pulumi-community #general

abundant-photographer-61227

05/15/2020, 12:34 PM

can anybody help @here ?

rich-easter-89163

05/15/2020, 6:29 PM

I have issues with my billing on pulumi, where I can request support? I'm unable to find something on console

breezy-hamburger-69619

05/15/2020, 8:07 PM

https://pulumi-community.slack.com/archives/C0110AVM89Z/p1589573192033700

👍 1

best-lifeguard-91445

05/15/2020, 10:22 PM

Can you create EC2 key/pairs within pulumi? or must they be created in the AWS console, and attached by name?

best-lifeguard-91445

05/16/2020, 2:08 AM

My subnet has been deleting for ~10 minutes now -- is there somewhere to get more visibility into why it's taking so long?

green-morning-1318

05/17/2020, 1:56 AM

Not sure who built this, but it seems kinda cool... a VPC generator that generates Pulumi code https://houqp.github.io/vpcstudio/

👍 2

incalculable-whale-36468

05/17/2020, 10:49 AM

Is there an equivalent to ``Config.get`` but for a

require_object

polite-motherboard-78438

05/17/2020, 11:33 AM

These Output<T> stuff is one of the most frustrating experiences I have with Pulumi. For example:

Copy code

const sshKey = config.requireSecret("admin_pub_key");

Copy code

const userData = `
#cloud-config
users:
  - name: ${adminUser}
    ssh-authorized-keys:
      - ${sshKey}
    sudo: ['ALL=(ALL) NOPASSWD:ALL']
    groups: sudo
    shell: /bin/bash
`;

It complains that it cant call toString on an Output<T> object on the "sshKey" variable. I just want get the string value from the secret. As simple as that! Note that in this example I am already inside a string literal. I have tried to create a new variable, following the instructions of using pulumi interpolate, but get the same message. If someone can enlighten me on this, I would be greatfull.

rhythmic-camera-25993

05/17/2020, 4:43 PM

Copy code

const userData = sshKey.apply(key => `
#cloud-config
users:
  - name: ${adminUser}
    ssh-authorized-keys:
      - ${sshKey}
    sudo: ['ALL=(ALL) NOPASSWD:ALL']
    groups: sudo
    shell: /bin/bash
`);

rhythmic-camera-25993

05/17/2020, 4:45 PM

think of Output<t> like a promise. you can't directly get the value out of a promise, you have to get it via

await

or via

.then(x => ...)

rhythmic-camera-25993

05/17/2020, 4:45 PM

apply

is like

then

for a promise

👍 1

full-dress-10026

05/17/2020, 9:51 PM

Does anyone know if it's possible to create a

awsx.cloudwatch.SingleNumberMetricWidget

with the period set to the duration of the cloudwatch dashboard window you're looking at? Without that, statistics seem a bit silly on the dashboard.

limited-rainbow-51650

05/18/2020, 9:00 AM

Has anyone used the Pulumi Github provider to create repositories? I can’t seem to find how to set the user or organization to create the repo in. https://www.pulumi.com/docs/reference/pkg/github/repository/

some-chef-79525

05/18/2020, 1:31 PM

Hi all, I need to deploy resources to multiple regions. Is this better achieved using multiple stacks, or is this something I could somehow use a ResourceProvider to achieve?

some-chef-79525

05/18/2020, 1:32 PM

I've read the docs, but I'm a bit green at this tool and I feel I'm missing something when it comes to how ResourceProvider is meant to be used.

some-chef-79525

05/18/2020, 1:33 PM

(I'm trying to deploy to AWS)

famous-jelly-72366

05/18/2020, 1:34 PM

guess depends on what cloud. in azure there is a location property on most resources, would think AWS has a region property with similar effect?

limited-rainbow-51650

05/18/2020, 2:25 PM

In an automation setup, I am trying to automate the following sequence with local state backend:

Copy code

pulumi login file:///var/pulumi/state
pulumi stack init production --secrets-provider=passphrase
pulumi up --diff --yes

However, in my script, is there a way to have

pulumi stack init

not error on the second and subsequent runs? I could silence it with a shell construct, but then I could possibly mask a possible error on the first run.

hallowed-rain-9096

05/18/2020, 2:28 PM

@limited-rainbow-51650

pulumi stack select -c stack-name

will create it only if it doesn't exist. Would that work?

💯 1

hallowed-rain-9096

05/18/2020, 2:28 PM

appears that it will work with the

--secrets-provider

flag as well

hallowed-rain-9096

05/18/2020, 2:28 PM

https://www.pulumi.com/docs/reference/cli/pulumi_stack_select/

acceptable-stone-35112

05/18/2020, 2:47 PM

One of the main drawbacks of Pulumi is that working with TF after it is not fun anymore

pulumipus 8bit 2

❤️ 3

😂 9

acceptable-stone-35112

05/18/2020, 3:38 PM

Anyone tried deploying Nomad cluster with Pulumi? Any reliable resource to take as example? I need something basic - 3 server nodes, consul can be on same nodes, 10-20 client nodes running containers in batch jobs. Needs to be on Azure

best-lifeguard-91445

05/18/2020, 4:25 PM

How do you guys manage environment variables within your stacks? For example, I need to store a connection string to a database. Is this a good candidate for encrypted secrets? https://www.pulumi.com/docs/intro/concepts/config/#secrets

best-lifeguard-91445

05/18/2020, 6:07 PM

Seems like

pulumi up

isn't using the profile set in the config? Pulumi.prod.yaml:

Copy code

secretsprovider: ....
encryptedkey: ...
config:
  aws:profile: prod-pa
  aws:region: us-east-1

I get this error:

Copy code

error: getting secrets manager: secrets (code=Unknown): AccessDeniedException: The ciphertext refers to a customer master key that does not exist, does not exist in this region, or you are not allowed to access.
        status code: 400, request id: 91f0ea5d-cd55-44b0-8f4f-1413547fb896

I can describe the KMS successfully using:

Copy code

aws kms describe-key --key-id=65500644-e3e5-44be-b3ea-d3928b0af188 --profile=pa-prod

So this makes me think the profile isn't being provided?

limited-rainbow-51650

05/18/2020, 6:27 PM

How much work would it be to publish a true Github Action rather than using the

uses: <docker://pulumi/actions>

notation? I am using act (https://github.com/nektos/act/) to test my workflows locally and the

docker:

notation does not seem to be supported.

wonderful-dog-9045

05/18/2020, 8:14 PM

refusing to delete protected resource

, how can i override it or remove the protection? I am trying to do

pulumi destroy

because

pulumi up

is failing to update the vpc, due to another error.

breezy-translator-75142

05/18/2020, 8:55 PM

How can I implement

createVPCAssociationAuthorization

using Pulumi? Any thoughts/ideas? https://aws.amazon.com/premiumsupport/knowledge-center/private-hosted-zone-different-account/

icy-jordan-58549

05/18/2020, 9:02 PM

Hey,

pulumi

could you please help me with this?

Copy code

pulumi:pulumi:Stack  infra-test1  running...  warning: resource plugin kubernetes is expected to have version >=2.2.0, but has 2.2.0-alpha.1589233905+gcf42dd90; the wrong version may be on your path, or this may be a bug in the plugin

faint-motherboard-95438

05/18/2020, 10:13 PM

Hi there, I’m trying to understand how

dependsOn

works and if it’s the solution to my problem. From what I understand here https://www.pulumi.com/docs/intro/concepts/programming-model/#dependson it should properly wait for a previous resource to be available for the one I’m referencing it in. In my usecase I provision postgresql with an helm chart and my migration service needs to wait in order to connect to it. Unfortunately, having inputs from the chart nor having it explicitly define in the

dependsOn

does not make my service wait for all the services in the chart available and of course it fails since the database service is not available yet. How am I supposed to properly define dependencies when pulumi fails to understand a specific case then ?