pulumi-community #general

bumpy-photographer-59590

10/29/2020, 2:07 AM

hello everyone, I use pulumi get a default VPC and create a aurora serverless mysql attach with default VPC, the default VPC has 6 public publicSubnets and has no privateSubnets, but when I pulumi up, it create 2 VPC endpoint, how to prevent pulumi to create the VPC endpoint?

bumpy-photographer-59590

10/29/2020, 2:09 AM

I also need to create a ECS farget task to execute a docker to access Internet, so I plan create it in default VPC, so it can access the internet and can access the auroa serverless mysql

fierce-engine-31599

10/29/2020, 1:28 PM

Hey! I would like to evaluate Pulumi as an alternative to Helm. I've several deployments running with Helm already, is there any guide about how to this migration and stay alive 😅? My helm charts are saved alongside my code and not stored in any repository

high-morning-17948

10/29/2020, 2:23 PM

What is the new way of attaching managed policy now that it's deprecated? This is how I've been using them:

Copy code

/**
     * Attach Lambda Policies
     */
    const lambdaVpcAccess = new aws.iam.RolePolicyAttachment(
      `${stack.prefix}-lambda-vpc-access`,
      {
        role: role.name,
        policyArn: aws.iam.ManagedPolicy.AWSLambdaVPCAccessExecutionRole,
      }
    );

busy-umbrella-36067

10/29/2020, 6:28 PM

is there a way to run pulumi without any kind of state at all? (no

pulumi login

pulumi stack init

) I’m trying to imagine replacing helm with it.

high-morning-17948

10/29/2020, 7:20 PM

I want to add Log level Errors to API gateway , but I can't seem to find how to pass a role or a managed policy to

awsx.apigateway.API

so when I pass the LogGroup ARN to the

stageArgs

it doesn't generates the following error:

Copy code

error: 1 error occurred:
        * updating urn:pulumi:dev::booksloth-api::aws:apigateway:x:API$aws:apigateway/stage:Stage::booksloth-api-dev: 1 error occurred:
        * Updating API Gateway Stage failed: BadRequestException: CloudWatch Logs role ARN must be set in account settings to enable logging

This is what I tried so far:

Untitled

kind-address-14510

10/29/2020, 8:05 PM

how do I decrypt password I encrypted in config file ? Forgot what it was...

brief-printer-34348

10/29/2020, 8:28 PM

Is there anyway to encourage Pulumi to run DFS rather than BFS through the dependency graph? (e.g. I want to walk a single host at a time rather than all hosts at once)

wet-hair-90323

10/30/2020, 1:05 AM

is there a way to get the URL of a newly created SQS queue and pass it to another resource? Trying to use

aws.sqs.getQueue

, but it accepts a

string

queue name, rather than an

Output<string>

, and therefore runs before the queue is actually created even if i use a static name for the queue.

early-kite-86569

10/30/2020, 1:55 AM

I have been digging around for a bit and saw this reference in documentation:

Although the template uses a very simple package structure, by placing
__main__.py
in the root directory, Pulumi fully supports properly modularized Python programs and
setup.py
files. This is important if you ever decide to turn your Pulumi program into a library.

But I think that is it. My question: Is there a way to make the

__main__.py

of a pulumi stack a

pip

installable thing? Basically, if I want to build out an application that has heavily tied together processing pipelines and infrastructure, can I tell the

Pulumi.yaml

file "hey please go look for this script that was pip installed" so that I can match up the processing pipeline versions and the infrastructure versions? Or is this a bad idea?

strong-army-91908

10/30/2020, 2:49 AM

Does Pulumi provides any portal to manage the environments or provision the environments ?

steep-toddler-98503

10/30/2020, 3:53 AM

Hello, can someone help me to understand how create a new provider for aws with go as runtime, i want to use the aws profiles that i have in .aws/credentials file. Thanks

future-ocean-92178

10/30/2020, 8:29 AM

eni1, err := vpc.NewNetworkInterface(ctx, name, &vpc.NetworkInterfaceArgs{ VswitchId: vswitchId.ID(), SecurityGroups: pulumi.StringArray{ sgid, }, // pulumi.DependsOn([]pulumi.Resource{ // vswitchId, // }), })

I try to let create new NIC after vswitch has created. so I use pulumi.DependsOn . but this code does not work. it will complain "./main.go:208:4: cannot use vswitchId (type vpc.Switch) as type pulumi.Resource in slice literal:

vpc.Switch does not implement pulumi.Resource (pulumi.addTransformation method has pointer receiver)"

future-ocean-92178

10/30/2020, 8:29 AM

what's the correct way to do that ?

future-ocean-92178

10/30/2020, 8:30 AM

the reason I want use depends on is new Nic always failed to create at the first time run pulumi up , I have to run pulumi up twice to get it created.

damp-elephant-82829

10/30/2020, 9:21 AM

Hello guys, I have created few custom resources but the dependency order is not correct, i.e. some resources do not wait other to be created

damp-elephant-82829

10/30/2020, 9:22 AM

Untitled

damp-elephant-82829

10/30/2020, 9:22 AM

This thing is failing with this error:

damp-elephant-82829

10/30/2020, 9:23 AM

Untitled

damp-elephant-82829

10/30/2020, 9:24 AM

it seems the the getProjectServiceAccount invoked in the custom resource bucket with notification ( unopacmodulesBucketWithNotification barchart-import-bucket-with-pubsub-notification create ) isnot waiting the creation of the gcp project inside the custom resource

unopac:modules:Project branch-project create

jolly-lunch-12979

10/30/2020, 11:54 AM

I seem to have somehow broken my state, imported some existing custom hostname bindings on an Azure app service, made a change with DeleteBeforeReplace on, which deleted successfully and it thought it created the replacement, however it didn't. The hostname binding is missing in Azure, the state file thinks it's there and running a refresh doesn't detect that it isn't present in Azure either. Do I have to manually edit the state file to fix this? Is there a reason why a refresh wouldn't pick up the resource is gone in Azure?

better-actor-92669

10/30/2020, 12:24 PM

Hello. Let's say I have a value in my config file that is a string. For example:

Copy code

vpn:router_to_hq_1_bgp_asn: "65509"

I want to change it's value to be an integer. However, when I set it

pulumi config set vpn:router_to_hq_1_bgp_asn 65509

it still get written to the Pulumi's yaml config file as a string. Even when I change it manually via an editor (remove quotes), after issuing

pulumi up

it reverts it to a string. Is there a way I can specifically set a config's value type to integer? I know that I can cast its type via code, but I just want to understand if it is possible.

famous-area-1376

10/30/2020, 2:47 PM

What's up with how RolePolicyAttachment and RolePolicy work? If I try to attach 2 RolePolicyAttachments to the same role, it claims it did both, but I only see the latter one in console. Additionally, if I try creating one RolePolicy and one RolePolicyAttachment, again only one of them applies and the other one is lost (even if pulumi claims it created it too). How can I get both? I don't want to manually combine them into one policy document as one of them is a massive managed policy.

early-kite-86569

10/30/2020, 4:12 PM

I ran a bug I probably should have expected. I tried to create too many GCP resources at once and got an error. Is there a way to say "hey this batch of resources, I want them to at most run 4 at a time" or similar

tall-stone-8237

10/30/2020, 5:54 PM

Hey!! I’m trying to import an existing resource and I’m getting this error:

Copy code

pulumi-python:dynamic:Resource (Pulumi Test Import):
    error: Preview failed: Exception calling application: '__provider'

Getting the logs of the entire process doesn’t tell why there is an error but the dynamic provider works just fine when I am creating, updating and deleting resources. Help

icy-jordan-58549

10/30/2020, 6:32 PM

Copy code

Diagnostics:
  pulumi:pulumi:Stack (redis-dev):
    (node:50199) MaxListenersExceededWarning: Possible EventEmitter memory leak detected. 11 unhandledRejection listeners added to [process]. Use emitter.setMaxListeners() to increase limit
    (node:50199) [DEP0005] DeprecationWarning: Buffer() is deprecated due to security and usability issues. Please use the Buffer.alloc(), Buffer.allocUnsafe(), or Buffer.from() methods instead.
    (node:50199) MaxListenersExceededWarning: Possible EventEmitter memory leak detected. 11 exit listeners added to [process]. Use emitter.setMaxListeners() to increase limit

powerful-morning-93143

10/30/2020, 10:40 PM

hey folks, question on pulumi: can you emit terraform? e.g., if i write some python or go code w/the pulumi SDK that deploys some stuff into aws or k8s, can i have pulumi emit that as terraform directly?

average-kilobyte-47828

10/31/2020, 11:19 AM

Feeling pretty stupid here. I've deployed and updated a stack many times without problems then all of a sudden I'm getting this message. When I type suggested command I get a new error:

Copy code

error: invalid configuration key: could not parse devalert-infra:aws:region as a configuration key (configuration keys should be of the form `<namespace>:<name>`)

Untitled

kind-school-28825

11/01/2020, 6:32 AM

Is there a way to force destroy a stack? This comes from when I was playing around with my stack and experimenting, and I created some dependencies between resources that wouldn't allow me to remove them after updating the stack with some adjustments. I went manually to AWS to remove them in order to see if that would solve it, but now when trying to destroy the stack these resources aren't there anymore and pulumi is complaining that the resource doesn't exist. Is there a way to force pulumi to continue destroying resources even if some of them don't exist anymore?

polite-motherboard-78438

11/01/2020, 11:18 AM

Hello. When using Pulumi GitHub App together with GitHub actions, is there any way to disable the checks for a particular pulumi run? In my pipeline, I have an "integration tests" and "preview" jobs. I only want to create a check report for the preview job.