Greetings, where do you point people interested in comparisons between Pulumi and other choices like Helm charts and/or Spinnaker? I bet these are common questions someone has already answered.

trying to convert this Terraform Provider https://github.com/databrickslabs/terraform-provider-databricks to

pulumi

and getting this:

./resources.go:90:26: not enough arguments in call to databricks.Provider
        have ()
        want (string)
./resources.go:132:4: unknown field 'AsyncDataSources' in struct literal of type tfbridge.JavaScriptInfo
make: *** [tfgen] Error 2

I know this sounds pretty basics, how is the resource_name and the name should be used? Should the resource_name be unique among all my projects or is it a logical name to identify the resource insinde the stack?

I couldn’t find this in the docs

Hi All, Please help. I have a CertificateOrder but dont know how to export certificate to key vault. Please help on this? Thanks Steven

Hello, is pulumi resource creation idempotent? I am creating a GCP project but after I run pulumi up twice on the same stack, it fails with a 403 error Requested entity already exists, alreadyExists.

Hello, I'm running into this error while memoizing some function.

function 'memoized': lodash.js(10544,29): which referenced
          function 'Hash': lodash.js(1904,17): which referenced
            function 'hashClear': lodash.js(1922,22): which captured
              'nativeCreate', a function defined at
                function 'create': which could not be serialized because
                  it was a native code function.

Has any advice / resource to look at? I can avoid this error by declaring variable at root scope

var memoized_f: .. | undefined = undefined

and assign memoized function at runtime, but I wanna dig in the problem.

hi everyone! has anyone got a container with all the necessary dev tools to start playing around? I've tried getting everything together in WSL but it's been difficult getting all the ducks in a row. I'm looking to switch to devcontainers, any tips would be appreciated!

Hey Pulumates Newbie here Just wanted to see if some one has used pulumi to build a site where people can deploy a multi cloud environment Something like an interface for a multi public cloud provider (if that makes sense :) )

Hi everyone, does anyone know how to deploy a public Google Cloud Function with Pulumi?

member=allUsers

is not enough, if deploying with GCloud CLI also need to provide a flag [--allow-unauthenticated](https://cloud.google.com/functions/docs/securing/managing-access-iam#gcloud_4) but I don't know how to actually pass it to

cloudfunctions.FunctionIamMember

... I think Terraform has the same issue, their [Public Function](https://www.terraform.io/docs/providers/google/r/cloudfunctions_function.html) docs are not valid...

How does

pulumi refresh

get the role it tries to assume? It appears like it doesn't use the specified provider like preview/up does?

Hello. Is there any way to catch pulumi errors in runtime? I’m trying to check docker network with

docker.getNetwork

, but it returns error that I can’t handle with

try catch

I'm getting an error in github actions. Posting details in a thread:

Hi Folks, does anyone do anything clever around how they manage the KMS keys they use inside future pulumi stacks? For example, I would like to use pulumi to manage my kms keys.

Heya. I am wondering what the correct way to approach this. I am wanting to detect if an azure keyvault secret is present or not. If it is present, do nothing. If it is missing, create the new secret

I just don't want to generate a new password every run and overwrite the secret each time. I want to set it once, then use it going forward

Hi, someone here would know why when I run

pulumi up

in a container it reintalls the plugins each time while when I’m running the code locally I have no issue ? That’s driving me crazy. I’m using the official container

pulumi/pulumi-nodejs:latest

I'm still struggling to find a way to debug my github actions. Seems like the action gets stuck at pulumi/actions, and I can't see any logs until i abort it. I've cancelled one after 19h in the pending state, but since github had some issues yesterday, I can't say if that is normal or not when using the Pulumi actions image. Anyone else running

pulumi up

successfully via github actions? Pulumi up works locally for me.

i'm struggling to get secrets to work, specifically with a kubernetes.Provider. I've changed the input to be

kubeconfig: pulumi.secret(kubeconfigraw)

but the full plain text is still being included in

pulumi stack export

Any idea why my cloudwatch role is blank even when i specify the roleArn?

const createCloudWatchEventTargets = (rule: Output<EventRule>, pipeline: Pipeline) => {
    pulumi.all([pipeline.name, pipeline.arn, rule.name]).apply(([pipelineName, pipelineArn, ruleName]) => {
        const pipelineExecutionRole = new Role(`cwe-${pipelineName}-role`,
            {
                assumeRolePolicy: `{
                    "Version": "2012-10-17",
                    "Statement": [
                        {
                            "Effect": "Allow",
                            "Principal": {
                                "Service": "codepipeline.amazonaws.com"
                            },
                            "Action": "sts:AssumeRole"
                        }
                    ]
                }`
            });

        const pipelineExecutionPolicy = new Policy(`cwe-${pipelineName}-start-pipeline-execution`, {
            policy: `{
                "Version": "2012-10-17",
                "Statement": [
                    {
                        "Effect": "Allow",
                        "Action": [
                            "codepipeline:StartPipelineExecution"
                        ],
                        "Resource": [
                            "${pipelineArn}"
                        ]
                    }
                ]
            }`
        });

        new PolicyAttachment(`cwe-${pipelineName}-start-pipeline-execution-attachment`, {
            policyArn: pipelineExecutionPolicy.arn,
            roles: [pipelineExecutionRole]
        });

        return new aws.cloudwatch.EventTarget(`${ruleName}-target`, {
            arn: pipeline.arn,
            rule: rule.name,
            roleArn: pipelineExecutionRole.arn,
        });
    })
};

How to suppress the warning about upgrading pulumi version ? it’s totally messing up my output values…

Is there a way to get the full log of failing requests with pulumi? I have a failing stack because of lack of permission but it doesn’t tell me which api is invoking and I don’t know which role I should add. -d won’t help

Day 3 on trying to debug github actions, and I am going to try and figure out why an sts call towards us-east-1 is happening when the configuration on pulumi.com says eu-west-1. I will be creating a project from scratch and add small pieces at a time to see when it fails, but each hour spent is an hour lost.

Hello, I’m suffering

alias.0.name: required field is not set

error with this code

export const apiDnsRecord = new aws.route53.Record('WSAPIRecord', {
  name: domainName.domainName,
  type: 'A',
  zoneId,
  aliases: [
    {
      evaluateTargetHealth: true,
      name: domainName.domainNameConfiguration.targetDomainName,
      zoneId,
    },
  ],
})

so I tried domainName.domainNameConfigurationg.apply(config => …) to resolve empty targetDomainName but it didn’t work. what I found is that

export const domainName = …

clearly shows correct targetDomainName but I can’t get that. Any help/advice what i can try?

Hello all, I am playing with pulumi and I would like to know if there is a way to dump yaml for Openshift? all I see it this beta way (for K8) https://www.pulumi.com/docs/reference/pkg/nodejs/pulumi/kubernetes/#ProviderArgs-renderYamlToDirectory Can you help me?

Hi all 🙂 I am using interstack references, and i am hitting an issue where the value of the required output does not seem to be updated in the referring project. To clarify: Stack A is referencing B to get the value of the output Foo with the value "Bar". B changes the value of Foo to "Bas" but keeps the output name. When i do a "pulumi up" in the project related to A there are no changes even though Foo might be crucial to A. Destroying A and creating it again forced an update, but is not really production friendly 😛 I have tried doing a "pulumi refresh" in A but that did not update it, and it actually said that it did not update it. Any idea how to do this stack reference update of already used outputs? 🙂

hi i'm trying to figure out how to convert Outputs into their raw types (eg, StringArrayOutput -> []string) or input equivalents in golang. in the case I'm looking at, i'd want to range() over the output elements and I can't figure out how to get access to the elements.

hey, team, I’ve created Databricks pulumi provider, it works for me already, but I am not sure if we have a checklist to make pulumi it community ready https://github.com/XBeg9/pulumi-databricks

Is it possible to import an existing resource via the

import

property, without having to also specify the

name

property?

is it possible to output an attribute of a resource marked as secret as NOT secret? i.e.

export const registryCreds = pulumi.secret(new digitalocean.ContainerRegistryDockerCredentials("container-registry-creds", { registryName: registry.name }).dockerCredentials);

const registryCredsKubeSecret = new k8s.core.v1.Secret('registry-creds-kube-secret', {
  type: '<http://kubernetes.io/dockerconfigjson|kubernetes.io/dockerconfigjson>',
  metadata: {
    namespace: appsNamespaceName
  },
  data: {
    ".dockerconfigjson": registryCreds.apply(v => Buffer.from(v).toString('base64')),
  },
}, { provider })

// How do I make the output below NOT secret? 
export const registryCredsKubeSecretName = registryCredsKubeSecret.metadata.name