pulumi-community #general

proud-spoon-58287

08/05/2020, 11:00 AM

Hi all, I have a configMap and I wonder how I can pass that map in the pod env.

nutritious-battery-42762

08/05/2020, 12:57 PM

i want to auto update godaddy records but the only solution i found is https://github.com/baronfel/pulumi-godaddy but it's not working ,any suggestion?

astonishing-quill-88807

08/05/2020, 4:31 PM

So, I've got a repository with multiple different modules that each have a

__main__.py

and I'm creating separate stacks for each of them using an S3 backend. Currently I've been creating the stack definitions inside the modules, but I accidentally ended up with one at the root of the project and it automatically added a line to the config with a path to the module. I just wanted to double check whether my initial approach is the "correct" way, or if I should be creating the stack definition yaml in the root of the repository? Repository: https://github.com/mitodl/ol-infrastructure/ Root level stack definition: https://github.com/mitodl/ol-infrastructure/blob/main/Pulumi.infrastructure.aws.dns.yaml Module level stack definition: https://github.com/mitodl/ol-infrastructure/blob/main/src/ol_infrastructure/infrastructure/aws/dns/Pulumi.infrastructure.aws.dns.yaml

astonishing-quill-88807

08/05/2020, 8:34 PM

I have a stack that's using an S3 backend and KMS encryption which I recently renamed, and now Pulumi is trying to get me to enter my passphrase when I attempt to run an

up

command. Is there something I need to do to get it to recognize the fact that I've already got the KMS secret management set up?

many-egg-6856

08/05/2020, 8:46 PM

Does setting a backend URL in

pulumi.yaml

override the backend set by

pulumi login

proud-spoon-58287

08/05/2020, 9:48 PM

Hi all, I wonder why the following

Copy code

pulumi.interpolate`"org.apache.kafka.common.security.plain.PlainLoginModule required username=\\"${config.requireSecret('kafkaApiKey')}\\" password=\\"${config.requireSecret('kafkaApiSecret')}\\";"`

thankful-holiday-28161

08/05/2020, 10:53 PM

Is there a way in order to drop into a debugger statement within the Pulumi config? Either

import ipdb; ipdb.set_trace()

for Python or

debugger;

for TypeScript?

thankful-holiday-28161

08/05/2020, 10:56 PM

Also I think the Markdown for the Pulumi documentation isn't parsed correctly for at least this page: https://www.pulumi.com/docs/reference/pkg/nodejs/pulumi/gcp/compute/#BackendBucketSignedUrlKey; this is what I see

thankful-holiday-28161

08/05/2020, 10:56 PM

Copy code

A key for signing Cloud CDN signed URLs for BackendBuckets. To get more information about BackendBucketSignedUrlKey, see: * [API documentation](<https://cloud.google.com/compute/docs/reference/rest/v1/backendBuckets>) * How-to Guides * [Using Signed URLs](<https://cloud.google.com/cdn/docs/using-signed-urls/>) > **Warning:** All arguments including `keyValue` will be stored in the raw state as plain-text. #### Example Usage - Backend Bucket Signed Url Key ```typescript import * as pulumi from "@pulumi/pulumi"; import * as gcp from "@pulumi/gcp"; const bucket = new gcp.storage.Bucket("bucket", {location: "EU"}); const testBackend = new gcp.compute.BackendBucket("testBackend", { description: "Contains beautiful images", bucketName: bucket.name, enableCdn: true, }); const backendKey = new gcp.compute.BackendBucketSignedUrlKey("backendKey", { keyValue: "pPsVemX8GM46QVeezid6Rw==", backendBucket: testBackend.name, }); ```

damp-elephant-82829

08/06/2020, 7:51 AM

How does one wait an awaitable resource in python?!

astonishing-quill-88807

08/06/2020, 1:27 PM

I'm trying to debug why a set of resources are set to be deleted and recreated despite there not being any apparent changes. Any pointers?

damp-elephant-82829

08/06/2020, 2:07 PM

@astonishing-quill-88807 I would look what happens if you do pulumi refresh. If that doesn’t help, I would enable terraform tracing

damp-elephant-82829

08/06/2020, 2:07 PM

export TF_TRACE=TRUE

astonishing-quill-88807

08/06/2020, 2:07 PM

Great, thanks

proud-spoon-58287

08/06/2020, 2:13 PM

k8s.helm.v3.Chart

nutritious-battery-42762

08/06/2020, 2:25 PM

how can i share config values between stacks?

gifted-student-18589

08/06/2020, 4:12 PM

A quick question regarding Pulumi projects 🙂 I have two

Pulumi.yaml

files, meaning two Pulumi projects, one in the

api

folder (in the sshot letter

) and the other in the

apps/admin

folder (in the sshot letter

). What is surprising to me is that when I go to

and run

pulumi up

, it deploys stuff fine, but when I go to

, then it’s actually still working with

but it’s using the

index.ts

from

. Is this normal? So for example, in

I have a simple IAM role, and running

pulumi up

in there deploys it. But then, cd-ing to

, where

index.ts

contains as simple S3 bucket, and running again

pulumi up

says that it will remove the IAM role, and deploy the bucket. Maybe I’m not using projects as they are meant to be used, and I should just handle this situation with different stack names, and a single Pulumi project?

nutritious-battery-42762

08/06/2020, 5:01 PM

i want to run a fargate task just once to database migration how would i do that?

careful-engine-71229

08/06/2020, 6:55 PM

Hey guys I'm getting a really weird issue.

careful-engine-71229

08/06/2020, 6:55 PM

Untitled

careful-engine-71229

08/06/2020, 6:55 PM

Getting while from this.

careful-engine-71229

08/06/2020, 6:55 PM

Untitled

careful-engine-71229

08/06/2020, 6:55 PM

What gives?

careful-engine-71229

08/06/2020, 6:56 PM

that's in almost vanilla typescript file.

full-dress-10026

08/06/2020, 8:17 PM

Do StackReferences preserve type? e.g., If my export is an array of strings, will the stack reference be an array of strings?

fast-dinner-32080

08/06/2020, 8:31 PM

Hey guys, I am trying to port a C# stack to Python with pretty much 1:1 code so nothing should change. However I am using components and when resources are built out in the component in Python the urn is completely different. The C# urn doesn't include the component type but the python urn does include the component type. Is this something I configured wrong or is this expected when moving to a different language for the same stack?

miniature-megabyte-76794

08/06/2020, 10:43 PM

Does Pulumi have something equivalent to

eb setenv KEY=VALUE

for AWS Elastic Beanstalk? I am trying to create an

aws.elasticbeanstalk.Environment

, and want to make an environment variable with

CNAME

as a value. I've tried to pass

CNAME

in as a setting, but because I can only access it when the resource itself is fully created, I've seem to run into a sort of "The Chicken or the Egg" problem in which I need the output of a resource in order to make the inputs for it.

elegant-window-55250

08/07/2020, 7:32 AM

Hello! I have a repository (“infra-services”) that describes all services in Kubernetes, the CI/CD builds and deploys these with Pulumi (at every change to

master

develop

branch). The services are kept in smaller repositories, the CI/CD builds and deploys Docker images. I’d like to deploy versions based on branch, and for develop branch I’d like to deploy latest version. I’ve considered adding another GitOps tool, such as Flux or otherwise, but I don’t really want to introduce that into the stack, I’d like to keep using Pulumi, Pulumi should know the state at all times. I don’t really want to add Pulumi to the services repositories (to keep things separated). Any ideas?

bland-ice-32467

08/07/2020, 9:01 AM

https://pulumi-community.slack.com/archives/CRVK66N5U/p1596744333208700

delightful-controller-41497

08/07/2020, 9:57 AM

is there a way to apply a security group to an RDS instance after it has been created?