pulumi-community #general

famous-twilight-87777

09/22/2020, 6:00 AM

https://www.pulumi.com/docs/reference/pkg/openstack/compute/instance/

famous-twilight-87777

09/22/2020, 6:00 AM

with EC2 instances there is a userData64 option https://www.pulumi.com/docs/reference/pkg/aws/ec2/instance/

kind-school-28825

09/22/2020, 6:01 AM

Anyone facing the problem of running the github action workflow file and erroring out about that the Pulumi SDK is not installed?

Copy code

> Run pulumi/actions                   8s
error: failed to load language plugin nodejs: could not read plugin [/usr/bin/pulumi-language-nodejs] stdout: EOF
Run <docker://pulumi/actions>
/usr/bin/docker run --name pulumiactions_ca0c30 --label 9e3346 --workdir /github/workspace --rm -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e PULUMI_ACCESS_TOKEN -e PULUMI_ROOT -e PULUMI_CI -e INPUT_ARGS -e HOME -e GITHUB_JOB -e GITHUB_REF -e GITHUB_SHA -e GITHUB_REPOSITORY -e GITHUB_REPOSITORY_OWNER -e GITHUB_RUN_ID -e GITHUB_RUN_NUMBER -e GITHUB_ACTOR -e GITHUB_WORKFLOW -e GITHUB_HEAD_REF -e GITHUB_BASE_REF -e GITHUB_EVENT_NAME -e GITHUB_SERVER_URL -e GITHUB_API_URL -e GITHUB_GRAPHQL_URL -e GITHUB_WORKSPACE -e GITHUB_ACTION -e GITHUB_EVENT_PATH -e GITHUB_PATH -e GITHUB_ENV -e RUNNER_OS -e RUNNER_TOOL_CACHE -e RUNNER_TEMP -e RUNNER_WORKSPACE -e ACTIONS_RUNTIME_URL -e ACTIONS_RUNTIME_TOKEN -e ACTIONS_CACHE_URL -e GITHUB_ACTIONS=true -e CI=true -v "/var/run/docker.sock":"/var/run/docker.sock" -v "/home/runner/work/_temp/_github_home":"/github/home" -v "/home/runner/work/_temp/_github_workflow":"/github/workflow" -v "/home/runner/work/_temp/_runner_file_commands":"/github/file_commands" -v "/home/runner/work/backend/backend":"/github/workspace" pulumi/actions preview
Logging in using access token from PULUMI_ACCESS_TOKEN
Logged in to <http://pulumi.com|pulumi.com> as qasim (<https://app.pulumi.com/qasim>)
#### :tropical_drink: `pulumi --non-interactive preview`
Previewing update (development)

View Live: <https://app.pulumi.com/qasim/core/development/previews/73500177-9c41-4b15-84b9-0708e2895a11>

    pulumi:pulumi:Stack core-development  error: It looks like the Pulumi SDK has not been installed. Have you run npm install or yarn install?
    pulumi:pulumi:Stack core-development  1 message
 
Diagnostics:
  pulumi:pulumi:Stack (core-development):
    error: It looks like the Pulumi SDK has not been installed. Have you run npm install or yarn install?
 
error: failed to load language plugin nodejs: could not read plugin [/usr/bin/pulumi-language-nodejs] stdout: EOF

famous-twilight-87777

09/22/2020, 9:20 AM

I'm having an issue where I need to lookup a value from https://www.pulumi.com/docs/reference/pkg/openstack/keymanager/secretv1/ ie

getSecret

and then read the payload and inject it into a file - this is possible in terraform however I cannot seem to access the payload (it's always a promise)

wet-soccer-72485

09/22/2020, 11:42 AM

Has there ever been any talks to make a VSCode or another IDE integration to display the status of Pulumi activity and kick off new runs?

fierce-memory-34976

09/22/2020, 12:30 PM

Is it possible to configure the secrets provider in code or does it have to be through the command?

bitter-application-91815

09/22/2020, 2:32 PM

Hey guys, is there a way to do this command via pulumi

<https://raw.githubusercontent.com/kubernetes/autoscaler/master/cluster-autoscaler/cloudprovider/aws/examples/cluster-autoscaler-autodiscover.yaml>

like i see the autoscaling in the kubs sdk. Is this horizontalPodScaling ?

bitter-application-91815

09/22/2020, 2:33 PM

and i presume i need to use beta2 v2 ?

ambitious-ambulance-56829

09/22/2020, 4:16 PM

Hey guys, I’m running into a problem with Pulumi since it’s update to 2.10.0. This problem only seems to happen on MacOS since my colleagues use Linux dists and they do not have this type of thing happening on their stacks while running an update. The problem is that all chart helm related resources are preview to be deleted when I’ve any change on any other resource unrelated to the chart itself inside the stack.

ambitious-ambulance-56829

09/22/2020, 4:16 PM

E.g, I’m updating a IAM Role for this stack and all Chart Helm related resources are previewing with a deletion plan for it but the IAM Role is not even being set on any Chart value. By running an refreesh on the same stack it show me that there are no changes to be made in

kubernetes:helm.sh:Chart

nor its dependencies. However when I run an update specifying a single resource URN to update (in this case the

aws:iam:Role

one) it will run without problems and then trying to update it again no changes are shown anymore, no delete plan for the chart resources anymore. Do you guys have any idea on what could I’ve been wrong or am I missing something? Thanks in advance for the help.

ambitious-ambulance-56829

09/22/2020, 4:16 PM

Copy code

Type                                                            Name                                                   Plan       Info
     pulumi:pulumi:Stack                                             argocd-support
 ~   ├─ aws:iam:Role                                                 argo-cd                                                update     [diff: ~assumeRolePolicy]
     ├─ kubernetes:helm.sh:Chart                                     argo-cd                                                           1 message
 -   │  ├─ kubernetes:core:Secret                                    argo-cd/argocd-secret                                  delete
 -   │  ├─ kubernetes:core:ServiceAccount                            argo-cd/argocd-server                                  delete
 -   │  ├─ kubernetes:core:ConfigMap                                 argo-cd/argocd-rbac-cm                                 delete
 -   │  ├─ kubernetes:core:Service                                   argo-cd/argo-cd-argocd-server                          delete
 -   │  ├─ kubernetes:<http://monitoring.coreos.com:ServiceMonitor|monitoring.coreos.com:ServiceMonitor>           argo-cd/argo-cd-argocd-application-controller          delete
 -   │  ├─ kubernetes:core:Service                                   argo-cd/argo-cd-argocd-application-controller          delete
 -   │  ├─ kubernetes:<http://networking.k8s.io:Ingress|networking.k8s.io:Ingress>                      argo-cd/argo-cd-argocd-server                          delete
 -   │  ├─ kubernetes:core:ConfigMap                                 argo-cd/argocd-ssh-known-hosts-cm                      delete
 -   │  ├─ kubernetes:core:Service                                   argo-cd/argo-cd-argocd-redis                           delete
 -   │  ├─ kubernetes:core:ConfigMap                                 argo-cd/argocd-tls-certs-cm                            delete
 -   │  ├─ kubernetes:core:ServiceAccount                            argo-cd/argocd-application-controller                  delete
 -   │  ├─ kubernetes:apps:Deployment                                argo-cd/argo-cd-argocd-redis                           delete
 -   │  ├─ kubernetes:<http://monitoring.coreos.com:ServiceMonitor|monitoring.coreos.com:ServiceMonitor>           argo-cd/argo-cd-argocd-repo-server                     delete
 -   │  ├─ kubernetes:<http://rbac.authorization.k8s.io:RoleBinding|rbac.authorization.k8s.io:RoleBinding>          argo-cd/argo-cd-argocd-application-controller          delete
 -   │  ├─ kubernetes:core:Service                                   argo-cd/argo-cd-argocd-repo-server                     delete
 -   │  ├─ kubernetes:core:Service                                   argo-cd/argo-cd-argocd-server-metrics                  delete
 -   │  ├─ kubernetes:apps:Deployment                                argo-cd/argo-cd-argocd-repo-server                     delete
 -   │  ├─ kubernetes:core:Service                                   argo-cd/argo-cd-argocd-application-controller-metrics  delete
 -   │  ├─ kubernetes:core:Service                                   argo-cd/argo-cd-argocd-repo-server-metrics             delete
 -   │  ├─ kubernetes:core:ConfigMap                                 argo-cd/argocd-cm                                      delete
 -   │  ├─ kubernetes:<http://rbac.authorization.k8s.io:ClusterRoleBinding|rbac.authorization.k8s.io:ClusterRoleBinding>   argo-cd-argocd-application-controller                  delete
 -   │  ├─ kubernetes:<http://rbac.authorization.k8s.io:Role|rbac.authorization.k8s.io:Role>                 argo-cd/argo-cd-argocd-application-controller          delete
 -   │  ├─ kubernetes:<http://rbac.authorization.k8s.io:ClusterRole|rbac.authorization.k8s.io:ClusterRole>          argo-cd-argocd-application-controller                  delete
 -   │  ├─ kubernetes:apps:Deployment                                argo-cd/argo-cd-argocd-server                          delete
 -   │  ├─ kubernetes:<http://rbac.authorization.k8s.io:ClusterRoleBinding|rbac.authorization.k8s.io:ClusterRoleBinding>   argo-cd-argocd-server                                  delete
 -   │  ├─ kubernetes:<http://monitoring.coreos.com:ServiceMonitor|monitoring.coreos.com:ServiceMonitor>           argo-cd/argo-cd-argocd-server                          delete
 -   │  ├─ kubernetes:<http://rbac.authorization.k8s.io:RoleBinding|rbac.authorization.k8s.io:RoleBinding>          argo-cd/argo-cd-argocd-server                          delete
 -   │  ├─ kubernetes:core:ServiceAccount                            argo-cd/argocd-dex-server                              delete
 -   │  ├─ kubernetes:<http://rbac.authorization.k8s.io:ClusterRole|rbac.authorization.k8s.io:ClusterRole>          argo-cd-argocd-server                                  delete
 -   │  ├─ kubernetes:<http://rbac.authorization.k8s.io:Role|rbac.authorization.k8s.io:Role>                 argo-cd/argo-cd-argocd-server                          delete
 -   │  └─ kubernetes:apps:Deployment                                argo-cd/argo-cd-argocd-application-controller          delete
     ├─ kubernetes:yaml:ConfigFile                                   project
     │  └─ kubernetes:<http://apiextensions.k8s.io:CustomResourceDefinition|apiextensions.k8s.io:CustomResourceDefinition>  <http://appprojects.argoproj.io|appprojects.argoproj.io>                                           1 warning
     └─ kubernetes:yaml:ConfigFile                                   application
        └─ kubernetes:<http://apiextensions.k8s.io:CustomResourceDefinition|apiextensions.k8s.io:CustomResourceDefinition>  <http://applications.argoproj.io|applications.argoproj.io>                                          1 warning

clever-plumber-29709

09/22/2020, 4:44 PM

I was checking awsx vpc for reference https://github.com/pulumi/pulumi-awsx/blob/master/nodejs/awsx/ec2/vpc.ts, but i couldn't find how they create the eip used for the nat gateways, can someone point me on how they do it?

bitter-application-91815

09/22/2020, 5:32 PM

Any examples how to configure how to use a private container registry (in this case self hosted gitlab) to roll out images onto aws eks stack

bitter-application-91815

09/22/2020, 5:33 PM

https://github.com/pulumi/examples/blob/master/azure-ts-aks-keda/keda.ts#L32-L50

bitter-application-91815

09/22/2020, 5:42 PM

this uses a azure container service registry

bitter-application-91815

09/22/2020, 5:42 PM

is there any model i can use for a generic one

curved-cartoon-90054

09/22/2020, 6:45 PM

hi I am using pulumi crossguard for 1st time i have been using opa for validating requests using opa api endpoint does pulumi has api endpoint ?

wet-noon-14291

09/22/2020, 8:28 PM

I'm trying to see if I can get the auth0 provider to work with a minimal example. What I wanted to try out first is check if I can create a tenant using pulumi. I'm using F# and have the following minimal code:

Copy code

let tenant = 
    Tenant("my-pulumi-tenant",
      TenantArgs(
        AllowedLogoutUrls = inputList [input "<http://site/ut>"],
        ChangePassword = 
          input (
            Inputs.TenantChangePasswordArgs(
              Enabled = input true,
              Html = input "<html></html>"
          )),
        DefaultRedirectionUri = input "<https://site/redirect>",
        FriendlyName = input "My Tenant name"
      ))
  dict [
    "id", tenant.Id :> obj
    "name", tenant.FriendlyName :> obj
  ]

When I run pulumi everything seems to work out just fine, but I can't see any tenants when I log into auth0. Does anyone have any clue of what is going on?

wet-noon-14291

09/22/2020, 8:45 PM

If someone is interested to see all their stack in neo4j I created this small dotnet tool you can use to upload all the stacks you have access to to neo4j: https://github.com/mastoj/pulumigraph/. It will also visualize connections between stacks through the stackreference resource. Haven't figured out a way to show which exact resource in a referenced stack a property might depend on, not even sure that is possible in a reliable fashion.

👍 1

bitter-application-91815

09/22/2020, 9:28 PM

hey guys, trying to get access to a private registry for a docker image (via pulumi obvs). Using this

Copy code

// make sure to
	_, err = yaml.NewConfigGroup(ctx, fmt.Sprintf("axiomdb-yaml-config-group-%s", w.targetEnv), &yaml.ConfigGroupArgs{
		Files: []string{yamlSctsFile}},
	)
	if err != nil {
		return err
	}

bitter-application-91815

09/22/2020, 9:29 PM

where

yamlSctsFile

is the path to the secretsFile, base64'd `

Copy code

.docker/config.json

bitter-application-91815

09/22/2020, 9:29 PM

following these instructions

bitter-application-91815

09/22/2020, 9:29 PM

<https://stackoverflow.com/questions/59882357/pulumi-how-to-pull-a-docker-image-from-a-private-registry>

bitter-application-91815

09/22/2020, 9:30 PM

i'm getting this error

bitter-application-91815

09/22/2020, 9:30 PM

Copy code

* decoding YAML: rpc error: code = Unknown desc = invocation of kubernetes:yaml:decode returned an error: error unmarshaling JSON: while decoding JSON: json: cannot unmarshal string into Go value of type map[string]interface {}
    exit status 1

clever-plumber-29709

09/23/2020, 12:09 AM

how can i modifiy some github repository settings with the pulumi provider? Should the repo be created with pulumi? or can i modify already existing repos?

little-cartoon-10569

09/23/2020, 8:05 AM

Is there a way to see what inputs don't match in a failed import? I'm getting several cases of "warning: inputs to import do not match the existing resource; importing this resource will fail" but I don't know why. Some of them are on resources with only two properties (e.g. RolePolicyAttachment), both of which are specified and match....

elegant-island-39916

09/23/2020, 9:52 AM

Hi, I'm trying to deploy the gitlab helm chart to k8s with pulumi and I'm seeing the following error when issuing `pulumi up`:

Copy code

File "/home/user/Projects/deepseer/deployments/venv/lib/python3.7/site-packages/pulumi_kubernetes/yaml.py", line 531, in <lambda>
        CustomResourceDefinition(f"{x}", opts, **obj)))]
    TypeError: __init__() got an unexpected keyword argument 'status'

It seems pulumi fails to parse the gitlab helm chart somehow How can I work around this issue? (details in replies)

hundreds-receptionist-31352

09/23/2020, 6:12 PM

Hi I have a component resource that return an Output<String> that works and I can see the value when I execute export const lb = return_value Now I want to send this value to a custom function , but I need this value as "string", because I have to comparate this string value with another string. Is there any way to "transform" the Output<String> as string? I have tried with interpolate but I don't get the string value Ej:

Copy code

const value = new customComponentResource.something(); -> got an Output<String>

let lb2 = pulumi.interpolate`${value}`

export const lb2 -> I see the value ok.

but customfunction(lb2) -> I got an lb2 Output<String> I need string.

bitter-dentist-28132

09/23/2020, 8:15 PM

is there an example "use this terraform provider in pulumi" tutorial?