How would one add a securityContext to a container as a transformation?

Can some one point me to an example of how I can setup an aws ALB listener rules. I am looking to setup something like this:

When using a secrets provider like GCP KMS for encrypting and decrypting secrets, will the Pulumi stack permissions be used in addition to the permissions of the underlying provider?

how would one deal with promoting an rds read replica in pulumi?

Is there a good example of launching a windows server on aws ec2? Mostly curious about best practices to set up an initial login for access.

Hm. I have a module that creates and AWS cloudfront with an edge lambda. All good and well, the problem is that on creation of the cloudfront I need to construct a reference to the edge lambda which is the arn plus the number of the last published version. In other words, I need somehow to get the arn and the version AFTER the lambda has been created. How do I do that? As it is, after running “lambda = new aws.lambda.function(…” all I get when I try to make a new arn out of “newarn = lambda.arn + ‘:’ + lambda.version” is a message about using apply, which doesn’t work. In general this is a problem, i.e. serializing execution here and there, waiting for a specific resource to be created before proceeding. I am sure there’s a general solution to this… or?

repeating the question from above:

Hi everyone -- quick question: I'm using my own S3 bucket as a backend for Pulumi states. Now, I want to have multiple projects that have same stack names, for example project1 dev, project2 dev, project3 dev, etc. , however once I'm logged in my S3 bucket I can only have unique stack names, which is fine, but then in each of the projects my stacks will need to be named project1-dev, project2-dev, etc. Is there a way to have same stack names across multiple projects?

Hey all. I'm having some issues with outputters. I'm working with the GCP provider and python. Essentially, I'm trying to gather the results of an instance create (pulumi_gcp.compute.Instance()), then proceed to reserve the address of that instance via the results/output. I'm not looking to export the output of this but for the sake of troubleshooting, I'm able to export the network interfaces via result.network_interfaces. As this is a list of dicts, I can also export result.network_interfaces[0]. Once I try to access the keys in the dictionaries, I hit issues. No matter what key I try to reference, I get a key error. If I try to access the key as if it's an attribute, I get dict has no attribute 'networkIp'. Is there something I'm missing here?

I just got VSCode's integrated debugger working with my Pulumi projects using this launch configuration: https://gist.github.com/reilly3000/8ef28a9420984349b86230c1b928b97f Hope that helps somebody!

will the “Pulumi Up(date)” event on 30th april be recorded? I’d like to attend but its on at 2am local time. I love pulumi but not quite that much 🙂 https://www.pulumi.com/webinars/pulumi-update-2020-04-29/

Hm. The aws get<whatever> functions are pretty useless given that Pulumi adds an identifying tag to the names. However… is there a way of programmatically getting that tag? If so, I could just add it to the name and suddenly it would mainly work again. I mean, assume I’m looking for a lambda named “foobar”, I could run aws.lambda.getFunction({ functionName: “foobar” + this.getpulumiaddedsuffix()“}) and that would work! Hmmm… trying to find docs how to access a stack programmatically, but… is there an api at all for this?

How could I convert a secret to base64 string to feed into k8s Secret in pulumi? I defined my credential as

sk = config.getSecret("sk")

Buffer.from(sk as string).toString("base64")

works, but I’m wondering if there are other idiomatic way to do this.

Is there a way to hide away some stuff from the output? (e.g. secrets like passwords, tokens etc.)

You use can “—suppress-outputs” when running Pulumi up

That will stop anything being exported to the output

Thank you for the fast answer. Is there a way to only suppress outputs for a sepcific field, so that it wouldn't even show up in the logs at app.pulumi.com ?

So you can mark any resource output as a secret

Let me out together a small recreation for you

2 mins

Thank you for your outstanding effort, I deeply appreciate your engagement

Not a problem at all

I’m writing a small gist for you

Ok @handsome-cat-98152 so the secret engine from Pulumi will encrypt anything for you

Notice in the gist the output is marked as secret

All you need to do is to mark the properties of the resource as needing to go through the secret engine

Make sense?

(Also this is encrypted in the state file!)