pulumi-community #general

general

clever-nest-47198

08/26/2019, 2:18 PM

How do sensitive values from TF providers work in Pulumi? https://github.com/terraform-providers/terraform-provider-fastly/blob/master/fastly/resource_fastly_service_v1.go#L596 The TF provider marks the resource input as sensitive here, and we've created our own provider using pulumi-terraform-bridge here https://github.com/terraform-providers/terraform-provider-fastly/blob/master/fastly/resource_fastly_service_v1.go#L596 However, we don't see Pulumi treating it as a secret? Our S3 access keys show up in plaintext in the console output.

clever-nest-47198

08/26/2019, 2:19 PM

Do we need to do something special in our code to mark the value as secret on the Pulumi side?

cool-egg-852

08/26/2019, 2:19 PM

https://www.pulumi.com/blog/managing-secrets-with-pulumi/

quick-action-34599

08/26/2019, 2:31 PM

Got an issue with

pulumi up

getting stuck on

completing deletion from previous update

. It’s wanting to delete an ACM cert that’s in use and I want to prevent that. Is there a way to revert the deletion and cancel it or something?

some-doctor-62800

08/26/2019, 2:51 PM

How would one use data sources like in terraform https://www.terraform.io/docs/configuration/data-sources.html?

salmon-beard-79336

08/26/2019, 2:55 PM

Based on my recent work with Azure and Pulumi, have created a PR to add additional examples. In this case, on how to: - Create a CosmosDB container via @azure/cosmos SDK - Create an API Connection with ARM template - Use the API Connection to establish a relationship between CosmosDB and a LogicApp. https://github.com/pulumi/examples/pull/369 (@tall-librarian-49374 is having a look at it)

🎉 1

bitter-dentist-28132

08/26/2019, 3:31 PM

is there a way to have an output inside of an

async

block? i tried doing

export let output;
async function doAsyncStuff(() => {
  ...
  output = `${someResource.ingressHost}`;
});
doAsyncStuff().then(() => console.log(output));

the console.log prints `output`'s value in the diagnostics, but for whatever reason i don't get an actual stack output.

quick-action-34599

08/26/2019, 5:18 PM

Following-up: is there any way to remove a “pending delete” operation? Exporting the state, removing the action, and importing it doesn’t do anything

quick-action-34599

08/26/2019, 5:18 PM

Basically stuck here until I can figure it out

early-intern-90238

08/26/2019, 5:25 PM

that's how I resolved that issue in the past on Kubernetes

some-doctor-62800

08/26/2019, 6:10 PM

Any advice on jumping through a bastion during a pulumi run?

high-translator-22614

08/26/2019, 6:21 PM

in what context?

high-translator-22614

08/26/2019, 6:21 PM

like, for kubernetes?

some-doctor-62800

08/26/2019, 6:21 PM

say a private k8s cluster

some-doctor-62800

08/26/2019, 6:21 PM

yes

some-doctor-62800

08/26/2019, 6:21 PM

🙂

some-doctor-62800

08/26/2019, 6:22 PM

or anything else you bootstrap after your bastion hosts that only has private ips

some-doctor-62800

08/26/2019, 6:23 PM

worst case I'm going to run CD inside the vpc but I'd rather not

high-translator-22614

08/26/2019, 6:24 PM

Probably a collection of techniques. • OpenSSH allows you to configure proxy hosts • Set up port forwards • Use OpenSSH's dynamic port forward (SOCKS) support, but I'm not sure how to configure pulumi to use a socks proxy

some-doctor-62800

08/26/2019, 6:24 PM

well pulumi is also provisioning the bastion hosts

some-doctor-62800

08/26/2019, 6:24 PM

so either I have to do something between stack runs

some-doctor-62800

08/26/2019, 6:24 PM

which is mediocre

high-translator-22614

08/26/2019, 6:25 PM

I'm also somewhat skeptical of using pulumi to configure individual hosts? I'm relatively new to pulumi, but it seems like that would be better done with ansible/puppet/saltstack/etc?

high-translator-22614

08/26/2019, 6:25 PM

you may want to break up that stack?

some-doctor-62800

08/26/2019, 6:25 PM

individual hosts?

high-translator-22614

08/26/2019, 6:25 PM

or anything else you bootstrap after your bastion hosts that only has private ips

I assume you mean like instances?

some-doctor-62800

08/26/2019, 6:26 PM

or ideally I can start some tunnels after pulumi provisioned the bastion instances

some-doctor-62800

08/26/2019, 6:26 PM

Can be k8s, dbs etc

high-translator-22614

08/26/2019, 6:28 PM

yeah, if your VPC is being managed as part of the stack, you might be SOL

high-translator-22614

08/26/2019, 6:28 PM

pretty much every solution I can think of for that is messy, and I'm not sure anything deals with it well