How do we provide access to EKS cluster to the group using python ?

Is it possible to access stack outputs (ex:

bucketName

) during runtime such as from a lambda handler from a separate file using the pulumi SDK?

Is there a way to get pulumi stack output in a non pulumi project, or at least outside of

pulumi up

? Use case is a larger project based on serverless framework that's workflow is specific to the serverless framework. I would still like to be able to use

getOutputValue

like we do for sharing values across pulumi projects or cli to dump outputs to a file for setting vpc settings and s3 buckets created by our pulumi infrastructure project.

What is the best way to exit a

pulumi up

run gracefully? Use case is we’re setting an env variable in a shell script in CICD. If that variable doesn’t exist I want to not kick out of the process. I implemented this (JS/TS):

const imageVersion = process.env.IMAGE_VERSION || '';
if (!imageVersion) {
  throw new Error(`Image version is not present!`);
}

Which works but when

up

exits this way the outputs are destroyed which I don’t want to have happen.

I'm encountering an issue using

pulumi refresh

. The following block shows the error:

Diagnostics:
  aws:redshift:SnapshotScheduleAssociation (redshift-snapshot-schedule-association):
    error: Preview failed: refreshing urn:pulumi:dev1::ucboitlake::aws:redshift/snapshotScheduleAssociation:SnapshotScheduleAssociation::redshift-snapshot-schedule-association: 1 error occurred:
    	* Unable to find Redshift Cluster (dim-redshift-cluster) Snapshot Schedule (redshift-snapshot-schedule) Association

  pulumi:pulumi:Stack (ucboitlake-dev1):
    error: preview failed

This is occurring (I assume) because I manually used the console to delete my Redshift cluster, which automatically removed all snapshot information. That's all good and well. I've done this kind of thing before and

pulumi refresh

detects the changes without errors occurring. However, after introducing custom snapshot functionality and manually deleting via the console, this is the outcome. Does anyone know a workaround or solution for this type of problem?

is this possible using pulumi? api gateway in east pointing to a lambda in the west region? have not been able to find any examples or reproduce. but I can generate this behavior in the console

Is there a provider for ActiveDirectory? I see the AzureAD provider: is there an equivalent for self-managed AD (or better, Managed MicrosoftAD in AWS' Directory Service)?

Sorry for posting my pulumi-kubernetes question here too, but does anyone have an opinion on my question: https://pulumi-community.slack.com/archives/CRFURDVQB/p1607968759355400

Is there a Pulumi resource to define and manage Redshift start/stop scheduling? I have been unable to find any material for that - see image below for context of where to find this via the AWS console:

How can I change a resource twice in the same stack? I have the following problem: I would like to use cloudflare in front of our azure webapps (as proxy). To do so, I need to configure a custom domain on the azure webapp (with pulumi) and have the DNS entry configured on cloudflare (with pulumi) without proxy, but DNS only. Now azure needs to validate the DNS entry and for this to work, cloudflare must not be configured as proxy for the given DNS. Once azure has done the validation, the proxy setting on cloudflare record must be enabled for the given DNS entry which I just created before. I wonder how this can be done with pulumi? Just to be clear, I think I know all the pulumi resources involved to create the configuration, but how can I apply some kind of flow to do this?

i’ve been having deploy issues with 1 of my 2 fargate services when running

pulumi up

with the error after about 10 minutes:

error waiting for service (service arn) to reach a steady state: ResourceNotReady: exceeded wait attempts

I see one task in ithe service with the status

RUNNING

, but the task definition starts with

[INACTIVE]

. I noticed that my working fargate service includes the message

has reached a steady state.

in the Events tab. What determines a “steady state” for a Fargate service? Does this have anything to do with the

desiredCount

of tasks while deploying?

I'm confused about the pricing. For Starter, is it $50 per month (if billed annually) otherwise it's $60 per month? For Pro, is it $225 per month, or $90 per month (if billed annually)?

Is it safe to rename a project just by changing the name in the YAML file?

I'm seeing intermitent segmentation faults (!!!) when running

pulumi up

in my CI environment. Using AWS CodeBuild 4.0 image, with the latest version of pulumi. Anyone else seeing something similar? AFAICT my deployment hasn't changed much. Increasing resources on the build machine didn't help (so doesn't seem to be a memory issue).

I am trying to change the role that I am assuming but this is changing the provider and now pulumi wants to replace everything. Can I stop it doing that?

how can I get the cluster name from a k8s.Provider that I initialized using the cluster name? (in TS)

What's the "best" or recommended way to stop/remove all AWS services generated for a given stack while still retaining everything for the stack's configuration on a local dev environment? My group's been doing this by commenting out code sections to do this, and I'm sure there's a better way...

How do I pass credentials to Pulumi code? Say, in my build agent I have a script to get the credentials from a source... then in my Pulumi code, how can I reference to that secret?

Any clues on what this error means? - was working fine yesterday

error: Running program '/Users/…/myproject' failed with an unhandled exception: 
Error: invocation of kubernetes:helm:template returned an error: failed to generate YAML for specified Helm chart: failed to load chart from temp directory: stat /var/folders/pm/ftb5j1d51_gbr3cdxfpl1v4r0000gn/T/helm179799543/nginx-ingress: no such file or directory

unhandled rejection: CONTEXT(516): Invoking function: tok=kubernetes:helm:template asynchronously

Hey guys. I have a strange issue. Beginning from yesterday I'm feeling issues with deploying new changes. I'm using gcp and kubernetes and yesterday I successfully deployed las changes and after that I tried to push new changes after a little time ago, but now all changes are stuck on the preview, just stuck on the reading stack references (stack references are healthy and working and I can push changes to them). What can be happened? Any ideas?

just getting started with Pulumi here - working thru the ecs example and have everything working in my environment - now I need to adjust so that my ECS Task Definition pulls the image from a different account then the one running Pulumi (images stored in our aws shared account), Pulumi running under our aws dev account, generally I would solve this using assume role, but not seeing how to do that with Pulumi - anyone have something similar working ?

Any support for AWS LakeFormation? If not, is there some kind of useful work-around?

hey folks I'm trying to import an existing aws lambda and it's failing with the error

handler and runtime must be set when PackageType is Zip

Runtime is set (

.NET Core 3.1 (C#/PowerShell)

), handler is set (

Stevie.Cloud.Api::Stevie.Cloud.Api.LambdaEntryPoint::FunctionHandlerAsync

) Any ideas?

Does pulumi resolve the outputs on its own if you use a value of one resource in another one (same file)? Or do you need to go via the pulumi.all method your self? Usecase: i deploy a secret with a wildcard ssl certificate, and i need the secret name the values of the chart i deploy right after that.

What’s the disadvantage of managing a stack’s secrets with passphrase in production?

I tried using tf2pulumi tool and I was able to convert small terraform file into pulumi but failed when I had a complex one

i'm splitting an existing project into multiple stacks, by using existing resource IDs as

import

values and stack dependencies. But how do i handle resources like

pulumi_aws.acm.CertificateValidation

which don't have corresponding cloud provider IDs? i'd like it to continue to be defined in IaC so that a new stack can be spun up with that same code, but Pulumi wants to create a new one.

I also have a question related to multiple stacks.. When it comes to referencing other stacks, I’m aware of

StackReference

resource type, but it seems it only works when your state files are stored in the Pulumi cloud (Pulumi backend). Is there something we could use to reference other stacks, but for the case in which the state files are stored locally? Thanks!

Good afternoon. I have a k8 deployment that is not progressing though the preview, it seems to be hung on "create". Anyway I can see the details of this "create" to see why it is hanging?

Is it possible to provision an AWS Canary with Pulumi? https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-synthetics-canary.html