pulumi-community #general

Docs

Join the conversation Join Slack

Channels

general

early-intern-90238

07/26/2019, 12:37 AM

not 100% sure...

average-dream-51210

07/26/2019, 3:19 AM

Hey would anybody point me in the right direction? I'm using the Fargate boilerplate that's in the Pulumi tutorials. I have an Express server with port 8081 open that is on Fargate with a Loadbalancer that i'd like to accept traffic on 443 (ssl) and forward to the Fargate containers on 8081. Right now this setup is creating a listener on 443 but it forward it to 443 on the Express containers.

average-dream-51210

07/26/2019, 3:20 AM

Untitled

average-dream-51210

07/26/2019, 3:20 AM

How can I make the Listener forward to 8081 to the container instead of 443?

average-dream-51210

07/26/2019, 3:20 AM

EXPRESS_PORT env variable is 8081

billions-lock-80282

07/26/2019, 12:58 PM

Hi, any suggestion on this issue? This is a blocker for our EKS deployment: https://pulumi-community.slack.com/archives/C84L4E3N1/p1564047953142800

better-rainbow-14549

07/26/2019, 3:02 PM

i'm trying to follow this: https://www.pulumi.com/docs/reference/programming-model/#dynamic-provider-examples but i can't see how i would expose further properties? I want to generate two related numbers at create time, and then be able to access them in future. how is that done please? the other examples here aren't really helping: https://github.com/pulumi/pulumi/blob/master/examples/dynamic-provider/simple/index.ts

ripe-dinner-40604

07/26/2019, 3:03 PM

Hi all, I'm a bit confused about the pricing model. Could someone point me toward documentation on what is free and what is paid (or a brief summary here)?

incalculable-diamond-5088

07/26/2019, 5:36 PM

Trying to write a dynamic resource with provider and getting

Plan apply failed: Program run without the `pulumi` CLI; this may not be what you want (enable PULUMI_TEST_MODE to disable this error)

in the apply phase. Is it a known issue?

nice-airport-15607

07/26/2019, 7:04 PM

Anyone know how to add CloudWatch logs to an

AMAZON_ELASTICSEARCH

type

DataSource

high-translator-22614

07/26/2019, 7:17 PM

ok, i'm missing something, in AWS API Gateway, there's a setting in the console for negotiating compression "Content Encoding enabled", but I'm not sure what the matching setting in pulumi is?

high-translator-22614

07/26/2019, 7:18 PM

i'm guessing it should be on the

RestApi

but it's not clear

early-intern-90238

07/26/2019, 7:35 PM

set it up and click the button that generates the API code

high-translator-22614

07/28/2019, 1:50 AM

ok, trying to define a lambda-based application load balancer, and i'm getting

Error registering targets with target group: AccessDenied: elasticloadbalancing principal does not have permission to invoke arn:aws:lambda:us-east-2:012949464119:function:SpamService-function-38d5231 from target group arn:aws:elasticloadbalancing:us-east-2:012949464119:targetgroup/SpamService-target-6d47bc1/b974b8af06bf99ea

which reads like an IAM role missing/misconfiguration, but there's no place to configure it. I also created one by hand, and it works, and it didn't create a role.

high-translator-22614

07/28/2019, 2:33 AM

ok, figured ☝️ out (you need to allow elb to invoke the function in the _function_'s role), but now it doesn't like the new

RolePolicy

high-translator-22614

07/28/2019, 2:40 AM

looking at the end of https://docs.aws.amazon.com/lambda/latest/dg/services-alb.html it gives an awscli command to call to allow elb to invoke your lambda function, and it spits out an IAM policy

high-translator-22614

07/28/2019, 2:41 AM

but it's not liking just pasting that into a

RolePolicy

attached to the lambda function's `Role`: "MalformedPolicyDocument: Policy document should not specify a principal."

high-translator-22614

07/28/2019, 2:59 AM

figured it out, needed a

lambda_.Permission

high-translator-22614

07/28/2019, 3:28 AM

Something that would be even more useful than the import stuff? Something to examine an AWS account and produce a description (or even pulumi source) of the resources defined in it.

fierce-cpu-94517

07/28/2019, 1:13 PM

Getting

pulumi up

errors trying to update AWS VPC security groups. I've added a new SG rule but looks like the change was interpreted as much more than a simple addition of a new rule.

Here_s_the__pulumi_up__output_with_diff.sh

fierce-cpu-94517

07/28/2019, 1:35 PM

$ pulumi version  
warning: A new version of Pulumi is available. To upgrade from version '0.17.25' to '0.17.26', run 
   $ brew upgrade pulumi
or visit <https://pulumi.com/docs/reference/install/> for manual instructions and release notes.
v0.17.25
$ brew upgrade pulumi                              
Error: pulumi 0.17.25 already installed

kind-sunset-65503

07/28/2019, 1:53 PM

Hi all, I am looking for official documentation about communication between pulumi provider (like gcp, aws,...) and terraform provider. I have found this diagram on internet

https://blog.octo.com/wp-content/uploads/2018/10/pul-refresh-1024x315.png▾

. Only terraform provider communicate with the cloud provider. And the terraform-based pulumi provider is connected to a given terraform provider. Is it correct ?

hundreds-portugal-17080

07/29/2019, 4:15 AM

Hi, I want to run some mysql init scripts to turn on mysql bin log and create tables after "new aws.rds.Instance" is created. Can you suggest how to do it using Pulumi? In terraform, we could use provisioner.

stale-autumn-24797

07/29/2019, 6:33 AM

I’m trying to follow the following instructions to install cert-manager in an aks cluster: https://docs.microsoft.com/en-us/azure/aks/ingress-tls. After creating a namespace for the cert manager, the next instruction is:

kubectl label namespace cert-manager <http://certmanager.k8s.io/disable-validation=true|certmanager.k8s.io/disable-validation=true>

Is there a supported way to do this in the pulumi python api?

incalculable-diamond-5088

07/29/2019, 2:30 PM

Ran a

pulumi up

which corrupted the whole state file and nothing can be fixed now. Is there a backup/history?

worried-engineer-33884

07/29/2019, 5:19 PM

is it possible to self reference an output in another input? e.g. if i wanted the description to be like

description: `this is a resource who's arn is ${this.arn}`

cool-egg-852

07/29/2019, 9:14 PM

Having an issue here. Pulumi reports it deleted a deployment, but I’m looking at it in GKE, it is not deleted. If I delete the pod, it is recreated.

flaky-ram-60267

07/29/2019, 11:58 PM

Hi. I'm part of the DevOps team, and I'm hoping to setup the Pulumi framework as 'micro-stacks' for our developers to use. Essentially I want to create

acmecorp/infra/<env>

which creates the necessary infrastructure and parent classes that devs can inherit to create

acmecorp/services/<env>

. For example, I want to create a class for AWS ECS services that enforces things like tags, mount points, logging config, default environment variables etc. In that way we make our Devs lives easier to follow company standards. Are there publicly available git repos that show how people have attempted something similar to this? I'm interested in finding out how the micro-stacks are organised, what level of responsibility is handed over to the devs, how the aws and awsx packages are used in combination etc. I'm after more complex examples than those provided in the pulumi-examples repo. Thanks in advance.

high-translator-22614

07/30/2019, 12:01 AM

i would rephrase that and ship recipes in the form of library packages (making heavy use of ComponentResources)

high-translator-22614

07/30/2019, 12:02 AM

like, if you want to disallow some things, you're in for a bad time