that blows my mind

To be fair this is also a limitation on how Terraform implemented the resource, which is kind of strange.

I have successfully deployed a lambda via pulumi. I want to provide secrets for the lambda by making a runtime lookup of the parameter towards Aws SSM (Parameter Store). This fails with access denied. What I want to do is to provide an IAM policy for the role associated to the lambda. However, I don't see any way in the docs or via the typescripts definiitons on how to provide IAM polcicies for the lambda. Does anyone know how one would go about this?

Can you try @tall-librarian-49374’s version and see if it works?

Or rather, see if it does what you expect

will do. I guess this approach would work regardless of whether it was a pulumi/terraform bug or a GCP limitation

I don’t know exactly what the underlying API is here

I'm sifting through gcp docs to make sense of this

either their CLI/WebUI is doing some hidden magic, updating existing bindings, and displaying them as separate bindings (in which case maybe pulumi should too?), or this doesn't make any sense at all (might just be me though).

Hello I tried to create an Azure VM from an image that have a data disk

without diskSizeGb it is not working, it complains that "Value '0' must be between '1' and '32767'"

same for diskSizeGb=null

I'm supposing it is an pulumi issue and not a terraform one

@witty-alarm-17249 Is this in a

azure.compute.VirtualMachine

resource?

correct

@stocky-spoon-28903 @tall-librarian-49374 you're right, I have confirmed the behavior you described. The gcloud cli and webui allows for adding/removing single bindings regardless of whether an existing policy exists. Do you think it would make sense for pulumi to provide the same convenience? If so, I'll create an issue for it.

@powerful-london-34081 yes i think that would not be a bad plan

Please open an issue for that - in the meantime are you unblocked though?

Can

PULUMI_TEST_MODE

work with a local stack ?

I am trying to access a stack output of a different stack, in this case a bucketName, like so:

const kafkaBucket = new aws.s3.Bucket("stream-demo-kafka-bucket");
export const bucketName = kafkaBucket.bucket;
....
#newProject
const infraStack = new pulumi.StackReference("fqdn-stackname");
const bucketName = infraStack.getOutput("bucketName");

In this case, bucketName is of type

Output<any>

and I want to turn it into a string to use in a K8s ReplicaSet deployment. I’ve tried:

const bucketName = infraStack.getOutput("bucketName").apply(bucket => bucket);

but that is still type

Output<any>

The closest I’ve gotten is setting the parameter type of my ReplicaSet function to type

Output<any>

then when using it in my config, I do

... }, {
                                name: "S3_BUCKET_NAME",
                                value: pulumi.interpolate `${bucketName}`
                            }...

Pulumi actually renders this as an update (I previously hardcoded the string) shown as:

~ value: "steam-demo-kafka-bucket-339079d" => "stream-demo-kafka-bucket-339079d"

I’m assuming that is really the same value? Is there a better way of getting the output?

const region = pulumi.output(aws.getRegion())

const policy = {
	Version: '2012-10-17',
	Statement: [{
		Action: [
			'logs:*'
		],
		Effect: 'Allow',
		Resource: [
			pulumi.interpolate`arn:aws:logs:${region.name}:*:*`
		]
	}]
}

export const cloudwatchLogsPolicy = new aws.iam.Policy('cloudwatchLogsPolicy', {
	policy: JSON.stringify(policy)
})

@handsome-actor-1155 in the same vein, albeit with intra-stack dependencies, I am finding out using an output with interpolate (or apply) doesn’t work with JSON.stringify. Probably different from your problem, but I just came across this issue and saw your post. From my reading of the docs, the way you’re defining it appears to be the cleanest way. Seems to be some gotchas with pulumi.interpolate that I’m not seeing?

Hm, are Pulumi stacks something that seperates bags of config variables?

hello, im trying to add

autoScalingGroupTags

to my nodegroups where the key of a tag has a string substitution but i'm hitting a yaml formatting error. Code sample in thread

With Javascript, if I have 3 files importing a vpc resource from a vpc.js file - will it create 3 different VPCs? Or will it share one VPC? I'd like for it to share one VPC but able to abstract the VPC out into a file that other files can share.

@here Hi, I am new to pulumi can someone kindly let me know how to add a list to config? is it something like

pulumi config set addressSpaces ['xx.xx.xx.xx/ab','yy.yy.yy.yy/cd']

?

Thanks in advance 🙂

any tips on how to increase the timeout around

awsx.ecs.FargateService

for taskdefinition changes (it's a create+wait+delete type process), these always seem to hit the 10m timeout for me. (node/ts)

Hi Guys, I need to deploy a docker image that exposes multiple ports with aws Fargate, how can I manage it?