swift-lunch-74411
11/28/2019, 10:01 AMswift-lunch-74411
11/28/2019, 10:01 AMquaint-artist-58613
11/28/2019, 10:09 AMimport * as k8s from "@pulumi/kubernetes";
import * as pulumi from "@pulumi/pulumi";
const env = pulumi.getStack();
const infra_stack = new pulumi.StackReference(`acmecorp/infra/${env}`);
const provider = new k8s.Provider("k8s", { kubeconfig: infra.getOutput("kubeConfig") });
const service = new k8s.core.v1.Service(..., { provider: provider });
If infra_stack is deployed in aws account A and current stack is deployed in aws account B, does the code snippet still work?🙂brainy-microphone-27448
11/28/2019, 10:28 AMuserdata
change(and instance recreation)?
https://github.com/avolkov-dev/pulumi-mount-issue/blob/master/index.ts#L16
Because now (without forceDetach
) we are getting Error waiting for Volume (vol-xxx) to detach from Instance: i-xxx error) I believe this is because we trying to detach volume on running instance and getting timeoutedred-football-97286
11/28/2019, 10:57 AMbroad-finland-69602
11/28/2019, 12:15 PMwhite-balloon-205
11/28/2019, 12:52 PMget_caller_identity
is the answer to how to dynamically get the AWS account id. @broad-finland-69602 what question do you have on how to integrate that? You should just be able to call the function.red-football-97286
11/28/2019, 1:54 PMfrom pulumi_aws import get_caller_identity
current = get_caller_identity()
important-leather-28796
11/28/2019, 9:44 PMwarning: resource plugin kubernetes is expected to have version >=1.3.1, but has 0.20.3-dev.1550685910+g50fc5e2.dirty; the wrong version may be on your path, or this may be a bug in the plugin
I did a pulumi plugin rm --all
and pulumi plugin install
but same occurred, need to rebuild node modules?plain-eye-9759
11/29/2019, 11:18 AMpulumi up
failed for some reason in the first run, and the database account managed to slip through. Subsequent pulumi up
tried to create that same resource and failed because of name uniqueness.
pulumi refresh
didn't work either
How can I handle this?cold-coat-35200
11/29/2019, 1:46 PMaws.iam.GroupPolicyAttachment
requires a pulumi.Input<Group>
and not a pulumi.Input<string | Group>
like the RolePolicyAttachment? Currently, I want to add a policy attachment to a group, but the group managed outside pulumi, which means I don't have a Group
resource and I can't get one, because aws.iam.getGroup
returns a GetGroupResult
, not a Group
stocky-island-3676
11/29/2019, 2:16 PMchilly-photographer-60932
11/30/2019, 12:12 AMpulumi:pulumi:Stack (aws-arcus-kitchensink-naveen-srinivasan):
error: an unhandled error occurred: Program exited with non-zero exit code: 1
The Pulumi runtime detected that 255 promises were still active
at the time that the process exited. There are a few ways that this can occur:
* Not using `await` or `.then` on a Promise returned from a Pulumi API
* Introducing a cyclic dependency between two Pulumi Resources
* A bug in the Pulumi Runtime
Leaving promises active is probably not what you want. If you are unsure about
why you are seeing this message, re-run your program with the `PULUMI_DEBUG_PROMISE_LEAKS`
environment variable. The Pulumi runtime will then print out additional
debug information about the leaked promises.
Permalink: <https://app.pulumi.com/MINDBODY-Platform/aws-arcus-kitchensink/naveen-srinivasan/previews/2daf38a1-f35b-4223-ba19-ca871a9f5ebd>
fresh-summer-65887
12/01/2019, 5:43 PMdotnet run
is "non-standard" and "against the grain". The expectation is that the .net program should be spawning the pulumi "engine" and not the other way around. And to be honest, I can see their point.
There was also a couple of other comments
• "I want to do other things in my program as part of deployment such as a db migration."
• "I want to use this to define resources of my own services"
This got me thinking a bit that it inverts things and turns pulumi into more of a platform and a bit more into orchestration which is bit of a fundamental architectural shift, afaik.
Anyway, just thought it would be interesting to share.thankful-optician-22583
12/01/2019, 5:53 PMmillions-energy-69153
12/02/2019, 3:41 AMpulumi-awsx
to create an AWS stack for our app as shown here. It consists of three ECS tasks: one for the server (api), one for the client, and one for our worker. I’d like to get /api*
requests going to the server and the rest going to the client. I’m using an ALB with target groups and a listener rule to try and achieve this.
With everything aligned with port 4000, this works great. If I want to have the ALB serve on 80 and the container ports staying on 4000, I get 503 responses. I’ve tried a number of things to do the port mapping, but nothing seems to work.
I found this issue: https://github.com/pulumi/examples/issues/267#issuecomment-524598748 which says, “If you’re running on Fargate you have to use the same port as what your container is listening on.” I hope this isn’t the case.
Thanks in advance for any guidance you can offer. Pulumi is an amazing tool!most-lighter-1731
12/02/2019, 10:48 AMpulumi up
. I'm currently getting a runtime error because it seems pulumi is trying to execute the task during preview inspite of the fact that the call to TaskDefinition.run()
is inside a pulumi apply
call. How can I make sure this code is executed during deployment and not before ? The relevant error is
error: Running program '/home/luis/Code/outmind/outmind-app/aws-architecture/src/index.ts' failed with an unhandled exception:
Error: Cannot call '.get' during update or preview.
To manipulate the value of this Output, use '.apply' instead.
and the origin of this is on node_modules/@pulumi/ecs/taskDefinition.ts:226:39
where the code is getting the cluster id.better-actor-92669
12/02/2019, 11:25 AMgcloud sql export
. Can't find it in documentation and source code. I use pulumi_gcp (python).
https://github.com/pulumi/pulumi-gcp/blob/master/sdk/python/pulumi_gcp/sql/cuddly-leather-18640
12/02/2019, 1:24 PMcolossal-plastic-46140
12/02/2019, 2:52 PMcuddly-leather-18640
12/02/2019, 3:10 PMlittle-energy-64187
12/02/2019, 3:46 PMbetter-rainbow-14549
12/02/2019, 3:49 PMerror: decrypting secret value: failed to decrypt: incorrect passphrase, please set PULUMI_CONFIG_PASSPHRASE to the correct passphrase
it's almost as if the azure AKS resource doesn't respect the setting when it initially writes its state to the state file, then the next time round it's trying to decrypt it. i don't know how to test this hypothesis thoughbitter-island-28909
12/02/2019, 5:36 PMadditionalSecretOutputs
incorrectly, although I could have sworn this used to work:
let pw = new random.RandomString("test-password", {
length: 8,
special: false,
additionalSecretOutputs: ["result", "id"]
});
let param = new aws.ssm.Parameter("test-password", {
length: 8,
value: pw.result,
type: "SecureString"
});
Expectation: The value of the RandomString and SSM parameter are not visible in plaintext in the stack state and web console.
Actual: The plaintext is visible in the stack state and web console.little-energy-64187
12/02/2019, 7:10 PMimport
option for already imported resources (and perhaps add aliases
) otherwise pulumi will try to replace them, but it can stay for k8s resources and no replacement would happen. What can be the reason for that?ambitious-ram-5811
12/02/2019, 9:50 PMHttpEventSubscription
and gotten back the message "Requested feature is not available in resource group [MY GROUP]. Please try using a different resource group or create a new one."ambitious-ram-5811
12/02/2019, 9:50 PMambitious-ram-5811
12/02/2019, 9:51 PMambitious-ram-5811
12/03/2019, 1:21 AMHttpFunction
?ambitious-ram-5811
12/03/2019, 1:22 AMconst get = new azure.appservice.HttpFunction("Read", {
route: "items",
methods: ["GET"],
callback: async (context, request) => {
return { status: 200, body: { url: anotherResource.urn } };
},
});
ambitious-ram-5811
12/03/2019, 1:22 AMconst get = new azure.appservice.HttpFunction("Read", {
route: "items",
methods: ["GET"],
callback: async (context, request) => {
return { status: 200, body: { url: anotherResource.urn } };
},
});
tall-librarian-49374
12/03/2019, 7:08 AM.get()
:
body: { url: anotherResource.urn.get() }