@ambitious-father-68746 watching your video from DOXLON 😄

nice comparison between the tools!

Thank you! Hopefully you didn't find it too boring, I lost track of time and went 10 minutes further than I should've.

Hey all, best person to reach out to about Octopus Deploy Step Template?

hi all!

i'm facing a problem on gcp

+  gcp:storage:BucketIAMMember role-legacy creating error: Error applying IAM policy for storage bucket "b/sky-it-backup-mysql-prod": Error setting IAM policy for storage bucket "b/sky-it-backup-mysql-prod": googleapi: Error 412: Precondition Failed, conditionNotMet
 +  gcp:storage:BucketIAMMember role-legacy **creating failed** error: Error applying IAM policy for storage bucket "b/sky-it-backup-mysql-prod": Error setting IAM policy for storage bucket "b/sky-it-backup-mysql-prod": googleapi: Error 412: Precondition Failed, conditionNotMet

what conditionNotMet mean?

Is there a way to know if we're running

pulumi preview

or

pulumi update

?

Hey, I just try the crd2pulumi tool. It’s really cool. I just doesn’t understand this

utilities.getVersion();

Just wanna understand why this is done inside the constructor of the resources. We move the generated files into our own repository and we are getting an error about this

i’m seeing this error when running `pulumi up -y`:

Error initializing PostgreSQL client: error detecting capabilities: error PostgreSQL version: EOF

seems similar to this issue: https://github.com/pulumi/pulumi/issues/3166 Any idea on why this might be happening?

have a question about pulumi pricing. is it possible to use it for free at scale? i.e. with lots of developers? say if you use s3 buckets for state? kinda like the "free" tf?

Hey folks! 👋😄 I created a dynamic provider and it works very well, except that whenever I change the implementation of the provider even slightly (a change that has absolutely no impact on outputs), pulumi updates the provider associated with all resources created with it, as if it was a totally different provider (maybe that’s the way dynamic providers are identified, by a hash of their code or something? so if the code changes slightly, it’s considered a totally different provider?) And that’s a problem because afterwards all previous state is no longer recognized (it’s undefined), so it always tries to update the resources at every run. Is there maybe a way to identify the dynamic provider/resource with a fixed known type (like we can do with

CustomComponent

resources when we pass a custom type string to the base constructor)? Maybe that will help the state to smoothly transition from older to newer version of same provider?

Question about API Gateway. Is it possible to provision an API Gateway with one repo, and setup the routes and lambdas for it in another repo using StackReferences?

Hey, who can answer question about

crd2pulumi

?

Hey all! I’m new here and still learning the ropes. Probably a silly question: do stacks need to have globally unique names and not just unique within a project?

Help! I originally signed up for app.pulumi.com using GitHub, but I need to transition that account to username/email. I reached out to support but haven't heard back. Is there anyone here who can help?

Hello fellow Pulumi-ers 😎. I did not see a "Jobs" channel in this slack, so I hope you will excuse me posting this here. The ACCURE team and I have been using Pulumi heavily for a few months now and we are really appreciating it! Now we're expanding our infrastructure team and are planning to bring more developers into the world of Pulumi. So if any of you are looking to get involved in a early-phase start-up in the heart of Europe (or know someone who is), then please free to get in touch.

Hey! Can I define specific IAM permissions for lambdas deployed in an API. gateway somehow?

I'd like to have multiple "projects", e.g. "github", "aws vpc", "aws eks cluster" in a single git repo that i can

up

independently from each other (or all together if i choose to). is there a recommended way on how i should organize this? so far i'm thinking of having a bunch of

Pulumi.project_stack.yaml

files and having the

index

file choose which codepaths to execute based on the config properties. but this seems not quite ideal I would be fine having everything in a single "project" but I'm concerned about long

preview

times if it needs to grab the state of every resource. or has this not been a big issue?

has anyone tried to use Pulumi to automate baremetal deployments?

Hey all, I’d like to move some resources between stacks in different pulumi projects. I didn’t see any docs or

pulumi state mv

around, is there any docs on how to do this? Or should I just pulumi state export/import the resources over to the other stack.

Hi there, I have a quick question: is it considered a security risk to push encrypted keys to a public git repository? I am asking because I saw my

Pulumi.dev.yaml

include encrypted secrets after running

pulumi config set ... --secret

(see attached snippet in the thread for details on how the file looks like).

Another short question: I would like to access secrets from my

index.ts

. I tried using

new pulumi.Config();

as explained in https://www.pulumi.com/docs/intro/concepts/config/, but when doing

config.require("name");

it actually prefixes the name with the name of the project

hi, we are currently using a 3rd party rest service and we use it to CRUD secrets. Is creating a dynamic provider the recommended approach in that scenario?

i’m seeing these 2 Route53 errors when creating a certificate similar to the example in

aws-ts-static-website

when running

pulumi up

Error: invocation of aws:route53/getZone:getZone returned an error: transport is closing
Error: invocation of aws:ec2/getSubnetIds:getSubnetIds returned an error: transport is closing

Any advice on how to move past this?

Hello, I'm getting following error on

pulumi preview

and cannot find the cause:

error: Preview failed: unexpected unknown property value

Does anyone have any idea what could be the problem or how I could track down the error?

Question: for CI jobs like github actions, what is the best practice for providing the

secrets.PULUMI_ACCESS_TOKEN

? These seem to be tied to the user, not the pulumi organization.

How do you create a Webhook for Github Enterprise? There is a notion of doing it on the documentation but after reading the source code I don’t see a configuration option to bypass the Github base URL:

Diagnostics:
  github:index:RepositoryWebhook (github-repo-webhook):
    error: POST <https://api.github.com/repos//https://><snip>/security/jupyterhub.git/hooks: 404 Not Found []

Is there an environment variable I can set somewhere?

Here’s my code that resulted in the error above:

github_repo_webhook = github.RepositoryWebhook(
    "github-repo-webhook",
    active=True,
    events=["push"],
    repository='https://<snip>/security/jupyterhub.git',
    configuration={
        "url": codebuild_webhook.payload_url,
        "secret": codebuild_webhook.secret,
        "contentType": "json",
        "insecureSsl": False,
    })

Ah, I believe I found the environment variable here: https://github.com/pulumi/pulumi-github/blob/master/sdk/python/pulumi_github/config/vars.py#L21