https://pulumi.com logo
Docs
Join the conversationJoin Slack
Channels
announcements
automation-api
aws
azure
blog-posts
built-with-pulumi
cloudengineering
cloudengineering-support
content-share
contribex
contribute
docs
dotnet
finops
general
getting-started
gitlab
golang
google-cloud
hackathon-03-19-2020
hacktoberfest
install
java
jobs
kubernetes
learn-pulumi-events
linen
localstack
multi-language-hackathon
office-hours
oracle-cloud-infrastructure
plugin-framework
pulumi-cdk
pulumi-crosscode
pulumi-deployments
pulumi-kubernetes-operator
pulumi-service
pulumiverse
python
registry
status
testingtesting123
testingtesting321
typescript
welcome
workshops
yaml
Powered by Linen
general
  • q

    quiet-hairdresser-18834

    06/29/2020, 6:32 PM
    I just don't want to generate a new password every run and overwrite the secret each time. I want to set it once, then use it going forward
  • f

    faint-motherboard-95438

    06/30/2020, 12:07 AM
    Hi, someone here would know why when I run
    pulumi up
    in a container it reintalls the plugins each time while when I’m running the code locally I have no issue ? That’s driving me crazy. I’m using the official container
    pulumi/pulumi-nodejs:latest
    l
    b
    • 3
    • 20
  • w

    white-rainbow-68240

    06/30/2020, 1:06 PM
    I'm still struggling to find a way to debug my github actions. Seems like the action gets stuck at pulumi/actions, and I can't see any logs until i abort it. I've cancelled one after 19h in the pending state, but since github had some issues yesterday, I can't say if that is normal or not when using the Pulumi actions image. Anyone else running
    pulumi up
    successfully via github actions? Pulumi up works locally for me.
    l
    • 2
    • 34
  • b

    better-rainbow-14549

    06/30/2020, 4:55 PM
    i'm struggling to get secrets to work, specifically with a kubernetes.Provider. I've changed the input to be
    kubeconfig: pulumi.secret(kubeconfigraw)
    but the full plain text is still being included in
    pulumi stack export
    g
    • 2
    • 1
  • b

    best-lifeguard-91445

    06/30/2020, 9:21 PM
    Any idea why my cloudwatch role is blank even when i specify the roleArn?
    const createCloudWatchEventTargets = (rule: Output<EventRule>, pipeline: Pipeline) => {
        pulumi.all([pipeline.name, pipeline.arn, rule.name]).apply(([pipelineName, pipelineArn, ruleName]) => {
            const pipelineExecutionRole = new Role(`cwe-${pipelineName}-role`,
                {
                    assumeRolePolicy: `{
                        "Version": "2012-10-17",
                        "Statement": [
                            {
                                "Effect": "Allow",
                                "Principal": {
                                    "Service": "codepipeline.amazonaws.com"
                                },
                                "Action": "sts:AssumeRole"
                            }
                        ]
                    }`
                });
    
            const pipelineExecutionPolicy = new Policy(`cwe-${pipelineName}-start-pipeline-execution`, {
                policy: `{
                    "Version": "2012-10-17",
                    "Statement": [
                        {
                            "Effect": "Allow",
                            "Action": [
                                "codepipeline:StartPipelineExecution"
                            ],
                            "Resource": [
                                "${pipelineArn}"
                            ]
                        }
                    ]
                }`
            });
    
            new PolicyAttachment(`cwe-${pipelineName}-start-pipeline-execution-attachment`, {
                policyArn: pipelineExecutionPolicy.arn,
                roles: [pipelineExecutionRole]
            });
    
            return new aws.cloudwatch.EventTarget(`${ruleName}-target`, {
                arn: pipeline.arn,
                rule: rule.name,
                roleArn: pipelineExecutionRole.arn,
            });
        })
    };
    g
    • 2
    • 3
  • f

    faint-motherboard-95438

    06/30/2020, 10:45 PM
    How to suppress the warning about upgrading pulumi version ? it’s totally messing up my output values…
    b
    • 2
    • 4
  • d

    damp-elephant-82829

    07/01/2020, 6:19 AM
    Is there a way to get the full log of failing requests with pulumi? I have a failing stack because of lack of permission but it doesn’t tell me which api is invoking and I don’t know which role I should add. -d won’t help
  • w

    white-rainbow-68240

    07/01/2020, 6:54 AM
    Day 3 on trying to debug github actions, and I am going to try and figure out why an sts call towards us-east-1 is happening when the configuration on pulumi.com says eu-west-1. I will be creating a project from scratch and add small pieces at a time to see when it fails, but each hour spent is an hour lost.
    ✅ 1
    • 1
    • 4
  • g

    green-salesclerk-34937

    07/01/2020, 8:18 AM
    Hello, I’m suffering
    alias.0.name: required field is not set
    error with this code
    export const apiDnsRecord = new aws.route53.Record('WSAPIRecord', {
      name: domainName.domainName,
      type: 'A',
      zoneId,
      aliases: [
        {
          evaluateTargetHealth: true,
          name: domainName.domainNameConfiguration.targetDomainName,
          zoneId,
        },
      ],
    })
    so I tried domainName.domainNameConfigurationg.apply(config => …) to resolve empty targetDomainName but it didn’t work. what I found is that
    export const domainName = …
    clearly shows correct targetDomainName but I can’t get that. Any help/advice what i can try?
  • e

    early-window-97394

    07/01/2020, 12:52 PM
    Hello all, I am playing with pulumi and I would like to know if there is a way to dump yaml for Openshift? all I see it this beta way (for K8) https://www.pulumi.com/docs/reference/pkg/nodejs/pulumi/kubernetes/#ProviderArgs-renderYamlToDirectory Can you help me?
    • 1
    • 1
  • d

    dazzling-oxygen-76309

    07/01/2020, 2:11 PM
    Hi all 🙂 I am using interstack references, and i am hitting an issue where the value of the required output does not seem to be updated in the referring project. To clarify: Stack A is referencing B to get the value of the output Foo with the value "Bar". B changes the value of Foo to "Bas" but keeps the output name. When i do a "pulumi up" in the project related to A there are no changes even though Foo might be crucial to A. Destroying A and creating it again forced an update, but is not really production friendly 😛 I have tried doing a "pulumi refresh" in A but that did not update it, and it actually said that it did not update it. Any idea how to do this stack reference update of already used outputs? 🙂
    b
    • 2
    • 2
  • b

    blue-computer-71271

    07/01/2020, 3:29 PM
    hi i'm trying to figure out how to convert Outputs into their raw types (eg, StringArrayOutput -> []string) or input equivalents in golang. in the case I'm looking at, i'd want to range() over the output elements and I can't figure out how to get access to the elements.
    a
    • 2
    • 3
  • i

    icy-jordan-58549

    07/01/2020, 5:11 PM
    hey, team, I’ve created Databricks pulumi provider, it works for me already, but I am not sure if we have a checklist to make pulumi it community ready https://github.com/XBeg9/pulumi-databricks
    b
    • 2
    • 2
  • a

    able-beard-29160

    07/01/2020, 5:38 PM
    Is it possible to import an existing resource via the
    import
    property, without having to also specify the
    name
    property?
    l
    • 2
    • 4
  • p

    polite-winter-39579

    07/01/2020, 7:13 PM
    is it possible to output an attribute of a resource marked as secret as NOT secret? i.e.
    export const registryCreds = pulumi.secret(new digitalocean.ContainerRegistryDockerCredentials("container-registry-creds", { registryName: registry.name }).dockerCredentials);
    
    const registryCredsKubeSecret = new k8s.core.v1.Secret('registry-creds-kube-secret', {
      type: '<http://kubernetes.io/dockerconfigjson|kubernetes.io/dockerconfigjson>',
      metadata: {
        namespace: appsNamespaceName
      },
      data: {
        ".dockerconfigjson": registryCreds.apply(v => Buffer.from(v).toString('base64')),
      },
    }, { provider })
    
    // How do I make the output below NOT secret? 
    export const registryCredsKubeSecretName = registryCredsKubeSecret.metadata.name
  • p

    polite-winter-39579

    07/01/2020, 7:15 PM
    registryCredsKubeSecretName
    is secret by "lineage", however, it's not sensitive so I want output in plain text
  • l

    loud-battery-37784

    07/01/2020, 7:25 PM
    I don’t think you can just convert it but if you can log it from inside the apply callback and get the same sort of functionality if all you need is to see it printed. https://www.pulumi.com/docs/intro/concepts/programming-model/#how-secrets-relate-to-outputs
  • p

    polite-winter-39579

    07/01/2020, 7:35 PM
    yeah that works, I was hoping for a built-in function that's as clean/simple as calling
    pulumi.secret
    to do the inverse
    g
    • 2
    • 1
  • s

    shy-tent-25663

    07/01/2020, 8:04 PM
    Hi there 👋 I’m working on a prototype for using Github Actions with Pulumi. Is it considered best practice to fill a seat with a Pulumi “machine user” in order to generate the necessary token? I’d like to decouple the token from other accounts, but since there doesnt seem to be any formal or programmatic way to set up a machine user (other than just creating a normal user via email) I thought I’d ask here
    l
    c
    • 3
    • 3
  • m

    many-smartphone-58924

    07/01/2020, 8:38 PM
    Is there a way to hide/mute the deprecation warning on kubernetes apiVersions when running
    pulumi up
    ?
    g
    • 2
    • 2
  • w

    wide-journalist-154

    07/01/2020, 9:54 PM
    Is there something like Atlantis for Pulumi?
    f
    • 2
    • 2
  • i

    icy-jordan-58549

    07/01/2020, 10:35 PM
    Hey, team. What’s going on with helm chart hooks? Does pulumi support it? I’ve faced the issue, because helm chart uses the hook annotations and they are not applied correctly. Thanks
    g
    • 2
    • 6
  • f

    fast-kilobyte-59880

    07/02/2020, 6:35 AM
    Hi guys, I'm using pulumi tags to organise a little better my stacks. Right now I'm using the commands I found here: https://www.pulumi.com/docs/reference/cli/pulumi_stack_tag/. However, it is a little hard to know which tags your stack is using if you don't go to pulumi page. Is there a way to define tags in stack yaml? I think it would be great to support this, because tags would be easier to maintain and the visibility would improve.
  • g

    great-postman-59271

    07/02/2020, 8:01 AM
    Has anyone else experienced pulumi getting stuck on 'pulumi up'? The cli basically runs forever, doing apparently nothing
    👍 1
    b
    a
    • 3
    • 4
  • d

    dazzling-sundown-39670

    07/02/2020, 9:37 AM
    I have a pulumi stack where I create a docker image and push it to my registry. On my local machine it doesn't push unless the image is changed but on Github Actions it builds and pushes every time. Is there any way I can cache those builds?
    w
    • 2
    • 1
  • d

    dazzling-sundown-39670

    07/02/2020, 11:00 AM
    Is it possible to change the location of this file? https://www.pulumi.com/docs/guides/continuous-delivery/github-actions/#branch-mappings
    s
    • 2
    • 1
  • d

    dazzling-noon-8565

    07/02/2020, 12:22 PM
    Hello !!
  • d

    dazzling-noon-8565

    07/02/2020, 12:23 PM
    Is it possible to configure pulumi to work via a web proxy ?
  • b

    better-rainbow-14549

    07/02/2020, 1:01 PM
    I've got a weird thing I've never seen before where
    pulumi destroy --non-interactive --yes
    is just emptying the state file instantly without making any changes to the resources themselves
    • 1
    • 1
  • e

    echoing-breakfast-73834

    07/02/2020, 3:28 PM
    Is there any way to run pulumi in interactive mode on windows machines? Both command prompt and powershell are non-interactive
    h
    p
    • 3
    • 5
Powered by Linen
Title
e

echoing-breakfast-73834

07/02/2020, 3:28 PM
Is there any way to run pulumi in interactive mode on windows machines? Both command prompt and powershell are non-interactive
h

hundreds-musician-51496

07/02/2020, 4:48 PM
how do you mean "interactive"? Do you mean the "yes/no/details" prompt when you run
pulumi up
?
p

proud-salesclerk-33503

07/02/2020, 5:22 PM
I never used pulumi on windows, but if think everything should work on WSL just fine
h

hundreds-musician-51496

07/02/2020, 5:27 PM
In any case I use pulumi on windows all the time (windows 10).
e

echoing-breakfast-73834

07/02/2020, 5:37 PM
Yep the yes/no/details prompt and the dependency tree while doing things like
pulumi up
h

hundreds-musician-51496

07/02/2020, 5:54 PM
Yeh those prompts work fine in Windows Shell and previously in ConEmu (which runs powershell/cmd underneath) for me. I haven't ever seen any sign the tree is interactive tho ...
View count: 1