Hi, I've been following Pulumi's progress for a while now and finally have to sometime dedicated at evaluating Pulumi to see if it meets our use-cases. What I am trying to do is have Pulumi manage common cluster services (services that are always available and should be in sync across all clusters) for example, ELK stack, nginx ingress, cert-manager, etc...a lot of third-party apps. The questions i have are around the

@pulumi/kubernetesx

and

@pulumi/kubernetes

SDK for nodejs. 1. i know it can load a yaml manifest and deploy it - i take it that i can retrieve a remote file from a public source, customize it with some other configs and deploy it? since it's nodejs it should be possible 🙂 2. since most of these are third-party, they are provided as a helm chart or kustomize. with helm chart i see that pulumi has first-class support for it, for kustomize is it possible to achieve the same result as helm and providing custom overrides?

Hello, I am trying to run this pulumi program that I wrote; https://github.com/sourcegraph/deploy-k8s-helper. However, when I run

pulumi up

on a fresh checkout, i get the following errors:

~/dev/go/src/github.com/sourcegraph/deploy-k8s-helper master
❯ yarn
yarn install v1.22.4
warning package.json: No license field
warning sg-deploy-k8s-helper: No license field
[1/4] 🔍  Resolving packages...
success Already up-to-date.
✨  Done in 0.15s.

~/dev/go/src/github.com/sourcegraph/deploy-k8s-helper master
❯ pulumi up
Previewing update (dev):
     Type                 Name                                      Plan     Info
     pulumi:pulumi:Stack  sourcegraph-deploy-kubernetes-helper-dev           3 messages
 
Diagnostics:
  pulumi:pulumi:Stack (sourcegraph-deploy-kubernetes-helper-dev):
    (node:95200) PromiseRejectionHandledWarning: Promise rejection was handled asynchronously (rejection id: 2)
    (node:95200) PromiseRejectionHandledWarning: Promise rejection was handled asynchronously (rejection id: 3)
    (node:95200) PromiseRejectionHandledWarning: Promise rejection was handled asynchronously (rejection id: 5)

Hi there 👋 I'm trying to use pulumi to codify a static website redirect in aws s3 (section "Redirecting Requests for a Bucket's Website Endpoint to Another Host" in https://docs.aws.amazon.com/AmazonS3/latest/dev/how-to-page-redirect.html). In pulumi, I'm creating a

new aws.s3.Bucket

with param

website: { redirectAllRequestsTo: "<http://example.com|example.com>" }

. The s3 docs say that there is an option to specify protocol (I need to redirect with

https

) but that does not seem possible in pulumi since

redirectAllRequestsTo

is of type

pulumi.Input<string>

. I additionally tried to specify

routingRules: { Redirect: {HostName: "<http://example.com|example.com>",Protocol: "https"} }

to the same Bucket resource but then get the error message that

aws:s3/bucket:Bucket resource 'mybucketname' has a problem: "website.0.redirect_all_requests_to": conflicts with website.0.routing_rules

. Additionally, if I go into the AWS web UI and manually update the Protocol field to "https" and then run

pulumi up

, pulumi does not recognize that a change was made to the bucket configs which leads me to wonder if there is a bug

Quick question guys. Are the Pulumi webinar recorded, like the coming one on 22nd of this month?

Out of curiosity, has ever happened to anyone that changes to Pulumi code would result in accidental destruction of resources and things like that? I know it's pretty common with Terraform that changes to either code or Terraform itself can make this happen. Because of this I've always felt that these tools are as powerful as risky in a way 😄

I’m using Pulumi with AWS and pulumi usually adds a suffix to resources it deploys, but in the case of

aws.batch.ComputeEnvironment

, I have to specify

computeEnvironmentName

and that exact name is used to deploy the resource. If I make any changes to the CE, I have to go in and change the name to avoid a conflict. Is there a way to get the suffix that Pulumi normally adds to resources so I don’t have to change the name every time I want to update an AWS Batch Compute Environment?

Hey guys, I am new to Pulumi, and am just loving it! Great product! 🙂

I am trying to set up AWS Fargate using Pulumi with a simple flask python app where Dockerfile exposes port 8000, now in the example I could see tht port 80 is mapped in load balancer and later on in taskDefinitionArgs, but how to point it to 8000? I tried this, but doesnt work

// Step 4: Create a Fargate service task that can scale out.

const appService = new awsx.ecs.FargateService("app-svc", {

cluster,

taskDefinitionArgs: {

container: {

image: img,

cpu: 102 /*10% of 1024*/,

memory: 50 /*MB*/,

portMappings: [{ containerPort: 8000, }],

},

},

desiredCount: 5,

});

is there any plan to support pulumi crosswalk aws for golang?

Is there an Api to get current organization from context programmatically, similar to getProject() and getStack()? I need this for tagging and to create a StackReference()

When I use Pulumi do I put it in the build pipeline at the end or create a separate release pipeline on Azure DevOps. What is the best way to use it?

How well does pulumi support crd in Kubernetes? For example, Certificate object from cert-manager.

Looking at this blog https://www.pulumi.com/blog/kubernetes-yaml-generation/ you can render the pulumi resources to yaml. I notice that for every object you need to provide it with the provider config. Is there a way to make it more dry, such that you create a provider and tell pulumi to use it for all objects?

Is there a way to run an arbitrary Bash command as part of a Pulumi deployment ? I'm trying to

curl

my deployed website at the end of every deployment, and of course the URL is built from Pulumi variables... 🙂

Is Pulumi down? Getting this error message

$ pulumi destroy
error: getting user info from <https://api.pulumi.com>: performing HTTP request: Get "<https://api.pulumi.com/api/user>": dial tcp 52.26.53.20:443: i/o timeout

Having an issue with node 12.x monitor mock for

call

not being mocked as expected. Works fine on 11.x. Anyone else notice this?

hi im new to all things pulumi 🙂 going to give a crack this weekend

Welcome Lutando 😄 👋 feel free to ask for help when you’re stuck

@white-balloon-205 @microscopic-florist-22719 I'm absolutely thrilled to report that our test suite of over 700 unit tests that took 15-20 minutes to run, after rewriting everything to use the new monitor mock feature, has been reduced to 17 seconds!!! We couldn't be happier. Thank you so much for this! cc @gentle-diamond-70147 @big-piano-35669

Hey guys, I am creating namespaces using the Rancher2 provider but rancher adds labels to these after creation and I am trying to ignore them. Is there an example of how to do this in .net? I am getting

rancher2:index/namespace:Namespace: (update)
  [id=ua-dev]
  [urn=urn:pulumi:stg-k8s-c01::k8s-cluster-projects::rancher2:index/namespace:Namespace::ns]
  [provider=urn:pulumi:stg-k8s-c01::k8s-cluster-projects::pulumi:providers:rancher2::default_1_5_0::5ee76677-bc06-416a-a367-1be4dd7fa198]
~ labels: {
    - <http://cattle.io/creator|cattle.io/creator>        : "norman"
    - <http://field.cattle.io/projectId|field.cattle.io/projectId>: "id"
  }

and I have tried all these but doesn't seem to work. I am probably providing the string incorrect but I am having a hard time finding an example.

new CustomResourceOptions
{
    IgnoreChanges =
    {
        {"labels.\"<http://cattle.io/creator|cattle.io/creator>\""}
    }
}

new CustomResourceOptions
{
    IgnoreChanges =
    {
        {"<http://labels.cattle.io/creator|labels.cattle.io/creator>"}
    }
}

new CustomResourceOptions
{
    IgnoreChanges =
    {
        {"labels[<http://cattle.io/creator|cattle.io/creator>]"}
    }
}

new CustomResourceOptions
{
    IgnoreChanges =
    {
        {"labels[\"<http://cattle.io/creator|cattle.io/creator>\"]"}
    }
}

Hi all. I am trying to fix some differences between the Pulumi state and my K8s state, but I am having some troubles and would be nice to have some help. When I run

pulumi preview

, I get the following diff:

+   ├─ kubernetes:<http://cert-manager.io:ClusterIssuer|cert-manager.io:ClusterIssuer>                    letsencrypt-prod                create
 -   ├─ kubernetes:helm.sh:Chart                                    letsencrypt-prod                delete
 -   │  └─ kubernetes:<http://cert-manager.io:ClusterIssuer|cert-manager.io:ClusterIssuer>                 cert-maanger/letsencrypt-prod   delete

The resource that Pulumi is trying to create is the same as the one it is trying to delete. (On K8s). I am not sure since when this happen, but It could be because the change the way the "lets-encrypt" resource is managed in Pulumi, from an Helm Chart to a Custom resource. Still If I run

pulumi up

it fails, saying with "error":

resource cert-maanger/letsencrypt-prod was not successfully created by the Kubernetes API server : <http://clusterissuers.cert-manager.io|clusterissuers.cert-manager.io> "letsencrypt-prod" already exists. That´s normal, since Pulumi is trying to create a resource that already exists.

So I am trying to converge the pulumi state with the K8s cluster state. First I tried to manually delete the "letsencrypt" resource by it´s urn like so:

pulumi state delete urn:pulumi:dev::brunopazdev::kubernetes:<http://helm.sh/v2/:letsencrypt-prod|helm.sh/v2/:letsencrypt-prod>

It gave an error: error:

This resource can't be safely deleted because the following resources depend on it: cert-maanger/letsencrypt-prod" (urn:pulumi:dev::brunopazdev::kubernetes:<http://helm.sh/v2:Chart$kubernetes:cert-manager.io/v1alpha2:ClusterIssuer::cert-maanger/letsencrypt-prod|helm.sh/v2:Chart$kubernetes:cert-manager.io/v1alpha2:ClusterIssuer::cert-maanger/letsencrypt-prod>)

Ok. makes sense. Let´s try to delete de dependent resource first:

pulumi state delete urn:pulumi:dev::brunopazdev::kubernetes:<http://helm.sh/v2:Chart$kubernetes:cert-manager.io/v1alpha2:ClusterIssuer::cert-maanger/letsencrypt-prod|helm.sh/v2:Chart$kubernetes:cert-manager.io/v1alpha2:ClusterIssuer::cert-maanger/letsencrypt-prod> --force -y

Another error: "*error: No such resource "urnpulumidev:brunopazdevkuberneteshelm.sh/v2:Chartert-manager.io/v1alpha2:ClusterIssuer::cert-maanger/letsencrypt-prod" exists in the current state*" So I have a resource that depends on a resource that doesnt exist?? Has anybody have an idea how to fix this? Do I have to edit the state manually to remove this resources and then maybe importing the existing one from the Cluster state? Thank you.

Hi Everyone, I'm new to Pulumi. Using a full-fledged programming language to define infrastructure as code is great! I'm doing a poc to get familiar with Pulumi. Below is a snippet that creates snapshot of an ebs volume and prints snapshot id. Got an error when trying to print snapshot id. Any pointers on how to change this?

const snapshot = new aws.ebs.Snapshot("Unattached volume", {
            tags: {
                Name: ebsVolume.tags["Name"],
                Cleanup: "true",
                Who: "satish",
                When: "04102020"
            },
            volumeId: volumeId,
        });

        // const snapshotId = <http://snapshot.id|snapshot.id>.apply(s => `${s}`);
        const snapshotId = pulumi.interpolate `prefix${<http://snapshot.id|snapshot.id>}suffix`

        console.log("Created snapshot " + snapshotId + " for volume " + volumeId);

Created snapshot Calling [toString] on an [Output<T>] is not supported.
    To get the value of an Output<T> as an Output<string> consider either:
    1: o.apply(v => `prefix${v}suffix`)
    2: pulumi.interpolate `prefix${v}suffix`
    See <https://pulumi.io/help/outputs> for more details.

Hi, how do I create a new stack for an existing project? When I do

pulumi new

I get

Sorry, 'projectname' is not a valid project name. A project with this name already exists.

, and when I do

pulumi stack init

I get

error: no Pulumi project found in the current working directory

I tried copying an existing

pulumi.yaml

file into this folder, but when I ran

pulumi stack init

it did nothing (though it created the stack on

<http://app.pulumi.com|app.pulumi.com>

)

I'm sure this is possible since I've done it before

pulumi

v1.14.0

in Python, how do I pass the string representation of a resource’s output properties to a method?

like this: https://gist.github.com/ohlol/fedb70eaf121a5ed67402f615a7156fc

Trying to figure out the correct approach to use a provider in my stack that exists in TF. 1. Create a new dynamic provider 2. Use RemoteStateReference inside dynamic provider to interact with TF Is that the recommended way? In my case TF provider is needed for smaller part of the stack, and basically it means that state will be external to Pulumi Cloud where rest of the stack state is managed.