pulumi-community #general

limited-solstice-34584

07/09/2020, 2:23 PM

i got it

limited-solstice-34584

07/09/2020, 2:23 PM

i used the following for future reference:

limited-solstice-34584

07/09/2020, 2:24 PM

Copy code

const secret = new aws.secretsmanager.Secret("macsdb_password", {});

const storedPassword = new aws.secretsmanager.SecretVersion(
  "macsdb_password",
  {
    secretId: secret.id,
    secretString: pulumi.output(secretsToStore).apply(JSON.stringify),
  },
  { dependsOn: db }
);

millions-furniture-75402

07/09/2020, 2:57 PM

When running pulumi update, can I get information about the user who ran it at runtime? I want to inject it into AWS Tags.

limited-solstice-34584

07/09/2020, 4:18 PM

I have an issue where I am using pulumi to generate a lambda on a rest api endpoint, I will include the code, and the generated results in this thread. Any ideas?

clever-plumber-29709

07/09/2020, 5:08 PM

Is there any guide or documentation on best practices when using self-managed backends? like setting up encryption and so on?

cool-egg-852

07/09/2020, 6:47 PM

Any idea why the github provider went with a breaking change and then reverted but without any backwards compatibility and no notice? No mention at all in the changelog.

limited-solstice-34584

07/09/2020, 6:52 PM

Anyone know how to add cors to aws api gateway rest apis

limited-solstice-34584

07/09/2020, 6:52 PM

chilly-hairdresser-56259

07/09/2020, 7:12 PM

Is it best practice to be very specific with your outputs. Meaning that with AWS when I create a VPC I create a specific output for VpcId?

limited-solstice-34584

07/09/2020, 7:16 PM

I am not sure why its not working im using a gateway response object

big-potato-91793

07/09/2020, 7:34 PM

Hey small question. we got this error today

Copy code

Updating (nonprod-east):
     pulumi:pulumi:Stack app-nonprod-east running 
  ~  kubernetes:<http://gitlab.devxtools.tktm.io:GitlabRunner|gitlab.devxtools.tktm.io:GitlabRunner> gitlab-runner updating [diff: ~metadata,spec]
  ~  kubernetes:<http://gitlab.devxtools.tktm.io:GitlabRunner|gitlab.devxtools.tktm.io:GitlabRunner> gitlab-runner updating [diff: ~metadata,spec]; error: update of resource prd2576/gitlab-runner-rxy8rm1g failed because the Kubernetes API server reported that it failed to fully initialize or become live: <http://gitlabrunners.gitlab.devxtools.tktm.io|gitlabrunners.gitlab.devxtools.tktm.io> "gitlab-runner-rxy8rm1g" not found
  ~  kubernetes:<http://gitlab.devxtools.tktm.io:GitlabRunner|gitlab.devxtools.tktm.io:GitlabRunner> gitlab-runner **updating failed** [diff: ~metadata,spec]; error: update of resource prd2576/gitlab-runner-rxy8rm1g failed because the Kubernetes API server reported that it failed to fully initialize or become live: <http://gitlabrunners.gitlab.devxtools.tktm.io|gitlabrunners.gitlab.devxtools.tktm.io> "gitlab-runner-rxy8rm1g" not found
     pulumi:pulumi:Stack app-nonprod-east running error: update failed
     pulumi:pulumi:Stack app-nonprod-east **failed** 1 error
  
 Diagnostics:
   pulumi:pulumi:Stack (app-nonprod-east):
     error: update failed
  
   kubernetes:<http://gitlab.devxtools.tktm.io:GitlabRunner|gitlab.devxtools.tktm.io:GitlabRunner> (gitlab-runner):
     error: update of resource prd2576/gitlab-runner-rxy8rm1g failed because the Kubernetes API server reported that it failed to fully initialize or become live: <http://gitlabrunners.gitlab.devxtools.tktm.io|gitlabrunners.gitlab.devxtools.tktm.io> "gitlab-runner-rxy8rm1g" not found
  
 Resources:
     1 unchanged
 Duration: 11s

I wanted to know what was the reason of this error? Do you got any idea?

limited-solstice-34584

07/09/2020, 8:08 PM

i cant find any good documentation on api gateway cors

colossal-plastic-46140

07/09/2020, 8:18 PM

Hi Folks, I have a question about importing resources into pulumi. The documentation in some places suggests that once successfully importing a resource into the state file you must remove the import option. But there are blog posts that say removing it is optional, can someone help me understand the discrepancy https://www.pulumi.com/docs/reference/pkg/python/pulumi/

cool-egg-852

07/09/2020, 8:43 PM

Did anything change with pulumi? We’re not sure if it’s related to change in pulumi, or an upgrade in typescript or what:

Copy code

Each member of the union type '{ <U>(func: (t: string) => Promise<U>): Output<U>; <U>(func: (t: string) => OutputInstance<U>): Output<U>; <U>(func: (t: string) => U): Output<...>; } | { ...; }' has signatures, but none of those signatures are compatible with each other.

When trying to do:

Copy code

new gcp.pubsub.SubscriptionIAMMember(`${config.projectName}-${topicName}`, {
      member: serviceAccount.account.email.apply((e) => `serviceAccount:${e}`),
      role: 'roles/pubsub.subscriber',
      subscription: subscription.name,
    });

melodic-alarm-79754

07/09/2020, 10:39 PM

- docker run -i --rm -e PULUMI_ACCESS_TOKEN=$PULUMI_ACCESS_TOKEN -w /app -v $(pwd):/app --entrypoint bash pulumi/pulumi-python -c "pip install -r requirements.txt && pulumi stack select test --non-interactive" ---- error: no Pulumi project found in the current working directory

melodic-alarm-79754

07/09/2020, 10:39 PM

any idea why is not working ?

rhythmic-napkin-82334

07/09/2020, 11:20 PM

Hey all, Is there a way to "deactivate" instead of "pulumi destroy"? Wondering whether there are use cases in which e.g. an eks kubernetes cluster frequently would need to be created and destroyed and therefore would be more time efficient to just activate and deactivate it?

mammoth-caravan-51104

07/09/2020, 11:51 PM

Hello friends, small issue, but annoying. I've setup codepipeline with github in a source step. Every time when I run

up

pulumi updates the stage definition by adding the oauthtoken. Did I miss something in config? can it be done just once? Thanks

limited-solstice-34584

07/10/2020, 12:12 AM

anyone know how to make a api gateway mock integration for options?

limited-solstice-34584

07/10/2020, 12:26 AM

I am at a loss, ive build everything else I need except the cors mock integration to give headers

limited-solstice-34584

07/10/2020, 12:26 AM

OPTIONS

limited-solstice-34584

07/10/2020, 12:27 AM

i can make it work using a lambda, but thats gonna get expensive

broad-breakfast-39210

07/10/2020, 8:31 AM

I'm trying to deploy a Google Cloud Run service connected to a Cloud SQL instance (without a proxy) and I have no idea how to specify the instance connection, it's not documented anywhere...

gcloud

SDK has the following flag:

Copy code

--set-cloudsql-instances <PROJECT_ID>:<CLOUD_SQL_REGION>:<INSTANCE_ID>

But I don't know how to pass it with Pulumi... Once Pulumi creates a service (failed to start) I can ass the Cloud SQL instance through the Google Cloud Console manually, but next Pulumi deployment removes that connection 😞

millions-intern-37041

07/10/2020, 2:22 PM

Could anyone enlighten us on this question? I also wonder which documentation is consistent with the reality in code.

millions-furniture-75402

07/10/2020, 2:23 PM

Thank you to whoever sped up the search on pulumi.com — I used to have to google search site:pulumi.com because it was so slow.

clever-plumber-29709

07/10/2020, 4:09 PM

How do i see the messages from

pulumi.debug("foo")

? I tried with

--verbose 4

and some higher but is not shown

melodic-alarm-79754

07/10/2020, 4:10 PM

KUBECONFIG is setup in the pipe , but docker run fails to connect to cluster , "kubernetes:apiextensions.k8s.io:CustomResourceDefinition podmonitors.monitoring.coreos.com creating error: configured Kubernetes cluster is unreachable: unable to load Kubernetes client configuration from kubeconfig file: invalid configuration: no configuration has been provided, try setting KUBERNETES_MASTER environment variable"

thousands-train-20124

07/10/2020, 7:26 PM

What is the process of updating a stack without having to destroy and rebuild it. I am trying to use

pulumi up --stack <stack> --yes

but this gives me an error

EntityAlreadyExists: A policy called xxx-policy already exists. Duplicate names are not allowed.

status code: 409,

. What is the way to avoid this problem and still update the changes to the code. I am using typescript as the language of programming the deployment.

worried-engineer-33884

07/10/2020, 7:54 PM

having trouble with a stack reference

getOutput

call complaining with:

Copy code

error: Preview failed: decrypting secret value: failed to decrypt: incorrect passphrase, please set PULUMI_CONFIG_PASSPHRASE to the correct passphrase

i have the correct passphrase set for the current project. the stack i’m trying to pull an output from does not set this output as a secret. (i just set foo to test):

Copy code

> pulumi stack output
Current stack outputs (1):
    OUTPUT  VALUE
    foo     zxcv