how can I get Internet Gateway ID from

const default_vpc = awsx.ec2.Vpc.getDefault(); 
      console.log(default_vpc.internetGateway.id)

Got error

'resourceGroupName' is not defined

for Azure ARM template deployment

File "./__main__.py", line 23, in <module>

resourceGroupName: resource_group.name,

NameError: name 'resourceGroupName' is not defined

error: an unhandled error occurred: Program exited with non-zero exit code: 1

part of code here, not sure where to look for

TemplateDeployment

docs , can't see them in API reference

armDeployment = azure.core.TemplateDeployment("test-dep", {

resourceGroupName: resource_group.name,

templateBody: JSON.stringify(content),

parameters: {

"storageAccountType": "Standard_GRS",

},

deploymentMode: "Incremental",

})

I've got some mismatches with my AWS NACLs and NACL rules, which mostly haven't changed in AWS or my project: a few rules are deleted, and I think the rule names may have changed (but they're not in AWS, just in the state, so that shouldn't matter?).

pulumi  refresh

wants to delete all my NACLs and rules from state, and not update anything. That will leave a pile of good(ish) NACLs and rules in AWS, and Pulumi won't be able to manage them. How can I recover? I can't see anything in

pulumi stack --help

or

pulumi state --help

that meets my needs. There's a few options that would help if they were possible: updating the state to match reality, importing reality from AWS into the state, or deleting the NACs and rules from AWS so that reality matches state. Which is the best, and how do I do it?

New topic: is this a bug? I'm importing a resource (AWS VPC peering connection) that is defined inside my own ComponentResource. I accidentally passed the

{ import: 'pcx-xyzabc123' }

opt to the ComponentResource constructor instead of to the

aws.ec2.VpcPeeringConnection

constructor. This failed because now it's trying to import all resources with the same id (because the opts that I pass to my ComponentResource gets passed to all the nested resources). So I fixed that. Now when I run preview, it says it'll import my VpcPeeringConnection fine, but it's still trying to import the other resources! Even when I remove the

import:

altogether, it's still trying to import! The specific error message is like this:

error: Preview failed: importing pcx-075eac9319f99ebd2: unexpected format of ID ("pcx-xyzabc123"), expected NETWORK_ACL_IDRULE NUMBERPROTOCOL:EGRESS

New new topic: providers and invoke calls. I'm not getting the expected caller ID back from this:

const provider = new aws.Provider('x", { region: 'us-east-1', profile: 'assumed-role-in-acct-FOO'});
const identity = aws.getCallerIdentity({ provider: provider});

The returned

identity

is the one from the default provider. I expect to see a different arn, accountId and userId in there. Am I doing something wrong?

hi to all, is there a java binding to pulumi

i have two stacks, one for production and one for testing. the testing environment is 100% managed by pulumi. the production environment is only partially managed by pulumi (it existed before we started using pulumi and we are slowly bringing all resources over to being managed by pulumi). how should we manage some resources being managed in only one environment? two index files? we are using typescript

Hey everyone. Is there a way to run pulumi up/preview through a go api? we have many stacks and on release we run pulumi up on all stacks but we would like to get some more control by moving away from bash scripting for that. what would be even more awesome would be a meta stack that allows to controll the other stacks 🙂 pulumiception

@white-balloon-205 Hi, what is a road map for

pulumi logs

command. https://www.pulumi.com/blog/unified-logs-with-pulumi-logs/ In this article you mentioned that K8s will be also supported. Do you have some idea when this might happen?

Quick question: I can’t seem to find any mention of

rollback

in your docs. Does Pulumi support rollback on failed deploys, and if not, do you plan to support it at some point in the future? Thanks!

Hi I'm Grant and excited to join the Pulumi Slack org.

Hi, I noticed that in the code blocks in the ECS docs,

FargateTaskDefinition

is used twice (instead of

EC2TaskDefinition

), same goes for

FargateService

, which is used twice instead of

EC2Service

. https://www.pulumi.com/docs/reference/pkg/nodejs/pulumi/awsx/ecs/#task-definitions https://www.pulumi.com/docs/reference/pkg/nodejs/pulumi/awsx/ecs/#services Overall the docs have been very helpful. Thanks for updating!

hi everyone, I was looking to implement a component package like this one: https://www.pulumi.com/blog/creating-and-reusing-cloud-components-using-package-managers/ but i would like to attempt it in python. Does anyone have a resource or a project to share that could help me out to get started?

Hello. should "pulumi refresh" also refresh resource properties on the "IgnoreChanges" list? (Azure+dotnet). Appears counter-intuitive to me. Thanks

Hello everyone,

I'm running

pulumi destroy

Provider AWS

But I'm got stuck with following error

pulumi:pulumi:Stack  infra_db-dev
 -   ├─ aws:ec2:Subnet    migration-vpc-public-1  deleting     completing deletion from previous update
 -   └─ aws:ec2:Subnet    migration-vpc-public-0  deleting     completing deletion from previous update

Please help... already tried

pulumi refreh

,

pulumi stack export|import

but no luck

Hi All, I'm trying to upload a large (500+ MB) file to Azure storage as a Block Blob. I'm able to upload the file through the Azure portal without issue, but through Pulumi I'm getting: Code="RequestBodyTooLarge" Message="The request body is too large and exceeds the maximum permissible limit." There seems to be a limit of 100MB when using the MS API, I'm wondering if anyone has an example or can point me in the right direction for how to upload large blobs through Pulumi. For reference, I'm using C#.

Hey! cant really find but is there any way to get a progress update (slack/github) like heroku has when a deployment is ongoing vs finished?

ah nevermind, I can have circleci do it

hi guys, I couldn't see any examples of how to setup a function triggered from api gateway request, there is an example in typescript but none in go which is kinda different since my code handler is not an anom function

any ideas of where i could find how to map the function to the api ?

i managed to do sqs last week through eventSourceMappings but can't see anything similar for apis

If I'm writing a dynamic resource provider, is there any way to mark one of the output values as a secret so that it isn't recorded in plaintext in the state file?

Pulumi EKS has this interface defined:

export interface UserMapping {
    /**
     * The ARN of the IAM user to add.
     */
    userArn: pulumi.Input<aws.ARN>;
    /**
     * The user name within Kubernetes to map to the IAM user. By default, the user name is the ARN of the IAM user.
     */
    username: pulumi.Input<string>;
    /**
     * A list of groups within Kubernetes to which the user is mapped to.
     */
    groups: pulumi.Input<pulumi.Input<string>[]>;
}

Both userArn and username are required yet the docstring for username seems to indicate is filled in by default. Should username actually be optional?

Does anyone here know what this means

Error: providerCredentialOpts and AWS_PROFILE must be set together

?

I'm using Pulumi to create an AKS cluster, which itself creates a number of managed Identity objects (AKS creates them, they are not defined in my stack directly). I am using the "GetUserAssignedIdentity" method to try and retrieve one of the identities, however this is failing when first run because the managed identity doesn't exist, which is correct at this point. How can I get Pulumi to wait for the AKS resource to be created before trying to retrieve this? This is the code I am using

var aciPrincipalId =
                    Output.Tuple(args.ResourceGroupName, args.AksClusterName)
                    .Apply(aciIdentity => Pulumi.Azure.Authorization.GetUserAssignedIdentity.InvokeAsync(new Pulumi.Azure.Authorization.GetUserAssignedIdentityArgs
                    {
                        Name = $"aciconnectorlinux-{aciIdentity.Item2}",
                        ResourceGroupName = $"{aciIdentity.Item1}-NODES"

                    }))
                    .Apply(mi => mi.PrincipalId);

I have tried adding the AKS ID as a property of the Tuple as well, but it makes no difference.

Doesn't Pulumi have lock/unlock mechanisms for self-managed backends (AWS S3 and Azure BLOB)? #Backend