You use can “—suppress-outputs” when running Pulumi up

That will stop anything being exported to the output

Thank you for the fast answer. Is there a way to only suppress outputs for a sepcific field, so that it wouldn't even show up in the logs at app.pulumi.com ?

So you can mark any resource output as a secret

Let me out together a small recreation for you

2 mins

Thank you for your outstanding effort, I deeply appreciate your engagement

Not a problem at all

I’m writing a small gist for you

Ok @handsome-cat-98152 so the secret engine from Pulumi will encrypt anything for you

Notice in the gist the output is marked as secret

All you need to do is to mark the properties of the resource as needing to go through the secret engine

Make sense?

(Also this is encrypted in the state file!)

So, if I have a Resource with Class

{x: string, y: string}

and create it as

{x: 'hello', y: 'world', additionalSecretOutputs: ['y']}

the output of

y

would be 'secret' ?

Yes

And the Pulumi engine knows how to decrypt it based on the secret provider when passing to another resource

I can't seem to find the solution for a runtime/promisse error I'm having (with Pulumi's GCP module). This is my code (I pasted the code on the same hastebin page): https://hastebin.com/etajakubid.js

hi, i've hit this a couple times now, I'm not sure what the cause is. Last time this happened, i was never able to refresh my stack, but I was able to update it and then it went away - Go panic on a refresh

Hey all, Using gcp provider/python. I've got a weird thing going on with outputters where they seem to get stacked on each other. I'm doing a simple iteration over resources I want to be built. I'm creating disks and assigning them as dependencies to an instance's attached_disks. Strangely, upon the second iteration, when I attach new disks to the attached_disks list, the outputters from the previous iteration are already there, even though I've constructed a brand new object. In order to alleviate this problem, I'm first filtering the list of output objects before appending the new ones. Example below:

# Note, I'm abstracting a lot of what we do with simple wrapper classes since 99% of our instances will follow the same patterns. The second reason is to easily load/write templates automagically from provided inputs to script(s)

for resource_objs in template_objs:

# Build all non-disk/non-instance objects first in case there are dependencies later

objs = list( filter( lambda obj: not 'disk' in obj[1].lower() and not 'instance' in obj[1].lower(), resource_objs) )

for obj in objs:

obj[0].build()

# Extract and build all "disk" objects

disk_objs = list( filter( lambda obj: 'disk' in obj[1].lower(), resource_objs) )

for disk_obj in disk_objs:

disk_obj[0].build()

# Extract instance object

instance_obj = list( filter( lambda obj: 'instance' in obj[1].lower(), resource_objs) ).pop()

# Some kind of bug?, need to filter out pulumi.output.Output objects from attached_disks attr

# else, will try to add ALL previously created disks. Not just the disks created in this iteration!!!

instance_obj[0].attached_disks = list( filter(lambda disk: not isinstance(disk, pulumi.output.Output),

instance_obj[0].attached_disks) )

# Append disks to be attached_disks attr and build instance

for disk_obj in disk_objs:

instance_obj[0].attached_disks.append( { 'device_name': disk_obj[0].result.name,

'source': disk_obj[0].result.name } )

instance_obj[0].build()

Is there an easy way to see when a resource was lost from the statefile? I lost a few important resources and can’t seem to figure out when it happened.

easy one for you guys this morning…how can you edit a project description?

Hi all, is it necessary to login to pulumi to use it? I can't find any docs on how to use the cli without pulumi login

how many stacks can the community account have?

Is there a config or a pattern I can use to avoid race conditions in Pulumi ? I'm trying to delete a type A DNS record to replace it with a CNAME record, but it seems Pulumi tries to create the CNAME first -and fails- instead of destroying the old resource before creating the new one.

delete_before_replace

does not help me here because the two records are 2 separate resources (they are in different stacks)

Hi all, is it possible to create a secret from file, or alternatively a multiline secret? I need to create a secret that is the result of the command

openssl rand -base64 128

Hello hoping someone can help. Running into issues getting started with https://www.pulumi.com/docs/get-started/kubernetes/create-project/ its hang after running pulumi up. have tried a few times. going to try with logging enabled now and see if I get some error info. From powershell I just see 'update failed' error: 4 errors occured: but the error info never shows powershell is just left spinning....

Hi all. I am working on a proof of concept of Pulumi to present to my team, but have a few questions. Let's assume I am going to use the Pulumi Service as a backend. 1. If I have a project with 3 stacks: sandbox, preprod, and prod. I want to allow anyone to run

pulumi up

on the sandbox and preprod stacks, but I want to lock down the prod stack so that only certain users can run

pulumi up

. Is this possible? 2. How does the Pulumi GitHub action work when it comes to multiple stacks? Does it cycle through all stacks within a project? I would like to be able to control when a

pulumi up

is run on a specific stack during CI/CD. While making infrastructure changes, I would obviously want to try it in the sandbox or preprod environments before making changes in production. Is this capable with the Pulumi GitHub action or do I need to look for another solution?

Hi! Question about config yaml files. Config data is organized using

Pulumi.<stack-name>.yaml

files for each stack. But how can I specify default values that apply to all stacks? Can I specify config data at project level and the

Pulumi.<stack-name>.yaml

can override it? Some settings are the same for all stacks most of the time, would be handy to keep it DRY. Is that possible?