pulumi-community #general

curved-dress-32683

09/20/2020, 7:40 PM

Does anyone have an example pulumi typescript code for deploying Istio?

handsome-zebra-11018

09/21/2020, 2:26 AM

I need to pass many

env

variables to container. Is there any way I can define env variables as an array in yaml file and loop through then in my typescript file instead of coding each variable. This is what I have today in yaml

Copy code

config:
  pro:key1:value1
  pro:key2:value2

and this is how I am using them in my typescript file

Copy code

env: [
    {
      name: "key1",
      value: config.get("key1")
    },
    {
      name: "key2",
      value: config.get("key2")
    },

This works fine but I have 30+ parameters and want the create env using loop instead of hardcoding every one in ts file any help? Something like

Copy code

env: [
    array.forEach((param :string) => {
        const splitString = param.split(":");
        {
            name: splitString[0],
            value: splitString[1]
        }
    })
],

helpful-farmer-76395

09/21/2020, 2:28 AM

Hi! This may be a newb question, but is there a way to resolve an Ouput (specifically, a StackReference.get_ouput result) to it's value at runtime? I'm writing a simple security group helper that needs to know if the input is a security_group or a cidr_block. I'd like to simply test if the first letter of the string is a digit or 's' (as-in 'sg-XXXXXX').

little-cartoon-10569

09/21/2020, 3:39 AM

I'm having difficulties with my migration. I've moved resources from several small projects into one large one, mostly using the

import

opt. There have been a few changes on the way, most of which I've resolved using

pulumi refresh

. Two that haven't yet been resolved are: 1. An IAM role created without a name or namePrefix, which has defaulted to using namePrefix = Pulumi name. In order to import it, I had to temporarily add the name property with its actual name. I now want to go back to using either the default or namePrefix. How do I get Pulumi to recognize that changing

name: "myprefix-984ac6"

namePrefix: "myprefix"

is no changed? I'm prepared to edit the state if needed. 2. My Directory was created with a password, which I'm now ignoring via

ignoreChanges

(because I want to be able to change the password outside of Pulumi). If I leave ignoreChanges in, then Pulumi reports "resource 'dirname' has a problem: Missing required property 'password'". Are either of these resolvable?

famous-twilight-87777

09/21/2020, 7:11 AM

Hi all, I'm having an issue with doing a lookup of a floatingIP and creating an association. The floating ip has been created previously and will not be changed (in this scenario) - so I only want to do the lookup and assoc with a bastion host

famous-twilight-87777

09/21/2020, 7:11 AM

trying to assoc by id:

famous-twilight-87777

09/21/2020, 7:11 AM

Copy code

let assoc_bastion_ip = new os.networking.FloatingIpAssociate("associate_bastion_fip", {
    floatingIp: bastion_ip.then(ip  => ip.id),
    portId: bastion.id
});

famous-twilight-87777

09/21/2020, 7:11 AM

leads to this

famous-twilight-87777

09/21/2020, 7:12 AM

Copy code

Diagnostics:
  openstack:networking:FloatingIpAssociate (associate_bastion_fip):
    error: Unable to get ID of openstack_networking_floatingip_associate_v2 floating_ip 41142f29-54b9-44a7-bb33-8e6581634aa7: there are no openstack_networking_floatingip_v2 with 41142f29-54b9-44a7-bb33-8e6581634aa7 IP

famous-twilight-87777

09/21/2020, 7:13 AM

but if I try to use the address of the floating ip..

famous-twilight-87777

09/21/2020, 7:13 AM

Copy code

floatingIp: bastion_ip.then(ip => ip.address)

famous-twilight-87777

09/21/2020, 7:14 AM

this doesn't work as the Promise could return an undefined which cannot be used as input.

famous-twilight-87777

09/21/2020, 7:14 AM

pretty sure I'm missing something fundamental here

nutritious-shampoo-16116

09/21/2020, 10:27 AM

hello everybody 👋 just wondering if there is a way for Pulumi to forget about a resource? we would like that resource to be still physically there but we don't want it in that stack anymore

famous-twilight-87777

09/21/2020, 10:41 AM

I have a strange error here:

famous-twilight-87777

09/21/2020, 10:41 AM

Copy code

const assoc_bastion_ip = new os.networking.FloatingIpAssociate("associate_bastion_fip", {
    floatingIp: bastion_ip,
    portId: bastion.networks[0].port
});

famous-twilight-87777

09/21/2020, 10:42 AM

where bastion_ip is a const string the error reported is

famous-twilight-87777

09/21/2020, 10:42 AM

Copy code

Diagnostics:
  openstack:networking:FloatingIpAssociate (associate_bastion_fip):
    error: openstack:networking/floatingIpAssociate:FloatingIpAssociate resource 'associate_bastion_fip' has a problem: Missing required property 'portId'

elegant-island-39916

09/21/2020, 11:00 AM

hi, im trying to deploy a helm chart to eks v1.17 and im running into apiversion issues (latest

pulumi_kubernetes

) pulumi for k8s dashboard helm chart:

Copy code

k8s_dash = helm.Chart(
    "kubernetes-dashboard",
    config=helm.ChartOpts(
        repo="stable",
        chart="kubernetes-dashboard",
        version="1.5.2",
        namespace="kube-system",
    ),
    opts=pulumi.ResourceOptions(
        providers={"kubernetes": cluster_provider}
    ),
)

output:

Copy code

Diagnostics:
  kubernetes:<http://rbac.authorization.k8s.io:Role|rbac.authorization.k8s.io:Role> (kube-system/kubernetes-dashboard):
    warning: <http://rbac.authorization.k8s.io/v1beta1/Role|rbac.authorization.k8s.io/v1beta1/Role> is deprecated by <http://rbac.authorization.k8s.io/v1/Role|rbac.authorization.k8s.io/v1/Role> and not supported by Kubernetes v1.22+ clusters.
 
  kubernetes:<http://rbac.authorization.k8s.io:RoleBinding|rbac.authorization.k8s.io:RoleBinding> (kube-system/kubernetes-dashboard):
    warning: <http://rbac.authorization.k8s.io/v1beta1/RoleBinding|rbac.authorization.k8s.io/v1beta1/RoleBinding> is deprecated by <http://rbac.authorization.k8s.io/v1/RoleBinding|rbac.authorization.k8s.io/v1/RoleBinding> and not supported by Kubernetes v1.22+ clusters.
 
  kubernetes:extensions:Deployment (kube-system/kubernetes-dashboard):
    error: apiVersion "extensions/v1beta1/Deployment" was removed in Kubernetes 1.16. Use "apps/v1/Deployment" instead.
    See <https://git.k8s.io/kubernetes/CHANGELOG/CHANGELOG-1.16.md#deprecations-and-removals> for more information.

where can i adjust apiversion for pulumi to avoid this issue?

adamant-byte-68515

09/21/2020, 12:18 PM

Hi, We are facing an issue when creating encrypted neptune cluster via pulumi. This is the link(https://github.com/pulumi/pulumi/issues/5428) to the issue. Someone please have a look at this.

➕ 3

👍 1

red-area-47037

09/21/2020, 12:33 PM

We are currently working on Pulumi Scripts to create an environment to run our software. This would be in Pulumi terminology a project. In order to define different environments Pulumi allows you to create different stacks. By default a the stack configuration is put into a Pulumi.<stack-name>.yaml file inside of the Project directory. We were thinking of keeping the project definition and the stack definition in different directories / repos. Is there any easy way to point Pulumi to a stack configuration in a different directory or another way to achieve the same…

future-morning-96441

09/21/2020, 1:43 PM

Hi, I'm hitting a wall of

fatal error: heap out of memory

for several days now (using pulumi with node), Are there any known antipatterns in Pulumi, which can cause this? It tried to use more verbose logging and tracing but couldn't find any hint about what is causing this. (see error message in my next message) I vaguely guess this could be either during stack-output-serialization or serializing and packaging lambda-functions but I sadly don't have any hard evidence to pinpoint the location. Does anyone have some advice on how to proceed analyzing this error or what can cause this?

clever-byte-21551

09/21/2020, 6:02 PM

I’m trying to use

PULUMI_CONFIG_PASSPHRASE_FILE

and I get this error:

Copy code

FATA[0729] Failed to deploy                              error="failed to update infra stack: failed to update stack: failed to get stack outputs: code: 255\n, stdout: \n, stderr: error: decrypting secret value: failed to decrypt: incorrect passphrase, please set PULUMI_CONFIG_PASSPHRASE to the correct passphrase\n\n: failed to select stack: exit status 255"

Any idea why? @broad-dog-22463

clever-plumber-29709

09/21/2020, 10:01 PM

I'm trying to migrate a pulumi stack from a s3 backed to the pulumi, but i'm getting an error:

Copy code

$ pulumi stack import --file github.singular.checkpoint.json
error: could not deserialize deployment: constructing secrets manager of type "cloud": secrets (code=Unknown): NoCredentialProviders: no valid providers in chain. Deprecated.
        For verbose messaging see aws.Config.CredentialsChainVerboseErrors

quiet-helicopter-40480

09/22/2020, 1:20 AM

Hi, I’m using the C# provider and trying to use .Apply to update appsettings on an AppService, but it after the Up completes and I inspect the AppService configuration, none of the settings are present. I’ve successfully used Apply for firewall rules and connection strings, what did I miss here?

clever-plumber-29709

09/22/2020, 1:55 AM

So I'm implementing a new project on pulumi, will be a kind of a big infra. I was planing on using Python which is what i know and use at least for simple scripts (nothing too fancy, so wouldn't either say i'm an expert in it.) But given all the abstractions that awsx provides, i'm temped to use TS in order to use awsx. I would use the vpn, ecs on fargate, ecr, api gateway, and maybe more of this modules provided by awsx. But my experience in TS is 0, and my experience in javascript is also not great, so not much to leverage from that. I have never work on big JS o TS projects. So i'm really torn in between leveraging my knowledge in python but creating all infra from 0 or leveraging the awsx great resources but starting with the language and the project from 0 Any ideas, comments, feedback, experiences and advices would be greatly appreciated.

handsome-zebra-11018

09/22/2020, 3:59 AM

Looks default timeout for

pulumi up

command is 10 mins? Can we reduce it via some config? When I kill pulumi up and start new one.. it complains old one is still running..

famous-twilight-87777

09/22/2020, 5:34 AM

Is there a facility in pulumi to use a template file and inject values into the string?

clever-byte-21551

09/22/2020, 5:36 AM

Is there a way to get an existing object OR create it? does it makes sense to do something like: 1. Try to get the resource by a specific name / arn 2. If I got a not found error if the previous statement was successful I’ll add an import statement to the NewResource statement, otherwise I won’t. Does that makes sense?

famous-twilight-87777

09/22/2020, 6:00 AM

userData supports base64 encoding and gzip with terraform however it seems to be just a plain string with pulumi