pulumi-community #general

cool-egg-852

10/03/2019, 12:27 PM

When running pulumi in a dockerized CI environment like CodeFresh, we’re getting:

Copy code

Previewing update (LinioIT/support):                                                                                              
[resource plugin aws-1.2.1] installing                                                                                            
Downloading plugin: 60.87 MiB / 60.87 MiB  100.00% 4sm1s                                                                          
Moving plugin... done.                                                                                                            
                                                                                                                                  
    pulumi:pulumi:Stack rsin-provider-support running                                                                             
    pulumi:providers:aws default_1_4_0  error: no resource plugin 'aws-v1.4.0' found in the workspace or on your $PATH, install th
e plugin using `pulumi plugin install resource aws v1.4.0`                                                                        
    pulumi:pulumi:Stack rsin-provider-support                                                                                     
    pulumi:providers:aws default_1_4_0  1 error                                                                                   
                                                                                                                                  
Diagnostics:                                                                                                                      
  pulumi:providers:aws (default_1_4_0):                                                                                           
    error: no resource plugin 'aws-v1.4.0' found in the workspace or on your $PATH, install the plugin using `pulumi plugin instal
l resource aws v1.4.0`

Any idea? It seems like pulumi is installing the wrong version, but it is detecting it needs to install the plugin at minimum.

incalculable-engineer-92975

10/03/2019, 4:11 PM

Is there any way to tell Pulumi that a resource was created w/o creating that resource? The Pulumi script creates an ALB as a side-effect and it doesn't get deleted when doing a

pulumi destroy

. I've done dependencies, I've tried delays, nothing works. So I'm looking at this as my last resort.

nice-airport-15607

10/03/2019, 5:16 PM

Hey Pulumers! Is there a way to see the git details that you’re logged into via the cli? When logging into Pulumi console, I log in with my github creds, that being said, I see the latest branch hash in the console, I was curious if there’s a way to see that from my local machine via

pulumi stack...

commands.

busy-umbrella-36067

10/03/2019, 6:07 PM

I’m getting a failure on

pulumi up

with this error:

Copy code

Assertion failed: (handle->type == UV_TCP || handle->type == UV_TTY || handle->type == UV_NAMED_PIPE), function uv___stream_fd, file ../deps/uv/src/unix/stream.c, line 1640.

tall-terabyte-42834

10/03/2019, 8:48 PM

Hi Pulumi, I'm trying to do some refactoring and asserting an empty

pulumi preview

before making changes. But even before any refactoring, it's already showing that a bunch of stuff will change. Like it would blow away and recreate stuff (which would be bad). What could cause this and how to work past it?

stale-autumn-24797

10/03/2019, 9:07 PM

A question about Pulumi AKS support: Am I able to configure a Kubernetes cluster to use virtual nodes in Pulumi, as described in this article: https://docs.microsoft.com/en-us/azure/aks/virtual-nodes-cli?

billowy-laptop-45963

10/03/2019, 9:47 PM

I'd like to run integration tests outside my current working environment but it seems it's not possible unless I sandbox the process in a container/vm or something due to the way pulumi login is global. Is there a way around this?

early-musician-41645

10/03/2019, 10:04 PM

I know this has come up a lot, but I'm just not seeing the problem:

Copy code

const zone = aws.route53.Zone.get("external-dns", ingress.externalDnsHostedZoneId);
      let domain: string = zone.name.apply(z => z.replace(/\.$/, ''));
      let zoneId: string = zone.zoneId.apply(z => z);

leads to:

error TS2322: Type 'Output<string>' is not assignable to type 'string'.

Any tips? How do I cast

Output<string>

string

cool-egg-852

10/03/2019, 10:09 PM

Any advances coming up to reduce the amount of time it takes run update a stack with around 50-150 resources?

cool-egg-852

10/03/2019, 10:10 PM

I feel like updating a stack dedicated to istio takes forever (I think there’s around 120 resources in mine)

billowy-laptop-45963

10/03/2019, 10:56 PM

when I do pulumi up it just gets stuck in previewing, I tried -v=3, --skip-preview (it gets stuck in updating), --tracing. Any other way to debug this? Integration tests are stuck in a similar way.

early-intern-90238

10/03/2019, 11:08 PM

Hey guys, quick opinionated question. If your using Kubernetes do you prefer a seperate dev environment, I am currently managing dev with labels but I've had some scenarious where this has been pretty problematic. So I am thinking of using an entirely seperate cluster for dev, stage, and only share canary with production. As for developer machines, is anyone using tilt?

big-nail-28315

10/04/2019, 2:02 PM

I need to create API Gateway VPC Links using Network Load Balancers that were created during provisioning of an Elastic Beanstalk environment. I see that I can get the load balancer id's from the Elastic Beanstalk environment, but is there a way to get the ARN's of those load balancer id's so I can pass them to a

new VPCLink()

? I was thinking that I could import the Beanstalk NLB's, but it doesn't look like the import syntax works on those.

cool-egg-852

10/04/2019, 9:14 PM

Copy code

Diagnostics:
  pulumi:pulumi:Stack (cert-manager-development):
    error: Error: Command failed: helm fetch jetstack/cert-manager --untar --version v0.10.1 --destination /var/folders/dn/t652qw8j7g5378d66qqng_dh0000gn/T/tmp-10896ZtroXrGxEMe2 --repo https\://charts.jetstack.io
    Error: chart "jetstack/cert-manager" version "v0.10.1" not found in <https://charts.jetstack.io> repository

    Error: chart "jetstack/cert-manager" version "v0.10.1" not found in <https://charts.jetstack.io> repository
    Error: Error: Command failed: helm fetch jetstack/cert-manager --untar --version v0.10.1 --destination /var/folders/dn/t652qw8j7g5378d66qqng_dh0000gn/T/tmp-10896ZtroXrGxEMe2 --repo https\://charts.jetstack.io
    Error: chart "jetstack/cert-manager" version "v0.10.1" not found in <https://charts.jetstack.io> repository
        at /Users/harrison/code/linio/infrastructure/node_modules/@pulumi/kubernetes/helm/v2/helm.js:112:23
        at OutputImpl.<anonymous> (/Users/harrison/code/linio/infrastructure/node_modules/@pulumi/pulumi/output.js:110:47)
        at Generator.next (<anonymous>)
        at fulfilled (/Users/harrison/code/linio/infrastructure/node_modules/@pulumi/pulumi/output.js:18:58)

cool-egg-852

10/04/2019, 9:23 PM

Just got bit by the API Version changes again. Hopefully support for auto aliasing these will come soon. This time it was in helm though, so out of my control.

millions-judge-24978

10/05/2019, 5:39 PM

I’m seeing an issue with the new k8s auto aliasing. I have a resource of type

kubernetes:autoscaling/v2beta2:HorizontalPodAutoscaler

being created, it’s getting the following aliases that seem to be coming from a different resource altogether:

Copy code

"aliases": [
                        "urn:pulumi:mirror::mirror::kubernetes:apps/v1:Deployment::traffic-mirror",
                      "urn:pulumi:mirror::mirror::kubernetes:apps/v1beta1:Deployment::traffic-mirror",
                        "urn:pulumi:mirror::mirror::kubernetes:apps/v1beta2:Deployment::traffic-mirror",
                        "urn:pulumi:mirror::mirror::kubernetes:extensions/v1beta1:Deployment::traffic-mirror"
                    ]

resulting in an error like this:

Copy code

panic: fatal: An assertion has failed: Two resources ('urn:pulumi:mirror::mirror::kubernetes:apps/v1:Deployment::traffic-mirror' and 'urn:pulumi:mirror::mirror::kubernetes:autoscaling/v2beta2:HorizontalPodAutoscaler::traffic-mirror') aliased to the same: 'urn:pulumi:mirror::mirror::kubernetes:apps/v1:Deployment::traffic-mirror'

curved-doctor-83600

10/05/2019, 6:10 PM

Hi, i am new to pulumi and have a question regarding nginx-ingress deployment incl. load balancer (i am trying on digitalocean, if this is of interest). Reading through the docs, using yaml or helm should only be used for experimenting or migrating to pulumi. I am not sure, if I should translate the ingress resources to pulumi code in order to deploy the ingress controller and load balancer? Is this feasible or should I stick to the helm chart/yaml manifest? If so, how would I retrieve the load balancers ip if deployed through a pulumi kubernetes.yaml.ConfigFile?

colossal-room-15708

10/05/2019, 10:39 PM

Does tf2pulumi not support the terraform 0.12 syntax?

error: creating tree module: Error parsing <http://03-main.tf|03-main.tf>: At 7:21: Unknown token: 7:21 IDENT var.ARM_SUBSCRIPTION_ID

damp-room-71337

10/07/2019, 11:07 AM

has anyone got any pointers on namespace handling with the

getResourceProperty

method on Helm charts? I seem to be running into this, although it’s closed as fixed: https://github.com/pulumi/pulumi-kubernetes/issues/419

damp-room-71337

10/07/2019, 11:09 AM

looks like

getResourceProperty

doesn’t like namespace values that are passed as Pulumi a `Output`:

Copy code

const k8sProvider = new k8s.Provider("k8s-provider", {
  suppressDeprecationWarnings: true,
  namespace: "dev"
});
const port = mysql.getResourceProperty(
  "v1/Service",
  k8sProvider.namespace,
  name,
  "spec"
).ports[0].port;

that raises a

Cannot read property 'spec' of undefined

error, unless I change

k8sProvider.namespace

getResourceProperty

to a string literal - `pulumi.interpolate`/`apply()` doesn’t have an effect either

incalculable-engineer-92975

10/07/2019, 1:15 PM

We've got multiple people working on stacks in the same sandbox. As a result, sometimes resources get messed with/deleted manually while we build out process. But a

pulumi destroy

blows up when resources aren't present to delete. Is there/could there be, a

--force

flag that will ignore resources that aren't present?

big-nail-28315

10/07/2019, 3:08 PM

Does anyone have an example of a Global RDS using Aurora?

cool-egg-852

10/07/2019, 6:02 PM

@colossal-beach-47527 Since I just saw your comment on the yarn/npm thing (I already replied), do you guys plan to port this logic over to other stuff such as the policy packs?

incalculable-diamond-5088

10/07/2019, 6:24 PM

Hi, i need to move a stack into an organization. Can you help?

gray-nest-70702

10/07/2019, 7:43 PM

Is there a way to get AWS IAM Access Key secrets to be encrypted with the default Pulumi secret encryption? I know there is the option to provide a PGP key that will encrypt the secret. But it would be cleaner to use the same encryption mechanism used for other secrets in the state.

worried-city-86458

10/07/2019, 8:15 PM

FYI: my Pulumi code for configuring resource metrics using the Prometheus Adapter via a Helm chart on AWS EKS https://github.com/coreos/kube-prometheus/pull/254#issuecomment-539170450 (It took me a while to learn all the Prometheus things to get this right, so hopefully I can save someone else the pain.)

broad-dog-22463

10/07/2019, 8:15 PM

@worried-city-86458 I'd love to see if you could turn that into a guest blog post for us?

broad-dog-22463

10/07/2019, 8:15 PM

(us being Pulumi)

acceptable-army-69872

10/07/2019, 8:29 PM

Is there a straight forward way to profile a refresh? This stack has like 20 some odd vpcs, and some of them are peered, but I can't help but feel it's refreshing the same resources several times. It's upwards of 30 minutes to run a refresh. I've done equally complex resources layouts in other IaC languages and even 10 minutes is long.

acceptable-army-69872

10/07/2019, 8:30 PM

Like, maybe it's a simple as something being scoped wrong, or not exporting, or a var instead of a const...