I’m trying to use

DOCKER_BUILDKIT=1

via the

env

property on a

DockerBuild

using

awsx.ecs.Image.fromDockerBuild

. My

env

is the same as the test example ( https://github.com/pulumi/pulumi-docker/pull/95/files#diff-737a6e76d84c40fbbd438671aaf1a8c3R43 ), but I receive an error, and I don’t see the env options in there (not sure if I would though);

error: Error: ' docker build --ssh default ./app -t d2314cb1-container' failed with exit code 1

Any tips for using Docker buildkit to install private packages in a docker build? https://docs.docker.com/develop/develop-images/build_enhancements/#using-ssh-to-access-private-data-in-builds

Could not get an answer in #python channel asking here , as am not sure where to ask https://pulumi-community.slack.com/archives/CDE799L1M/p1591225877028100

I'd like to manage resources across >1 Azure subscriptions simultaneously in one Pulumi program / stack. Is there a good example for this scenario I could start from?

Can somebody help with T-shirt-sizing a following work (I'm willing to do it myself). For some weird reason which is not interesting, I need to have an option to generate standalone ARM template for pulumi stack to be used for performing actual deployment step. I'd like to re-use if possible all azure.* object model (without creating a new provider from scratch) but have something underneath translating that to ARM template instead of usual path. I do understand that ARM template is very limited in expressiveness so not everything would be even possible if this option is used.

what causes state values to become

"[secret]"

and is there a way to disable it on fields? it's causing massive diffs. I'll thread an example.

I developed on the JVM for years before picking up Haskell. I'm wondering what's the state of Java, Scala, Kotin support?

We have followed the instructions on https://www.pulumi.com/docs/guides/continuous-delivery/github-actions/ and https://www.pulumi.com/docs/guides/continuous-delivery/github-app/ but cannot get the pulumi

bot

to integrate and post to the PR. The only way we've been able to get it to post anything is to turn on the

COMMENT_ON_PR

flag (along with the

GITHUB_TOKEN

)... but that results in the ugly

pulumi --non-interactive preview

comment coming from

github-actions

bot... Are those docs up-to-date, or are we missing something critical in the setup/configuration? I've confirmed that the GitHub App is installed, and has permissions (in GH) to our repository.

hi

Is pulumi have python module to build Azure SQL Managed Instance? If none I will have to use ARM template with typescript.

Hi there, is it possible to implement own resources that participate in the Pulumi lifecycle (up/destroy) using Typescript? Are there any examples around? The use case is that I would like to output some configuration to CircleCI variables for later phases of the build process.

I'm using explicit providers only in my pulumi program, what would be the best way to disable ambient default Azure provider to reliably catch all the errors and not have something accidentally deployed in the unexpected context depending on the state of the environment where pulumi up is running? More generic question: Is there a way to inject a policy (or to do something else in a pulumi program) to completely ban usage of things like

azure.core.getClientConfig({}).then(current => current.objectId);

to enforce pulumi program to be fully hermetic, i.e. independent on the environment it runs in?

[no answer required] Just sharing feelings on the pulumification process. My cloud configuration begins to *make sense*™. I think I can even understand it now 🙂

Hi there, is it possible to start pulumi cli commands with a specific directory. I use the pulumi docker image inside my cli. In subprojects ( backend / frontend) i save the pulumi programm and stack inside an infrastructure folder and inside the cicd pipeline i want to start something like that pulumi up --path infrastructure ? Is that possible ?

Folks, what should I do if I get spurious planned deletes in the preview? I presume manually modifying the stack state via

pulumi state delete

?

Is there a way to simulate Azure deployment and have pulumi to force creation of a fake stack's state matching the goal state described by pulumi program without touching Azure Cloud? Is there a way to diff the state produced by two different versions of the same pulumi program (e.g. HEAD and HEAD~1 in git) without performing any actual Azure Cloud deployment (let's say this is done in a context of git pull request validation pipeline) ?

I'm very new to Pulumi.. I've used it for a total of about 1 hour or so.. haha.. Does anyone know how I can override the default AWS S3 endpoint that Pulumi uses? I found this documentation where is shows how to override the AWS Kinesis and DynamoDB endpoints, but that's it... I took a guess and tried doing this.. Although it didn't error out, I don't think it actually worked as expected..?

pulumi config set s3Endpoint: <http://localhost:4566>

I'd like to create a few Azure Service Principals in Pulumi program and link them with other resources. Somebody told me that this is possibile in Pulumi, but I failed to find it in the documentation and grepping sources code of azure provider didnt give me a clue 😞

Example not compiling - challenge with declaring output values for dynamic.Resource, aren't they supposed to be def-initialized in ctor? (adding details to thread)

Creating Azure secret using Typescript add 8 random chars at the end od the resource name. Anyone knows a work around this?

It is written in the doc

Hey guys! https://github.com/pulumi/pulumi/issues/2707 is there a way to adopt this feature? 😄

Hi there, I am generating random secrets for things like database users, keycloak admin etc. If I do this just like this in my script, each run will update all secrets in my entire installation, which is a bit disruptive. Is there some way to say e.g. "if RDS is already running, don't generate a new password"? Or maybe even some out of the box functionality for generating random secrets/passwords that takes this into account?

How can i transform 

pulumi.StringOutput

 to simple 

string

? I'm constructing dynamically gcp subscription which has a 

PushEndpoint

 parameter that takes 

string

 instead of 

pulumi.String

  and I'm blocked.

Does the install script (

curl  ...

) allow me to install a specific version or is it always the latest?

For AWS cost tracking; how do I assign a tag to every resource on a stack?

How can secrets be shared across stacks?

Hi, I started using Pulumi few days ago and was already been able to create a stack I wasn’t able to create on Cloud Formation. So that’s a good start :) However, I have an issue with a stack deploying ECS service with blue/green deployment using aws.ecs.Services(). After the creation of the service in AWS, even if I didn’t make any change to the existing service, Pulumi detects there is an update to the service.(probably because the TG or task definition revision was changed on AWS) Pulumi up -> the service is created. Running Pulum up without making any changes -> an update is detected on the service. Because of AWS limitations, I can’t update an ecs service with a CODE_DEPLOY deployment. (“InvalidParameterException: Unable to update network parameters on services with a CODE_DEPLOY deployment controller. Use AWS CodeDeploy to trigger a new deployment.”) This actually forces me to delete all existing services and recreate them only to make a change or create a new service. I tried to use ignoreChanges and transformations, but nothing changed: ignoreChanges: ['desiredCount',   'loadBalancers',   'taskDefinition',   ], transformations: [     args => {     if (args.type === 'awsecs/serviceService') {       return {       props: args.props,       opts: pulumi.mergeOptions(args.opts, {         ignoreChanges: [         'desiredCount',         'loadBalancers',         'taskDefinition',         ],       }),       };     }     return undefined;     },   ] Related issues: https://github.com/pulumi/pulumi/issues/3569 https://github.com/pulumi/pulumi/issues/3974 Can you please advice what can solve this issue? Thank you!

when dynamic providers will be available in golang?

hey, what is the CI story when using?

renderYamlToDirectory

const provider = new k8s.Provider('k8s-provider', {
  renderYamlToDirectory: 'kubernetes',
});

if we gitignore output directory and run pulumi up on build pipeline, then it will only write files that have changed since last

pulumi up

command?