pulumi-community #general

cold-motherboard-287

06/13/2020, 4:23 PM

Let's say I want to create a new provider (I guess that's how it's called) for another cloud provider.... Where could I start? do you guys use a specific language (from the ones you support) in the core or could I use any for such a task?

mysterious-pilot-36551

06/14/2020, 12:38 AM

Is the

depends_on

option supposed to delay the creation of a resource until the resource it depends on finishes being created? I have a Kubernetes custom resource that depends on a Chart, however, Pulumi is trying to create both the Chart and the custom resource at the same time. This causes it to fail because the CRD isn’t created until the Chart finishes getting created. Here is an excerpt. Chart is declared on line 26 and the custom resource on line 46.

mysterious-pilot-36551

06/14/2020, 12:44 AM

Nevermind, this is a known bug: https://github.com/pulumi/pulumi-kubernetes/issues/861

numerous-lifeguard-13411

06/14/2020, 2:09 AM

Hey folks, I'm trying to do something that seems like it should be simple: set up a no-scaling, no-redundancy bastion-web-app configuration. But I'm getting an infuriating pair of errors, one saying it's expecting a security group to start with "sg-" for its name, and another that says "sg-" is a forbidden patter for security groups.

numerous-lifeguard-13411

06/14/2020, 2:10 AM

Copy code

aws:ec2:SecurityGroup (appserver):
    error: 1 error occurred:
    	* creating urn:pulumi:dev::cisco-exercise::aws:ec2/securityGroup:SecurityGroup::appserver: Error authorizing security group ingress rules: InvalidGroupId.Malformed: Invalid id: "bastion-05865a3" (expecting "sg-...")

numerous-lifeguard-13411

06/14/2020, 2:10 AM

Any clues there?

numerous-lifeguard-13411

06/14/2020, 2:31 AM

Here's the other version:

Copy code

aws:ec2:SecurityGroup (sg-bastion):
    error: Error creating Security Group: InvalidParameterValue: Value (sg-bastion-1f46895) for parameter GroupName is invalid. Group names may not be in the format sg-*.

numerous-lifeguard-13411

06/14/2020, 2:31 AM

You can see why this might make a fellow doubt his own sanity.

numerous-lifeguard-13411

06/14/2020, 3:18 AM

Seems like for security groups, the

tags: { Name: "sg_blah" }

is required

little-garage-43399

06/14/2020, 11:12 AM

I think there is a import bug in Pulumi.

Copy code

from pxglb import *

pxglb is a file with classes I have built. This import is worked fine, until I have added to pxflb file a new class, a "ResourceProvider" class

Copy code

[1:05 PM] class PXNS1RecordProvider(ResourceProvider):

In this case I get the following error:

Copy code

error: Exception calling application: No module named 'pxglb'

If I copy paste the classes code into the "main" file (instead of the import), it works fine. Pulumi version: 2.4.0 Python version: 3.7.7

famous-sugar-52038

06/14/2020, 4:51 PM

Hello, there 🙋‍♂️ I have been wasting a lot of time to update k8s clusters… As I know that pulumi has superpowers to deploy with general-purpose languages, what if I used pulumi to update k8s clusters. Is it more simpler than using a plane k8s or managed-k8s with ymls? 🤔

numerous-lifeguard-13411

06/14/2020, 5:29 PM

OK, dumb question, how do I specify a local route on a routeTable?

numerous-lifeguard-13411

06/14/2020, 11:09 PM

I have fought through many trials. Now I have one last stupid requirement to deal with: hosts must not have Internet access. But they also are supposed to have httpd and curl installed on them. I could do this by giving them access in the initial configuration, letting them pull their installs, and then editing the config to remove the egress rules, and then doing

pulumi up

again. But that seems pretty grossly manual.

numerous-lifeguard-13411

06/14/2020, 11:09 PM

Is there a way to do a "staged" deploy, of sorts?

average-receptionist-65239

06/14/2020, 11:55 PM

pulumi up

command is "Waiting for app ReplicaSet be marked available (0/1 Pods available)". However, the deployment is ready. The pod is operating just fine.

rhythmic-tailor-27305

06/15/2020, 7:47 AM

I hope you guys are well. Actually I am doing a comparison by comparing features of pulumi with aws cdk. I am finding it difficult to compile up all the extra features which pulumi gives over aws cdk. Can anyone please help me out by highlighting some of the features?

rhythmic-tailor-27305

06/15/2020, 7:48 AM

why should I prefer pulumi for my projects, plus what are the major differences between paid and non paid version

victorious-gigabyte-4729

06/15/2020, 5:56 PM

How are project groups defined? I'd apparently created a project group once but can't seem to create a group of projects a second time? Not sure how.

numerous-lifeguard-13411

06/15/2020, 6:45 PM

I'm sure there was a readme on using parameters to populate a pulumi spec, but can't seem to find it now. Anyone got a link?

salmon-needle-46218

06/15/2020, 6:49 PM

is there a specific channel to talk about the

pulumi/actions

docker container?

miniature-petabyte-40567

06/15/2020, 7:19 PM

I'm having problems understanding setting up an application load balancer's AccessLogs in regards to the bucket, is this documentation just out of date? It seems like it's looking for an Input<string>, won't accept an S3.Bucket. Is it just looking for the bucket's name, or the ID? https://www.pulumi.com/docs/reference/pkg/dotnet/Pulumi.Aws/Pulumi.Aws.ApplicationLoadBalancing.LoadBalancer.html

Copy code

AccessLogs = new Aws.LB.Inputs.LoadBalancerAccessLogsArgs
        {
            Bucket = aws_s3_bucket.Lb_logs.Bucket,
            Enabled = true,
            Prefix = &quot;test-lb&quot;,
        },

numerous-lifeguard-13411

06/15/2020, 7:28 PM

When creating t2.micro instances I get a complaint sometimes that the size is not available in an availability zone, and to choose a different one or don't set one. I have not set any AZ explicitly (in older versions of my script--I "solved" the issue by forcing one). It seems like pulumi is distributing across AZs by default in AWS--is there a way to turn off that behaviour?

astonishing-quill-88807

06/15/2020, 7:49 PM

Has anyone tried out doing conditional adoption of existing resources? For instance, can you do something like:

Copy code

existing_vpc = ec2.get_vpc(tags={'Name': 'my-vpc-name'})
if existing_vpc and existing_vpc.not_in_stack():
    import_opts = ResourceOption(import_=existing_vpc.id)

astonishing-quill-88807

06/15/2020, 7:50 PM

Where the

not_in_stack

functionality can do some broad lookup of whether Pulumi is already managing the given VPC?

white-beard-6027

06/15/2020, 7:52 PM

So something interesting happened just now. I was trying to manage a secret using pulumi as

pulumi config set --path "path/of/secret-key/"

and entered a weird looking 16 char

pwgen

random password. And Pulumi detected that it looks like a password and asked me to use

--secret

flag to save it securely. How cool is that! 🙂 Pleasant surprise. And a DX.

partypus 8bit 4

mysterious-pilot-36551

06/15/2020, 10:38 PM

So what’s the proper way (if any) of inspecting an Output type in Python? Printing it doesn’t give a pythonic string and I’ve tried numerous variations of apply() with no success either. Makes troubleshooting really difficult.

great-byte-67992

06/15/2020, 11:39 PM

Hey there. Has anyone found a good pattern for a self refreshing “end date” on azure service principals? I don’t want to hardcode an expiry date for the service principal. Is there a way to do a

Date.now + N days

that won’t update on every deployment, perhaps only updating when it’s within a week of the expiry date?

future-daybreak-2871

06/16/2020, 8:32 AM

Hi guys. I'm just getting started with pulumi but am facing an issue.

future-daybreak-2871

06/16/2020, 8:33 AM

I'm creating an ecs cluster

Copy code

ecs_cluster = aws.ecs.Cluster("ecsCluster", name="cluster-name", tags=default_tags)

and trying to refer to it using

ecs_cluster.name

(tried

ecs_cluster.name.apply(lambda name: name)

too.

future-daybreak-2871

06/16/2020, 8:34 AM

I'm getting that as

<pulumi.output.Output object at 0x7f717c021d30>