pulumi-community #general

Channels

general

fast-dinner-32080

01/13/2020, 8:42 PM

Is there a way to share config between stacks? I know right now there is a per stack config but I am looking to see if there is a way to also have global config that all stacks share in a project.

shy-microphone-28807

01/13/2020, 9:39 PM

Hi. I am having trouble understanding some aspect of the programming model and the way promises work.

shy-microphone-28807

01/13/2020, 9:39 PM

The following code throws an error for calling

id

on undefined

shy-microphone-28807

01/13/2020, 9:40 PM

const sourceIds = sourceAccounts.apply(accounts => accounts.map(account => `${account.id}`))

busy-umbrella-36067

01/13/2020, 9:58 PM

Does

awsx.ecs.FargateService

attempt to find an ECS cluster if one is not defined? Or does it always create a cluster name

default-cluster

rhythmic-camera-25993

01/13/2020, 10:01 PM

it creates a default cluster, but you can always pass in a cluster as the

cluster

parameter of the FargateServiceArgs

orange-ghost-99337

01/13/2020, 10:41 PM

i see following error while trying to add RSA Key as a secret using pulumi cli, did any one see this issue?

orange-ghost-99337

01/13/2020, 10:42 PM

pulumi config set --secret --path sat-key.yellow "$(cat sat_key.pub)

An error occurred: bad flag syntax: -----BEGIN PUBLIC KEY----

bright-orange-69401

01/14/2020, 5:09 AM

Is it possible to let the user solve a Captcha as part of a 'pulumi up` ? (for example using Python's

raw_input

function to read from CLI)

cold-coat-35200

01/14/2020, 7:29 AM

hi, what is the proper way to remove old pulumi plugins? I run a

pulumi plugin rm --all

command, then a pulumi up in a repo, expected pulumi to install the necessary plugin, but get:

➜  cert-manager (cert-manager) ✗ pulumi up
Previewing update (sbx):
[resource plugin aws-1.17.0] installing
Downloading plugin: 58.95 MiB / 58.95 MiB [========================] 100.00% 11s
Moving plugin... done.
error: could not load plugin for kubernetes provider 'urn:pulumi:sbx::k8s-cert-manager::pulumi:providers:kubernetes::k8s-provider': no resource plugin 'kubernetes' found in the workspace or on your $PATH

looks really strange, that it installed one plugin, but not the others. I assume there is a better way than manually install the correct plugin versions

adventurous-garage-59192

01/14/2020, 7:47 AM

Is there a reason why reading the stackref is considered a resource change?

adorable-sugar-92867

01/14/2020, 9:29 AM

Hello, being new to Pulumi I’m impressed by it’s potential as far as I thing I understand it. So deep diving I set out to create a k8s cluster on digital ocean. Got a long way with by implementing this https://www.digitalocean.com/community/tutorials/how-to-set-up-an-nginx-ingress-with-cert-manager-on-digitalocean-kubernetes tutorial in Pulumi code. However the final letsencrypt step is a bit too long to implement to convert. Luckily I found a way to run those yaml’s from Pulumi (

new ConfigFile(name, {file: https://...})

), but unfortunatly that does not seem to be idempotent… Is there a better ‘Pulumi’ way to create the needed k8s resources inside

<https://github.com/jetstack/cert-manager/releases/download/v0.12.0/cert-manager.yaml>

adorable-sugar-92867

01/14/2020, 9:31 AM

I’m guessing I would need the models from ‘cert-manager.io/v1alpha2’ to start with. Do these exists?

adorable-sugar-92867

01/14/2020, 10:10 AM

Running Pulumi up shows “+ 34 to create” with loads of errors (“creating failed error: … already exists”). Also removing the new ConfigFile line does not seem to remove the stuff from the k8s

adorable-sugar-92867

01/14/2020, 10:11 AM

Hm,… could that be because I manually ran those that yaml and the resources are not managed by Pulumi?

limited-rainbow-51650

01/14/2020, 10:56 AM

I’m getting confused about everything regarding cloud state storage. I find the following issues and/or PRs: • Backend setting in project config (https://github.com/pulumi/pulumi/pull/2813) • Persist filestate backend URL in Pulumi.<stackname>.yml (https://github.com/pulumi/pulumi/issues/2996) • Project name in stack identity inconsistent between backends (https://github.com/pulumi/pulumi/issues/2522) • Using S3 backend with multiple projects is unpleasant (https://github.com/pulumi/pulumi/issues/2814) This is a bit of a mess. The first two issues seem to contradict: is a backend URL project or stack specific? Also, if each project can have a different backend, how can project B which has a StackReference to A find the state backend of A? On top of that, how can Pulumi be logged in into different backends?

adorable-sugar-92867

01/14/2020, 11:16 AM

Q: before creating a cluster a provider obviously isn’t valid and until

doctl kubernetes cluster kubeconfig save $CLUSTER_NAME

has been run (manually) instructions such as

new kubernetes.yaml.ConfigFile("cert-manager", {file: ...}

seem to fail (error: unable to load Kubernetes client configuration from kubeconfig file: invalid configuration: no configuration has been provided). Is there a recommended way around that?

✔️ 1

famous-bear-66383

01/14/2020, 2:41 PM

Anyone here tried to create k8s cluster in circle ci ? an inspiration about the use case is https://circleci.com/blog/continuous-integration-for-salesforce-applications/ I have a question !

witty-grass-44130

01/14/2020, 4:15 PM

Could anyone try to reproduce this issue on Linux or MacOs? https://github.com/pulumi/pulumi-kubernetes/issues/949 Is only Windows affected?

bitter-dentist-28132

01/14/2020, 4:27 PM

i'm installing cert-manager via yaml and i have

const certManager = new k8s.yaml.ConfigFile(yamlUrl, {}, {provider});
const dependsOn = certManager.resources.apply((resources: any): any => Object.values(resources));
const CLUSTER_ISSUER_YAML = `...`; // uses http01
const clusterIssuer = new k8s.yaml.ConfigGroup('cluster-issuer', {yaml: CLUSTER_ISSUER_YAML}, {provider, dependsOn});

so that the

ClusterIssuer

isn't installed until after everything else is. now i'm also adding a secret so that i can do a

dns01

solver using digitalocean. is there a way to add the secret to

dependsOn

? basically, to merge two `apply`s? or would i have to create the secret with the first

dependsOn

, and then do a

pulumi.all

to merge the two `ConfigGroup`s' resources?

rhythmic-camera-25993

01/14/2020, 4:53 PM

anyone know of any godaddy providers already available? if not I was going to take a stab at converting

terraform-godaddy

a bit later today

flat-insurance-25294

01/14/2020, 7:18 PM

It’s not that Pulumi work or doesn’t work, it’s just that I know too little on how stuff works.

gentle-diamond-70147

01/14/2020, 7:19 PM

I think some people might take your "Don’t rely on Pulumi for destroying things." comment as suggesting that Pulumi is unreliable, hence my response. :)

flat-insurance-25294

01/14/2020, 7:22 PM

Yeah, I can see that, I am using Pulumi because it’s more reliable than me, sorry if it came across like that.

👍 1

creamy-potato-29402

01/14/2020, 7:23 PM

In my years using pulumi I’ve never seen it accidentally fail to delete resources.

👋 1

flat-insurance-25294

01/14/2020, 7:24 PM

I have. It had issues with Cloudfront because that process is slow. Issues with S3 where if the bucket wasn’t empty. It’s not Pulumis fault, but it did put us in a weird state that other stuff couldn’t be deleted as well (Roles, iAM users). had to manually edit state for that.

flat-insurance-25294

01/14/2020, 7:24 PM

The issue isn’t Pulumi, terraform has the same issues ofc. Proper tagging + AWS console is easier and more obvious.

creamy-potato-29402

01/14/2020, 7:26 PM

hmm, I don’t think I understand the specific scenario. in any event, pulumi doesn’t manage ALBs on your behalf in the situation described. If they are left over this is almost certainly an EKS issue.

creamy-potato-29402

01/14/2020, 7:26 PM

this is true for both

Service

and

Ingress

creamy-potato-29402

01/14/2020, 7:26 PM

cc @late-printer-99022