Hi, I have a simple question that I can't seem to find an answer for.... why isn't there an

output

method on

azure.servicebus.Queue

? And my follow up question.... how can output bindings be configured on Service Bus Queues?

Good Afternoon, my team has tried creating a LoadBalancer with NO SecurityGroups definition, pointed two FargateService instances with NO SecurityGroups definition to the LB and we got the following error:

error: [WARN] A duplicate Security Group rule was found

Multiple times, once for each Listener. Any idea how to be able to achieve this? Here's a sample of what we are trying to do:

import * as awsx from '@pulumi/awsx';

const vpc = new awsx.ec2.Vpc('test-vpc', {
  vpcId: '...',
});

// LOAD BALANCER DEFINITION

const lb = new awsx.lb.ApplicationLoadBalancer('testLB', {
  vpc,
  subnets: [
    // ...
  ],
  external: true,
  tags: {
    'Name': 'testLB'
  },
});

// FIRST APP DEFINITION

const targetGroup1 = lb.createTargetGroup('testTG1', {
  port: 80,
  loadBalancer: lb,
  healthCheck: {
    path: '/api',
  },
  tags: {
    'Name': 'testTG1'
  },
});

const httpListener1 = lb.createListener('testHTTP1', {
  defaultActions: [{
    fixedResponse: {
      contentType: 'text/plain',
      statusCode: '404',
    },
    type: 'fixed-response',
  }],
  loadBalancer: lb,
  port: 80,
  protocol: 'HTTP',
  external: true,
});

httpListener1.addListenerRule('testListener1', {
  actions: [{
    targetGroupArn: targetGroup1.targetGroup.arn,
    type: 'forward',
  }],
  conditions: [
    {
      pathPattern: {
        values: [
          '/api/*',
        ],
      },
    },
  ],
  priority: 200,
});

new awsx.ecs.FargateService('api', {
  desiredCount: 1,
  subnets: [
    // ...
  ],
  taskDefinitionArgs: {
    tags: {
      'Name': 'api'
    },
    containers: {
      adminBackend: {
        image: '...',
        memory: 512,
        portMappings: [
          targetGroup1,
        ],
      },
    },
  },
});

// SECOND APP DEFINITION

const targetGroup2 = lb.createTargetGroup('testTG2', {
  port: 80,
  loadBalancer: lb,
  healthCheck: {
    path: '/ui',
  },
  tags: {
    'Name': 'testTG2'
  },
});

const httpListener2 = lb.createListener('testHTTP2', {
  defaultActions: [{
    fixedResponse: {
      contentType: 'text/plain',
      statusCode: '404',
    },
    type: 'fixed-response',
  }],
  loadBalancer: lb,
  port: 80,
  protocol: 'HTTP',
  external: true,
});

httpListener2.addListenerRule('testListener2', {
  actions: [{
    targetGroupArn: targetGroup2.targetGroup.arn,
    type: 'forward',
  }],
  conditions: [
    {
      pathPattern: {
        values: [
          '/*',
        ],
      },
    },
  ],
  priority: 200,
});

new awsx.ecs.FargateService('ui', {
  desiredCount: 1,
  subnets: [
    // ...
  ],
  taskDefinitionArgs: {
    tags: {
      'Name': 'ui'
    },
    containers: {
      adminBackend: {
        image: '...',
        memory: 512,
        portMappings: [
          targetGroup2,
        ],
      },
    },
  },
});

Does someone has an example of creating an appmesh in aws, with pulumi? awsx does not manages it, and also there is none in the pulumi-examples repo just wanted to see a reference implementation

error: Exception calling application: code() takes at most 15 arguments (16 given)

- this is what I'm getting when using dynamic resource when trying to do

pulumi destroy

. It was working fine for some time and now it's broken without any code change. What is happening?

We are looking to Integrate Infrastructure as a code with Web Application . In our case we are using ASP.net core 3.1 mvc app which displays onprem inventory we want to spill up resource in Azure cloud provider using dynamic variable or inputs from data source and provision resources in Azure cloud. Is there why to integrate Pulum with web application

I figured out my issue - I was in the wrong subscription when I ran the preview. sorry for the noise! I'm new to Pulumi and inherited a project where the infrastructure has drifted considerably, and I'm trying to update the Pulumi code to match. I'm getting this error:

PS C:\GitRepos\iac-pulumi\src\nvp-az-identity> pulumi preview
Previewing update (nvoicepay/production)

View Live: <https://app.pulumi.com/***/***-az-identity/production/previews/****>

     Type                         Name                        Plan       Info
     pulumi:pulumi:Stack          ***-az-identity-production             1 error
 +   ├─ pulumi:providers:azuread  Production                  create
 =   └─ azure:keyvault:KeyVault   ***-prod-global-keyvault    import     1 error

Diagnostics:
  pulumi:pulumi:Stack (***-az-identity-production):
    error: preview failed

  azure:keyvault:KeyVault (***-prod-global-keyvault):
    error: Preview failed: unrecognized resource type (Read): azure:keyvault/keyVault:KeyVault

Other background info is that the keyvault and the resource group were moved to another subscription between when the code worked and now. So I'm using this to attempt to import it back in:

var keyVault = new KeyVault(globalRegion.Configurator.GetKeyVaultName(), new KeyVaultArgs
            {
                Name = globalRegion.Configurator.GetKeyVaultName(),
                Location = globalResourceGroup.Resource.Location,
                ResourceGroupName = globalResourceGroup.Resource.Name,
                TenantId = globalRegion.SharedConfig.TenantId,
                SkuName = "standard",

                //acc
                EnabledForDiskEncryption = true,
                EnabledForDeployment = true,
                EnabledForTemplateDeployment = true,
            }, new CustomResourceOptions
            {
                ImportId = NvpConfig.GlobalKeyVaultResourceId,
                Provider = azProvider
            }
);

Hi, I'm new in pulumi, I would like to know if is possible to run pulumi inside a serverless function like AWS Lambda or Azure Functions. For example, suppose we have a function, and when it is invoked then pulumi run the "up" command in another way run provisioning code based on some arguments of function..

Still looking for a way to do this

still didn't solve it,

Hi everyone! I have a question about `ComponentResource`s and their intended usage. The example on the documentation shows that we should accept an

opts

argument which is then passed to the superconstructor:

class MyComponent(pulumi.ComponentResource):
    def __init__(self, name, opts = None):
        super().__init__('pkg:index:MyComponent', name, None, opts)

I was hopeful that this would cause Pulumi to apply those

opts

to all the resources inside the

ComponentResource

, so that if for example I wanted to use a custom provider, I only have to specify when creating my compontent resource:

my_component = MyComponent(opts=ResourceOptions(provider=my_provider))

But this doesn't seem to be the case. So, what is the appropriate way of propagating these options onward? Should I pass

opts

into every child resource:

class MyComponent(pulumi.ComponentResource):
    def __init__(self, name, opts = None):
        super().__init__('pkg:index:MyComponent', name, None, opts)
        my_resource1 = ResourceA(opts=opts)
        my_resource2 = ResourceB(opts=opts)

Although, this makes life more difficult when I need to add additional fields to the

ResourceOptions

of certain resources, such as

depends_on

. Or, should I pick out the fields that I want:

class MyComponent(pulumi.ComponentResource):
    def __init__(self, name, opts = None):
        super().__init__('pkg:index:MyComponent', name, None, opts)
        my_resource1 = ResourceA(opts=ResourceOptions(provider=opts.provider))
        my_resource2 = ResourceB(opts=ResourceOptions(provider=opts.provider))

which is OK, but I am concerned I will then by missing options which were supposed to be progagated down the tree. What was the intended usage here? Thanks in advance 🙂

Is there a way to integrate pulumi directly into typescript code without that TS code needing to shell out to the pulumi cli? e.g. a express webserver with a route: POST /bucket which would then execute

const bucket = new aws.s3.Bucket("my-bucket");

A simple question (with possibly a complicated answer? 😄) - I’m trying to deploy an AWS DocumentDB cluster in my custom VPC (so, not the default one), but it seems I can’t set the VPC for it (https://www.pulumi.com/docs/reference/pkg/aws/docdb/cluster/) Is there a way to do it? Or am I just missing something here? 🤔 Thank you! 🚀

I’m trying to get a Lambda function declared in another stack using:

// systemBackupLambdaId = backupLambda.id exported from the other project

const systemBackupLambda = aws.lambda.Function.get("system-backup-lambda", systemBackupLambdaId);

I’m getting an error I don’t understand:

Diagnostics:
  pulumi:pulumi:Stack (monitoring-service-sandbox):
    error: preview failed

  aws:lambda:Function (system-backup-lambda):
    error: Preview failed: refreshing urn:pulumi:sandbox::monitoring-service::aws:lambda/function:Function::system-backup-lambda: 1 error occurred:
    	* InvalidParameter: 1 validation error(s) found.
    - minimum field size of 1, GetFunctionInput.FunctionName.

https://www.pulumi.com/docs/reference/pkg/aws/apigateway/integration/ The tabs for selecting language are not working here

is there any project at that time that could used kubernetes as backend of pulumi?

We are getting an error creating a privateLink across subscriptions. (typescript) azureprivatelinkEndpoint (sql-link): September 25th 2020 134932 Info error: Preview failed: Error building AzureRM Client: Azure CLI Authorization Profile was not found. Please ensure the Azure CLI is installed and then log-in with

az login

. This is an octopus deploy job using a service principal. The job uses the variables

$env:ARM_CLIENT_ID = $AzAccountClient
$env:ARM_CLIENT_SECRET = $AzAccountPassword
$env:ARM_TENANT_ID = $AzAccountTenantId
$env:ARM_SUBSCRIPTION_ID = $AzAccountSubscriptionNumber

We have dozens of deployments per week across 20 stacks that has been using this process. Its stable. We are trying something new, creating privatelinks from subscription A to a vnet in subscription B. Since most of the code executes in subscription A, the env variable ARM_SUBSCRIPTION_ID is set to "A". However, when we get to the privatelink, we build a new provider and pass into the service principal the credentials, tenant, secret and subscription B. But when we use this new provider in the private link, we still get the same error. We know we have to pass in subscription B to privatelink. Older versions of the pulumi azure provider would default the credenatials, secret and tenant, but the newer version seems to require them. @pulumi 2.1 @pulumi/azure 3.20.1

//Provider Code
const Sub = new vznaz.azure.Provider("subscription B", { //TODO
  subscriptionId: "subscription B",
  metadataHost: '<http://management.azure.com|management.azure.com>',
  clientId: process.env["ARM_CLIENT_ID"],
  clientSecret: process.env["ARM_CLIENT_SECRET"],
  tenantId: vznaz.AADTenantId,
});
vznpulumi.pulumi.ProviderResource.register(Sub).then(p => p);




//PrivateLink Code that is failing with above error message
const privateLinkTags = TAGS;

const PrivateLinkSubnet = vznpulumi.pulumi.output(vznaz.azure.network.getSubnet({
    resourceGroupName: 'vznz-net_rg',
    virtualNetworkName: 'vznz-net_vnet',
    name: 'private-link-hub01',
}, {
    provider: Sub,
    async: true,
}));

//sqlServer
const SqlPrivateLink = new vznaz.azure.privatelink.Endpoint('sql-link', { //was vznaz.azure.privatelink.Endpoint but was getting an error below that privateIpAddress didn't exist on SqlPrivateLink.privateServiceConnection.privateIpAddress
    resourceGroupName: '_prod-rg-01',
    privateServiceConnection: {
        privateConnectionResourceId: sqlServer.id,
        isManualConnection: false,
        name: sqlServer.name,
        subresourceNames: [ 'sqlServer' ],
    },
    subnetId: PrivateLinkSubnet.id,
    name: sqlServer.name,
    tags: privateLinkTags,
},{
    provider: Sub,
});

We are stumped. Any help would be greatly appreciated.

Hi guys, a quick q. I use microk8s to run kubernetes on a linux Hyper-V VM. Would Pulumi still work with this?

I'm running into a very unusual issue that started happening recently (not sure what triggered it)

pulumi up

always updates lambdas (~code). Then:

pulumi refresh

always shows those same lambdas needing update. I let it update. Refreshing / Previewing says no changes need to happen. I then change the memory size of one of the lambdas, but it triggers all Lambdas to update (~code), and one of them ~code + memorySize. This happened recently - I'm using WSL2, I've diff-ed stack exports, and file sizes before and after - and I see nothing that stands out. Any thoughts on what may be the issue or where I should look next?

(also if github is the proper way to post this, happy to post it there)

Hi All, what is the latest best practices on github actions workflows to prevent multiple `pulumi up`s happening on pushes? I see this is used for the docs, https://github.com/pulumi/docs/blob/master/.github/workflows/build-and-deploy.yml is turnstyle the way to go?

Hi there, I'm having trouble to do a Pulumi Lambda to RDS , is there any good example I can look at? I get errno":"ENOTFOUND","syscall":"getaddrinfo from the lambda

Hi all, nice to e-meet you. I have a challenge of rolling out updates to k8s node pools without incurring downtime. Currently, pulumi destroys the old node pool and creates a new one in sequence. My team would prefer if the new node pool was created, pods were allowed time to migrate to the new node pool, and then the old node pool was removed. Does something like this exist in pulumi already? We are a golang shop. Also, are there docs on how to write plugins? I first thought my challenge would be best solved by a plugin but I am not readily finding docs on how to create one. I have found is this ...

To understand how to write and distribute your own plugins, please consult the relevant documentation.

... here https://www.pulumi.com/docs/reference/cli/pulumi_plugin/ but I don't know where " the relevant documentation" is. Many thanks in advance.

Is it possible to unit test a TypeScript pulumi program when using ComponentResources? I can only see resources which don't have a parent set?

I have a weird issue where I get a typescript type error on circleci and no type error when running locally. Same command and all package version, including ts-node are the same. Running

tsc

locally also detects the type issue. Does anybody have any ideas what could contribute to typeissues being ignored by the pulumi runtime locally?

If someone has deleted or changed a resource manually, will pulumi restore it on the next

pulumi up

or will pulumi just check its own state when deploying and not seeing the change? If yes, does that apply to all types of resources?

Does Pulumi have any support for knative ?

Good morning, btw

Another question, I see AWS has elasticache (redis) global support now, I presumed that was multi regional multi az elasticache through the pulumi api,but when i try to stand a redis cluster with 3 nodes for 3 AZs making it multi regional

I get the error that redis is only supported with one node, not more than one