pulumi-community #general

fierce-dinner-20116

07/18/2019, 10:16 PM

Hi I recently hit this error message in pulumi after updating to pulumi 0.17.23 (and other provider packages):

Copy code

post-step event returned an error: failed to verify snapshot: resource urn:pulumi:ds-dog-k8s-dev::sg-deploy-k8s-helper::kubernetes:core/v1:Secret::langserver-auth refers to unknown provider urn:pulumi:ds-dog-k8s-dev::sg-deploy-k8s-helper::pulumi:providers:kubernetes::dogfood-full-k8s::3a90eb1d-d8d5-4272-ae29-300c34caaab9

cool-egg-852

07/18/2019, 11:42 PM

Is there any way to get pulumi to auto update helm repos?

few-processor-86645

07/19/2019, 8:59 AM

Any azuread expert can help on this one: https://stackoverflow.com/questions/57008724/authentication-error-using-new-pulumi-azuread-module

limited-rainbow-51650

07/19/2019, 10:21 AM

I converted this TF snippet

Copy code

resource "aws_iam_user_login_profile" "ringo" {
  user    = aws_iam_user.ringo.name
  pgp_key = "keybase:ringods"
}

to Pulumi TS code

Copy code

const iam_user_login_profile_ringo = new aws.iam.UserLoginProfile("ringo",
    {
        user: iam_user_ringo.name,
        pgpKey: "keybase:ringods"
    },
    {
        import: "ringo"
    })

But on

preview

, I get this warning:

Copy code

...
=   └─ aws:iam:UserLoginProfile  ringo                       import     [diff: +pgpKey]; 1 warning

Diagnostics:
  aws:iam:UserLoginProfile (ringo):
    warning: inputs to import do not match the existing resource; importing this resource will fail

The PGP key indicator is the same string. How come a difference is detected?

crooked-jordan-34725

07/19/2019, 11:30 AM

hey, I was wondering, using Google Compute Platform with Pulumi

crooked-jordan-34725

07/19/2019, 11:30 AM

if it’s possible to set up a Serverless VPC Access so that cloud functions can talk to memorystore or other resources?

crooked-jordan-34725

07/19/2019, 11:30 AM

I can’t seem to find any resource like that

limited-rainbow-51650

07/19/2019, 2:07 PM

From a resource, I have an

Output<string>

. The value in it is the string version of a number. How can I get the number value as an input for another resource?

fresh-flag-12765

07/19/2019, 5:22 PM

Hey. Finding the pulumi-eks stuff to be an absolute nightmare to handle, compared to how nicely everything else works. Just trying to get the initial cluster set up, and made some silly mistakes (set subnets to public, not private). But trying to make changes to the cluster config is crazy. It tries to replace the cluster, but then gets stuck since it cant delete the resources for the now deleted cluster.

fresh-flag-12765

07/19/2019, 5:23 PM

Deleting everything now fails with

dial tcp: lookup <http://xxx.gr7.us-east-1.eks.amazonaws.com|xxx.gr7.us-east-1.eks.amazonaws.com>: no such host

fresh-flag-12765

07/19/2019, 5:36 PM

Related to previous issue, it might make sense to check for attempting to use public subnets in the EKS config. Since I believe it will always be a mistake, since then nodes can't actually get associated to the cluster.

millions-judge-24978

07/19/2019, 6:47 PM

Has anyone ever seen a persistent ‘update’ for k8s resources that will not go away even if applied? The

diff

details shows nothing being done.

clever-nest-47198

07/19/2019, 7:21 PM

Hey, is there anyway to self host the Pulumi Github app? Or recreate the same functionality of printing diffs on PR's using some script

modern-bear-85657

07/19/2019, 8:09 PM

Copy code

Argument of type '{ name: Output<string>; }' is not assignable to parameter of type 'GetSecurityGroupArgs'.

early-musician-41645

07/19/2019, 11:07 PM

Is there any example for creating a new AWS secret in secretsmanager?

early-musician-41645

07/19/2019, 11:07 PM

Couldn't find any in github, and the interface docs for

SecretVersion

aren't totally clear how to use it

cuddly-eye-68174

07/20/2019, 10:31 AM

Guys, May I have a question about AWS route table and route resources? - AWS/Typescript

early-intern-90238

07/21/2019, 4:04 PM

Hello, switched my GCP project over to a different project id. I redid the gcp: settings in the yaml and redid the gcp login stuff but when I run any pulumi command at all I get failed to connect no route to host for the api url 192.168.99.110:8443

early-intern-90238

07/21/2019, 4:04 PM

anyone know what that means?

early-intern-90238

07/21/2019, 4:05 PM

its almost like its trying to connect to minikube for some reason

bored-river-53178

07/22/2019, 1:01 AM

how can I get an Output value from StackReference? When I try to use get() on it, there is an error 'Error: Cannot call '.get' during update or preview.', but it doesn't make sense to me, why it's not possible to do that?

best-xylophone-83824

07/22/2019, 11:17 AM

hi, I am trying to setup organisation's trial account it having hard time doing so 🙂 for starters there seem to be no such thing as creating org and adding users to it, it must be linked to things like github org or SAML SSO, why is so?

best-xylophone-83824

07/22/2019, 11:31 AM

BTW, https://www.pulumi.com/docs/reference/cd-gitlab-ci/#merge-request-builds this is not true anymore

best-xylophone-83824

07/22/2019, 11:38 AM

am I right that access tokens have all capabilities of a user? so there is currently no way to limit token to certain stacks or restrict whether it can create new stack or not for instance?

salmon-beard-79336

07/22/2019, 11:39 AM

what is the difference between

diff

and

check

in a custom Resource?

important-leather-28796

07/22/2019, 4:04 PM

Hey I’ve got something strange. As part of our ci, we run

preview

and while we have not made changes, we just had a change pop up as part of our

infrastructure

stack that looks pretty ominous. Am I correct in thinking this is going to update the cluster and delete/recreate all that is listed here as

replace

? This seems like it would be a very bad/production downtime event…wouldn’t it?

incalculable-lock-7238

07/22/2019, 4:11 PM

so anyone try to integrate this : https://github.com/atomita/fluent-plugin-aws-elasticsearch-service

victorious-ambulance-28127

07/22/2019, 5:42 PM

Hi. I was hoping you might be able to help me. I am experiencing the issue that I am unable to delete/destroy an AWS SSM Document. It appears the issue was raised in a ticket. It appears the issue was fixed and the ticket has been closed https://github.com/pulumi/pulumi-aws/issues/649. I tried upgrading to the latest version of Pulumi but I guess this fix is not part of this version. Is it possible to provide any details when how/when I can see this fix? Thanks for your help.

glamorous-printer-66548

07/22/2019, 8:04 PM

We're facing an issue with dynamic kubernetes provider instances when upgrading pulumi versions. I can't precisely say which version this started to occur, but I believe it first occured when upgrading CLI from 0.17.16 > 0.17.24 and "@pulumi/kubernetes": "0.22.0", > "@pulumi/kubernetes": "0.25.2", . Basically what happens is the after the upgrade pulumi attempts to replace all our dynamic kubernetes provider instances incl. all resources that have been created using it, even though we made no changes to the stack resources. After a bit debugging I found the issue is that previously our stack state only contained this:

Copy code

{
                "urn": "urn:pulumi:my-stack::my-stack::pulumi:providers:kubernetes::my-cluster",
                ...
                "inputs": {
                    "kubeconfig": "...",
                    "namespace": "my-namespace"
                }
                ...
            }

and after the upgrade pulumi wants to converge to this state:

Copy code

{
                  "urn": "urn:pulumi:my-stack::my-stack::pulumi:providers:kubernetes::my-cluster",
                ...
                "inputs": {
                    "kubeconfig": "...",
                    "namespace": "my-namespace"
                },
                "outputs": {
                    "kubeconfig": "...",
                    "namespace": "my-namespace"
                }
                ...
            },

As you can see after the upgrade suddenly an "outputs" section that wasn't there before is being added. Because it didn't exist before pulumi attempts to do a replacement. I can workaround the issue by copying the "inputs" and pasting them as "outputs" and importing the fixed state.json which I did for a few stacks but since we have almost 100 stacks this is not a scalable solution. Is this a known issue and is there a better solution to the problem? I can btw reproduce this problem quite consistently (my machine, other machines, CI).

broad-dog-22463

07/22/2019, 8:06 PM

@glamorous-printer-66548 this has been reported by another user - we are talking about this