How do I get the CIDR range / IP of a network load balancer (AWS)? I'm trying to create a security group rule, that has the NLB as the source location.

is there any doc for custom keyspaces in stack config file ?

how does the pulumi commandline figure out what stack a directory corresponds to?

Hi! How to assign target group under ecs.ECCluster service? something like this

Hi everyone! I'm trying to get FQDN value from

aws.route53.Record

(using

python

) and use it to render a

json

from

jinja2

template. then use this

json

as a value for

container_definitions

parameter in

aws.ecs.TaskDefinition

resource. For that I do

route53_record = aws.route53.Record(f"{acc_name}",
.....
    }])

and then, using

apply

THIS_DIR = os.path.dirname(os.path.abspath(__file__))
j2_env = Environment(loader=FileSystemLoader(THIS_DIR),
                     trim_blocks=True)

ecs_task_definition = aws.ecs.TaskDefinition(f"{acc_name}",
    family=f"ent-{dep_name}-{acc_name}",
    container_definitions=j2_env.get_template('templates/acc-td-container-defs.json.j2').render({
        'web_servername': pulumi.Output.all(route53_record.fqdn).apply(lambda fqdn: fqdn),
        # 'web_servername': route53_record.fqdn.apply(lambda fqdn: fqdn),
...
...
    }),
...
...

But as a result I always get something like

<pulumi.output.Output object at 0x10d1c0780>

Can you, guys, please help me understand what i'm doing wrong? THanks !

in

terraform

for that i used

data "template_file"

and it worked well. but I'm not sure that i'm using a right approach in

pulumi

can we make a wafv2.WebAcl resource in pulumi yet similar to https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/wafv2_web_acl ? I don't see a resource of type WebAcl listed on https://www.pulumi.com/docs/reference/pkg/aws/wafv2/

looking to make a request rate based rule to block IP if too many requests coming in, not seeing that is possible with pulumi so far (with wafv2)

pulumi refresh is showing no resources -- looks like my local state is missing somehow?

NAME   LAST UPDATE  RESOURCE COUNT

prod*  n/a          n/a

I have the following code:

const accountPassword = new random.RandomPassword("RabbitMqAdmin_password", {
        length: 40, 
        special: true, 
        overrideSpecial: `_%@`
    }).result;

Which is a password, but the password is available in plain text in the resources view of the web portal. This doesn't seem like it should be the default behaviour for a

.RandomPassword

.

Hi there, It does not seem possible to output a provider from one project/stack and use it in another one or did I miss a trick here ? (the output is a simple key/value object but not a real

Provider

object)

Hello folks, I am trying to register the instances on AWS Service discovery service (cloudmap) but there are no specific API for service discovery where i can register instance id and IP here https://www.pulumi.com/docs/reference/pkg/aws/servicediscovery/service/ Any help?

Q: I have a following GitHub resource:

import * as github from "@pulumi/github";

new github.Repository("my_repo", {
  name: "my_repo",
  topics: ["typescript"]
})

Creation works perfectly. then I updated the

topics

value to

["javascript"]

and apply, however I got following error:

github:index:Repository (my_repo):
    error: 1 error occurred:
    	* updating urn:pulumi:my_company::github-infrastructure::github:index/repository:Repository::my_repo: PATCH <https://api.github.com/repos/my_company/my_repo>: 404 Not Found []

Wondering if it is a bug or I have missed something important. Many thanks in advance

I'm stuck in some weird state.. I can't destroy the stack, I can't up it and I can't do

pulumi stack export | pulumi stack import

. This is my error:

state file contains errors: child resource urn:pulumi:production::magento2::kubernetes:core/v1:Namespace$kubernetes:apps::redis refers to missing parent urn:pulumi:production::magento2::kubernetes:core/v1:Namespace::production

Hi! I was wondering if I can use pulumi to manage package installs on my VMs? I was able to set up pulumi to create my VM, and further to control Docker on my VM, but inbetween I need to install docker on my VM, and I couldn't find any way to do that. I'm using Go, if that matters.

Hello, I’m doing research about infra as a code tools. Already tried some things (create project, deploy stack, ...). Look promising but I have question about managing machine with application with persistent storage (e.g. mysql, rabbitmq, ...). Pulumi drop and create a new machine by default. Is there any solution how to manage machine without drop and create?. Or some docs about this problem.

Is there a place to see whats on the roadmap for Pulumi? For instance I would like to see if HashiCorp Packer is apart of the roadmap

is there any tooling yet for dealing with tiered deployments? i.e. if i need to deploy my app, it will run the code to make sure the vpc, k8s cluster, etc are provisioned?

Does Pulumi support string substitutions in userData?, e.g.

--stack ${AWS::StackName} --region ${AWS::Region}

Is there a way to delete Pulumi stacks from the Pulumi dashboard? Right now I think I'm doing it from the command line (and I think I need to be in the directory where the Pulumi.stack.yaml file is located), but I think I might have deleted Pulumi.stack.yaml and I don't know what to do. Otherwise, is there a way to clone down the Pulumi stack yaml definition and then delete it?

hello here thinking about organizing pulumi around "middleware" pattern and existing components (https://www.pulumi.com/docs/intro/concepts/programming-model/#components) the idea is to create flexible workflows by combining inputs/outputs of components and creating a chains where parts can be easily replaced examples:

[getLatestSemverDockerTag, updateKubernetesDeployment, notifySlackConsumers]

, [

generateTagFromProjectHash, buildAnddeployDockerImage, redeployEC2Instances, ...]

the aim is - to maintain separate pieces of code dvided by components, toavoid duplication and so on, you know how it goes in software developers world questions: - does it make sense? is there a more preferrable way of building pipelines from composable pieces? - how do you do it currently? any best practices?

Hi! I could use some help with Pulumi design patterns. I have a resource output that changes which resources are later created. Is there a preferred best approach? Use case: Create Auth0 resource (outputs client id), build a static website that requires the client id in the environment (yarn build), upload website build folder to S3 I see a couple of ways to do this. 1. Dynamic provider: Use a dynamic provider that takes the client id output and builds the website and uploads the folder to s3 (using the AWS API) 2. Micro-stacks with external build step: Project A creates an auth0 resource. Project B uses aws.s3.BucketObjects to upload the website. Run a build command between a & b These are both quite ugly. There must be a simpler solution. Any thoughts or suggestions?

Hi, Is there any way to provide cassandra cluster using pulumi ? means cluster scaling and all such ops.

Hello, I have

pulumi.Output<RunCommandResult>;

object filled but cannot and need some data to file but cannot grab values as strings. Need to write output to local file. Is there any way?

after running 

pulumi up

 and completes successfully, my stack continues to show changes on the next invocation of`pulumi preview` and 

pulumi up

→ [feature/devops/baffle-ha-732 ≡ +0 ~10 -0 !]› pulumi up
Previewing update (dev):
     Type                             Name                    Plan        Info
     pulumi:pulumi:Stack              aws-dev                             14 messages
     ├─ awsx:x:ecs:EC2TaskDefinition  use1-dev-registrar-api
 +-  │  └─ aws:ecs:TaskDefinition     use1-dev-registrar-api  replace     [diff: ~containerDefinitions]
     └─ awsx:x:ecs:EC2Service         use1-dev-registrar-api
 ~      └─ aws:ecs:Service            use1-dev-registrar-api  update      [diff: ~taskDefinition]

Details:

++aws:ecs/taskDefinition:TaskDefinition: (create-replacement)
            [id=use1-dev-registrar-api]
            [urn=urn:pulumi:dev::aws::awsx:x:ecs:EC2TaskDefinition$aws:ecs/taskDefinition:TaskDefinition::use1-dev-registrar-api]
            [provider=urn:pulumi:dev::aws::pulumi:providers:aws::default_2_4_0::ef2f3133-efd2-4f21-a3ed-67550c0c8b97]
          ~ containerDefinitions: "[secret]" => "[secret]"
        +-aws:ecs/taskDefinition:TaskDefinition: (replace)
            [id=use1-dev-registrar-api]
            [urn=urn:pulumi:dev::aws::awsx:x:ecs:EC2TaskDefinition$aws:ecs/taskDefinition:TaskDefinition::use1-dev-registrar-api]
            [provider=urn:pulumi:dev::aws::pulumi:providers:aws::default_2_4_0::ef2f3133-efd2-4f21-a3ed-67550c0c8b97]
          ~ containerDefinitions: "[secret]" => "[secret]"
        ~ aws:ecs/service:Service: (update)
            [id=arn:aws:ecs:us-east-1:382762964374:service/use1-dev-registrar-api-6d44494]
            [urn=urn:pulumi:dev::aws::awsx:x:ecs:EC2Service$aws:ecs/service:Service::use1-dev-registrar-api]
            [provider=urn:pulumi:dev::aws::pulumi:providers:aws::default_2_4_0::ef2f3133-efd2-4f21-a3ed-67550c0c8b97]
          ~ taskDefinition: "arn:aws:ecs:us-east-1:382762964374:task-definition/use1-dev-registrar-api:226" => output<string>
        --aws:ecs/taskDefinition:TaskDefinition: (delete-replaced)
            [id=use1-dev-registrar-api]
            [urn=urn:pulumi:dev::aws::awsx:x:ecs:EC2TaskDefinition$aws:ecs/taskDefinition:TaskDefinition::use1-dev-registrar-api]
            [provider=urn:pulumi:dev::aws::pulumi:providers:aws::default_2_4_0::ef2f3133-efd2-4f21-a3ed-67550c0c8b97]

hi there!

Today I’m rebuilding a GKE cluster.So I destroyed the old and re-applied the same code.

I get:

" The network “fhd-network-4663654" does not have available private IP space in 10.0.0.0/8 to reserve a /14 block for containers for cluster”

I’m quite lost… suggestions?