pulumi-community #general

Docs

Join the conversation Join Slack

Channels

general

early-intern-90238

08/01/2019, 5:03 PM

Why does my Secret always get replaced during a deployment, even if its not touched?

early-intern-90238

08/01/2019, 5:04 PM

For Kubernetes

nice-airport-15607

08/01/2019, 5:34 PM

Anyone know how to remove a resource from pulumi that doesn’t exist in pulumi? So I’m getting this error saying a dataSource exists already, but when I do a

pulumi stack export > stack.json

, that data source does NOT exist in the file, also in pulumi web console it does NOT exist either.

error: Plan apply failed: BadRequestException: Data source with name someLambdaDataSource already exists

, but when

helpful-advantage-49286

08/01/2019, 5:52 PM

helpful-advantage-49286

08/01/2019, 5:52 PM

I just did a pulumi update

helpful-advantage-49286

08/01/2019, 5:52 PM

it said it would update my k8s cluster

helpful-advantage-49286

08/01/2019, 5:53 PM

next thing i know its being deleted

helpful-advantage-49286

08/01/2019, 5:53 PM

that seem really really bad.

helpful-advantage-49286

08/01/2019, 5:56 PM

Is there some way to make it so that never happens again?

some-waitress-78905

08/01/2019, 5:58 PM

@better-rainbow-14549 I am still getting "Type 'Output<string>' is not assignable to type 'string'."

square-ability-48831

08/01/2019, 6:39 PM

having trouble accessing an output of apikeys from

const apikeys = awsx.apigateway.createAssociatedAPIKeys(...)

..., I'm confused how to convert Output<T> to strings to get concise exports ...continued in thread...

cool-egg-852

08/01/2019, 6:42 PM

Anyone have any idea why a k8s secret containing a GCP ServiceAccount’s credentials would constantly be replaced every time? Pulumi detects it as being empty every time

up

is run.

adamant-dress-73325

08/01/2019, 8:13 PM

@lemon-spoon-91807 On the latest version of awsx package, we cannot override the defaultAction to the below, without getting this error:

[Listener] was not connected to a [defaultAction] that can provide [portMapping]s

. Do you know what might be happening?

const httpsListener = targetGroup.createListener('https-443-listener', {
    certificateArn: options.certificateArn,
    defaultAction: {
      fixedResponse: {
        contentType: 'text/html',
        messageBody: '<!DOCTYPE html><title>404 - Not Found</title><body><h1>404 - Not Found',
        statusCode: '404',
      },
      type: 'fixed-response',
    },
    external: true,
    port: 443,
    protocol: 'HTTPS',
    sslPolicy: 'ELBSecurityPolicy-2016-08',
  });

ripe-dinner-40604

08/01/2019, 8:46 PM

I'm getting a weird error trying to transform a YAML file

kubernetes:<http://rbac.authorization.k8s.io:ClusterRoleBinding|rbac.authorization.k8s.io:ClusterRoleBinding> (argo-binding):
    error: Failed to check for changes in resource /argo-binding because of an error computing the JSON patch describing the resource changes: unrecognized type: string

Relevant code:

// Create resources for Argo from its YAML manifests
const argo = new k8s.yaml.ConfigFile("argo",
    {
        file: "<https://raw.githubusercontent.com/argoproj/argo/stable/manifests/install.yaml>",
        transformations: [
            (obj: any) => {
                // Convert `argo` to the unique namespace generated above
                if (obj.kind == "ClusterRoleBinding") {
                    obj.subjects[0].namespace = argoNamespace.apply(val => `${val.toString()}`)
                    console.log(obj)
                }
            }
        ],
    },
    {
        providers: { "kubernetes": mainCluster.provider },
    },
);

Debug output

{
      apiVersion: '<http://rbac.authorization.k8s.io/v1|rbac.authorization.k8s.io/v1>',
      kind: 'ClusterRoleBinding',
      metadata: { name: 'argo-binding' },
      roleRef: {
        apiGroup: '<http://rbac.authorization.k8s.io|rbac.authorization.k8s.io>',
        kind: 'ClusterRole',
        name: 'argo-cluster-role'
      },
      subjects: [ { kind: 'ServiceAccount', name: 'argo', namespace: [OutputImpl] } ]
    }

cool-egg-852

08/01/2019, 9:20 PM

Out of curiosity, any plans to use GH’s Release functionality for pulumi/pulumi rather than tags + CHANGELOG.md like some of the providers are?

early-intern-90238

08/01/2019, 11:06 PM

The more and more I use and test with super heavy loads on Kubernetes the more and more I wonder if I should not put anything with a load on the default cluster and use additional node pools to handle the actual load...Anyone have thoughts on that?

ripe-dinner-40604

08/01/2019, 11:33 PM

I'm quite confused on the state of auto-scaling clusters on AWS via Pulumi, the documentation is all over the place.

glamorous-waitress-51149

08/02/2019, 12:09 PM

Raised an issue with AWS about Aurora Serverless failing when calling pulumi up. If anyone can shed any light, it’d be appreciated. Thanks https://forums.aws.amazon.com/thread.jspa?threadID=307382

loud-nest-15724

08/02/2019, 7:27 PM

Hi, I'm trying to create an apex record in Route53 using an alias for an API Gateway Regional Custom Domain. From my understanding the apex record should not have a name, but Pulumi requires one

loud-nest-15724

08/02/2019, 7:28 PM

I'm following the instructions from the docs here to create the record https://www.pulumi.com/docs/reference/pkg/nodejs/pulumi/aws/apigateway/#regional-acm-certificate

loud-nest-15724

08/02/2019, 7:30 PM

I've tried creating the same record manually without a name, and that setup seems to work the way I'm expecting

high-translator-22614

08/02/2019, 7:33 PM

I generally use the FQDN for Route53 (both saltstack and pulumi) and it seems to do the right thing

loud-nest-15724

08/02/2019, 7:36 PM

okay, I'll give that a go

bitter-island-28909

08/02/2019, 9:17 PM

so, I am asking here in case anyone has seen it, although I suspect the actual bug is in either the Terraform module or Go itself. I’m trying to use the Postgres module to connect to a Postgres instance running on AWS Aurora Serverless. I keep getting

Error initializing PostgreSQL client: error detecting capabilities: error PostgreSQL version: pq: SSL is not enabled on the server

This is despite the fact that SSL works fine using the

psql

client, and I have tried setting the

sslmode

property to

false

. Like I said, this smells like an incompatibility somewhere else in the stack, but thought it wouldn’t hurt to ask 🙂

silly-table-38618

08/02/2019, 10:09 PM

Good afternoon. I found Pulumi after learning the Terraform .12 language support for VSCode was dead, the maintainer does not have time. I was impressed that Pulumi utilizes the same back-end module, so I don't have to worry about losing resource support.

silly-table-38618

08/02/2019, 10:10 PM

I like the idea of using mainstream languages. I'm a bit hesitant of learning to do what I have been doing in TF a different way though. I thought I would try it for a new project all the same.

stocky-spoon-28903

08/02/2019, 10:12 PM

@silly-table-38618 you can write it just like Terraform if you want - just don’t do control flow etc 🙂

silly-table-38618

08/02/2019, 10:15 PM

I'm actually looking for something better. I wanted to abstract a module and iterate on that.

silly-table-38618

08/02/2019, 10:15 PM

Not just a resource, but a set of resources and relationships, just create more of them with different configuration.

high-translator-22614

08/02/2019, 10:49 PM

Pulumi, imho, is a lot better for that