https://pulumi.com logo
Docs
Join the conversationJoin Slack
Channels
announcements
automation-api
aws
azure
blog-posts
built-with-pulumi
cloudengineering
cloudengineering-support
content-share
contribex
contribute
docs
dotnet
finops
general
getting-started
gitlab
golang
google-cloud
hackathon-03-19-2020
hacktoberfest
install
java
jobs
kubernetes
learn-pulumi-events
linen
localstack
multi-language-hackathon
office-hours
oracle-cloud-infrastructure
plugin-framework
pulumi-cdk
pulumi-crosscode
pulumi-deployments
pulumi-kubernetes-operator
pulumi-service
pulumiverse
python
registry
status
testingtesting123
testingtesting321
typescript
welcome
workshops
yaml
Powered by Linen
general
  • c

    cool-egg-852

    04/07/2020, 2:40 PM
    How would one add a securityContext to a container as a transformation?
    c
    l
    b
    • 4
    • 18
  • m

    mammoth-journalist-45153

    04/07/2020, 4:13 PM
    Can some one point me to an example of how I can setup an aws ALB listener rules. I am looking to setup something like this:
    b
    • 2
    • 2
  • p

    prehistoric-account-60014

    04/07/2020, 4:16 PM
    When using a secrets provider like GCP KMS for encrypting and decrypting secrets, will the Pulumi stack permissions be used in addition to the permissions of the underlying provider?
    b
    w
    • 3
    • 10
  • b

    billowy-laptop-45963

    04/07/2020, 4:52 PM
    how would one deal with promoting an rds read replica in pulumi?
  • b

    bitter-zebra-93800

    04/07/2020, 5:34 PM
    Is there a good example of launching a windows server on aws ec2? Mostly curious about best practices to set up an initial login for access.
  • c

    colossal-alarm-90650

    04/07/2020, 6:56 PM
    Hm. I have a module that creates and AWS cloudfront with an edge lambda. All good and well, the problem is that on creation of the cloudfront I need to construct a reference to the edge lambda which is the arn plus the number of the last published version. In other words, I need somehow to get the arn and the version AFTER the lambda has been created. How do I do that? As it is, after running “lambda = new aws.lambda.function(…” all I get when I try to make a new arn out of “newarn = lambda.arn + ‘:’ + lambda.version” is a message about using apply, which doesn’t work. In general this is a problem, i.e. serializing execution here and there, waiting for a specific resource to be created before proceeding. I am sure there’s a general solution to this… or?
    a
    • 2
    • 4
  • m

    microscopic-application-33470

    04/07/2020, 8:48 PM
    repeating the question from above:
    Hi everyone -- quick question: I'm using my own S3 bucket as a backend for Pulumi states. Now, I want to have multiple projects that have same stack names, for example project1 dev, project2 dev, project3 dev, etc. , however once I'm logged in my S3 bucket I can only have unique stack names, which is fine, but then in each of the projects my stacks will need to be named project1-dev, project2-dev, etc. Is there a way to have same stack names across multiple projects?
    w
    • 2
    • 3
  • p

    polite-portugal-60022

    04/07/2020, 8:56 PM
    Hey all. I'm having some issues with outputters. I'm working with the GCP provider and python. Essentially, I'm trying to gather the results of an instance create (pulumi_gcp.compute.Instance()), then proceed to reserve the address of that instance via the results/output. I'm not looking to export the output of this but for the sake of troubleshooting, I'm able to export the network interfaces via result.network_interfaces. As this is a list of dicts, I can also export result.network_interfaces[0]. Once I try to access the keys in the dictionaries, I hit issues. No matter what key I try to reference, I get a key error. If I try to access the key as if it's an attribute, I get dict has no attribute 'networkIp'. Is there something I'm missing here?
    • 1
    • 2
  • s

    swift-painter-31084

    04/07/2020, 10:06 PM
    I just got VSCode's integrated debugger working with my Pulumi projects using this launch configuration: https://gist.github.com/reilly3000/8ef28a9420984349b86230c1b928b97f Hope that helps somebody!
    👍 3
  • b

    breezy-butcher-78604

    04/08/2020, 1:47 AM
    will the “Pulumi Up(date)” event on 30th april be recorded? I’d like to attend but its on at 2am local time. I love pulumi but not quite that much 🙂 https://www.pulumi.com/webinars/pulumi-update-2020-04-29/
    b
    • 2
    • 2
  • c

    colossal-alarm-90650

    04/08/2020, 7:27 AM
    Hm. The aws get<whatever> functions are pretty useless given that Pulumi adds an identifying tag to the names. However… is there a way of programmatically getting that tag? If so, I could just add it to the name and suddenly it would mainly work again. I mean, assume I’m looking for a lambda named “foobar”, I could run aws.lambda.getFunction({ functionName: “foobar” + this.getpulumiaddedsuffix()“}) and that would work! Hmmm… trying to find docs how to access a stack programmatically, but… is there an api at all for this?
    s
    f
    • 3
    • 22
  • n

    narrow-author-62348

    04/08/2020, 9:49 AM
    How could I convert a secret to base64 string to feed into k8s Secret in pulumi? I defined my credential as
    sk = config.getSecret("sk")
  • n

    narrow-author-62348

    04/08/2020, 9:52 AM
    Buffer.from(sk as string).toString("base64")
    works, but I’m wondering if there are other idiomatic way to do this.
    s
    c
    • 3
    • 6
  • h

    handsome-cat-98152

    04/08/2020, 10:50 AM
    Is there a way to hide away some stuff from the output? (e.g. secrets like passwords, tokens etc.)
  • b

    broad-dog-22463

    04/08/2020, 10:53 AM
    You use can “—suppress-outputs” when running Pulumi up
  • b

    broad-dog-22463

    04/08/2020, 10:53 AM
    That will stop anything being exported to the output
  • h

    handsome-cat-98152

    04/08/2020, 11:00 AM
    Thank you for the fast answer. Is there a way to only suppress outputs for a sepcific field, so that it wouldn't even show up in the logs at app.pulumi.com ?
  • b

    broad-dog-22463

    04/08/2020, 11:01 AM
    So you can mark any resource output as a secret
  • b

    broad-dog-22463

    04/08/2020, 11:01 AM
    Let me out together a small recreation for you
  • b

    broad-dog-22463

    04/08/2020, 11:01 AM
    2 mins
  • h

    handsome-cat-98152

    04/08/2020, 11:02 AM
    Thank you for your outstanding effort, I deeply appreciate your engagement
  • b

    broad-dog-22463

    04/08/2020, 11:03 AM
    Not a problem at all
  • b

    broad-dog-22463

    04/08/2020, 11:07 AM
    I’m writing a small gist for you
  • b

    broad-dog-22463

    04/08/2020, 11:10 AM
    https://gist.github.com/stack72/be4aded27dde63e5014d0278b3769319
    😲 1
  • b

    broad-dog-22463

    04/08/2020, 11:11 AM
    Ok @handsome-cat-98152 so the secret engine from Pulumi will encrypt anything for you
  • b

    broad-dog-22463

    04/08/2020, 11:11 AM
    Notice in the gist the output is marked as secret
  • b

    broad-dog-22463

    04/08/2020, 11:11 AM
    All you need to do is to mark the properties of the resource as needing to go through the secret engine
  • b

    broad-dog-22463

    04/08/2020, 11:11 AM
    Make sense?
  • b

    broad-dog-22463

    04/08/2020, 11:11 AM
    (Also this is encrypted in the state file!)
  • h

    handsome-cat-98152

    04/08/2020, 11:15 AM
    So, if I have a Resource with Class
    {x: string, y: string}
    and create it as
    {x: 'hello', y: 'world', additionalSecretOutputs: ['y']}
    the output of
    y
    would be 'secret' ?
Powered by Linen
Title
h

handsome-cat-98152

04/08/2020, 11:15 AM
So, if I have a Resource with Class
{x: string, y: string}
and create it as
{x: 'hello', y: 'world', additionalSecretOutputs: ['y']}
the output of
y
would be 'secret' ?
View count: 1