gentle-diamond-70147

important-leather-28796

03/18/2019, 9:19 PM

Secrets in k8s container env variable: I’m guessing a config secret would end up plain text in a manifest (?) - so I should continue to create a k8s secret and use a

secretKeyRef

curved-ghost-20494

03/18/2019, 10:33 PM

Hello All! I'm using the

@pulumi/cloud-aws

package with typescript, and defining a

new aws.Endpoint('foo')

isn't triggering new API Gateway config

curved-ghost-20494

03/18/2019, 10:33 PM

has anyone come across that before?

curved-ghost-20494

03/18/2019, 10:36 PM

oh I just figured out

curved-ghost-20494

03/18/2019, 10:36 PM

3 minutes 😓

curved-ghost-20494

03/18/2019, 10:36 PM

let endpoint = new aws.API('foo'); endpoint.publish()

👍 1

curved-tent-22690

03/19/2019, 5:34 AM

In voting-app example, the redis service has a internal balancer. If I scale up the redis service, there would be some independent redis instances and front-end app may connect to different redis randomly. Does that make sense? Please correct me if I misunderstood something. Thanks!

few-processor-86645

03/19/2019, 9:15 AM

What is the best way to exit a pulumi script if something failed in custom code (ie failing rest call)

cuddly-eye-68174

03/19/2019, 10:55 AM

Hi Guys, I ran into a compatibility issue between Pulumi/Kubernetes Helm deployment and Prometheus Operator - actually it's not an issue with Pulumi, neither with Prometheus Operator. The problem is in the operator they use the same name for ingress and the role too and many other things, so this why the automatic URN generation fails in Pulumi. I can make a workaround with local templates (I checked it 🙂 it's huge ), but my question would be if you have time. What would be the best solution to handle this? Is there any?

tall-monitor-77779

03/19/2019, 12:10 PM

guys, last time I checked, there was no way to unit test pulumi stacks (eg. the desired resource output for complex apps). Has this changed? Specifically TypeScript/Javascript

fresh-chef-62390

03/19/2019, 1:08 PM

Hi guys, does pulumi support google cloud identity?

brave-salesmen-42327

03/19/2019, 3:24 PM

Is there a working example of awsx.ecs.Cluster.createAutoScalingGroup ?

important-leather-28796

03/19/2019, 6:36 PM

GKE/Cloud sql and private networking a.k.a vpc native, private clusters, private networking. Has anyone done it?

clever-postman-36451

03/19/2019, 7:54 PM

curious - is anyone leveraging pulumi in an automated way? as in, creating, configuring, and deploying a stack programmatically?

important-leather-28796

03/19/2019, 9:08 PM

If I create a

gcp.compute.Network

, should that appear in the gcp console under

VPC networks

? Currently I don’t see one, only the

default

orange-policeman-59119

03/19/2019, 9:26 PM

Made a PR 🙂 https://github.com/pulumi/pulumi/pull/2570

🎉 2

glamorous-printer-14057

03/19/2019, 11:49 PM

hey all, I’m brand new to Pulumi and had a question - when new features land in the AWS terraform provider like https://github.com/terraform-providers/terraform-provider-aws/issues/6653 - is there any way to adopt those easily, or would we have to go through (or wait for the Pulumi core team to go through) this: https://github.com/pulumi/pulumi-terraform/wiki/Updating-Pulumi-Providers-Backed-By-Terraform-Providers ?

stocky-spoon-28903

03/20/2019, 12:17 AM

@glamorous-printer-14057 right now there’s no easy way until they hit a terraform release, but there’s no reason in principle that users can’t do that process!

stocky-spoon-28903

03/20/2019, 12:18 AM

Right now we’re a little behind because we had to do some work on versioning to take breaking changes in the 2.0 provider

👍 1