pulumi-community #general

worried-engineer-33884

06/27/2019, 7:20 PM

if i am instantiating a second aws provider, e.g.:

Copy code

const otherProvider = new aws.Provider("otherProvider")

do i have to do anything special to run mocha unit tests on things that use that provider?

worried-engineer-33884

06/27/2019, 10:10 PM

Is there a way to assert that an output is a secret output? It seems that the property and helper function for this are both marked

@internal

. Is there another way?

dazzling-scientist-80826

06/27/2019, 11:02 PM

i’m trying to do

aws.cloudwatch.LogGroup.get(name, logGroupName)

where

logGroupName

is a computed value like

/aws/lambda/${lambda.name}

- this works, but if there were no log messages written by the lambda yet (ie on an initial deploy) subsequent resource creations that reference the log group fail with

The specified log group does not exist

- any recommendations on how to solve this chicken and egg problem?

glamorous-thailand-23651

06/27/2019, 11:18 PM

linking this here for visibility 🙂 https://pulumi-community.slack.com/archives/CJ909TL6P/p1561672755058900

crooked-jordan-34725

06/28/2019, 3:42 AM

Hey y’all! First of all my world has been officially rocked. Pulumi is awesome. The ability to use typescript, the flexibility of the SDK and the magic functions have allowed me to rewrite a Serverless stack really fast.

crooked-jordan-34725

06/28/2019, 3:49 AM

I’m a little stuck with something regarding magic functions though. I’ve tried leaving compilation to Pulumi, and also doing it myself, and I always get this when I run any of the compiled lambdas: module initialization error: TypeError at Symbol.[Symbol.toPrimitive] (anonymous) at Object.anonymous (/var/task/__index.js720) at Module._compile (module.js65230)

crooked-jordan-34725

06/28/2019, 3:49 AM

Did anyone run into this problem?

modern-bear-85657

06/28/2019, 1:52 PM

Regarding reusability: I’m wanting to build a reusable library of sensible defaults for the various teams in my org, such as account number, default tags, etc. If I define these in stacks, will they be available/reusable when imported into another project?

busy-umbrella-36067

06/28/2019, 3:27 PM

I'm getting a sort-of race condition when using an IAM role to create an AWS provider. Pulumi tries to assume the role immidiately before IAM has a chance to register the permissions. An apply results in

error: The role "arn:aws:iam::xxx:role/xxx" cannot be assumed.

Running

pulumi update

a second time, after the role has been fully created successfully creates a useable provider.

Copy code

import * as aws from "@pulumi/aws";

const role = new aws.iam.Role("testrole", {
  assumeRolePolicy: aws.getCallerIdentity().then(id => {
    return {
      Version: "2012-10-17",
      Statement: [
        {
          Effect: "Allow",
          Principal: {
            AWS: `arn:aws:iam::${id.accountId}:root`
          },
          Action: "sts:AssumeRole"
        }
      ]
    };
  })
});

const rolePolicy = new aws.iam.Policy("test", {
  description: "Full S3 Admin",
  policy: {
    Version: "2012-10-17",
    Statement: [
      {
        Effect: "Allow",
        Action: "s3:*",
        Resource: "*"
      }
    ]
  }
});

const rolePolicyAttachment = new aws.iam.RolePolicyAttachment("test", {
  policyArn: rolePolicy.arn.apply(arn => arn),
  role: role
});

const roleProvider = new aws.Provider(
  "test",
  {
    assumeRole: {
      roleArn: role.arn
    }
  },
  { dependsOn: rolePolicyAttachment }
);

// try to make an s3 bucket using role provider
// this will fail once and then work
const s3Bucket = new aws.s3.Bucket(
  "test",
  {},
  { provider: roleProvider, dependsOn: roleProvider }
);

millions-judge-24978

06/28/2019, 4:23 PM

Has anyone attempted to use https://github.com/346/pulumi-spotinst? I get a

when trying to install the resource plugin.

swift-painter-31084

06/28/2019, 6:08 PM

I was try to run static site example this morning and ran into this error when running

pulumi up

https://github.com/pulumi/examples/tree/master/aws-ts-static-website

-.xml

millions-judge-24978

06/28/2019, 6:27 PM

Any ETA when https://github.com/pulumi/pulumi-awsx/pull/332 might see a release? Or pointers on how to depend on `master`'s latest commit? The templating makes it difficult.

boundless-monkey-50243

06/28/2019, 8:30 PM

I've got an

Array<pulumi.Output<T>>

. Has anyone got a sneaky way (probably a reducer or something?) to turn that into a

pulumi.Output<Array<T>>

millions-judge-24978

06/28/2019, 9:25 PM

I am having the common issue of duplicate resource URN's from helm charts. I'm deploying the same chart (

stable/metrics-server

) into two clusters in a single stack. I tried using the new

resourcePrefix

option from https://github.com/pulumi/pulumi-kubernetes/pull/599. However, I believe this only affects the

releaseName

, indirectly affecting the URN. Some helm chart resources, i.e.

APIService

, do not use the

releaseName

as they must have very specific `metadata.name`s, like

<http://v1beta1.metrics.k8s.io|v1beta1.metrics.k8s.io>

. As a result, this ends up with a collision still occurring.

damp-pillow-67781

06/28/2019, 11:07 PM

Question: I'm trying to deploy a

Servicemonitor

to my EKS cluster into a specific namespace, but however I tried, it still installs into default namespace. Any idea on how to deploy not in default namespace? Here is the code I have:

Copy code

export const postgresServiceMonitorCRD = new k8s.apiextensions.CustomResource("postgres-servicemonitor", {
    apiVersion: "<http://monitoring.coreos.com/v1|monitoring.coreos.com/v1>",
    kind: "ServiceMonitor",
    namespace: namespaceName,
    transformations: [addMonitoringNamespace],
    metadata: {
        labels: {
            app: "prometheus-postgres-exporter-servicemonitor",
            release: "prometheus-operator",
        },
        name: "postgres-servicemonitor",
    },
    spec: {
        namespaceSelector: {
            any: true,
        },
        endpoints: [{
            port: "http",
            interval: "30s",
        },],
        selector: {
            matchLabels: {
                app: "prometheus-postgres-exporter",
                release: "postgres-exporter",
            },
        },
    },
});

incalculable-diamond-5088

06/29/2019, 12:35 PM

Can I add an annotation to an existing namespace (kube-system) with pulumi? For example I want to add an annotation for

kiam

to allow assuming roles for pods in this namespace

thankful-lamp-48382

06/29/2019, 1:30 PM

Copy code

const dnsRecord = new cloudflare.Record('my-dns-record', {
     name: 'my-dns-record-game-server',
     domain: zone,
     value: droplet.ipv4Address,
     type: 'A',
     ttl: 300
}, {dependsOn: droplet})

thankful-lamp-48382

06/29/2019, 1:30 PM

Gives me this:

Copy code

error: Plan apply failed: Error finding zone "<http://whack.io|whack.io>": ListZonesContext command failed: error from makeRequest: HTTP status 400: content "{\"success\":false,\"errors\":[{\"code\":6003,\"message\":\"Invalid request headers\",\"error_chain\":[{\"code\":6103,\"message\":\"Invalid format for X-Auth-Key header\"}]}],\"messages\":[],\"result\":null}"

thankful-lamp-48382

06/29/2019, 1:31 PM

😞 Anyone has maybe some suggestion if I do something wrong? Or maybe there is some bug within pulumi/cloudflare package?

thankful-lamp-48382

06/29/2019, 1:32 PM

I tried as zone both name (it is 'whack.io' here) or zone ID from cloudflare

thankful-lamp-48382

06/29/2019, 1:45 PM

Ok, it was my fault! I used 'Origin CA Key' instead of 'Global API Key' from CloudFlare site 🤦‍♂️

boundless-monkey-50243

07/01/2019, 3:48 AM

Is there a way to force the S3 backend to set

s3:x-amz-acl

bucket-owner-full-control

crooked-jordan-34725

07/01/2019, 9:09 AM

how can I create policies and policy attachments dynamically? I’m trying to use

.apply

on resources to create a policy that will need their ARNs, but apparently that’s not allowed

billions-lock-80282

07/01/2019, 12:56 PM

Hello, I can't see an autorepair property for the default node pool in a GKE cluster. Its only defined as part of nodepool property under management which does not include the default node pool.

quaint-queen-45003

07/01/2019, 5:44 PM

hello - i'm having some troubles with

getObject

and JSON encoded strings. The error is

Property 'getObject' does not exist on type 'string'.ts(2339)

. Any suggestions on this? I'll leave my code sample in a thread

crooked-jordan-34725

07/02/2019, 6:31 AM

I’m trying to create a new pulumi provider (wrapping a terraform one), and I followed all the instructions but the

cmd/pulumi-tfgen-xyz

command blows up with:

Copy code

/Users/txus/go/pkg/mod/github.com/pulumi/pulumi-terraform@v0.18.4-0.20190622203420-512f93e9d8c3/pkg/tfbridge/provider.go:189:5: cannot use (*Provider)(nil) (type *Provider) as type pulumirpc.ResourceProviderServer in assignment:
	*Provider does not implement pulumirpc.ResourceProviderServer (wrong type for Configure method)
		have Configure("context".Context, *pulumirpc.ConfigureRequest) (*empty.Empty, error)
		want Configure("context".Context, *pulumirpc.ConfigureRequest) (*pulumirpc.ConfigureResponse, error)
/Users/txus/go/pkg/mod/github.com/pulumi/pulumi-terraform@v0.18.4-0.20190622203420-512f93e9d8c3/pkg/tfbridge/serve.go:30:21: cannot use NewProvider("context".TODO(), host, module, version, info.P, info) (type *Provider) as type pulumirpc.ResourceProviderServer in return argument:
	*Provider does not implement pulumirpc.ResourceProviderServer (wrong type for Configure method)
		have Configure("context".Context, *pulumirpc.ConfigureRequest) (*empty.Empty, error)
		want Configure("context".Context, *pulumirpc.ConfigureRequest) (*pulumirpc.ConfigureResponse, error)

crooked-jordan-34725

07/02/2019, 6:31 AM

I have no idea about Go, maybe there is an obvious clue that I’m missing?

crooked-jordan-34725

07/02/2019, 6:46 AM

It seems to stem from this line: https://github.com/pulumi/pulumi-terraform/blob/master/pkg/tfbridge/provider.go#L189 does this help at all?

stocky-spoon-28903

07/02/2019, 7:19 AM

Hi @crooked-jordan-34725! Seems our boilerplate needs updating (or potentially the dependencies in Pulumi-terraform)

stocky-spoon-28903

07/02/2019, 7:19 AM

I’ll try to take a look today EU time