pulumi-community #general

Docs

Join the conversation Join Slack

Channels

general

crooked-jelly-50877

10/22/2019, 11:02 PM

Did I mention that I hate helm templates?

💯 1

millions-judge-24978

10/23/2019, 12:32 AM

Can I use the helm chart transformations to completely remove a resource?

billions-lock-73409

10/23/2019, 1:55 PM

Good morning, I’m having issues getting a password reset email to our team’s distro. We had to get the group enabled for external mailing but I can’t seem to get a reset email to come through now that it’s been fixed.

future-morning-96441

10/23/2019, 2:12 PM

Hi! Is there a way to somehow profile time needed for different tasks during deployment (

pulumi up

)? The Stack's number of resources grew over time and so did the time needed for a deployment (also for updates in a single lambda). I'm thinking of many different approaches of how to speed up thinks, but it would be great to be able to prioritize tasks based on the expected speedup. Metrics I would be interested in could include: - time needed to run diff before update - time needed to upload a lambda - time needed for requests to Pulumi backend - maybe also overall and split into resource-types We are already thinking about splitting the application into several stacks. But still, I'd like to perform an informed choice of where and how to start optimizing our deployment times. PS: last deployment took about 36 minutes: - 36 updated ressources - 476 unchanged resource Kind regards, Chris

stocky-nail-30268

10/23/2019, 3:06 PM

Yo, so we're using

awsx.ec2.Vpc.fromExistingIds

and the

ComponentResourceOptions

doesn't have an

async

property on it, so I assume at some point

getVpc

is being called, and we have no way of making that async. Is there a different way of making this call for it to work?

warning: Synchronous call made to "aws:ec2/getVpc:getVpc" with an unregistered provider.                                                                                                                                               
For more details see: <https://www.pulumi.com/docs/troubleshooting/#synchronous-call>

quiet-wolf-18467

10/23/2019, 6:00 PM

Has StackReference been updated to support different GCS buckets yet? 😞

brave-angle-33257

10/23/2019, 6:50 PM

running into issue here:

error: Running program '/data/pulumi/infra/aws/company/company-step-functions' failed with an unhandled exception:
   TSError: ⨯ Unable to compile TypeScript:
   index.ts(53,5): error TS2322: Type 'Output<string>' is not assignable to type 'Input<Topic>'.

code is:

const success_topic_subscription_name = `${company}-collector-${env}-success-email`
const success_topic_subscription = new aws.sns.TopicSubscription(success_topic_subscription_name, {
    endpoint: "<https://global.sns-api.chatbot.amazonaws.com>",
    protocol: "HTTPS",
    topic: success_topic.arn,
});

best-hydrogen-40271

10/23/2019, 7:33 PM

protect

-- will it allow me to tear down everything except `protect`ed resources?

best-hydrogen-40271

10/23/2019, 7:33 PM

I basically just want to protect some presisted data

best-hydrogen-40271

10/23/2019, 7:34 PM

because I don't mind keeping that hanging around for when i next spin things up

best-hydrogen-40271

10/23/2019, 7:34 PM

but, in the event of DR, I'll need it to 'reappear' empty

best-hydrogen-40271

10/23/2019, 7:34 PM

I'm assuming this is what

protect

will do

tall-rose-87315

10/23/2019, 8:24 PM

Is the RandomPassword result supposed to be treated as a Secret? I am seeing it as plain text in the logs and in the output: export const password = new RandomPassword("password", { length: 20 }).result; Outputs: password: "&3MHv-kbBv&AY-wP=ShK"

cool-egg-852

10/23/2019, 8:29 PM

There’s an open issue for this. It is currently not treated as one. Let me see if I can find it for you

cool-egg-852

10/23/2019, 8:30 PM

https://github.com/pulumi/pulumi-terraform-bridge/issues/10

cool-egg-852

10/23/2019, 8:30 PM

tall-rose-87315

10/23/2019, 8:41 PM

hmm. that kinda kills the ability to use StackReference to break up the infrastructure. I need to share the kubeconfig. Is there any way to destroy a stack without destroying the items it imported? (I was able to my stacks up so that a second stack imported the ids of the first stack, but then destroying the second stack also destroys the imported resources. )

tall-rose-87315

10/23/2019, 8:53 PM

ok, one more: I am using this example: https://github.com/pulumi/examples/blob/16958e3f9ca4d8921e773921ae5f977861a3449d/azure-ts-aks-keda/cluster.ts Creating privatekey const sshPublicKey = new tls.PrivateKey("keda", { algorithm: "RSA", rsaBits: 4096, }).publicKeyOpenssh; and passing the sshPublicKey to cluster's linxProfile: linuxProfile: { adminUsername: "aksuser", sshKey: { keyData: sshPublicKey, }, }, This was working fine for a while, but now I always get the following error: Failure sending request: StatusCode=400 -- Original Error: Code="InvalidParameter" Message="The value of parameter linuxProfile.ssh.publicKeys.keyData is invalid. Please see https://aka.ms/aks-naming-rules for more details." Target="linuxProfile.ssh.publicKeys.keyData" Has anyone seen this before? I cannot figure out how to get past this issue.

early-intern-90238

10/24/2019, 12:32 AM

Is there a way to do a kubectl rollout restart?

nice-airport-15607

10/24/2019, 1:27 AM

Does anyone know how to get out of the

snapshot integrity failure; refusing to use it

state?

fancy-translator-86814

10/24/2019, 12:52 PM

can’t wait pulumi-awsx:v0.18.13 on npm. I really need this:

secrets
property to
awsx.ecs.Container
to allow injecting sensitive data into a container.

jolly-lifeguard-22556

10/24/2019, 1:15 PM

Is there any way to control the AWS Lambda runtime for timers from

@pulumi/cloud-aws

? Getting emails from AWS that Node 8 runtime is going to be EoL so I want to upgrade to Node 10 runtime but there doesn't seem to be a way with Pulumi to specify

acceptable-army-69872

10/24/2019, 4:36 PM

My pulumi up's are hanging on

debug: Trying to get account information via sts:GetCallerIdentity

...is there anything past

--debug

to use to investigate why this is happening?

bored-cartoon-33302

10/24/2019, 5:02 PM

@white-balloon-205 "What does

which python3

report for you?" which isn't recognized in Windows Terminal / Powershell PS C:\Users\g> python Python 3.8.0 (tags/v3.8.0:fa919fd, Oct 14 2019, 19:37:50) [MSC v.1916 64 bit (AMD64)] on win32

nice-airport-15607

10/24/2019, 5:23 PM

I have multiple pulumi stacks in a project, and after being able to deploy

stack1

, I’m getting and error when trying to deploy

stack2

. I’ve exported my environment via

export AWS_PROFILE=staging

and logged into the appropriate s3 endpoint, but I’m getting the following error. Does anyone know what I could be doing wrong?

Error: invocation of aws:cloudformation/getStack:getStack returned an error: unable to discover AWS AccessKeyID and/or SecretAccessKey

early-musician-41645

10/24/2019, 7:02 PM

Does a code sample exist describing how to manage docker containers directly on EC2 instances (or any host)?

brash-plastic-65797

10/24/2019, 9:15 PM

Is it convention to export the VPC object when you have a multi-stack Pulumi setup? Or will that pretty much cause everything inside the VPC to be exported?

boundless-monkey-50243

10/24/2019, 9:17 PM

Where's Pulumi at with regards to

terraform import

-style functionality? I have to do some pretty broad surgery on our environment and would rather move our stuff over while I'm at it.

adorable-country-15301

10/24/2019, 9:20 PM

Trying to define a policy for Gated Deployments that relates AWS S3 BucketPublicAccessBlocks to Buckets. Haven't been able to figure out a way to check that a BucketPublicAccessBlock exists for each bucket. Tried to get instances of publicAccessBlocks and compare bucket ids too, but I don't think it works.

Untitled

quick-action-34599

10/24/2019, 9:29 PM

I’m in the middle of trying to set up an autoscalinggroup for an existing ecs cluster. It was having issues with something being in ROLLBACK_COMPLETE state so I did a refresh, but now I get a

panic: fatal: An assertion failed

error. I will post the stack trace in a thread reply

Title

quick-action-34599

10/24/2019, 9:29 PM

I’m in the middle of trying to set up an autoscalinggroup for an existing ecs cluster. It was having issues with something being in ROLLBACK_COMPLETE state so I did a refresh, but now I get a

panic: fatal: An assertion failed

error. I will post the stack trace in a thread reply

$ pulumi up
Previewing update (prod):

     Type                 Name           Plan        Info
     pulumi:pulumi:Stack  seniorvu-prod  running     read aws:ec2:Vpc default-vpc-ca0a4ba2
panic: fatal: An assertion has failed

goroutine 1986 [running]:
<http://github.com/pulumi/pulumi/pkg/util/contract.failfast(...)|github.com/pulumi/pulumi/pkg/util/contract.failfast(...)>
	/Users/travis/gopath/src/github.com/pulumi/pulumi/pkg/util/contract/failfast.go:23
<http://github.com/pulumi/pulumi/pkg/util/contract.Assert(...)|github.com/pulumi/pulumi/pkg/util/contract.Assert(...)>
	/Users/travis/gopath/src/github.com/pulumi/pulumi/pkg/util/contract/assert.go:26
<http://github.com/pulumi/pulumi/pkg/resource/plugin.(*provider).Read|github.com/pulumi/pulumi/pkg/resource/plugin.(*provider).Read>(0xc0013bf860, 0xc001a05a80, 0x77, 0x0, 0x0, 0x0, 0xc002b11b00, 0x1817641, 0x4, 0x0, ...)
	/Users/travis/gopath/src/github.com/pulumi/pulumi/pkg/resource/plugin/provider_plugin.go:667 +0xfd6
<http://github.com/pulumi/pulumi/pkg/resource/deploy.(*ReadStep).Apply(0xc002b11b60|github.com/pulumi/pulumi/pkg/resource/deploy.(*ReadStep).Apply(0xc002b11b60>, 0x1, 0x22dd201, 0x23, 0xc001aeee50, 0x3)
	/Users/travis/gopath/src/github.com/pulumi/pulumi/pkg/resource/deploy/step.go:589 +0xfd
<http://github.com/pulumi/pulumi/pkg/resource/deploy.(*stepExecutor).executeStep(0xc001888000|github.com/pulumi/pulumi/pkg/resource/deploy.(*stepExecutor).executeStep(0xc001888000>, 0xd6, 0x25d28e0, 0xc002b11b60, 0x0, 0x0)
	/Users/travis/gopath/src/github.com/pulumi/pulumi/pkg/resource/deploy/step_executor.go:271 +0x211
<http://github.com/pulumi/pulumi/pkg/resource/deploy.(*stepExecutor).executeChain(0xc001888000|github.com/pulumi/pulumi/pkg/resource/deploy.(*stepExecutor).executeChain(0xc001888000>, 0xd6, 0xc00225fcc0, 0x1, 0x1)
	/Users/travis/gopath/src/github.com/pulumi/pulumi/pkg/resource/deploy/step_executor.go:221 +0xe6
<http://github.com/pulumi/pulumi/pkg/resource/deploy.(*stepExecutor).worker.func1(0xc001888000|github.com/pulumi/pulumi/pkg/resource/deploy.(*stepExecutor).worker.func1(0xc001888000>, 0xd6, 0xc00225fcc0, 0x1, 0x1, 0xc001409740)
	/Users/travis/gopath/src/github.com/pulumi/pulumi/pkg/resource/deploy/step_executor.go:371 +0xc8
created by <http://github.com/pulumi/pulumi/pkg/resource/deploy.(*stepExecutor).worker|github.com/pulumi/pulumi/pkg/resource/deploy.(*stepExecutor).worker>
	/Users/travis/gopath/src/github.com/pulumi/pulumi/pkg/resource/deploy/step_executor.go:368 +0x2ce

I guess I’ll try to remove the asg through pulumi and redo it

white-balloon-205

10/25/2019, 1:03 AM

This is failing because the id of the resource being `get`d is empty. We should be failing with a better error here. https://github.com/pulumi/pulumi/issues/3231 is related - could you share details of your case there?

quick-action-34599

10/25/2019, 3:35 PM

@white-balloon-205 I can, though I don’t have much details. Although now all my operations are timing out… 😐

ok got past that

View count: 1