Hi all, I’m trying to automate the provision of Rook/Ceph object buckets with Pulumi; in short, I want to create an ObjectBucketClaim CRD, wait until it has Status: Bound, then read the generated access/private keys from a related ObjectBucket CRD. Is there a way to do this without creating my own resource provisioner? My best guess would be something like a ComponentResource which creates the OBC, then creates the OB with depends_on= and import= set appropriately, but that seems like a terrible hack

@fresh-painting-68573 take a look at

crd2pulumi

If you have an existing CRD it will generate all the language bindings for you and then you can use it like anything else

I'm creating a GCP storage bucket and aggregated log sink using. To create the sink I need the value of the bucket id from Pulumi.

# create bucket works great. 
sink = logging.OrganizationSink("resource-ops-sink",
                        destination=f"<http://storage.googleapis.com/{bucket.id}|storage.googleapis.com/{bucket.id}>",
                        filter=filter,
                        org_id=org)

# create Org Sink not so much.
sink = logging.OrganizationSink("resource-ops-sink",
                        destination=f"<http://storage.googleapis.com/{bucket.id}|storage.googleapis.com/{bucket.id}>",
                        filter=filter,
                        org_id=org)

The above sink creation returns an error

* googleapi: Error 404: Bucket <pulumi.output.Output object at 0x10bcc16a0> does not exist, notFound

The destination input of a sink for a bucket is the value "storage.googleapis.com/BUCKET". I understand the value doesn't exist yet and it's set asynchronously. I've tried both

dest = Output.concat("<http://storage.googleapis.com/|storage.googleapis.com/>", bucket.id)
dest = Output.all(bucket.id).apply(lambda l: f"<http://storage.googleapis.com/{l[0]}|storage.googleapis.com/{l[0]}>")

Any thoughts or suggestions on how I can make this work? Thanks,

Whenever I create a azure resource group using the core lib, the resource group name is suffixed with some characters, how can I avoid it

Hey guys, Following a question I've had here a few days ago: Seems like Pulumi does not keep track of the helm chart's dependency graph and thus altering something that affects the helm chart (such as changing something in values.yaml which affects a k8s secret) will most likely not update a deployment using it. That's really unfortunate since most of our infra is based on helm charts (which is the best practice). anyone has some kind of workaround?

Hi, what’s the best way to use add a stack validation policy, but only test a specific type of resource, i.e. all kubernetes resources?

Hey! Is it possible to create a Network Endpoint Group of type Cloud Run on GCP? I see in the docs that the only supported type`GCE_VM_IP_PORT`

hihi I found examples of how Pulumi can deploy an application to Fargate via a Container (which is amazing!) are there examples/docs on how Pulumi manages iterations of the application? I.e. if I wanted to make a text change on the voting app (i.e. vim vs emac) how would one go about doing that?

Is it possible to rename a resource similar to

terraform mv

? I am refactoring and would like to rename items within a single state file. If there is no facility to move/rename resources, is there another way to achieve the same result?

hey there, is the json exported from

pulumi export

compatible with terraform in order for terraform to erect the same stack from just that json file ?

(sorry haven't used terraform before)

if not is there someway to do it, considering pulumi is based on terraform there should be some way ?

@big-account-56668 yes, using aliases

@bitter-application-91815 no there’s no way to do that - not all Pulumi programs are representable in terraform. Pulumi is also not based on terraform. It just uses the CRUD logic from some providers.

Is https://github.com/pulumi/pulumi-query-kubernetes

deprecated

?

Maybe I am missing it, but does Pulumi have a AWS Class for AWS SSO?

Hi All, Not sure that pulumi kubernetes is compatible with AKS or not but I got many issue when deploying and managing AKS. Could you please share experience? Thanks Steven

I was so excited to deploy some k8s charts with Pulumi. Very good stuff there. I'm waiting for https://github.com/helm/charts/pull/23814 to deploy spinnaker now! 👀

Is is possible to move a resource to be in a

ComponentResource

without having it be deleted and recreated?

is there a way to apply policies(crossguard) when running pulumi automation api ?

Is anybody using bazel or anything else with pulumi to run hermetic builds/deployments?

Hey 🙇 I have a non-technical question. We just signed up our org. using github, but with an account that doesn't have admin access in github. When I now try to login using my github account which does have admin access, I don't have access to the organisation in Pulumi. Is there any way to reset or update this? We prefer for it to be setup via github ease of use. 🙏

How can I add Azure Storage as the backend state? I set the environment variables

AZURE_STORAGE_ACCOUNT

and

AZURE_STORAGE_KEY

, but when I run

pulumi login --cloud-url <https://pulumistatepoc.blob.core.windows.net/>

it prompts me for an access token. What access token? Shouldn't the env vars be enough? How do I get this to work?

The update result for a dynamic resource provider has a field called

outs

which says that it is for

Any properties that were computed during updating

. My interpretation of that was that I only needed to set it if I was computing properties in the update method. Do I need to set that to all the inputs even if I don't touch them?

Hi there, hoping someone can point out a working configuration of AWS ECS Fargate with ALB config, no matter how I try setting the Fargate portMappings I get the following error:

error: preview failed
 
    panic: interface conversion: interface {} is string, not int
    goroutine 184 [running]:
    <http://github.com/terraform-providers/terraform-provider-aws/aws.resourceAwsEcsLoadBalancerHash(0x556d040|github.com/terraform-providers/terraform-provider-aws/aws.resourceAwsEcsLoadBalancerHash(0x556d040>, 0xc002350420, 0xc00232fa10)
        /home/runner/go/pkg/mod/github.com/pulumi/terraform-provider-aws@v1.38.1-0.20201023104507-9632e543c200/aws/resource_aws_ecs_service.go:1169 +0x47f

Offending config - note the portMappings, first line is ok, fails when using the ApplicationListener, have also tried the NetworkListener

const httpListener = new awsx.lb.ApplicationListener("http-listener", {
        external: true,
        port: 80,        
    });

    let actAdminService = new awsx.ecs.FargateService(serviceName, {
        name: serviceName,
        cluster,
        desiredCount: 1,
        serviceRegistries: {
            registryArn: discoveryService.arn,
        },
        taskDefinitionArgs: {
            container: {
                image: imageName,
                memory: 256,
                portMappings: [
                    // THIS WORKS { containerPort: 80, hostPort: 80, protocol: "tcp" }, { containerPort: 443, hostPort: 443, protocol: "tcp" }
                    httpListener //THIS FAILS
                ],                
            },
            executionRole: execRole,

        },
        platformVersion: context.defaultPlatformVersion,

    });

As well as https://medium.com/it-dead-inside/deploy-aws-fargate-clusters-with-pulumi-e06637e6821d and example here https://www.pulumi.com/blog/get-started-with-docker-on-aws-fargate-using-pulumi/

Think this is the tracked issue, https://github.com/pulumi/pulumi/issues/5633 and setting the env var

PULUMI_DISABLE_PROVIDER_PREVIEW=1

Seems to solve the issue

Is there a way to disable pulumi's formatting of the project yaml file? It's conflicting with my prettier config for yaml files, and I also want to be able to add comments in it. I'm also making use of an "enabled" boolean option (helm chart style) for many things that I want to keep in the top of all objects (pulumi sorts alphabetically).

I have a project that needs to work with a stack per environment, and each environment is a different AWS account. How do I configure a remote state backend using S3 in each account/environment?