pulumi-community #general

general

white-balloon-205

03/24/2019, 10:09 PM

Awesome! Sounds great.

better-rainbow-14549

03/25/2019, 2:33 PM

anybody got any idea about this please? I manually created a service principal for pulumi to run as, it's got all the permissions i can find but i get this when i try to create a new SP with pulumi

SP creating error: Plan apply failed: graphrbac.ApplicationsClient#Create: Failure responding to request: StatusCode=403 -- Original Error: autorest/azure: Service returned an error. Status=403 Code="Unknown" Message="Unknown service error" Details=[{"odata.error":{"code":"Authorization_RequestDenied","date":"2019-03-25T14:22:29","message":{"lang":"en","value":"Insufficient privileges to complete the operation."},"requestId":"6df1d82f-17bb-48da-94d7-8dd03e6a39fa"}}]

better-rainbow-14549

03/25/2019, 2:33 PM

https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-configure-app-access-web-apis#add-permissions-to-access-web-apis

better-rainbow-14549

03/25/2019, 2:33 PM

i followed that

sticky-piano-10761

03/25/2019, 3:11 PM

Within a stack, can I organize pieces into files or folders underneath?

billowy-garage-68819

03/25/2019, 3:22 PM

I'm probably missing something simple, but I'm running a GCP project and I need to get the value of gcp:project, is there a simple way of getting it without redefining it?

full-dress-10026

03/25/2019, 4:31 PM

How do you guys configure healthchecks for a backend service that is not a HTTP service? (i.e. a SQS worker) Do you add a lightweight HTTP server to your worker service? If so, does that require deploying a load balancer that is essentially a NOP? Or is there some other AWS mechanism for liveliness of a backend service?

fierce-dinner-20116

03/25/2019, 4:58 PM

Hello, for https://github.com/pulumi/pulumi-awsx/issues/187 is there any more information that I can provide? (Maybe any relevant info about my AWS account? I’d be happy to PM that info over if it is helpful).

fresh-flag-12765

03/25/2019, 6:12 PM

Hey, is there a shorthand to "use existing value for this stack, otherwise set to ..."? For example, I want to use the latest AMI for an EC2 instance, unless I am referring to a server that already exists, in which case I want to leave it alone so it doesnt redeploy?

better-rainbow-14549

03/25/2019, 6:25 PM

Moderate        Denial of Service                                             
                                                                                
  Package         js-yaml                                                       
                                                                                
  Dependency of   @pulumi/kubernetes

better-rainbow-14549

03/25/2019, 6:25 PM

btw

gray-city-50684

03/25/2019, 6:32 PM

I’m trying to use the Cloudflare provider, and would like to configure the provider instance myself and passing it to the resources with the opts.provider field. However just having the following code const cfProvider = new cloudflare.Provider(“CF-Provider”, { email: “no@no.to”, token: “abrakadabra” } ); causes the following error when doing “pulumi up” (there are no Cloudflare resources in my code yet): error: Missing required configuration variable ‘cloudflare:email’ please set a value using the command

pulumi config set cloudflare:email <value>

error: an unhandled error occurred: Program exited with non-zero exit code: 1

gray-city-50684

03/25/2019, 6:33 PM

Any ideas what do I do wrong / how to fix this?

better-rainbow-14549

03/25/2019, 6:37 PM

I'm writing a bunch of code that will go in a package that can be imported but also needs to be used there and then and i'm having to jump through a lot of hoops with parameters like

dnsZone: azure.dns.Zone | (azure.dns.GetZoneResult & azure.dns.GetZoneArgs) | { resourceGroupName: pulumi.Input<string>, name: pulumi.Input<string>, id: pulumi.Input<string> }

important-leather-28796

03/25/2019, 6:41 PM

Confused about gcp beta location based clusters. I see nothing in the Cluster/NodePool args with

locations

matching the api https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1beta1/projects.locations.clusters#Cluster

damp-book-35965

03/25/2019, 8:03 PM

Any movement on this guys ? https://github.com/pulumi/pulumi-eks/issues/82

billions-lock-73409

03/25/2019, 8:43 PM

I’ve written a lambda to start an ECS fargate task and I’m using the

aws.lambda.CallbackFunction

class, and am referencing some parameters needed for launching fargate tasks. However the serialization seems to be properly including the values but they aren’t accessible as written in the

ecs.runTask

call. Example function in thread.

important-leather-28796

03/25/2019, 9:25 PM

I’ve gate a failed deployment, I cannot

up

the fix, and it seems I cannot

destroy

either.

error: [409] Conflict: Another update is currently in progress

. I also tried refresh but of course it fails due to the original error. What is the proper way to force a destroy?

cool-kite-89497

03/25/2019, 9:53 PM

https://console.cloud.google.com/iam-admin/audit Can anyone point me in the right direction for controlling these settings with Pulumi?

early-musician-41645

03/25/2019, 10:55 PM

I'd like to +1 to this issue, it's now blocking a lot of our infrastructure creation with EKS: https://github.com/pulumi/pulumi-kubernetes/issues/456

brainy-psychiatrist-41826

03/25/2019, 11:56 PM

can anyone point me in the direction for docs on how to incorporate pulumi w/ a pre-existing cluster? i have a local cluster on my machine, and pulumi works great for deploying new resources, but i get an "already deployed" error if i try to get pulumi to manage something that already exists

damp-book-35965

03/26/2019, 12:06 AM

I'm trying to write a iam policy which depends on an iam role But I'm unable to reference it in the policy doc like:

const iamRole = new aws.iam.Role(clusterName + "-server", {
    assumeRolePolicy: JSON.stringify({
        Version: "2012-10-17",
        Statement: [{
            Action: "sts:AssumeRole",
            Principal: {
                "AWS": cluster.instanceRole <- this is type=pulumi.Output<aws.iam.Role>;
            },
            Effect: "Allow"
        }]
    })
});

damp-book-35965

03/26/2019, 12:06 AM

How do I make it a Output<string> ?

orange-policeman-59119

03/26/2019, 1:12 AM

@white-balloon-205 et al., is it on the roadmap to change the behavior of the GCP provider to not depend on the hidden value

gcp:project

? It'll be a blocker for being able to use multi-project stacks.

brainy-psychiatrist-41826

03/26/2019, 2:07 AM

this open issue looks like it might address my use case? https://github.com/pulumi/pulumi/issues/1662 so today it is currently not possible to manage a resource that wasn't first created by pulumi?

boundless-author-24618

03/26/2019, 9:45 AM

Hi, Does anyone have an example for using Fargate behind an ALB? Thanks

better-rainbow-14549

03/26/2019, 10:32 AM

+  kubernetes:core:Namespace ingress creating Retry #0; creation failed: namespaces "ingress" already exists
 +  kubernetes:core:Namespace ingress creating error: Plan apply failed: namespaces "ingress" already exists
 +  kubernetes:core:Namespace ingress **creating failed** error: Plan apply failed: namespaces "ingress" already exists

worried-engineer-33884

03/26/2019, 3:47 PM

I filled out the contact form yesterday to inquire about enterprise pricing. How long does it usually take to hear back on that?

billowy-garage-68819

03/26/2019, 4:51 PM

on the typescript side, I want to run multiple files to cleanly manage separate concerns within one project, however, (I'm new to ts so this may be simple) unless the resources are applied in the index file it doesn't seem to be applying them even when added to the tsconfig.json file, is there something I'm missing?

orange-tailor-85423

03/26/2019, 5:29 PM

integration testing your Pulumi code - anybody have a good system / language / pattern working for them?

Title

orange-tailor-85423

03/26/2019, 5:29 PM

integration testing your Pulumi code - anybody have a good system / language / pattern working for them?

white-balloon-205

03/26/2019, 6:17 PM

Currently, we internally use a Go-based integration testing framework - you can see an example of how we use this to test our

examples

repo nightly at https://github.com/pulumi/examples/blob/master/misc/test/examples_test.go. This is something that anyone can use for their own projects if desired - though it is not the ideal solution here. We have a big investment planned in the near future on enabling integration testing for Pulumi projects within the source language (JS/TS/Python) using native test framework. See https://github.com/pulumi/pulumi/issues/2287

View count: 1