Yes

And the Pulumi engine knows how to decrypt it based on the secret provider when passing to another resource

I can't seem to find the solution for a runtime/promisse error I'm having (with Pulumi's GCP module). This is my code (I pasted the code on the same hastebin page): https://hastebin.com/etajakubid.js

hi, i've hit this a couple times now, I'm not sure what the cause is. Last time this happened, i was never able to refresh my stack, but I was able to update it and then it went away - Go panic on a refresh

Hey all, Using gcp provider/python. I've got a weird thing going on with outputters where they seem to get stacked on each other. I'm doing a simple iteration over resources I want to be built. I'm creating disks and assigning them as dependencies to an instance's attached_disks. Strangely, upon the second iteration, when I attach new disks to the attached_disks list, the outputters from the previous iteration are already there, even though I've constructed a brand new object. In order to alleviate this problem, I'm first filtering the list of output objects before appending the new ones. Example below:

# Note, I'm abstracting a lot of what we do with simple wrapper classes since 99% of our instances will follow the same patterns. The second reason is to easily load/write templates automagically from provided inputs to script(s)

for resource_objs in template_objs:

# Build all non-disk/non-instance objects first in case there are dependencies later

objs = list( filter( lambda obj: not 'disk' in obj[1].lower() and not 'instance' in obj[1].lower(), resource_objs) )

for obj in objs:

obj[0].build()

# Extract and build all "disk" objects

disk_objs = list( filter( lambda obj: 'disk' in obj[1].lower(), resource_objs) )

for disk_obj in disk_objs:

disk_obj[0].build()

# Extract instance object

instance_obj = list( filter( lambda obj: 'instance' in obj[1].lower(), resource_objs) ).pop()

# Some kind of bug?, need to filter out pulumi.output.Output objects from attached_disks attr

# else, will try to add ALL previously created disks. Not just the disks created in this iteration!!!

instance_obj[0].attached_disks = list( filter(lambda disk: not isinstance(disk, pulumi.output.Output),

instance_obj[0].attached_disks) )

# Append disks to be attached_disks attr and build instance

for disk_obj in disk_objs:

instance_obj[0].attached_disks.append( { 'device_name': disk_obj[0].result.name,

'source': disk_obj[0].result.name } )

instance_obj[0].build()

Is there an easy way to see when a resource was lost from the statefile? I lost a few important resources and can’t seem to figure out when it happened.

easy one for you guys this morning…how can you edit a project description?

Hi all, is it necessary to login to pulumi to use it? I can't find any docs on how to use the cli without pulumi login

how many stacks can the community account have?

Is there a config or a pattern I can use to avoid race conditions in Pulumi ? I'm trying to delete a type A DNS record to replace it with a CNAME record, but it seems Pulumi tries to create the CNAME first -and fails- instead of destroying the old resource before creating the new one.

delete_before_replace

does not help me here because the two records are 2 separate resources (they are in different stacks)

Hi all, is it possible to create a secret from file, or alternatively a multiline secret? I need to create a secret that is the result of the command

openssl rand -base64 128

Hello hoping someone can help. Running into issues getting started with https://www.pulumi.com/docs/get-started/kubernetes/create-project/ its hang after running pulumi up. have tried a few times. going to try with logging enabled now and see if I get some error info. From powershell I just see 'update failed' error: 4 errors occured: but the error info never shows powershell is just left spinning....

Hi all. I am working on a proof of concept of Pulumi to present to my team, but have a few questions. Let's assume I am going to use the Pulumi Service as a backend. 1. If I have a project with 3 stacks: sandbox, preprod, and prod. I want to allow anyone to run

pulumi up

on the sandbox and preprod stacks, but I want to lock down the prod stack so that only certain users can run

pulumi up

. Is this possible? 2. How does the Pulumi GitHub action work when it comes to multiple stacks? Does it cycle through all stacks within a project? I would like to be able to control when a

pulumi up

is run on a specific stack during CI/CD. While making infrastructure changes, I would obviously want to try it in the sandbox or preprod environments before making changes in production. Is this capable with the Pulumi GitHub action or do I need to look for another solution?

Hi! Question about config yaml files. Config data is organized using

Pulumi.<stack-name>.yaml

files for each stack. But how can I specify default values that apply to all stacks? Can I specify config data at project level and the

Pulumi.<stack-name>.yaml

can override it? Some settings are the same for all stacks most of the time, would be handy to keep it DRY. Is that possible?

Hi, I've been following Pulumi's progress for a while now and finally have to sometime dedicated at evaluating Pulumi to see if it meets our use-cases. What I am trying to do is have Pulumi manage common cluster services (services that are always available and should be in sync across all clusters) for example, ELK stack, nginx ingress, cert-manager, etc...a lot of third-party apps. The questions i have are around the

@pulumi/kubernetesx

and

@pulumi/kubernetes

SDK for nodejs. 1. i know it can load a yaml manifest and deploy it - i take it that i can retrieve a remote file from a public source, customize it with some other configs and deploy it? since it's nodejs it should be possible 🙂 2. since most of these are third-party, they are provided as a helm chart or kustomize. with helm chart i see that pulumi has first-class support for it, for kustomize is it possible to achieve the same result as helm and providing custom overrides?

Hello, I am trying to run this pulumi program that I wrote; https://github.com/sourcegraph/deploy-k8s-helper. However, when I run

pulumi up

on a fresh checkout, i get the following errors:

~/dev/go/src/github.com/sourcegraph/deploy-k8s-helper master
❯ yarn
yarn install v1.22.4
warning package.json: No license field
warning sg-deploy-k8s-helper: No license field
[1/4] 🔍  Resolving packages...
success Already up-to-date.
✨  Done in 0.15s.

~/dev/go/src/github.com/sourcegraph/deploy-k8s-helper master
❯ pulumi up
Previewing update (dev):
     Type                 Name                                      Plan     Info
     pulumi:pulumi:Stack  sourcegraph-deploy-kubernetes-helper-dev           3 messages
 
Diagnostics:
  pulumi:pulumi:Stack (sourcegraph-deploy-kubernetes-helper-dev):
    (node:95200) PromiseRejectionHandledWarning: Promise rejection was handled asynchronously (rejection id: 2)
    (node:95200) PromiseRejectionHandledWarning: Promise rejection was handled asynchronously (rejection id: 3)
    (node:95200) PromiseRejectionHandledWarning: Promise rejection was handled asynchronously (rejection id: 5)

Hi there 👋 I'm trying to use pulumi to codify a static website redirect in aws s3 (section "Redirecting Requests for a Bucket's Website Endpoint to Another Host" in https://docs.aws.amazon.com/AmazonS3/latest/dev/how-to-page-redirect.html). In pulumi, I'm creating a

new aws.s3.Bucket

with param

website: { redirectAllRequestsTo: "<http://example.com|example.com>" }

. The s3 docs say that there is an option to specify protocol (I need to redirect with

https

) but that does not seem possible in pulumi since

redirectAllRequestsTo

is of type

pulumi.Input<string>

. I additionally tried to specify

routingRules: { Redirect: {HostName: "<http://example.com|example.com>",Protocol: "https"} }

to the same Bucket resource but then get the error message that

aws:s3/bucket:Bucket resource 'mybucketname' has a problem: "website.0.redirect_all_requests_to": conflicts with website.0.routing_rules

. Additionally, if I go into the AWS web UI and manually update the Protocol field to "https" and then run

pulumi up

, pulumi does not recognize that a change was made to the bucket configs which leads me to wonder if there is a bug

Quick question guys. Are the Pulumi webinar recorded, like the coming one on 22nd of this month?

Out of curiosity, has ever happened to anyone that changes to Pulumi code would result in accidental destruction of resources and things like that? I know it's pretty common with Terraform that changes to either code or Terraform itself can make this happen. Because of this I've always felt that these tools are as powerful as risky in a way 😄

I’m using Pulumi with AWS and pulumi usually adds a suffix to resources it deploys, but in the case of

aws.batch.ComputeEnvironment

, I have to specify

computeEnvironmentName

and that exact name is used to deploy the resource. If I make any changes to the CE, I have to go in and change the name to avoid a conflict. Is there a way to get the suffix that Pulumi normally adds to resources so I don’t have to change the name every time I want to update an AWS Batch Compute Environment?

Hey guys, I am new to Pulumi, and am just loving it! Great product! 🙂

I am trying to set up AWS Fargate using Pulumi with a simple flask python app where Dockerfile exposes port 8000, now in the example I could see tht port 80 is mapped in load balancer and later on in taskDefinitionArgs, but how to point it to 8000? I tried this, but doesnt work

// Step 4: Create a Fargate service task that can scale out.

const appService = new awsx.ecs.FargateService("app-svc", {

cluster,

taskDefinitionArgs: {

container: {

image: img,

cpu: 102 /*10% of 1024*/,

memory: 50 /*MB*/,

portMappings: [{ containerPort: 8000, }],

},

},

desiredCount: 5,

});

is there any plan to support pulumi crosswalk aws for golang?

Is there an Api to get current organization from context programmatically, similar to getProject() and getStack()? I need this for tagging and to create a StackReference()

When I use Pulumi do I put it in the build pipeline at the end or create a separate release pipeline on Azure DevOps. What is the best way to use it?

How well does pulumi support crd in Kubernetes? For example, Certificate object from cert-manager.

Looking at this blog https://www.pulumi.com/blog/kubernetes-yaml-generation/ you can render the pulumi resources to yaml. I notice that for every object you need to provide it with the provider config. Is there a way to make it more dry, such that you create a provider and tell pulumi to use it for all objects?

Is there a way to run an arbitrary Bash command as part of a Pulumi deployment ? I'm trying to

curl

my deployed website at the end of every deployment, and of course the URL is built from Pulumi variables... 🙂