Hello everyone! Just finished reading the docs; got a quick question: is it possible to execute

pulumi up

and other actions programmatically from Nodejs (without spawning a new process)? Would love to do that and access outputs for post-processing.

Or is the CLI the only way to go?

Hey 👋 , I’m trying to contruct a config Record to pass to mustach to do the rendering of my config file.

const configVariables: Record<string, string> = {
    username: config.databaseUsername,
    password: config.databasePassword,
    connectionString: config.databaseConnectionString,
    bucketname: config.bucketname,
    bucketPrefix: `${config.appName}/${config.environment}`,
    bucketRegion: config.region,
};

config.databaseUsername

is a secret. When I take a look at my secret in k8s the value is more something like

"user": "Calling [toString] on an [Output<T>] is not supported.

To get the value of an Output<T> as an Output<string> consider either:
1: o.apply(v &#x3D;> &#x60;prefix${v}suffix&#x60;)
2: pulumi.interpolate &#x60;prefix${v}suffix&#x60;

What should I do? thx

Can Pulumi deploy multiple folders/files /layers to GCP? (Google cloud platform, Cloud functions)? 🤔 (For some reason it only wants to deploy 'index.js' and now it doesn't recognize my (exported) functions which are in another file. (I use node.js)

Any tips on how to implement waiting logic for ther resources which will be created by operator inside aks cluster based on cr deployed by pulumi code.?

@here I'm hoping to work around a Terraform bug by applying changes a second time. How do I get Pulumi to do that? Specifically, I need to re-apply API Gateway changes because a Terraform bug causes them to be cleared out when they are first applied. IOW, I want to force Pulumi to re-apply changes after the objects are created.

Hey everyone. How would you guys go about effeciëntly moving away from local stacks to shared stack(s) saved on a cloud provider? It's meant for only around 3 people.

How do you ignoreChanges using a helm chart?

Any suggestions for understanding why pulumi wants to

replace

some instances? In AWS, got a cluster of machines stood up over a year ago, on Pulumi 0.16.8 I think. Now on Pulumi 1.14 and it wants to replace all the instances.

@here Great new blog post from Pulumi. One comment, it's missing the code for the isTaggable function. Can you post that? https://www.pulumi.com/blog/automatically-enforcing-aws-resource-tagging-policies/

Hello everyone, I’m thinking of introducing Pulumi to our company, however I still don’t understand one major thing—how do you develop your application locally?

I have a stack in dotnet that is using components. The component depends on a resource which I then put that dependson in the components options. When I run up and it gives me a preview of the resources which the storage class is always at the bottom which makes since, since it depends on something up the graph. Unfortunately when I apply it the resource it created way at the beginning and fails since the demandant resource hasn't been created yet. Is there an issue with a component resource depending on another resource? It almost seems it is ignoring it. Preview

Type                                                        Name                                      Plan       
     pulumi:pulumi:Stack                                         k8s-courageous-cluster-asc-dev-k8s-c02               
 +   ├─ rancher2:index:NodePool                                  workerNodePool1:asc-dev-k8s-c02-w1        create     
 +   ├─ rancher2:index:NodePool                                  workerNodePool3:asc-dev-k8s-c02-w3        create     
 +   ├─ rancher2:index:NodePool                                  masterNodePool:asc-dev-k8s-c02-m          create     
 +   ├─ rancher2:index:NodePool                                  workerNodePool2:asc-dev-k8s-c02-w2        create     
 +   ├─ rancher2:index:ClusterSync                               rancherClusterSync                        create     
 +   ├─ ascendlearning:rancher:SystemAddOnProject                systemAddOnsProject                       create     
 +   ├─ rancher2:index:Project                                   systemAddOnsProject:systemAddOnsProject   create     
 +   ├─ rancher2:index:Namespace                                 systemAddOnsProject:systemAddOnNamespace  create     
 +   ├─ kubernetes:core:ServiceAccount                           descheduler:ServiceAccount                create     
 +   ├─ kubernetes:<http://rbac.authorization.k8s.io:ClusterRole|rbac.authorization.k8s.io:ClusterRole>         descheduler:ClusterRole                   create     
 +   ├─ kubernetes:<http://rbac.authorization.k8s.io:ClusterRoleBinding|rbac.authorization.k8s.io:ClusterRoleBinding>  descheduler:ClusterRoleBinding            create     
 +   ├─ kubernetes:core:ConfigMap                                descheduler:ConfigMap                     create     
 +   ├─ kubernetes:batch:CronJob                                 descheduler:CronJob                       create     
 +   └─ kubernetes:<http://storage.k8s.io:StorageClass|storage.k8s.io:StorageClass>                   storageClass:vsphereStorageClass          create

Apply

Type                                       Name                                    Status                  Info
     pulumi:pulumi:Stack                        k8s-courageous-cluster-asc-dev-k8s-c02  **failed**              1 error
 +   ├─ rancher2:index:NodePool                 workerNodePool2:asc-dev-k8s-c02-w2      created                 
 +   ├─ rancher2:index:NodePool                 workerNodePool1:asc-dev-k8s-c02-w1      created                 
 +   ├─ rancher2:index:NodePool                 masterNodePool:asc-dev-k8s-c02-m        created                 
 +   ├─ rancher2:index:NodePool                 workerNodePool3:asc-dev-k8s-c02-w3      created                 
 +   └─ kubernetes:<http://storage.k8s.io:StorageClass|storage.k8s.io:StorageClass>  storageClass:vsphereStorageClass        **creating failed**     1 error

You can see the storage class is created before it shows it would in the preview.

Hi everyone -- quick question: I'm using my own S3 bucket as a backend for Pulumi states. Now, I want to have multiple projects that have same stack names, for example

project1 dev, project2 dev, project3 dev, etc.

, however once I'm logged in my S3 bucket I can only have unique stack names, which is fine, but then in each of the projects my stacks will need to be named

project1-dev

,

project2-dev

, etc. Is there a way to have same stack names across multiple projects?

Hi, I suggest to open a separate channel for CI/CD pipelines related issues (Circle, GitHub Actions, AzureDevops, CodeDeploy, etc...)

When I 'pulumi up' my Pulumi ts project I got the following warning:

warning: resource plugin azure is expected to have version >=2.3.1, but has ; the wrong version may be on your path, or this may be a bug in the plugin

What to do to fix this?

Anyone any example on using an Azure Blob Storage -> EventGrid (BlobCreated) -> Azure function?

How would one add a securityContext to a container as a transformation?

Can some one point me to an example of how I can setup an aws ALB listener rules. I am looking to setup something like this:

When using a secrets provider like GCP KMS for encrypting and decrypting secrets, will the Pulumi stack permissions be used in addition to the permissions of the underlying provider?

how would one deal with promoting an rds read replica in pulumi?

Is there a good example of launching a windows server on aws ec2? Mostly curious about best practices to set up an initial login for access.

Hm. I have a module that creates and AWS cloudfront with an edge lambda. All good and well, the problem is that on creation of the cloudfront I need to construct a reference to the edge lambda which is the arn plus the number of the last published version. In other words, I need somehow to get the arn and the version AFTER the lambda has been created. How do I do that? As it is, after running “lambda = new aws.lambda.function(…” all I get when I try to make a new arn out of “newarn = lambda.arn + ‘:’ + lambda.version” is a message about using apply, which doesn’t work. In general this is a problem, i.e. serializing execution here and there, waiting for a specific resource to be created before proceeding. I am sure there’s a general solution to this… or?

repeating the question from above:

Hi everyone -- quick question: I'm using my own S3 bucket as a backend for Pulumi states. Now, I want to have multiple projects that have same stack names, for example project1 dev, project2 dev, project3 dev, etc. , however once I'm logged in my S3 bucket I can only have unique stack names, which is fine, but then in each of the projects my stacks will need to be named project1-dev, project2-dev, etc. Is there a way to have same stack names across multiple projects?

Hey all. I'm having some issues with outputters. I'm working with the GCP provider and python. Essentially, I'm trying to gather the results of an instance create (pulumi_gcp.compute.Instance()), then proceed to reserve the address of that instance via the results/output. I'm not looking to export the output of this but for the sake of troubleshooting, I'm able to export the network interfaces via result.network_interfaces. As this is a list of dicts, I can also export result.network_interfaces[0]. Once I try to access the keys in the dictionaries, I hit issues. No matter what key I try to reference, I get a key error. If I try to access the key as if it's an attribute, I get dict has no attribute 'networkIp'. Is there something I'm missing here?

I just got VSCode's integrated debugger working with my Pulumi projects using this launch configuration: https://gist.github.com/reilly3000/8ef28a9420984349b86230c1b928b97f Hope that helps somebody!

will the “Pulumi Up(date)” event on 30th april be recorded? I’d like to attend but its on at 2am local time. I love pulumi but not quite that much 🙂 https://www.pulumi.com/webinars/pulumi-update-2020-04-29/

Hm. The aws get<whatever> functions are pretty useless given that Pulumi adds an identifying tag to the names. However… is there a way of programmatically getting that tag? If so, I could just add it to the name and suddenly it would mainly work again. I mean, assume I’m looking for a lambda named “foobar”, I could run aws.lambda.getFunction({ functionName: “foobar” + this.getpulumiaddedsuffix()“}) and that would work! Hmmm… trying to find docs how to access a stack programmatically, but… is there an api at all for this?

How could I convert a secret to base64 string to feed into k8s Secret in pulumi? I defined my credential as

sk = config.getSecret("sk")

Buffer.from(sk as string).toString("base64")

works, but I’m wondering if there are other idiomatic way to do this.

Is there a way to hide away some stuff from the output? (e.g. secrets like passwords, tokens etc.)