https://pulumi.com logo
Docs
Join the conversationJoin Slack
Channels
announcements
automation-api
aws
azure
blog-posts
built-with-pulumi
cloudengineering
cloudengineering-support
content-share
contribex
contribute
docs
dotnet
finops
general
getting-started
gitlab
golang
google-cloud
hackathon-03-19-2020
hacktoberfest
install
java
jobs
kubernetes
learn-pulumi-events
linen
localstack
multi-language-hackathon
office-hours
oracle-cloud-infrastructure
plugin-framework
pulumi-cdk
pulumi-crosscode
pulumi-deployments
pulumi-kubernetes-operator
pulumi-service
pulumiverse
python
registry
status
testingtesting123
testingtesting321
typescript
welcome
workshops
yaml
Powered by Linen
general
  • m

    microscopic-florist-22719

    07/18/2019, 6:57 PM
    Ultimately, whether or not there is a difference between the actual and desired state is up to the resource provider. In the case of this particular resource, my guess is that the underlying AWS TF provider treats the properties that are set but not deemed required as potential output properties, and therefore ignores any difference if the property is unset in the resource's inputs.
  • m

    microscopic-florist-22719

    07/18/2019, 6:58 PM
    I agree that this behavior is a little weird. If you set the options that aren't deemed necessary, does your import still succeed?
  • c

    clever-nest-47198

    07/18/2019, 8:08 PM
    Yes, it does still succeed, but I just suddenly have floating configs that aren't tracked in my code anywhere which is unfortunate.
  • l

    limited-rainbow-51650

    07/18/2019, 8:31 PM
    I was looking at the repo layout of
    pulumi-awsx
    and
    pulumi-eks
    to see what could be reused for my own pulumi modules/packages. I found out the build setup is based on Makefiles. With Bazel Build (https://bazel.build/) these days, it’s fairly easy to create re-usable build rules which means that replicating a build setup shouldn’t have Makefiles duplicated. Any specific reason for this old-fashioned (😄) build tooling?
    b
    • 2
    • 3
  • f

    future-traffic-93788

    07/18/2019, 8:58 PM
    anyone have experience with pulumi github actions?
    s
    c
    • 3
    • 25
  • c

    cool-egg-852

    07/18/2019, 9:06 PM
    How do you access the resources in a helm chart? Trying to get the name of a resource.
    w
    • 2
    • 7
  • f

    fierce-dinner-20116

    07/18/2019, 10:16 PM
    Hi I recently hit this error message in pulumi after updating to pulumi 0.17.23 (and other provider packages):
    post-step event returned an error: failed to verify snapshot: resource urn:pulumi:ds-dog-k8s-dev::sg-deploy-k8s-helper::kubernetes:core/v1:Secret::langserver-auth refers to unknown provider urn:pulumi:ds-dog-k8s-dev::sg-deploy-k8s-helper::pulumi:providers:kubernetes::dogfood-full-k8s::3a90eb1d-d8d5-4272-ae29-300c34caaab9
    w
    • 2
    • 6
  • c

    cool-egg-852

    07/18/2019, 11:42 PM
    Is there any way to get pulumi to auto update helm repos?
    w
    • 2
    • 8
  • f

    few-processor-86645

    07/19/2019, 8:59 AM
    Any azuread expert can help on this one: https://stackoverflow.com/questions/57008724/authentication-error-using-new-pulumi-azuread-module
  • l

    limited-rainbow-51650

    07/19/2019, 10:21 AM
    I converted this TF snippet
    resource "aws_iam_user_login_profile" "ringo" {
      user    = aws_iam_user.ringo.name
      pgp_key = "keybase:ringods"
    }
    to Pulumi TS code
    const iam_user_login_profile_ringo = new aws.iam.UserLoginProfile("ringo",
        {
            user: iam_user_ringo.name,
            pgpKey: "keybase:ringods"
        },
        {
            import: "ringo"
        })
    But on
    preview
    , I get this warning:
    ...
    =   └─ aws:iam:UserLoginProfile  ringo                       import     [diff: +pgpKey]; 1 warning
    
    Diagnostics:
      aws:iam:UserLoginProfile (ringo):
        warning: inputs to import do not match the existing resource; importing this resource will fail
    The PGP key indicator is the same string. How come a difference is detected?
    a
    m
    • 3
    • 9
  • c

    crooked-jordan-34725

    07/19/2019, 11:30 AM
    hey, I was wondering, using Google Compute Platform with Pulumi
  • c

    crooked-jordan-34725

    07/19/2019, 11:30 AM
    if it’s possible to set up a Serverless VPC Access so that cloud functions can talk to memorystore or other resources?
    s
    • 2
    • 1
  • c

    crooked-jordan-34725

    07/19/2019, 11:30 AM
    I can’t seem to find any resource like that
  • l

    limited-rainbow-51650

    07/19/2019, 2:07 PM
    From a resource, I have an
    Output<string>
    . The value in it is the string version of a number. How can I get the number value as an input for another resource?
    b
    m
    b
    • 4
    • 9
  • f

    fresh-flag-12765

    07/19/2019, 5:22 PM
    Hey. Finding the pulumi-eks stuff to be an absolute nightmare to handle, compared to how nicely everything else works. Just trying to get the initial cluster set up, and made some silly mistakes (set subnets to public, not private). But trying to make changes to the cluster config is crazy. It tries to replace the cluster, but then gets stuck since it cant delete the resources for the now deleted cluster.
  • f

    fresh-flag-12765

    07/19/2019, 5:23 PM
    Deleting everything now fails with
    dial tcp: lookup <http://xxx.gr7.us-east-1.eks.amazonaws.com|xxx.gr7.us-east-1.eks.amazonaws.com>: no such host
    w
    • 2
    • 9
  • f

    fresh-flag-12765

    07/19/2019, 5:36 PM
    Related to previous issue, it might make sense to check for attempting to use public subnets in the EKS config. Since I believe it will always be a mistake, since then nodes can't actually get associated to the cluster.
    w
    • 2
    • 2
  • m

    millions-judge-24978

    07/19/2019, 6:47 PM
    Has anyone ever seen a persistent ‘update’ for k8s resources that will not go away even if applied? The
    diff
    details shows nothing being done.
    m
    • 2
    • 2
  • c

    clever-nest-47198

    07/19/2019, 7:21 PM
    Hey, is there anyway to self host the Pulumi Github app? Or recreate the same functionality of printing diffs on PR's using some script
    c
    b
    • 3
    • 3
  • m

    modern-bear-85657

    07/19/2019, 8:09 PM
    Argument of type '{ name: Output<string>; }' is not assignable to parameter of type 'GetSecurityGroupArgs'.
  • e

    early-musician-41645

    07/19/2019, 11:07 PM
    Is there any example for creating a new AWS secret in secretsmanager?
  • e

    early-musician-41645

    07/19/2019, 11:07 PM
    Couldn't find any in github, and the interface docs for
    SecretVersion
    aren't totally clear how to use it
    w
    • 2
    • 7
  • c

    cuddly-eye-68174

    07/20/2019, 10:31 AM
    Guys, May I have a question about AWS route table and route resources? - AWS/Typescript
    • 1
    • 16
  • e

    early-intern-90238

    07/21/2019, 4:04 PM
    Hello, switched my GCP project over to a different project id. I redid the gcp: settings in the yaml and redid the gcp login stuff but when I run any pulumi command at all I get failed to connect no route to host for the api url 192.168.99.110:8443
  • e

    early-intern-90238

    07/21/2019, 4:04 PM
    anyone know what that means?
  • e

    early-intern-90238

    07/21/2019, 4:05 PM
    its almost like its trying to connect to minikube for some reason
    w
    • 2
    • 24
  • b

    bored-river-53178

    07/22/2019, 1:01 AM
    how can I get an Output value from StackReference? When I try to use get() on it, there is an error 'Error: Cannot call '.get' during update or preview.', but it doesn't make sense to me, why it's not possible to do that?
    c
    h
    • 3
    • 5
  • b

    best-xylophone-83824

    07/22/2019, 11:17 AM
    hi, I am trying to setup organisation's trial account it having hard time doing so 🙂 for starters there seem to be no such thing as creating org and adding users to it, it must be linked to things like github org or SAML SSO, why is so?
  • b

    best-xylophone-83824

    07/22/2019, 11:31 AM
    BTW, https://www.pulumi.com/docs/reference/cd-gitlab-ci/#merge-request-builds this is not true anymore
    c
    • 2
    • 2
  • b

    best-xylophone-83824

    07/22/2019, 11:38 AM
    am I right that access tokens have all capabilities of a user? so there is currently no way to limit token to certain stacks or restrict whether it can create new stack or not for instance?
    m
    • 2
    • 2
Powered by Linen
Title
b

best-xylophone-83824

07/22/2019, 11:38 AM
am I right that access tokens have all capabilities of a user? so there is currently no way to limit token to certain stacks or restrict whether it can create new stack or not for instance?
m

miniature-musician-31262

07/22/2019, 3:29 PM
If your organization is on a Team or Enterprise plan (or free trial), you’ll see a Teams tab in the Pulumi console that lets you ascribe stack-specific permissions to a team, yes.
But you’re correct in that an access token represents a user; there is not currently a concept of a token having roles or permissions separate from those of the user they belong to.
View count: 1