How to assign an ipv6_cidr_block to a subnet by subnetting the ipv6_cidr_block of the IPv6 subnet assigned to the VPC?

How to do string manipulation of dynamic attributes?

I guess it's apply()?

anyone have tips on debugging cases where

get_

methods don't seem to be returning what you'd expect? Specifically I'm calling ec2.get_security_groups and passing a filter that matches fine on the aws CLI, but in Pulumi I can never get it to return any security groups besides the default one.

narrowed it down a bit - the

get_

methods like

get_ami

and

get_security_groups

are querying into the wrong AWS region; i.e. not the same region where pulumi is provisioning resources.... hmmm

howdy folks... just taking Pulumi c# for a spin and have a few questions.. I would like to provision a Cosmos DB free tier & not sure what value should go in offerType?

from a solution structure point of view, most Azure examples I see bundle the infrastructure together with the application & wondering if this is a best practice? For example, would having an Infrastructure Pulumi solution and an Application Pulumi solution be the way to go or bundling is fine?

now I remember why CloudFormation isn’t my favorite thing… I need to deploy one small change (variable name), and I’m bouncing all over the file to make the changes… 😓

Is there a way to taint a resource using pulumi? I know I can target destroy but I want to recreate a resource along with any dependency updates/recreations that need to go along with it. So marking a resource for recreation is what I am looking for.

in a dynamic provider i've got a lot of

public readonly serverUri: pulumi.Output<string>;

which is filled out by pulumi after apply but with

strict: true

in tsconfig.json it complains that it's "not definitely assigned in constructor" - is there any easy way around that please

how does resource deletion ordering work? i'm running into a problem where when I try to delete a load balancer resource, it refuses to delete because there are resources still using the load balancer. if every resource that uses that load balancer uses one of its parameters in its resource definition, or has an explicit

dependsOn

, will that load balancer only be deleted after all resources that use it are deleted? what about transitive dependencies?

Does pulumi cli handle the SIG_TERM and SIG_KILL?

Hi guys, how do I specify the path of the values file for an helm chart?

Hi, I'm new to Pulumi, we're doing a test with a lambda function and API gateway. The deployment worked fine when everything was in one big file, but after we moved things into ComponentResources, we're getting an error

Error creating Lambda function: ResourceConflictException: Function already exist:

when we try to create the actual lambda function. The function is actually being created, but it seems like pulumi is trying to create it twice for some reason. The created function isn't destroyed by a pulumi destroy, so it doesn't ever seem to get registered with the state. Any ideas on what I'm doing wrong?

Regarding the Github App for Pulumi, is there anything special we need to do for it to comment on PR’s with the status? I recently had the github action adding a comment with the

COMMENT_ON_PR

flag, but have since disabled it in an attempt to switch to the github app as the GH actions integration is far too verbose.

Hi, is there a chance to use pulumi without sharing my stack to pulumi.com ? 🙂 (I’m new to pulumi)

Hello, quick question from newbie about projects and stacks naming. I have following folder structure (currently trying to migrate off terraform) that is kept in GIT.

└── infrastructure
    └── network
        ├── dev
        ├── prod
        └── stage
            ├── 01-host-project
            │   ├── Pulumi.stage.yaml
            │   └── Pulumi.yaml
            └── 02-host-vpc
                ├── Pulumi.stage.yaml
                └── Pulumi.yaml

So by default I am getting:

<organisation>/02-host-vpc/stage

as a stack name. What is the suggested approach to have project name aligned to my directory structure? Ideally something like:

<organisation>/infrastructure/network/02-host-vpc/stage

? Also I use this directory structure as a template for different projects/customers does it mean that for each separate deployment I need to have different

<organisation>

? Thanks!!😉

how do I get the string representation of a stack output? e.g. https://gist.github.com/ohlol/90cdf58e5a2ea49976470c06d8fb4afd

What is the best way to bootstrap Pulumi project via CLI in automated fashion (non-interactive)? I am running following script:

export PULUMI_CONFIG_PASSPHRASE=testtest

pulumi new gcp-typescript \
  --name 02-host-vpc \
  --description "GCP host VPC" \
  --stack stage \
  --secrets-provider passphrase \
  --yes \
  --non-interactive \
  --force

pulumi config set gcp:project "test"

This creates new project

Pulumi.yaml

and

Pulumi.stage.yaml

as required but it overwrites my

index.ts

file. Is there any way to stop that? Thanks 😉

In this tutorial https://www.pulumi.com/docs/tutorials/aws/aws-ts-ec2-provisioners/ what is the significance of the final two dashes after each cat line? Are they necessary or is that a typo?

$ cat rsa.pub | pulumi config set publicKey --
$ cat rsa | pulumi config set privateKey --secret --

is this a bug? I went to use some existing code, and now it's complaining about this code, saying it should be a string rather than bool, seems like a bug

networkInterfaces: [{
                    associatePublicIpAddress: false,
                    deleteOnTermination: true,

interface LaunchTemplateNetworkInterface {
        associatePublicIpAddress?: pulumi.Input<string>;
        deleteOnTermination?: pulumi.Input<boolean>;

am I doing something wrong with

ec2.get_subnet_ids()

in Python SDK? I pass

vpc_id=vpc.id

as I do with other resources but get an exception:

Exception: invoke of aws:ec2/getSubnetIds:getSubnetIds failed: "vpc_id": required field is not set ()

Hi. Quick question. I have this code:

const s3AccessKeyIdSecret = args.s3AccessKeyId || config.getSecret('s3AccessKeyId')
    const s3SecretAccessKeySecret = args.s3SecretAccessKey || config.getSecret('s3SecretAccessKey')

    const s3AccessKeyId = pulumi.all([s3AccessKeyIdSecret]).apply(([id]) => id)  
    const s3SecretAccessKey = pulumi.all([s3SecretAccessKeySecret]).apply(([secret]) => secret)

How can I simplify this? I just want to get the secrets from Pulumi secrets if I don't specify them in the class. I am new to Typescript. Also, I am using these secrets in two objects, but for some reason the variables are not "empty" only when accessed the first time for the first object. When accessed for the second object the variables yield no values - I can see this in the config map that is created without those keys only for the second object; the objects are defined in the same scope and the keys that use these secrets are the same. Why aren't the variables working properly when used the second time? Thanks!

Uhm is it just me or is Pulumi really slow?

Is it save to have a stack change from

gcp.projects.Services

to

gcp.projects.Service

? Pulumi shows it will delete the resource, but will that disable all of the APIs?

good afternoon, I have my code in typescript, everything turned out ok, but now I want to be able to run a script to copy files to my azure fileshare, only when I finish applying the changes. It can? How do I detect that I finish applying the changes, what is the callback? Is there an after apply method?

For the CI/CD pipline how do we check that the stack already exists? When I call

pulumi stack init my-stack

and the stack already exists pulumi throws an error

error: no stack named 'my-stack' found

I think pulumi cli should rather say something like

stack named 'my-stack' already exist. OK

hi

my pulumi on command line hangs.