I'm just bumping the question I asked earlier - does anybody know? 😇

Hey guys. I've deployed an awsx.ec2.VPC and an eks.Cluster successfully, but, when trying to destroy, the process gets stuck deleting a subnet and internet gateway. These resources are defined as follows (straight from the tutorial):

const vpc = new awsx.ec2.Vpc(name, {
   subnets: [{type: 'public'}],
   tags: tags,
});

const cluster = new eks.Cluster(name, {
    vpcId: vpc.id,
    subnetIds: vpc.publicSubnetIds, }

Any idea on why it's not destroying properly? Could this be a bug? It's happened before, and I've had to go and manually destroy some underlying resources (load blancers I think). I do have some Helm charts deployed in the cluster (manged with pulumi as well) that include Load Balancer services, and these seem to be scheduled for destruction after the subnet and ig. Might this be it? any suggestions on how to properly manage dependencies for these charts?

I have a question that's not pulumi-specific, but maybe someone can help me out. in digitalocean i was adding DNS records using the ip address of the nginx ingress controller, by getting the service and looking at its

ipAddress

. but in AWS, the

ipAddress

is actually a hostname, so obviously it can't be used as the value for an A record. what's the way to do the same kind of thing in AWS?

I have one question. This is a pulumi + aws question. Scenario: I have a session with no aws env variables || aws credentials set. However I am running in a pod that has a aws role A and the pod is running in a node with aws role B. Now when I run pulumi preview/up. Will pulumi run using the pod's role or the ec2 node's role?

I’m running some unit testing that requires an export to grab the information and make sure the number of resources add up, but I actually DON’T want to clutter my console output with all that information (which I’m getting because of the export.) Is there a way to silence or mute the exported console data?

i want to make a JS object dynamically (i.e. push certain keys based on if/else blocks), and then render that JS object as yaml. some deeply nested keys may be

pulumi.Output<>

s. how can i do this?

Is it possible to prevent (accidental) uncommitted deploy ? Something in Pulumi teams or crossgaurd would be okay too. I see on the pulumi site that pulumi keeps track of when you run

pulumi up

on uncommitted code

Bumping this, hoping someone can help 🙂

Another Pulumi love moment: resource

aliases

rock!

Is there any sort of feature in Pulumi for resource replacement automation/lifecylce hooks? For example, let's say (in AWS) I have an s3 bucket named

my-special-bucket-abc123

and then pulumi sees the need to destroy and recreate. I have create before destroy set. Then it tries to create

my-special-bucket-xyz321

. Let's say I'm good with that but I need the data moved with the change. I could make an ssm automation document that could take a source bucket as input and a destination bucket as input and copy everything over. Would I be able to trigger the execution of that ssm automation document or any other type of script to handle that phase of the pulumi resource replacement lifecycle? I am not currently working on solving this but I'm just curious.

Hey, anyone is using ALB with EKS? I'm following this tutorial and deployment gets stuck on ingress creation. Looks like ALB is not being created. https://www.pulumi.com/blog/kubernetes-ingress-with-aws-alb-ingress-controller-and-pulumi-crosswalk/

Once I export a variable like : pulumi.export("NodeName", node) . (btw node is of type pulumi.Output I guess). How do I access it and print it ? print(NodeName) doesnt work.

Hi. I am using

awsx.ec2.Vpc.getDefault()

to get the default VPC in my account, is there a way to get the default security group in that VPC?

I’m an absolute newb to both Pulumi and Typescript. I’ve decided to throw myself in at the deep end and choose as a first project beyond the quickstart to create a stack that can create new accounts in our org, something I do regularly. To do so I’m using

aws.organizations.Account

but I’d like to see examples of this in use. Sadly, it’s not one of the modules in the examples Github repo so all I can find is the module reference page (which reads like Greek to non-devs like myself). I just need to see one working example. Anyone here have something like that?

Is there any complex project example? I found it hard to setup project's structure using modules/non modules and envs

Hey guys. I'm trying to deploy some docker images to a few Azure container registries, but it's failing to store the credentials and it produces an 'docker push failed: authentication required' error in some of the images, but not others, and not always the same ones. I'm getting the warning about 'your credentials will be stored unencrypted in .docker/config.json', which is fine, but when I check that file, the failing repositories' credentials are not there, while the ok ones are. Anyone encountered this?

Completely newbie question: does Pulumi have something like Terraform Modules? Some package sharing with a central repo to browse? I want to create a VPC with the relevant enpdoins and all that jazz and I’d rather not do it myself.

I only manged to find https://github.com/jen20/pulumi-aws-vpc as a relevant project so I am thinking that there’s no module/sharing strategy defined now

Simple question, how do you add tags to existing resources in AWS?

Having an issue getting the lambda serializer to bundle a file that’s

required

at the top of the handler. It’s relative to the main lambda file yet won’t pull it in.

Question about importing resources to Pulumi after reading: https://www.pulumi.com/blog/adopting-existing-cloud-resources-into-pulumi/ My impression is that I can reference existing infra with Pulumi for future objects. But if someone, for example, nuked my manually-created vpc imported by Pulumi I wouldn’t be able to use Pulumi to bring it back up. Is this correct, or is there another method for taking over control of existing resources?

depends_on doesnt seem to work here - Iam creating a deploymenet object (pulumi_kubernetes.apps.v1) from like: deployment = Deployment(app_name,..... Setting up a loadbalancer object like : nlb = Service(app_name,.... When i try to get the exteneded configuration of lb like : lb = aws.lb.get_load_balancer(name=nlb["load_balancer"]["ingress"][0]["hostname"].apply(lambda hn: hn.split('-')[0]), opts=pulumi.ResourceOptions(depends_on=[nlb])) It returns the entire list of loadbalancers as if the name= filter were none. My guess is there is a timing issue where the get_load_balancer is getting executed sooner before the nlb gets created. If timing is the issue, How do i make sure aws.lb.get_load_balancer gets called after the nlb creation ? [ depends_on seems to have no effect. else Looking for more Debugging techniques coz theres not much in the error message except : Exception: invocation of awslb/getLoadBalancergetLoadBalancer returned an error: invoking awslb/getLoadBalancergetLoadBalancer: Search returned 50 results, please revise so only one is returned

Indiscreet question: Does Pulumi have a long-term plan to migrate off the Terraform providers to custom providers? Or is the plan to continue using the Terraform ones and to add additional effort to supporting those?

'aws elbv2 add-tags...' How to do it in pulumi ?

:param str id: The unique provider ID of the resource to lookup.

from cloudformation/stack.py - Any idea what is this for aws ? is it just 'aws' ?

I'm having a hard time creating an explicit Lambda function. I'm consistently getting this error:

aws:lambda:Function (webhook-to-sqs):
    error: Error creating Lambda function: ValidationException:
        status code: 400, request id: 8c850971-e5d9-4be9-a285-5905fca34f90

with this resource:

return new aws.lambda.Function("webhook-to-sqs", {
    code: "./inc/core/processors/webhook-to-sqs.zip",
    handler: "index.handler",
    description: "write events to queue and return 200",
    runtime: "nodejs12.x",
    role: role,
    environment: {
      variables: {
        "QUEUEID": queue.arn
      }
    }
  });

As part of my troubleshooting efforts I was able to create the lambda with the AWS CLI using mostly the same settings and zip, and was able to verify its working in the console as expected. Is there anything I can do to get a more clear error message?

Recently administratively renamed our org via Pulumi ticket, but having issues with legacy stack references. Can someone assist?

is it possible to make an asset archive from an in-memory zip? i use the gitlab npm library to get an assets archive from a job, it'd be cool to pass the

Buffer

i get back directly to an

AssetArchive

Hey, in a Pulumi.stack.yml is it possible to define separate main files for each stack?

Hello, I would like to create an

aws.rds.Instance

with a

securityGroup

which allows only access from a specific

aws.ec2.Instance

. But If I would like to use

mysql.Provider

to create a database and user, I get this error when run

pulumi up

error: Could not connect to server: dial tcp 10.0.8.127:3306: connectex: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.

How could I achieve that?