Made a PR 🙂 https://github.com/pulumi/pulumi/pull/2570

hey all, I’m brand new to Pulumi and had a question - when new features land in the AWS terraform provider like https://github.com/terraform-providers/terraform-provider-aws/issues/6653 - is there any way to adopt those easily, or would we have to go through (or wait for the Pulumi core team to go through) this: https://github.com/pulumi/pulumi-terraform/wiki/Updating-Pulumi-Providers-Backed-By-Terraform-Providers ?

@glamorous-printer-14057 right now there’s no easy way until they hit a terraform release, but there’s no reason in principle that users can’t do that process!

Right now we’re a little behind because we had to do some work on versioning to take breaking changes in the 2.0 provider

But that will hopefully be resolved by tomorrow Pacific time

Hi All. I'm migrating existing AWS infra to pulumi, and need to replace parts gradually. Is there a way get an Instance of some resource that already exists outside Pulumi? e.g. I want to create an

aws.sns.TopicSubscription

to a topic that already exists, but the topic param must be a

pulumi.Input<Topic>

- so I need an instance of

Topic

first.

new aws.sns.Topic(...)

will try create a new topic with a unique name, which is not what I need.

@wide-judge-30323 each resource has a .get() function for cases like this!

Ah, thanks @stocky-spoon-28903. While digging a little further too, I found I could call

new

with a

CustomResourceOptions

providing an arn for

id

- that seemed to work, but I guess

.get()

is a more idiomatic way that does the same thing. Thanks!

Trying out the

cloud

api for the first time (aws lambda). Is it possible to use the aws sdk directly (or other js libs?) in a

aws.lambda.CallbackFunction

? I'm trying to just s3 cp a file from one place to another -

pulumi.cloud.Bucket

doesn't seem to offer this (only get and put the actual contents, which would not be ideal for larger files). The examples spin off a separate

cloud.Task

- but this seems unnecessary for this use-case.

Hello all! I have to deploy, say, 40 different resources on CGP, and i want to use Pulumi for that...When using the Python API, which is the preferred way to avoid having a monolithic main.py file?

Hey all, I’m exploring the cloud framework and I would like to leverage the Service resource, but I need to be able to add custom tags to the resources it creates for tracking purposes, is there any support for that?

Hi, I’m trying to use the

customData

field for an Azure VM, but I’m unsure as to how to provide the data. I tried just using a filename of a cloud-init file I have in the local directory (i.e.

customData: "cloud-init.txt"

, but after I boot the VM it shows the field with

customData: ""

Do I have to specify it a different way?

Can we access the gcp beta api yet? I’m trying to create a private connection to cloud sql, and I need the equivalent of

gcloud beta services vpc-peerings connect \
    --service=<http://servicenetworking.googleapis.com|servicenetworking.googleapis.com> \
    --ranges=[RESERVED_RANGE_NAME] \
    --network=[VPC_NETWORK] \
    --project=[PROJECT_ID]

Hello all. I have some questions about

pulumi destroy

, or how I would like to see it be more robust. Basically right now I had a stack with an eks-cluster, and installing istio into a namespace. The issue is when I did destroy, Kubernetes was getting hung up terminating the Istio namespace... and because of that pulumi wouldn't continue. First thing, I would like to see is that Pulumi can recognize these dependencies, and if I am destroying the whole stack, dont even bother trying to destroy the namespace when I am destroying the whole EKS cluster anyways... or at least give me a way to ignore issues like this and keep going

After that, I deleted the cluster manually in AWS, and tried to use

pulumi destroy

to clean up the miscellaneous other objects... but Pulumi again choked on removing the namespace, because now it couldn't talk to the cluster. I would like to see Pulumi be smarter here, recognize the cluster is gone so the dependent objects are also gone and help me remove the miscellaneous other objects.

i've had the same

Created https://github.com/pulumi/pulumi-kubernetes/issues/491 to track this request ^^

I was trying to modify my state to indicate these resources are gone, but passing in name, id, arn, to

pulumi state delete

always results in No such resource"<resource name>" exists in the current state.

pulumi refresh

also fails because it cannot connect to the deleted cluster

Trying to set up a SNS email subscription and I see this in the docs for `TopicSubscriptionArgs`:

/**
     * The protocol to use. The possible values for this are: `sqs`, `sms`, `lambda`, `application`. (`http` or `https` are partially supported, see below) (`email` is option but unsupported, see below).
     */
    readonly protocol: pulumi.Input<string>;

What does "(

email

is option but unsupported, see below)" mean? How am I supposed to create an email subscription?

Does Pulumi have some sort of cache that may get out of date? I am getting this error:

error: Missing required configuration variable 'services:storage-template-url'
        please set a value using the command `pulumi config set services:storage-template-url <value>`

... when running

pulumi up

. I do not have a

.require("storage-template-url")

anywhere in this stack's code. This stack does have a stack reference to a stack that requires that config value and it was moved around recently.

I updated from these packages:

"@pulumi/pulumi": "0.16.17",
        "@pulumi/aws": "0.16.10",
        "@pulumi/awsx": "0.16.5"

to

{
  "@pulumi/pulumi": "0.17.2",
  "@pulumi/aws": "0.17.1",
  "@pulumi/awsx": "0.17.0"
}

and ran

pulumi up

. Received this exception:

error: aws:ec2/securityGroupRule:SecurityGroupRule resource 'nginx-lb-listener-external-0-ingress' has a problem: "description" cannot be longer than 255 characters: "Externally available at port Calling [toString] on an [Output<T>] is not supported.\n\nTo get the value of an Output<T> as an Output<string> consider either:\n1: o.apply(v => `prefix${v}suffix`)\n2: pulumi.interpolate `prefix${v}suffix`\n\nSee <https://pulumi.io/help/outputs> for more details.\nThis function may throw in a future version of @pulumi/pulumi."
    error: aws:ec2/securityGroupRule:SecurityGroupRule resource 'nginx-lb-listener-external-0-ingress' has a problem: "description" doesn't comply with restrictions ("^[A-Za-z0-9 \\.\\_\\-\\:\\/\\(\\)\\#\\,\\@\\[\\]\\+\\=\\;\\{\\}\\!\\$\\*]*$"): "Externally available at port Calling [toString] on an [Output<T>] is not supported.\n\nTo get the value of an Output<T> as an Output<string> consider either:\n1: o.apply(v => `prefix${v}suffix`)\n2: pulumi.interpolate `prefix${v}suffix`\n\nSee <https://pulumi.io/help/outputs> for more details.\nThis function may throw in a future version of @pulumi/pulumi."

Is there a way to add

tags

to an

awsx.Cluster

? I don't see a param for that currently but you can do it in the console.

@lemon-spoon-91807 Hi, Is there a way for the pulumi/awsx package to support TLS protocol on NetworkListener? It looked like a nice abstraction but I was unable to figure it out, cause the readme example (https://github.com/pulumi/pulumi-awsx/tree/master/nodejs/awsx/elasticloadbalancingv2) seems to be out of date. This seems to be the issue, https://github.com/pulumi/pulumi-awsx/blob/master/nodejs/awsx/elasticloadbalancingv2/network.ts#L127

What do people generally do to work around this issue here: https://github.com/pulumi/pulumi/issues/2306 I'm currently working on a thing where I actually need quite a few lists in my config (or where resources even require lists as input) and this issue is a bit annoying.

Struggling with an issue - at a high level I want to create multiple service accounts (GCP) that are generated by iterating over an array of application names. let’s say I have a config of app1, app2, app3. I want to export the created service accounts because in another stack I want to assign some bucket permissions per service account. Having a hard time with figuring out how to export each of the created accounts as a discrete stack export. Ideas?

If i wanted to generate a random password, store it in an azure keyvault and then refer to it... how would i do that? Would it not re-generate the password each

pulumi up

? How would I stop it from continuously replacing it?

With this example, how do we handle subdirectories ? https://pulumi.io/quickstart/aws/tutorial-s3-website.html Currently getting an error when bumping into a sub directory

2 UNKNOWN: failed to compute asset hash: asset path '../../build/images' is a directory; try using an archive

@white-balloon-205 Kudos to your documentation team. I want to invoke a lambda based on SQS activity, and what do you know, that blog post exists 🙂

Super helpful