Why does an unchanged gke/k8

ClusterRoleBinding

show as an update?

did the way pulumi gets aws credentials change somehow? because now it fails when it didn't before, I have them in the Pulumi.stack.yaml file and it seems to ignore it and use whatever's in the .aws folder, but it was working previously without any .aws folder

Pretty sure RabbitMQ is melting my brain....

I am working on getting this working with Pulumi, its pretty straightforward...I'll add it the examples when I am done. https://github.com/rabbitmq/rabbitmq-peer-discovery-k8s/tree/master/examples/k8s_statefulsets

Any update on CircleCI orb for Pulumi? It seems great new features are coming in new version such as

stack_init

,

stack_rm

, and

stack_output

. I really looking forward to it.

Hi guys! If a pulumi resource hasn't been created properly and I want to force the redeploy. How can I do that? For example I couldn't create a GKE cluster, because of

Cluster "gke-cluster-1" has terminal state "ERROR" with message "Retry budget exhausted (10 attempts): Google Compute Engine: A route in one of the active peer networks hides the address space of the new subnetwork."

Now I want to recreate it, but I get

Plan apply failed: googleapi: Error 409: Already exists: projects/.../zones/europe-west3-c/clusters/gke-cluster-1., alreadyExists

I removed this resource from pulumi state directly with

pulumi state rm urn

, but the behaviour is the same.

Hi! Is there a proper way to reuse an "azure.storage.Account" resource created by a previous Pulumi stack? I'm trying to use the StackReference but without success, suggestions ? Thanks

Hi everyone, Im looking at app.pulumi.com and looks like pricing is related to amount of stacks. In this case if I do prefer “high granularity”(it has a lot of benefits) of stacks, app.pulumi.com becomes really pricy. What’s you opinion in this matter guys?

Has anyone run into issues with outputs on failed updates?

Hi! I inherited a GCP project setup done via Pulumi. When I run

pulum preview

or

pulumi up

commands, I see the following error log. Any ideas on what might be going on?

$ pulumi preview
Previewing update (solvvy/<redacted>):

     Type                 Name                       Plan     Info
     pulumi:pulumi:Stack  <redacted>           1   error

Diagnostics:
  pulumi:pulumi:Stack (solvvy-ml-main):
    error: Running program '/Users/amey/work/code/infrastructure-live/gcp-projects/<redacted>/project' failed with an unhandled exception:
    Error: invocation of gcp:organizations/getActiveFolder:getActiveFolder returned an error: invoking gcp:organizations/getActiveFolder:getActiveFolder: Folder not found
        at monitor.invoke (/Users/amey/work/code/infrastructure-live/gcp-projects/solvvy-ml/project/node_modules/@pulumi/pulumi/runtime/invoke.js:74:33)
        at Object.onReceiveStatus (/Users/amey/work/code/infrastructure-live/gcp-projects/solvvy-ml/project/node_modules/grpc/src/client_interceptors.js:1205:9)
        at InterceptingListener._callNext (/Users/amey/work/code/infrastructure-live/gcp-projects/solvvy-ml/project/node_modules/grpc/src/client_interceptors.js:568:42)
        at InterceptingListener.onReceiveStatus (/Users/amey/work/code/infrastructure-live/gcp-projects/solvvy-ml/project/node_modules/grpc/src/client_interceptors.js:618:8)
        at callback (/Users/amey/work/code/infrastructure-live/gcp-projects/solvvy-ml/project/node_modules/grpc/src/client_interceptors.js:845:24)
        at Function.module.exports.loopWhile (/Users/amey/work/code/infrastructure-live/gcp-projects/solvvy-ml/project/node_modules/deasync/index.js:71:23)
        at promiseResult (/Users/amey/work/code/infrastructure-live/gcp-projects/solvvy-ml/project/node_modules/@pulumi/pulumi/utils.js:70:13)
        at Object.liftProperties (/Users/amey/work/code/infrastructure-live/gcp-projects/solvvy-ml/project/node_modules/@pulumi/pulumi/utils.js:102:19)
        at Object.getActiveFolder (/Users/amey/work/code/infrastructure-live/gcp-projects/solvvy-ml/project/node_modules/@pulumi/organizations/getActiveFolder.ts:37:25)
        at Object.<anonymous> (/Users/amey/work/code/infrastructure-live/gcp-projects/solvvy-ml/project/core-project.ts:9:21)

Permalink: <https://app.pulumi.com/solvvy/><redacted>/<redacted>/previews/a98b9966-82b6-4be3-9cf3-4d1b3d3b937c

FWIW I have

owner

access to the underlying GCP project and I am able to run

pulumi

commands on other stacks in the same project.

What is the preferred way to make sure Pulumi can validate the existence of a new EKS cluster and keep the EKS API endpoint private?

I was trying out the .NET Core support using this sample: https://github.com/pulumi/examples/tree/master/azure-cs-appservice, and the initial deployment works well, but making changes to the "wwwroot/index.html" in the sample and doing "pulumi up" results in the following error: "panic: interface conversion: interface {} is nil, not map[string]interface {}", when it tries to update the Azure App Service settings. I'm unsure where to log an issue?

Hello, quick question: are you planing to support kubernetes kops? Thx in advance.

and where is your channel, dedicated to .NET APIs?

hi! I'm trying to do this (within an API Gateway route definition):

eventHandler: async (event, context) => {
                const serverless = require('serverless-http');
                const app = require('./app');
                const handler = serverless(app);
                const result = await handler(event, context);
                return result;
            }

But the file in "./app" never gets uploaded to my lambda zip. Any clue?

Hello, I have a k8s Deployment (TypeScript) I am updating via

pulumi up

in which I have left out needed env vars for my container so the Pod enters a CrashLoopBackOff, I would expect the command to eventually fail with a non-zero exit code. However, all it does is warn about the CrashLoopBackOff and then completes with 0 exit. In k8s I can see the old revision is still working as expected and the new revision as status CrashLoopBackOff. Is there something I need to specify either in the cli command or my configuration to get the desired failure exit to occur?

Hello. I've been testing the .net client over the last 24 hours to see if it's suitable to replace our ARM templates. It's going pretty well, but I have two questions: 1. How do people deal with the random AppService naming? The rest I get, but the name of the appservice also drives the URL it runs under, which has flow-on effects to stuff like custom domains, CORS policies, auth integration etc. Does every single person that uses Pulumi for app service deployment override the naming convention? 2. Currently we share a single resource group between our front-end and back-end arm templates, with the RG being created via the az command line if it doesn't exist already. How should this be represented within a Pulumi definition (considering we still want the stack definitions to remain separate between our front-end and back-end)?

Hello all, I'm experiencing issues with inconsistent docker image builds. I'm rebuilding the stack now to see if this comes back on a clean slate. Any ideas where that could be coming from?

Can anyone provide some insight on why changing tags on an EC2 Instance would necessitate a Replace instead of an Update when running

pulumi update

?

Hey there, I've been playing around with Azure Devops and Pulumi, and I've had some mixed results, my immediate question is with relation to if using the Release Task https://marketplace.visualstudio.com/items?itemName=pulumi.build-and-release-task then how do I get the exported variables out of the task? Thanks!

Hi, pulumi hangs forever when I create Amazon Aurora like below.

const aurora = new aws.rds.Cluster(util.name("aurora"), {
    engine: aws.rds.AuroraMysqlEngine,
    engineVersion: "5.7.mysql_aurora.2.06.0",
    dbSubnetGroupName: "rds-subgrp",
    masterUsername: stack.config.requireSecret("aurora_user"),
    masterPassword: stack.config.requireSecret("aurora_password"),
  });

console output (hanging here):

Resources:
    + 1 to create
    62 unchanged

Updating (dev):

     Type                 Name                     Status         Info
     pulumi:pulumi:Stack  intelligence-dev         running...     read aws:autoscaling:Group asg-api-intelligence
 +   └─ aws:rds:Cluster   aurora-intelligence-dev  creating...

my pulumi version: 1.5.1 my node version: 12.13.0 Any idea?

Even with --verbose option, it says nothing.

Thanks @delightful-lizard-41466 - I'll give that a go!

And thanks again @delightful-lizard-41466 - that worked nicely - cheers need to perform a stack select first though, otherwise all good

I am creating an IAM user and and access key and marking the access key's secret as a secret using

additionalSecretOutputs

. I am taking the secret and putting it in Vault, using

dataJson: accessKey.secret.apply(secret = JSON.stringify({ AWS_SECRET_ACCESS_KEY: secret }))

. I expected the input to Vault to be encrypted, given that the input is a secret. How can I make it so that the secret is encrypted in my state file?

Hi guys! How to fix the error below?

.pulumi/stacks/development.json: snapshot integrity failure; refusing to use it: resource urn:pulumi:development::smth-pulumi-1::kubernetes:core/v1:Service::ingress refers to unknown provider urn:pulumi:development::smth-pulumi-1::pulumi:providers:kubernetes::gke_k8s::58b9c381-c2ac-4ba7-8839-057752717b88

State file is in a GCP bucket.

Forgot to post this here in the main thread. Thanks!

I went to do a

pulumi up

today and the cli just drops after the confirmation prompt with

error: confirmation cancelled, not proceeding with the update: EOF

It seems similar to this closed issue https://github.com/pulumi/pulumi/issues/1762

hi all, probably a stupid question on my side here, but the documentation is slim on the remote state side of things. I know I need to do

pulumi login

<azblob://my-pulumi-state-bucket>

if I want to store my state in an azure blob, but 1) I am trying to find an example to see the real syntax for that URL, also, 2) how does the authentication work for that?