pulumi-community #general

big-potato-91793

03/19/2020, 9:36 PM

it’s possible to create our own pulumi template? So when we do,

pulumi new

we could our template base on the one that pulumi is offering.. like adding eslint or other things

green-morning-1318

03/19/2020, 11:08 PM

Do we have any CircleCI experts here? 🤔 I’m trying to use the Pulumi Orb to update my stack but I get an exception:

Copy code

pulumi update --stack retgits/dev --cwd ~/project/pulumi --skip-preview
Updating (dev):
@ Updating....
 
Permalink: <https://app.pulumi.com/retgits/acmeserverless-payment/dev/updates/5>
error: failed to discover plugin requirements: failed to execute program cmd: exit status 1

Exited with code exit status 255

It runs fine on my Mac, so would anyone have thoughts on how to debug this?

calm-quill-21760

03/20/2020, 12:14 AM

My apologies if this has already been reported, but attempts to download Pulumi 1.13 for MacOS fail (URL https://get.pulumi.com/releases/sdk/pulumi-v1.13.0-darwin-x64.tar.gz):

Copy code

This XML file does not appear to have any style information associated with it. The document tree is shown below.
<Error>
<Code>AccessDenied</Code>
<Message>Access Denied</Message>
<RequestId>2607D7593AFB741F</RequestId>
<HostId>
lYM2+bELcS/KWDuxMZaB3gDjhVVyuimL2ga/rNwJYjkrXbtmkcAh5xiFnO322owuOBrazv+4LqA=
</HostId>
</Error>

adorable-action-51248

03/20/2020, 10:16 AM

Hello ! I was wondering how can I best write a (js) script that creates a GCE disk from the latest and non-pending snapshot ?

adorable-action-51248

03/20/2020, 11:34 AM

A follow up question: is there a good way to ask the user who deploys if they want to use a snapshot or keep the current disk ? I am thinking to use an environment variable for this at the moment. Since the output of my index.js is buffered. I cannot prompt the user while executing the script, which would be my preferred method. So that I can display some choices.

adorable-action-51248

03/20/2020, 4:39 PM

I am trying to build a custom dynamic provider in order to reboot an instance. I am bumping into one issue regarding function serialization. i saw the example https://github.com/pulumi/examples/tree/master/aws-ts-ec2-provisioners and i am a bit confused how the serialization works there. since the provisioners pull in a lib ssh2 which in turn uses the crypto module and net module. these packages are native. are some native libraries whitelisted ?

breezy-hamburger-69619

03/20/2020, 5:46 PM

We’ll be hosting open office hours today @ 12pm PT in a Zoom room if folks would like to chat about general Pulumi use, cloud providers, and Kubernetes. Join us with any questions, or say hi 🙂 https://zoom.us/j/159381380 https://twitter.com/PulumiCorp/status/1241056863006973953

🙌 2

green-morning-1318

03/20/2020, 6:06 PM

Awesome idea!

👍 1

breezy-hamburger-69619

03/20/2020, 7:01 PM

Office hours have started. Bring any q/a you might have, or come hang with us: https://zoom.us/j/159381380

colossal-room-15708

03/21/2020, 3:53 AM

Does

pulumi.asset.FileArchive

ignore folders with

? It looks like it's not packaging up my

.python_packages

folder.

bland-guitar-34582

03/21/2020, 6:10 AM

We are facing the problem that the aks cluster was replaced all the time when running pulumi up when doing k8s.rbac.v1.RoleBinding. And according to this code in pulumi provider, there is a note "We can't tell for sure if a computed value has changed, so we make the conservative choice, and force a replacement.". Is there any way to avoid this replacement all the time?

Copy code

// <https://github.com/pulumi/kubernetes-guides/blob/master/azure/03-cluster-configuration/index.ts>
const aksProvider = new k8s.Provider("aksProvider", {
    kubeconfig: aksCluster.kubeAdminConfigRaw
});

const aksRoleBinding = new k8s.rbac.v1.RoleBinding(`${config.prefix}-aad-integration`, ..., { provider: aksProvider })

👍 1

polite-motherboard-78438

03/21/2020, 3:51 PM

Hello. anyone with experience on doing unit / integration testing with Pulumi? I managed to to a basic test to check if my Kubernetes cluster was created with the specified tags. But now I would like to do some more tests to check for example an helm have received the correct values / a configMap would be created with a specific content? Can I do it in an "Unit test style" in Typescript or do I need to use the Go integration testing framework? I tried to following but didnt went well: ( TypeError: Cannot read property 'invoke' of undefined)

Copy code

test("It creates the correct configMap", done => {
    fluentBitChart
      .getResource("v1/ConfigMap", "fluent-bit-config")
        .apply(cm => {
          // TODO check if the data has correct value
        console.log(cm.urn);
        done();
      });
  });

Note that fluentBitChart is an instance of "k8s.helm.v3.Chart". Baically I want to write a test to validate the Helm resource received the correct values, some of them are reading from config etc

acoustic-leather-88378

03/21/2020, 9:17 PM

When using the Kubernetes provider and creating a Kubernetes

CustomResource

, for example:

Copy code

...
new CustomResource("test-cluster", {
    apiVersion: "<http://acid.zalan.do/v1|acid.zalan.do/v1>",
    kind: "postgresql",
    metadata: {
        name: "test-cluster"
    },
    spec: {
      ...
    }
}
...

and that custom resource results in other new resources being created by an operator. For example a

StatefuleSet

, multiple `Secret`'s etc. If, in the same Pulumi program, after creating the

CustomResource

I want to import and use those new resources (created by the operator, when the new

CustomResource

above was created), how would I import them? Currently

pulumi up

will fail on the preview with a "resource ... does not exist" error, since the resource that would be created once run, isn't there yet. Is there an elegant/any way to handle this?

green-morning-1318

03/21/2020, 11:18 PM

What do you do when you want to learn something new, have to stay indoors all day, and have a few K8s manifests lying around?… exactly you build a Pulumi project to deploy an app with • 5 secrets • 2 configmaps • 12 deployments • 12 services • 2 nodeports Built it with TypeScript, because I’d never done that before and I’m kinda pleased with the result 😅 https://github.com/retgits/acmefitness-pulumi

👌 1

🎉 4

green-morning-1318

03/21/2020, 11:19 PM

^^ @breezy-hamburger-69619 as promised, I deployed an app to K8s this weekend 😉

🎉 2

famous-kite-69533

03/22/2020, 5:53 PM

Hi all! I started using Pulumi this afternoon 😄 First question: how do I delete all the resources created in a stack, without deleting the stack and its config/secrets?

brainy-table-30266

03/22/2020, 6:50 PM

Hi, I've been playing around with the quickstart, good stuff. In my activity feed on the app.pulumi.com, I see a (seemingly) random user linked to some of my updates. Any ideas why?

famous-kite-69533

03/22/2020, 9:35 PM

I am trying to install Velero with the Helm chart with the v2 version since it is not compatible yet with v3. Pulumi fails with "skipping unknown hook: "crd-install"". How can I make sure it handles the hooks? There is no mention of this in the documentation

victorious-scientist-9866

03/23/2020, 12:40 AM

Hi All! Is there an easy way to use the contents of a file as a secret?

victorious-scientist-9866

03/23/2020, 12:41 AM

I'm currently trying to inject a

.htpasswd

file into a Kubernetes Secret to be mounted in a container

victorious-scientist-9866

03/23/2020, 12:45 AM

I had a similar requirement previously when creating an imagePullSecret. My solution that time was to programmatically construct the file contents, but I don't think it's a good way to go.

victorious-scientist-9866

03/23/2020, 2:05 AM

@green-morning-1318 @billowy-army-68599 thanks to you both. I think this works fine for the

.htpasswd

example since the file contents are already hashed/secure but it doesn't work for the example of an image pull secret since the contents are only base64 encoded and can easily be decoded. Ideally, unencrypted secret data wouldn't be commited to the git repository storing my deployment files.

big-restaurant-51338

03/23/2020, 12:02 PM

hi! how do I retrieve the internal IP of a newly created

compute.Instance

? I tried this, but I get a KeyError

Copy code

# actual vm creation
instance = compute.Instance("instance",
        machine_type=config.require('type'),
        boot_disk={
            "initializeParams": {
                "image": config.require('image')
                }
            },
        network_interfaces=[
            {
                "subnetwork": parentStack.get_output('subnet_id'),
                }
            ],
        # metadata={
        #     "startup-script": init_script
        #     },
        zone = config.require('zone'),
        tags = ["mytags"]
        )
# Register the DNS record
dns_name = parentStack.get_output('private_dns_zone').apply(lambda a: f"instance.{a}")
instance_recordset = dns.RecordSet("instance-recordset",
        managed_zone = parentStack.get_output('private_dns_name'),
        name = dns_name,
        rrdatas = [ instance.network_interfaces[0]['networkIp'] ],
        ttl = 3600,
        type = "A",
        opts=pulumi.ResourceOptions(depends_on=[instance]))

famous-kite-69533

03/23/2020, 12:10 PM

Hi, I am trying to install the Velero Helm chart, which is compatible with Helm v2 but not v3. So I am trying to install it with

k8s.helm.v2.Chart(...)

but even with v2 Pulumi gives me

skipping unknown hook: "crd-install"

. How can I ensure the CRDs are installed? I can't find a setting or something like that in the docs. Thanks!

👍 1

limited-librarian-23694

03/23/2020, 4:00 PM

Hello! Does anyone know if there is an API for the CLI commands? i.e. is it possible to write code in python or typescript that executes operations like

pulumi up

, without shelling out to the CLI?

busy-umbrella-36067

03/23/2020, 5:27 PM

For the new mocking support, how is it toggled? I see

PULUMI_TEST_MODE

mentioned so I’m guessing thats an env var, is there any other way to toggle it?

pulumi.runtime.setConfig()

better-rainbow-14549

03/24/2020, 11:21 AM

Copy code

error: Running program 'C:\dev\misc\pulumi-test' failed with an unhandled exception:
    Error: EBUSY: resource busy or locked, open '\\.\pipe\pulumi2823058552\invoke_req'

better-rainbow-14549

03/24/2020, 11:21 AM

i'm getting that all the time now is there a fix that doesnt involve rebooting?

salmon-account-74572

03/24/2020, 4:21 PM

Wish list item: A segment for

powerline-go

(https://github.com/justjanne/powerline-go/) that shows the currently selected Pulumi stack in my Powerline prompt. 🙂

👍 1

brave-ambulance-98491

03/24/2020, 5:07 PM

i just ran into this bug; the title is a bit innocuous. may i suggest something more like "Parents deleted due to

refresh

corrupt pulumi state file"? https://github.com/pulumi/pulumi/issues/3583