pulumi-community #general

happy-parrot-60128

10/21/2019, 10:50 AM

I’ve also got a question similar to @miniature-potato-84713 - I’m using the `Callback<E, R>`s to create lambdas … which doesn’t allow me to specify the runtime version for the lambda that will be created. Is there any way to set the lambda runtime version whenever I use the Callback type? i.e. is there a config variable something like

aws:CallbackRuntimeVersion

👍 1

happy-parrot-60128

10/21/2019, 10:53 AM

I’m guessing this is related to the

runtime

on the

CallbackFunction

defaulting to

NodeJS8d10Runtime

- so then any

Callback

would also get the same default?

happy-parrot-60128

10/21/2019, 10:55 AM

Is the current fix to convert all uses of

Callback

CallbackFunction

? Happy to open an issue to look at changing the default to a supported runtime … no idea where to start with fixing it though 🤷 😬

broad-carpenter-48576

10/21/2019, 12:12 PM

Is it ok to commit Pulumi.[stackname].yaml to git when using AWS KMS for secrets encryption? It has an

encryptedkey

line in there which I’m assuming is the encryption salt which is encrypted using the kms key?

rhythmic-finland-36256

10/21/2019, 5:04 PM

[Azure related question]: Does anybody know the required steps to be able to login to pulumi with a ServicePrincipal that has the permissions to create new `Application`s which is basically always required if you want to have the service principal creating new `Application`s, e.g. to have an AKS cluster SP or creating a new SP for ACR Push. Contributor and Owner are not enough. I found that note

NOTE: If you’re authenticating using a Service Principal then it must have permissions to both
Read and write all applications
and
Sign in and read user profile
within the Windows Azure Active Directory API.

on the terraform provider docs. Has anybody used

azuread

together with a

ServicePrincipal

authentication and can point me the right way?

damp-pillow-67781

10/21/2019, 10:52 PM

Hi I got error logging in on my new machine, any idea?

Copy code

➜  pulumi login <https://api.pulumi.com>
Logging in using access token from PULUMI_ACCESS_TOKEN
error: problem logging in: failed to get the home path: getting current user: user: unknown userid 1985127753

tall-rose-87315

10/22/2019, 1:28 AM

I am trying to create a cluster in a test environment/stack with Pulumi, but I am unable to assign the container registry permissions because my registry is in a different subscription. What is the best practice for Container registries re: different stacks? Do we have a container registry in each stack and then migrate an image between registries when moving to production? (When a build is approved for production I need to use the same exact image that was approved - I don't want to re-build the image. )

elegant-dress-88912

10/22/2019, 2:39 AM

pulumi suggests replacing k8s configmap even if only

data

section is updated. is it a known issue or expected behavior? Can't find it issues on github.

Copy code

kubernetes:core:ConfigMap  argocd-cm                 replace     [diff: ~data]

wooden-flower-29265

10/22/2019, 10:28 AM

Is it possible to create an AMI using Pulumi instead of Packer?

cold-coat-35200

10/22/2019, 11:18 AM

Any idea about this issue? We basically want to break down one of our monolithic stack to micro stacks, without downtime

cool-egg-852

10/22/2019, 2:24 PM

Has anyone noticed that the output from pulumi has been really messed up lately?

cool-egg-852

10/22/2019, 4:48 PM

When

up

fails because a K8s job fails, when running

pulumi up

again, shouldn’t it try to replace the job?

crooked-jelly-50877

10/22/2019, 6:06 PM

Is the helm cli client required for the Pulumi helm support? In particular -for downloading a chart from the stable repo?

helpful-bear-175

10/22/2019, 7:30 PM

How do I view the pulumi parse output of a helm chart?

high-morning-18773

10/22/2019, 7:54 PM

Hello, i am not able to figure out how to properly create containerdefinition json file in pulumi(using python), when creating ecs fargate task definition. i stored json values as list in a variable wrote and function that returns json And then set containerdefinition = generatejsob object, but that does not seems to work. i get this error

Copy code

raise TypeError(f'Object of type {o.__class__.__name__} '
    TypeError: Object of type Output is not JSON serializable

best-hydrogen-40271

10/22/2019, 8:21 PM

Is it possible to get the credentials for a GCP Service Account? I want the credentials.json

best-hydrogen-40271

10/22/2019, 8:28 PM

so that I can create kubernetes secret containing the file so that my app can eventually pick them up

cool-egg-852

10/22/2019, 8:32 PM

Yes it is possible.

cool-egg-852

10/22/2019, 8:33 PM

Copy code

const serviceAccount = new gcp.serviceAccount.Account(config.project, {
  accountId: config.project,
  displayName: config.project
});

const key = new gcp.serviceAccount.Key(config.project, {
  publicKeyType: 'TYPE_X509_PEM_FILE',
  serviceAccountId: serviceAccount.name
});

const gcpCredentials = new k8s.core.v1.Secret('gcp-credentials', {
  metadata: {
    namespace: namespace.metadata.name,
    labels: config.appLabels
  },
  type: 'Opaque',
  stringData: {
    'gcp-credentials.json': key.privateKey.apply(x => Buffer.from(x, 'base64').toString('utf8'))
  }
});

best-hydrogen-40271

10/22/2019, 8:39 PM

cheers, very helpful thank you very much

best-hydrogen-40271

10/22/2019, 9:31 PM

hmm.

pulumi up

is trying to connect to a cluster that doesnt exist, because it hasn't created it yet

best-hydrogen-40271

10/22/2019, 9:31 PM

specifically when I'm defining a Namespace

best-hydrogen-40271

10/22/2019, 9:36 PM

ah, no provider

best-hydrogen-40271

10/22/2019, 10:11 PM

it's replacing my k8s cluster every time

best-hydrogen-40271

10/22/2019, 10:11 PM

https://pastebin.com/jN1mEGMJ

best-hydrogen-40271

10/22/2019, 10:11 PM

What am I doing wrong?

best-hydrogen-40271

10/22/2019, 10:11 PM

is it the

random.RandomPassword

best-hydrogen-40271

10/22/2019, 10:17 PM

hmm, apparently related to the

nodeconfig

best-hydrogen-40271

10/22/2019, 10:17 PM

but also, seems to fail to actually create the nodepool for the cluster

best-hydrogen-40271

10/22/2019, 10:20 PM

Copy code

const primary = new GkeCluster("Primary", {});
const primaryStandardNodes = new gcp.container.NodePool(
    "primary-standard-nodes",
    {
        cluster: primary.cluster.name,
        nodeConfig: {
            machineType: "n1-standard-1",
            metadata: {
                "disable-legacy-endpoints": "true"
            },
            oauthScopes: [
                "<https://www.googleapis.com/auth/logging.write>",
                "<https://www.googleapis.com/auth/monitoring>"
            ],
            preemptible: false
        },
        nodeCount: 1
    }
);