pulumi-community #general

gentle-diamond-70147

05/24/2019, 1:06 PM

We have a Pulumi Azure Pipelines Task in the Azure marketplace, FYI - https://marketplace.visualstudio.com/items?itemName=pulumi.build-and-release-task.

❤️ 1

bitter-island-28909

05/24/2019, 1:59 PM

Recently started experiencing some unexpected behavior where, after running

pulumi refresh

, Pulumi now wants to spuriously update or replace a bunch of resources that I can assert haven’t actually changed. Some examples of diffs that look wrong to me (on various resources):

Copy code

~ records: [
    ~ [0]: "10.3.0.222" => output<string>
]

~ memory                 : "512" => 512

- volumes                : []

 ~ applications               : [
    ~ [0]: "Spark" => "Hadoop"
    ~ [2]: "Hadoop" => "Presto"
    ~ [3]: "Presto" => "Spark"
]

This occurs immediately after a sequence of

pulumi up

pulumi refresh

pulumi up

, without any alteration of my scripts or deliberate modification of deployed resources.

orange-policeman-59119

05/24/2019, 5:41 PM

I'm having an issue where a K8s deployment that is spun up via Helm chart consistently behaves in two ways: 1. A second replicaset is created when a deployment is updated (makes sense), that spins up a new replicaset, that starts up, and the first doesn't go away (???) 2. On refresh it then thinks the deployment is in an unhealthy state and subsequent deployments fail with:

Copy code

Diagnostics:
  kubernetes:extensions:Deployment ([redacted]):
    warning: Refreshed resource is in an unhealthy state:
    * Resource '[redacted]' was created but failed to initialize
    * Minimum number of Pods to consider the application live was not attained

Here's what the resources look like:

Copy code

$ kubectl -n ... get deployment
NAME         READY     UP-TO-DATE   AVAILABLE   AGE
[deployment] 3/3       3            3           11h
$ kubectl -n ... get rs
NAME    DESIRED   CURRENT   READY     AGE
[old]   0         0         0         11h
[new]   3         3         3         6m4s

busy-umbrella-36067

05/24/2019, 5:42 PM

Is there a known bug with
values
using
kubernetes.helm.v2.Chart
? I’m having issues with values not being applied to the templates, specifically the
targetPorts
on an Ingress Chart Chart had the wrong values documented, my bad.

Copy code

// create ingress controller
    const ingressController = new k8s.helm.v2.Chart(
      name,
      {
        fetchOpts: {
          repo: "<https://helm.nginx.com/stable>"
        },
        chart: "nginx-ingress",
        version: "0.3.0",
        values: {
          controller: {
            service: {
              targetPorts: {
                https: "http",
                http: "http"
              },
              annotations: {
                "<http://service.beta.kubernetes.io/aws-load-balancer-ssl-cert|service.beta.kubernetes.io/aws-load-balancer-ssl-cert>": certificate.arn,
                "<http://service.beta.kubernetes.io/aws-load-balancer-backend-protocol|service.beta.kubernetes.io/aws-load-balancer-backend-protocol>": "http",
                "<http://service.beta.kubernetes.io/aws-load-balancer-ssl-ports|service.beta.kubernetes.io/aws-load-balancer-ssl-ports>": "https",
                "<http://service.beta.kubernetes.io/aws-load-balancer-connection-idle-timeout|service.beta.kubernetes.io/aws-load-balancer-connection-idle-timeout>": "3600"
              }
            }
          }
        }
      }, {});
  }

orange-policeman-59119

05/24/2019, 6:34 PM

@creamy-potato-29402 was there a regression in the Kubernetes Helm provider not rendering

Input<>

values? I'm seeing this since updating

@pulumi/kubernetes

to 0.23:

Copy code

Error: render error in "[redacted]/secret.yaml": template: [redacted]/secret.yaml:15:49: executing "[redacted]/secret.yaml" at <b64enc>: wrong type for value; expected string; got map[string]interface {}

Only change was updating the Pulumi kubernetes provider.

orange-policeman-59119

05/24/2019, 6:35 PM

Previously I was passing in

values: { foo: { bar: { secretValue: $someInput<string> }}}

average-dream-51210

05/25/2019, 11:50 PM

Is there an example anywhere of aws VPC with public/private subnets spanning multiple AZs in Pulumi?

little-dinner-9110

05/26/2019, 2:18 AM

Hello. am wondering what "individual use" means in "Pulumi Community Edition is free forever for unlimited individual use."

little-dinner-9110

05/26/2019, 2:20 AM

I guess it means not in the context of a business or company, even if not-for-profit institution? are there details somewhere I refer to?

proud-artist-4864

05/27/2019, 7:35 AM

The software source contains licensing information showing that it is licensed under the Apache License Version 2.0.

square-plumber-80712

05/27/2019, 8:41 AM

Hello! Quick question, is there any GCP-equivalent of this tutorial (using @pulumi/cloud) https://pulumi.io/quickstart/cloudfx/tutorial-service.html? All the best & thank you for your great work!

jolly-egg-4894

05/27/2019, 9:58 AM

Well that example uses either AWS Fargate or what I’m guessing is Azure Container Service For GCP are you using GKE? You’d probably want to read here: https://pulumi.io/reference/pkg/nodejs/@pulumi/gcp/container/

👍 1

colossal-room-15708

05/27/2019, 11:20 AM

Just bumping this one up: https://pulumi-community.slack.com/archives/C84L4E3N1/p1558037668491900

faint-motherboard-95438

05/28/2019, 11:12 AM

what did you guys change about providers ? I can’t update my platform anymore and I have no idea what I have to do to fix it. I tried to downgrade packages but I’m unable to get back to a working state…

Copy code

index.ts(109,5): error TS2322: Type '{ gcp: Provider; kubernetes: Provider; }' is not assignable to type 'Record<string, ProviderResource>'.
    index.ts(134,5): error TS2322: Type '{ gcp: Provider; kubernetes: Provider; }' is not assignable to type 'Record<string, ProviderResource>'.
    index.ts(170,5): error TS2322: Type '{ gcp: Provider; kubernetes: Provider; }' is not assignable to type 'Record<string, ProviderResource>'.
    index.ts(188,5): error TS2322: Type '{ gcp: Provider; kubernetes: Provider; }' is not assignable to type 'Record<string, ProviderResource>'.

I’m creating providers for gcp and kubernetes with

new gcp.Provider()

and

new k8s.Provider()

from

@pulumi/gcp

and

@pulumi/kubernetes

respectively and I’m passing them down in all my components

opts

argument. Everything was perfectly working before…

gray-hair-49169

05/28/2019, 12:13 PM

I would like to deploy a simply postgreSQL in Azure, but the login failed. Anybody got an idea?

Copy code

const testPostgresServer = new azure.postgresql.Server("testserver", {
    administratorLogin: "USER",
    administratorLoginPassword: "PASS",
    location: config.location,
    name: `${config.prefix}-postgresql-01`,
    resourceGroupName: config.resourceGroup.name,
    sku: {
        capacity: 1,
        family: "Gen5",
        name: "B_Gen5_1",
        tier: "Basic",
    },
    sslEnforcement: "Enabled",
    storageProfile: {
        backupRetentionDays: 7,
        geoRedundantBackup: "Disabled",
        storageMb: 5120,
    },
    version: "9.5",
});

const testConfiguration = new azure.postgresql.Configuration("testconf", {
    name: "backslash_quote",
    resourceGroupName: config.resourceGroup.name,
    serverName: testPostgresServer.name,
    value: "on",
});

const testDatabase = new azure.postgresql.Database("testdb", {
    charset: "UTF8",
    collation: "English_United States.1252",
    name: "exampledb",
    resourceGroupName: config.resourceGroup.name,
    serverName: testPostgresServer.name,
});

Thanks 🙂

stocky-spoon-28903

05/28/2019, 12:18 PM

HBA is host based authentication iirc

stocky-spoon-28903

05/28/2019, 12:21 PM

IIRC (it’s been a while since I looked at Postgres on azure!) you need a security group to allow your client access via the firewall

✔️ 1

better-rainbow-14549

05/28/2019, 5:21 PM

how do we migrate AKS from 0.18.4 to 0.18.5 please, the API has changed quite a lot

better-rainbow-14549

05/28/2019, 5:21 PM

will agentPoolProfile: {...} --> agentPoolProfiles: [{...}] work

stocky-spoon-28903

05/28/2019, 5:23 PM

I believe that is the case, yes @sparse-insurance-40223

better-rainbow-14549

05/28/2019, 5:23 PM

cheers - just wanted to check cos this is 2 layers deep in an NPM and it will be a pain if it doesnt work 😄

better-rainbow-14549

05/28/2019, 5:23 PM

can't even get a preview without publishing it twice :s

stocky-spoon-28903

05/28/2019, 5:24 PM

Try it by editing in

node_modules

directly to get a preview?

stocky-spoon-28903

05/28/2019, 5:24 PM

yarn link

stocky-spoon-28903

05/28/2019, 5:24 PM

(or

npm link

etc)

better-rainbow-14549

05/28/2019, 5:24 PM

i've never got npm link to work with pulumi

better-rainbow-14549

05/28/2019, 5:24 PM

you can

tsc

it fine and it will use the link, but when pulumi rebuilds the typescript it ignores the links

better-rainbow-14549

05/28/2019, 5:24 PM

and it looks straight at the 'real' module instead

better-rainbow-14549

05/28/2019, 5:25 PM

it is something i'd love to get working, it would be a great help

stocky-spoon-28903

05/28/2019, 5:25 PM

Interesting - we use

yarn link

pretty heavily in our development (or at least, I do!)