pulumi-community #general

sticky-piano-10761

03/25/2019, 3:11 PM

Within a stack, can I organize pieces into files or folders underneath?

billowy-garage-68819

03/25/2019, 3:22 PM

I'm probably missing something simple, but I'm running a GCP project and I need to get the value of gcp:project, is there a simple way of getting it without redefining it?

full-dress-10026

03/25/2019, 4:31 PM

How do you guys configure healthchecks for a backend service that is not a HTTP service? (i.e. a SQS worker) Do you add a lightweight HTTP server to your worker service? If so, does that require deploying a load balancer that is essentially a NOP? Or is there some other AWS mechanism for liveliness of a backend service?

fierce-dinner-20116

03/25/2019, 4:58 PM

Hello, for https://github.com/pulumi/pulumi-awsx/issues/187 is there any more information that I can provide? (Maybe any relevant info about my AWS account? I’d be happy to PM that info over if it is helpful).

fresh-flag-12765

03/25/2019, 6:12 PM

Hey, is there a shorthand to "use existing value for this stack, otherwise set to ..."? For example, I want to use the latest AMI for an EC2 instance, unless I am referring to a server that already exists, in which case I want to leave it alone so it doesnt redeploy?

better-rainbow-14549

03/25/2019, 6:25 PM

Copy code

Moderate        Denial of Service                                             
                                                                                
  Package         js-yaml                                                       
                                                                                
  Dependency of   @pulumi/kubernetes

better-rainbow-14549

03/25/2019, 6:25 PM

btw

gray-city-50684

03/25/2019, 6:32 PM

I’m trying to use the Cloudflare provider, and would like to configure the provider instance myself and passing it to the resources with the opts.provider field. However just having the following code const cfProvider = new cloudflare.Provider(“CF-Provider”, { email: “no@no.to”, token: “abrakadabra” } ); causes the following error when doing “pulumi up” (there are no Cloudflare resources in my code yet): error: Missing required configuration variable ‘cloudflare:email’ please set a value using the command

pulumi config set cloudflare:email <value>

error: an unhandled error occurred: Program exited with non-zero exit code: 1

gray-city-50684

03/25/2019, 6:33 PM

Any ideas what do I do wrong / how to fix this?

better-rainbow-14549

03/25/2019, 6:37 PM

I'm writing a bunch of code that will go in a package that can be imported but also needs to be used there and then and i'm having to jump through a lot of hoops with parameters like

Copy code

dnsZone: azure.dns.Zone | (azure.dns.GetZoneResult & azure.dns.GetZoneArgs) | { resourceGroupName: pulumi.Input<string>, name: pulumi.Input<string>, id: pulumi.Input<string> }

important-leather-28796

03/25/2019, 6:41 PM

Confused about gcp beta location based clusters. I see nothing in the Cluster/NodePool args with

locations

matching the api https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1beta1/projects.locations.clusters#Cluster

damp-book-35965

03/25/2019, 8:03 PM

Any movement on this guys ? https://github.com/pulumi/pulumi-eks/issues/82

billions-lock-73409

03/25/2019, 8:43 PM

I’ve written a lambda to start an ECS fargate task and I’m using the

aws.lambda.CallbackFunction

class, and am referencing some parameters needed for launching fargate tasks. However the serialization seems to be properly including the values but they aren’t accessible as written in the

ecs.runTask

call. Example function in thread.

important-leather-28796

03/25/2019, 9:25 PM

I’ve gate a failed deployment, I cannot

up

the fix, and it seems I cannot

destroy

either.

error: [409] Conflict: Another update is currently in progress

. I also tried refresh but of course it fails due to the original error. What is the proper way to force a destroy?

cool-kite-89497

03/25/2019, 9:53 PM

https://console.cloud.google.com/iam-admin/audit Can anyone point me in the right direction for controlling these settings with Pulumi?

early-musician-41645

03/25/2019, 10:55 PM

I'd like to +1 to this issue, it's now blocking a lot of our infrastructure creation with EKS: https://github.com/pulumi/pulumi-kubernetes/issues/456

brainy-psychiatrist-41826

03/25/2019, 11:56 PM

can anyone point me in the direction for docs on how to incorporate pulumi w/ a pre-existing cluster? i have a local cluster on my machine, and pulumi works great for deploying new resources, but i get an "already deployed" error if i try to get pulumi to manage something that already exists

damp-book-35965

03/26/2019, 12:06 AM

I'm trying to write a iam policy which depends on an iam role But I'm unable to reference it in the policy doc like:

Copy code

const iamRole = new aws.iam.Role(clusterName + "-server", {
    assumeRolePolicy: JSON.stringify({
        Version: "2012-10-17",
        Statement: [{
            Action: "sts:AssumeRole",
            Principal: {
                "AWS": cluster.instanceRole <- this is type=pulumi.Output<aws.iam.Role>;
            },
            Effect: "Allow"
        }]
    })
});

damp-book-35965

03/26/2019, 12:06 AM

How do I make it a Output<string> ?

orange-policeman-59119

03/26/2019, 1:12 AM

@white-balloon-205 et al., is it on the roadmap to change the behavior of the GCP provider to not depend on the hidden value

gcp:project

? It'll be a blocker for being able to use multi-project stacks.

brainy-psychiatrist-41826

03/26/2019, 2:07 AM

this open issue looks like it might address my use case? https://github.com/pulumi/pulumi/issues/1662 so today it is currently not possible to manage a resource that wasn't first created by pulumi?

boundless-author-24618

03/26/2019, 9:45 AM

Hi, Does anyone have an example for using Fargate behind an ALB? Thanks

better-rainbow-14549

03/26/2019, 10:32 AM

Copy code

+  kubernetes:core:Namespace ingress creating Retry #0; creation failed: namespaces "ingress" already exists
 +  kubernetes:core:Namespace ingress creating error: Plan apply failed: namespaces "ingress" already exists
 +  kubernetes:core:Namespace ingress **creating failed** error: Plan apply failed: namespaces "ingress" already exists

worried-engineer-33884

03/26/2019, 3:47 PM

I filled out the contact form yesterday to inquire about enterprise pricing. How long does it usually take to hear back on that?

billowy-garage-68819

03/26/2019, 4:51 PM

on the typescript side, I want to run multiple files to cleanly manage separate concerns within one project, however, (I'm new to ts so this may be simple) unless the resources are applied in the index file it doesn't seem to be applying them even when added to the tsconfig.json file, is there something I'm missing?

orange-tailor-85423

03/26/2019, 5:29 PM

integration testing your Pulumi code - anybody have a good system / language / pattern working for them?

damp-book-35965

03/26/2019, 7:11 PM

I'm trying to use the rolename which is the cluster.instanceRole of an EKS cluster which is of type OutputInstance<Role>..is it very misleading that when i do:

Copy code

cluster.instanceRole.apply(role => role.arn)

This fails as empty or undefined in case of console.log(role.arn) It shows me all the aws.iam.Role properties fields but none of them exist other than the role itself which is actually a string. So I'm wondering If it's wrongly characterized and just should be a string ?

damp-book-35965

03/26/2019, 7:12 PM

Figured it out when I did :

Copy code

clusterInstanceRole.apply(role =>
    console.log(role)
);

damp-book-35965

03/26/2019, 7:38 PM

FYI: https://github.com/pulumi/pulumi-eks/issues/83

full-dress-10026

03/26/2019, 7:52 PM

I seem to be running into this failure a lot:

Copy code

error: Plan apply failed: [WARN] A duplicate Security Group rule was found on (sg-002c2846717345a56). This may be
    a side effect of a now-fixed Terraform issue causing two security groups with
    identical attributes but different source_security_group_ids to overwrite each
    other in the state. See <https://github.com/hashicorp/terraform/pull/2376> for more
    information and instructions for recovery. Error message: the specified rule "peer: 0.0.0.0/0, TCP, from port: 8880, to port: 8880, ALLOW" already exists

It has something to do with

awsx.elasticloadbalancingv2.ApplicationLoadBalancer

, passing in

securityGroups

, and changing said security groups.