pulumi-community #general

stale-knife-36790

03/30/2020, 9:24 AM

How do I authorize my GCP Pulumi nodejs app/API endpoint? I'm currently only able to load the data from GCP console.

stale-knife-36790

03/30/2020, 9:24 AM

(Getting a 403 permission error when trying to load it in my browser)

faint-motherboard-95438

03/30/2020, 9:29 AM

Hi, I registered for the webinar “Getting Started with Infrastructure as Code with Pulumi” which is about to start, but it seems it forces to install an app to access it unfortunately, which I won’t. Will there be a replay available without having to install anything ?

gorgeous-postman-12842

03/30/2020, 9:55 AM

TBH if there is a static screen in a webinar, its quite boring and defeats the purpose of webinar 🙂 . It would be wise to do a workshop in any language and show it to folks who are unable to do the workshop themself while on the call.

famous-breakfast-43486

03/30/2020, 9:56 AM

Hi there

👋 4

stale-knife-36790

03/30/2020, 11:10 AM

Is there any way to authorize a pulumi GCP app so I can access the (GCP) API endpoint with my browser (or curl)?

Copy code

curl <https://europe-west1-project-name.cloudfunctions.net/api-name>

great-analyst-59265

03/30/2020, 11:29 AM

Is there a way to download resource plugins manually? I am using Pulumi v1.13.1 on Windows 10 WSL Ubuntu 18.04 and it takes around 44 minutes to download resource plugin azure-1.13.0 (same for other plugins). It works fine on a Azure Build Agent so as a workaround I want to download and install the resource plugins manually on my local machine.

bumpy-agent-19616

03/30/2020, 11:30 AM

When we try to create Azure AKS via pulumi, we get a k8s cluster created with a windows profile by default. Every time we build our project through CircleCI/Pulumi CLI we see the windows profile being updated. We would like to disable this behaviour. Do you have any suggestions on this for us?

👍 1

bright-jordan-62321

03/30/2020, 11:51 AM

Has anyone used Pulumi to create Azure Databricks successfully? I have been hitting some error constantly:

Copy code

Error waiting for the completion of the creating/updating of databricks workspace "dpworkspaceeadbac04" (resource group "resourcegroup8de3db5b"): code="permissionnotpropagated" message="permission_not_propagated: a retryable error occurred. databricks has not yet received permission to access resources in your managed resource group, which is necessary to set up your workspace. this process could take up to an hour. please retry then.

stale-knife-36790

03/30/2020, 12:12 PM

How do I call a function (made with Pulumi) with an authentication token (Google Cloud Platform)?

better-flower-95361

03/30/2020, 12:40 PM

Hi guys, I need some help with provisioning cluster nodes with rancher2. I have created cluster definition with one node (for know). I can connect to the cluster form pulumi and cluster is created but there are no nodes. Here is one defintion for the node:

var node1 = <ClusterRkeConfigNode>{};

node1.roles = ['worker'];

node1.user = '??'; // registry user

node1.labels = { 'frontend': 'ui' };

node1.address = '192.168.5.31';

node1.sshKeyPath = './keys/node1.id_rsa';

After running pulumi up command (with verbose node) I can see in the log following error: I0330 140453.793631 4620 host.go:451] Error closing 'nodejs' language plugin during shutdown; ignoring: 1 error occurred: * TerminateProcess: Access is denied. I don't know where is the problem. Who is registry user?

flat-parrot-25697

03/30/2020, 1:12 PM

hi, in order to build another app from the simple HTML page in the example - https://www.pulumi.com/docs/tutorials/aws/ecs-fargate/ is it enough to change the app folder content (and Dockerfile) or should I also change anything else? especially this line-

Copy code

image: awsx.ecs.Image.fromPath("nginx", "./app"),

what is the meaning of the "nginx"

cool-egg-852

03/30/2020, 4:52 PM

Is there a way to reset the stack state to a previous version? Something broke with my connection, and now pulumi thinks every resource is new.

colossal-alarm-90650

03/30/2020, 7:31 PM

I seem to have trouble searching for an aws resource by tag. For instance when looking for an s3 tagged with { Name: ‘foobar’ } I imagine I could get the id by the expression “const s3id = aws.s3.getBucket({ tags: { Name: ‘foobar’ } }, { async: true }).when(bucket => bucket.id)” but I get a red marker on tags even though it is a property in the object. Any ideas? Is this not how to search by tag?

bitter-zebra-93800

03/30/2020, 11:39 PM

Copy code

Anyone done a tool that parses pulumi stack output ? I want to capture it and insert it into some ansible code

breezy-gold-44713

03/30/2020, 11:54 PM

I’m getting a version incompatibility error. I’ve reinstalled the pulumi node stuff via npm, and I’ve tried blowing away my plugins in ~/.pulumi to force a re-download. Still getting the error, any ideas?

Copy code

Found incompatible versions of @pulumi/pulumi. Differing major or minor versions are not supported.
   Version 1.13.1 referenced at node_modules/@pulumi/pulumi/package.json
   Version 1.10.1 referenced at node_modules/@pulumi/kubernetesx/node_modules/@pulumi/pulumi/package.json

alert-artist-66265

03/31/2020, 8:21 AM

im having problems when trying

pulumi up

or just trying to install any plugin in general... it takes forever to download...

alert-artist-66265

03/31/2020, 8:21 AM

do you guys have any similar situations?

stale-knife-36790

03/31/2020, 8:22 AM

How do I use a resource account / group to deploy functions with pulumi? (I can't seem to get the 'appId', 'tenant' and 'password' as well as I'm currently getting the following error:

Copy code

Diagnostics:
  pulumi:pulumi:Stack (azure-dev):
    The Pulumi runtime detected that 166 promises were still active
    at the time that the process exited. There are a few ways that this can occur:
      * Not using `await` or `.then` on a Promise returned from a Pulumi API
      * Introducing a cyclic dependency between two Pulumi Resources
      * A bug in the Pulumi Runtime
    Leaving promises active is probably not what you want. If you are unsure about
    why you are seeing this message, re-run your program with the `PULUMI_DEBUG_PROMISE_LEAKS`
    environment variable. The Pulumi runtime will then print out additional
    debug information about the leaked promises.

  azure:core:ResourceGroup (my_specified_resource_group):
    error: Error ensuring Resource Providers are registered.

    Terraform automatically attempts to register the Resource Providers it supports to
    ensure it's able to provision resources.

    If you don't have permission to register Resource Providers you may wish to use the
    "skip_provider_registration" flag in the Provider block to disable this functionality.

    Please note that if you opt out of Resource Provider Registration and Terraform tries
    to provision a resource from a Resource Provider which is unregistered, then the errors
    may appear misleading - for example:

    > API version 2019-XX-XX was not found for Microsoft.Foo

    Could indicate either that the Resource Provider "Microsoft.Foo" requires registration,
    but this could also indicate that this Azure Region doesn't support this API version.

    More information on the "skip_provider_registration" flag can be found here:
    <https://www.terraform.io/docs/providers/azurerm/index.html#skip_provider_registration>

    Original Error: Cannot register provider Microsoft.Kusto with Azure Resource Manager: resources.ProvidersClient#Register: Failure responding to request: StatusCode=403 -- Original Error: autorest/azure: Service returned an error. Status=403 Code="AuthorizationFailed" Message="The client <mailto:'live.com#my_email@hotmail.com|'live.com#my_email@hotmail.com>' with object id '********-****-****-********950e' does not have authorization to perform action 'Microsoft.Kusto/register/action' over scope '/subscriptions/********-****-****-****-********e859' or the scope is invalid. If access was recently granted, please refresh your credentials.".

bumpy-agent-19616

03/31/2020, 8:47 AM

Helm v3 client allows the installation of CRD's (Custom Resource Definition's of k8s) of 'aad-pod-identity' chart. However, pulumi's support on helm v3 way of installing things doesn't seem to be installing those. Any help would be much appreciated.

helpful-processor-86468

03/31/2020, 1:50 PM

Hi everyone. I managed to create a bucket, then changed it's name to empty string in code. After running

pulumi up

my previous bucket got deleted and the creation of new one failed.

pulumi up

doesn't help. How can I solve this?

acoustic-leather-88378

03/31/2020, 2:04 PM

Is this ok (after upgrading to

1.13.1

Copy code

Found incompatible versions of @pulumi/pulumi. Differing major or minor versions are not supported.
      Version 1.13.1 referenced at node_modules/@pulumi/kubernetesx/node_modules/@pulumi/kubernetes/node_modules/@pulumi/pulumi/package.json
      Version 1.13.1 referenced at node_modules/@pulumi/pulumi/package.json

loud-oyster-36834

03/31/2020, 2:23 PM

Hi all. Quick question, I think I managed to come into a weird state after importing a resource from Azure. Now pulumi want to replace the resource completely just because the name is different(?).

Copy code

+-  ├─ azure:network:ApplicationGateway extgateway replace [diff: ~name]

Is it possible to recover the stack from this state? setting the

name

and

pulumi up

, then remove

name

will just revert me back into the same state.

quiet-wolf-18467

03/31/2020, 4:09 PM

I'm running into an annoying bug where Pulumi is trying to update the stack state too frequently on GCS, causing a 429 RateLimitExceeded. Anyone know how to stop that happening?

wonderful-dog-9045

03/31/2020, 4:35 PM

When I mount an EFS volume on a container on ECS, do you need to explicitly create security groups and IAM policies or will pulumi handle this for me?

colossal-alarm-90650

03/31/2020, 5:40 PM

I have a string stored in the config as secret, after retreival with config.requireSecret(‘name’) I actually need to manipulate it a bit, i.e. “unsecretify” it so that string operations work on it. How do I do that? It seems this is an Output<T> marked as secret and it just refuses to become anything else.

quiet-wolf-18467

03/31/2020, 6:45 PM

Can outputs from GCS/S3 stacks being referenced yet?

crooked-helicopter-55521

03/31/2020, 7:15 PM

Dumb question, can you configure the 10 minute timeout on

pulumi up

? Digging through the docs I can't find anything, which seems hard to belive. Am I missing something? It's been causing problems for a long running change I'm trying to do

great-byte-67992

04/01/2020, 3:10 AM

Hey everyone. I’ve been working on this project, kloudlib [1], for a while now and I thought some of the kubernetes users here would be interested! I’m hoping it might become a sort of helm/stable for Pulumi users. I’d love to hear your feedback, suggestions and ideas 😀 [1] https://github.com/place1/kloudlib

🎉 10

pulumipus 8bit 1

❤️ 1

colossal-alarm-90650

04/01/2020, 6:55 AM

Next beginner question ( 🙂 ) As pulumi tags on an “id” number on resource names, they become rather difficult to find. In fact the “get”-methods become quite useless as they for most part operate on the obfuscated name property. As the reasons for doing this (I know there’s a way to enforce the supplied name) are quite valid and the functionality very useful, well… In AWS a strategy to handle this would be to use tags on the objects and then find them that way. Could you give me an example of that, i.e. finding say an aws EC2 with the tag/value “foo: bar”? That would solve the problem right away.