pulumi-community #general

billowy-kangaroo-51688

09/15/2020, 6:11 PM

What could be the reason that

dynamodb.name.get()

is not being captured in my Lambdas?

many-psychiatrist-74327

09/15/2020, 6:13 PM

👋 hello! has anyone experienced very high latency when using the extension libraries (
awsx
,
eks
) in TS? I am bringing up a kubernetes cluster and a few services running in it. I first implemented in Python to learn the framework. Then I re-implemented in TS because there are better libraries. However the latency is very different: Python, 17 seconds:

Copy code

$ time pulumi preview
Previewing update (dev)

View Live: (redacted)

     Type                          Name                            Plan
     pulumi:pulumi:Stack           kubernetes-dev
     (redacted)

Resources:
    - 4 to delete
    40 unchanged


real	0m17.365s
user	0m1.624s
sys	0m2.881s

TS, almost 2 minutes:

Copy code

$ time pulumi preview
Previewing update (dev)

View Live: (redacted)

     Type                 Name       Plan
     pulumi:pulumi:Stack  infra-dev

Resources:
    70 unchanged


real	1m37.499s
user	0m0.998s
sys	0m1.127s

How can I find out where this latency is coming from?

billowy-kangaroo-51688

09/15/2020, 7:39 PM

My last question was a bit uselessly short 😅

Copy code

new aws.lambda.CallbackFunction(
  "handler",
  {
    tags,
    memorySize: 128,
    role: lambdaRole,
    layers: [awsSdkLayer.arn],
    callback: (event: APIGatewayProxyEvent) => {
      return handlerFactory({
        tableName: db.name.get(), // db = result of `new aws.dynamodb.Table`
        // [..] more values not being captured
      })(event);
    },
  },
);

I’ve “downloaded deployment package” & the actual name of the table is nowhere to be found, I also tried to define

const tableName = db.name.get()

before the

return handlerFactory

🤷‍♂️

✅ 1

handsome-actor-1155

09/15/2020, 8:21 PM

Hi all, just a quick question: I’m using Pulumi to create and upload images to AWS ECR via a Dockerfile and it works great. I’m just curious if there’s some configuration setting that can prevent Pulumi from invoking docker, building, and trying to push the image every time I run

pulumi up

or even

pulumi preview

. This would save quite a bit of time. Or is this something I would need to configure within the Dockerfile itself? Thanks!

chilly-garage-80867

09/15/2020, 8:23 PM

General best practices question

chilly-garage-80867

09/15/2020, 8:24 PM

what should I include in a .gitignore if I am going to share a pulumi stack configuration

loud-battery-37784

09/15/2020, 8:25 PM

@chilly-garage-80867 what language?

chilly-garage-80867

09/15/2020, 8:25 PM

Python

bitter-application-91815

09/15/2020, 9:03 PM

Hey there, just here on

<https://github.com/pulumi/pulumi-aws/blob/master/sdk/go/aws/eks/nodeGroup.go#L314>

bitter-application-91815

09/15/2020, 9:03 PM

it says,

Copy code

// Identifiers of EC2 Subnets to associate with the EKS Node Group. These subnets must have the following resource tag: `<http://kubernetes.io/cluster/CLUSTER_NAME|kubernetes.io/cluster/CLUSTER_NAME>` (where `CLUSTER_NAME` is replaced with the name of the EKS Cluster).`

bitter-application-91815

09/15/2020, 9:04 PM

sure but what's the key on that tag, tags on ec2::subnet is a map, not an []string

millions-judge-24978

09/15/2020, 9:15 PM

If I am creating a pulumi program in typescript, and would like to instantiate an

aws.lambda.Function

using go code, is there a way to automate the

go build

as part of the pulumi program running? I see this:

Using Pulumi’s Asset and Archive classes, we can fetch code from anywhere – in-memory, on disk, or even over the network. Pulumi will detect changes in the contents of these assets and archives so that when you run pulumi up, diffs will be detected and updated.

It seems to me though that would be missing the necessary

go build

though

fast-magician-55948

09/15/2020, 9:18 PM

How do you put several Google Cloud Functions in a Pulumi project? I've successfully created on Google Cloud Function, following the samples. Now I want to put in a second Google Cloud Function. Any samples?

fast-magician-55948

09/15/2020, 9:28 PM

(I'm using Python)

fast-magician-55948

09/15/2020, 9:34 PM

OK I think I found https://github.com/pulumi/examples/tree/master/gcp-py-serverless-raw that does what I want. I'll see if I can make it work.

red-area-47037

09/15/2020, 10:16 PM

Quick question, is there a way to configure the retry behaviour in Pulumi … e.g. I am currently setting up a GKE environment and from time to time a api service is not available for the first 90s… I would like to configure Pulumi to backoff later retires to ensure that later retries happen after a longer time once the env has stablized

kind-mechanic-53546

09/16/2020, 3:13 AM

is there any way to

await

a resource creation? I have to render a helm chart to a directory via

renderYamlToDirectory

k8s.Provider

and then take the output of that directory filtered via fs.promises.readdir
filtered then passed to k8s.yaml.ConfigGroup
The issue is that my readdir will be processed before the provider has finished rendering I could do it via a custom component but it's more work

chilly-rainbow-79265

09/16/2020, 10:03 AM

Hi all I am trying to have my backend as azure

Copy code

export AZURE_STORAGE_ACCOUNT=XXXXX
export AZURE_STORAGE_KEY=XXXXX

Copy code

pulumi new --force
error:
Sorry, could not create stack 'dev': could not create stack: An IO error occurred while writing the new snapshot file: blob (key ".pulumi/stacks/dev.json") (code=NotFound): -> <http://github.com/Azure/azure-storage-blob-go/azblob.newStorageError|github.com/Azure/azure-storage-blob-go/azblob.newStorageError>, /home/travis/gopath/pkg/mod/github.com/!azure/azure-storage-blob-go@v0.9.0/azblob/zc_storage_error.go:42
===== RESPONSE ERROR (ServiceCode=ResourceNotFound) =====
Description=The specified resource does not exist.
RequestId:69f212d5-801e-001a-1910-8c2575000000
Time:2020-09-16T10:02:29.5219649Z, Details:
   Code: ResourceNotFound
   PUT <https://pulumicloud.blob.core.windows.net/pulumistate/.pulumi/stacks/dev.json?timeout=61>
   Content-Length: [70]
   User-Agent: [go-cloud/blob/0.1.0 Azure-Storage/0.9 (go1.14.7; linux)]
   X-Ms-Blob-Cache-Control: []
   X-Ms-Blob-Content-Disposition: []
   X-Ms-Blob-Content-Encoding: []
   X-Ms-Blob-Content-Language: []
   X-Ms-Blob-Content-Md5: [WDyPMum8QM5L4bgdHF8ieA==]
   X-Ms-Blob-Content-Type: [text/plain; charset=utf-8]
   X-Ms-Blob-Type: [BlockBlob]
   X-Ms-Client-Request-Id: [ba87d3af-02c7-45e0-6b1e-550c44d0adcd]
   X-Ms-Version: [2018-11-09]
   --------------------------------------------------------------------------------
   RESPONSE Status: 404 The specified resource does not exist.
   Content-Length: [223]
   Content-Type: [application/xml]
   Date: [Wed, 16 Sep 2020 10:02:29 GMT]
   Server: [Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0]
   X-Ms-Error-Code: [ResourceNotFound]
   X-Ms-Request-Id: [69f212d5-801e-001a-1910-8c2575000000]
   X-Ms-Version: [2018-11-09]

This is a new project all together

incalculable-dream-27508

09/16/2020, 10:17 AM

Ah, and now that i'm trying to use outputs directly in other resources I got one of those errors discussed yesterday that don't really mention where the issue is.

Untitled

incalculable-dream-27508

09/16/2020, 10:21 AM

That's the snippet of code where I'm trying to use the outputs, and that to my understanding produces the above error.

Untitled

chilly-rainbow-79265

09/16/2020, 10:26 AM

@broad-dog-22463 Hi, is there any support from

Copy code

<docker://pulumi/actions>

for self managed states like blob ? i was trying to do a CD with pulumi and state in blob

incalculable-dream-27508

09/16/2020, 1:41 PM

Huh.

Copy code

INSTANCES_API = [
    openstack.compute.Instance(
...
        __opts__=pulumi.ResourceOptions(provider=REGIONS[dc]))
    for i in range(COUNT_API) for dc in REGIONS
]

and later

Copy code

exported_api = {
    srv.name.apply: srv.access_ip_v4.apply
    for srv in INSTANCES_API
}

So far so good, and

pulumi preview

works with this. But, when I add

Copy code

pulumi.export('nodes_api', exported_api)

suddenly I get this error.

Untitled

incalculable-dream-27508

09/16/2020, 3:59 PM

Copy code

"WebADM internal traffic: %s %s from %s" % (dc, port, srv.name)

results in names like

Copy code

WebADM internal traffic: ams rsignd from <pulumi.output.Output object at 0x7eff0ad30100>

so how should I be accessing this? https://www.pulumi.com/docs/intro/concepts/programming-model/#outputs wasn't very helpful regarding that

silly-address-30441

09/16/2020, 5:18 PM

I'm just getting started with Pulumi, so I might not be headed in the right direction at all. Do people generally use different AWS accounts for their prod vs dev stacks? If so, how do you associate a particular AWS account with a particular stack?

faint-dress-91709

09/16/2020, 5:31 PM

hello folks, I’m just getting started with Pulumi. I have experience with Cloudformation, Terraform, and CDK, so some concepts are familiar 🙂 I’m trying to get it working with a AWS profile and am getting an error: “Error: providerCredentialOpts and AWS_PROFILE must be set together”. I tried googling around for this, but no luck so far. I’m sure the error here is between keyboard and monitor, so let me know if I’m doing something stupid ;-)

incalculable-dream-27508

09/16/2020, 5:38 PM

How do people generate unique names for resources when said resources are dynamically generated based on other resources? Namely, because I need to use IPs in security group rules, I need to create a rule per machine created - and apparently can't use machine name, because trying to get that only gets me an ugly (and changing) object reference.

many-psychiatrist-74327

09/16/2020, 6:26 PM

👋 hello! is there a way to call/run pulumi directly from code (that is, instead of running
pulumi
from the terminal)? Context: let’s say I already have some Python code that does a bunch of infrastructure provisioning already, and I want to incorporate some pulumi-managed resources in the same place. The hack I’m doing right now is creating a subprocess that calls

pulumi

, which in turn will end up running some more python code. This seems silly, and I wonder if there’s a way to “cut the middleman”? I know (well, I think) that running

pulumi

stands up a local grpc server, and then runs the Python code, which in turn sends rpcs to the local server to register the resources as it creates them. Could there be a way to run that local server as a daemon maybe, and then just run my Python code normally, without having to create the subprocess mentioned above?

millions-furniture-75402

09/16/2020, 6:34 PM

How do I write an

Output<string>

to a

config.json

tall-scientist-89115

09/16/2020, 6:43 PM

I'm trying to update a cloudfront distriution "Security Policy" from "TLSv1" to "TLSv1.2_2019" with Pulumi (I can do it through the UI no problem but now my state is out of sync), but don't see that property in your distribution docs..the info blurb in the UI for that property says "A security policy determines two settings: the SSL/TLS protocol that CloudFront uses to communicate with viewers, and the cipher that CloudFront uses to encrypt the content that it returns to viewers." How do I set this state with pulumi? (edit: Thank you! I apologize for not putting this in the #aws channel)

ancient-megabyte-79588

09/16/2020, 9:57 PM

Is there a way to run a custom function on

pulumi destroy

... We have

const setupAgent = new azure.compute.Extension(name + "serverSetupAgent",<snip>);

that installs and configures an AzDO Deployment Agent ... If I don't "unregister" the agent with AzDO when I tear the server down, it is left as a dangling registration in AzDO and I can't create another agent with that name. I need to run a de-registration script on

pulumi destroy

or something comparable, but I don't see any where to hook into that.