pulumi-community #general

Channels

general

microscopic-florist-22719

07/18/2019, 6:57 PM

Ultimately, whether or not there is a difference between the actual and desired state is up to the resource provider. In the case of this particular resource, my guess is that the underlying AWS TF provider treats the properties that are set but not deemed required as potential output properties, and therefore ignores any difference if the property is unset in the resource's inputs.

microscopic-florist-22719

07/18/2019, 6:58 PM

I agree that this behavior is a little weird. If you set the options that aren't deemed necessary, does your import still succeed?

clever-nest-47198

07/18/2019, 8:08 PM

Yes, it does still succeed, but I just suddenly have floating configs that aren't tracked in my code anywhere which is unfortunate.

limited-rainbow-51650

07/18/2019, 8:31 PM

I was looking at the repo layout of

pulumi-awsx

and

pulumi-eks

to see what could be reused for my own pulumi modules/packages. I found out the build setup is based on Makefiles. With Bazel Build (https://bazel.build/) these days, it’s fairly easy to create re-usable build rules which means that replicating a build setup shouldn’t have Makefiles duplicated. Any specific reason for this old-fashioned (😄) build tooling?

future-traffic-93788

07/18/2019, 8:58 PM

anyone have experience with pulumi github actions?

cool-egg-852

07/18/2019, 9:06 PM

How do you access the resources in a helm chart? Trying to get the name of a resource.

fierce-dinner-20116

07/18/2019, 10:16 PM

Hi I recently hit this error message in pulumi after updating to pulumi 0.17.23 (and other provider packages):

post-step event returned an error: failed to verify snapshot: resource urn:pulumi:ds-dog-k8s-dev::sg-deploy-k8s-helper::kubernetes:core/v1:Secret::langserver-auth refers to unknown provider urn:pulumi:ds-dog-k8s-dev::sg-deploy-k8s-helper::pulumi:providers:kubernetes::dogfood-full-k8s::3a90eb1d-d8d5-4272-ae29-300c34caaab9

cool-egg-852

07/18/2019, 11:42 PM

Is there any way to get pulumi to auto update helm repos?

few-processor-86645

07/19/2019, 8:59 AM

Any azuread expert can help on this one: https://stackoverflow.com/questions/57008724/authentication-error-using-new-pulumi-azuread-module

limited-rainbow-51650

07/19/2019, 10:21 AM

I converted this TF snippet

resource "aws_iam_user_login_profile" "ringo" {
  user    = aws_iam_user.ringo.name
  pgp_key = "keybase:ringods"
}

to Pulumi TS code

const iam_user_login_profile_ringo = new aws.iam.UserLoginProfile("ringo",
    {
        user: iam_user_ringo.name,
        pgpKey: "keybase:ringods"
    },
    {
        import: "ringo"
    })

But on

preview

, I get this warning:

...
=   └─ aws:iam:UserLoginProfile  ringo                       import     [diff: +pgpKey]; 1 warning

Diagnostics:
  aws:iam:UserLoginProfile (ringo):
    warning: inputs to import do not match the existing resource; importing this resource will fail

The PGP key indicator is the same string. How come a difference is detected?

crooked-jordan-34725

07/19/2019, 11:30 AM

hey, I was wondering, using Google Compute Platform with Pulumi

crooked-jordan-34725

07/19/2019, 11:30 AM

if it’s possible to set up a Serverless VPC Access so that cloud functions can talk to memorystore or other resources?

crooked-jordan-34725

07/19/2019, 11:30 AM

I can’t seem to find any resource like that

limited-rainbow-51650

07/19/2019, 2:07 PM

From a resource, I have an

Output<string>

. The value in it is the string version of a number. How can I get the number value as an input for another resource?

fresh-flag-12765

07/19/2019, 5:22 PM

Hey. Finding the pulumi-eks stuff to be an absolute nightmare to handle, compared to how nicely everything else works. Just trying to get the initial cluster set up, and made some silly mistakes (set subnets to public, not private). But trying to make changes to the cluster config is crazy. It tries to replace the cluster, but then gets stuck since it cant delete the resources for the now deleted cluster.

fresh-flag-12765

07/19/2019, 5:23 PM

Deleting everything now fails with

dial tcp: lookup <http://xxx.gr7.us-east-1.eks.amazonaws.com|xxx.gr7.us-east-1.eks.amazonaws.com>: no such host

fresh-flag-12765

07/19/2019, 5:36 PM

Related to previous issue, it might make sense to check for attempting to use public subnets in the EKS config. Since I believe it will always be a mistake, since then nodes can't actually get associated to the cluster.

millions-judge-24978

07/19/2019, 6:47 PM

Has anyone ever seen a persistent ‘update’ for k8s resources that will not go away even if applied? The

diff

details shows nothing being done.

clever-nest-47198

07/19/2019, 7:21 PM

Hey, is there anyway to self host the Pulumi Github app? Or recreate the same functionality of printing diffs on PR's using some script

modern-bear-85657

07/19/2019, 8:09 PM

Argument of type '{ name: Output<string>; }' is not assignable to parameter of type 'GetSecurityGroupArgs'.

early-musician-41645

07/19/2019, 11:07 PM

Is there any example for creating a new AWS secret in secretsmanager?

early-musician-41645

07/19/2019, 11:07 PM

Couldn't find any in github, and the interface docs for

SecretVersion

aren't totally clear how to use it

cuddly-eye-68174

07/20/2019, 10:31 AM

Guys, May I have a question about AWS route table and route resources? - AWS/Typescript

early-intern-90238

07/21/2019, 4:04 PM

Hello, switched my GCP project over to a different project id. I redid the gcp: settings in the yaml and redid the gcp login stuff but when I run any pulumi command at all I get failed to connect no route to host for the api url 192.168.99.110:8443

early-intern-90238

07/21/2019, 4:04 PM

anyone know what that means?

early-intern-90238

07/21/2019, 4:05 PM

its almost like its trying to connect to minikube for some reason

bored-river-53178

07/22/2019, 1:01 AM

how can I get an Output value from StackReference? When I try to use get() on it, there is an error 'Error: Cannot call '.get' during update or preview.', but it doesn't make sense to me, why it's not possible to do that?

best-xylophone-83824

07/22/2019, 11:17 AM

hi, I am trying to setup organisation's trial account it having hard time doing so 🙂 for starters there seem to be no such thing as creating org and adding users to it, it must be linked to things like github org or SAML SSO, why is so?

best-xylophone-83824

07/22/2019, 11:31 AM

BTW, https://www.pulumi.com/docs/reference/cd-gitlab-ci/#merge-request-builds this is not true anymore

best-xylophone-83824

07/22/2019, 11:38 AM

am I right that access tokens have all capabilities of a user? so there is currently no way to limit token to certain stacks or restrict whether it can create new stack or not for instance?

Title

best-xylophone-83824

07/22/2019, 11:38 AM

am I right that access tokens have all capabilities of a user? so there is currently no way to limit token to certain stacks or restrict whether it can create new stack or not for instance?

miniature-musician-31262

07/22/2019, 3:29 PM

If your organization is on a Team or Enterprise plan (or free trial), you’ll see a Teams tab in the Pulumi console that lets you ascribe stack-specific permissions to a team, yes.

But you’re correct in that an access token represents a user; there is not currently a concept of a token having roles or permissions separate from those of the user they belong to.

View count: 1