trying to run some old code. i get this:

error: Error: Command failed: helm template /tmp/tmp-31838777XOYQC967QQm/deprecation --name-template nginxingresscontroller --values /tmp/tmp-31838777XOYQC967QQm/deprecation/values.yaml --values /tmp/tmp-31838771tvGEyQxKeRB.yaml --namespace default
    Error: open /tmp/tmp-31838777XOYQC967QQm/deprecation/values.yaml: no such file or directory

anyone have any ideas?

Anyone around these parts tried to figure out how to get a Terraform providing working with Pulumi using the “bridge”?

With the AWS CDK I can set the kubectl memory like "kubectlMemory: cdk.Size.mebibytes(512)" how can I do this with Pulumi?

I need to dig into this level: https://docs.aws.amazon.com/cdk/api/latest/python/aws_cdk.aws_eks/Cluster.html

Is there a limit on how big a pulumi stack can become before it becomes an issue? 10 clusters with 30 namespaces with each 10-15 helm charts? How much will that impact speed?

I am having strange issues with stack conflicts that have been able to replicate with pulumi and GCS backend. I'm new to pulumi, so I am probably just doing something wrong. After creating a new go stack, this is what happens: 1. I import a resource (status shows imported) 2. Run

pulumi up

- it works fine and there are no changes 3. I import a second resource (status shows imported) 4. When running

pulumi up

, I get a duplicate URN error for the stack:

error: Duplicate resource URN 'urn:pulumi:org::some-project::pulumi:pulumi:Stack::some-project-org'; try giving it a unique name

Does anyone have an idea what I may be doing wrong? I've been fiddling with this for a while.

Is there a way to get

refresh

to show me the differences?

details

doesn't show anything. If I run

pulumi up

then all is well but then an immediate

pulumi refresh

shows changes.

Did the auto naming strategy change? For instance, I have a resource called

app-something

, which gets created with the name

app-something{suffix}

, instead of

app-something-{suffix}

(notice the missing

-

). Dotnet API, on Azure. Thank you.

Can someone give an example to know about creating modules with golang

This randomly came up in a GitLab CI. Anyone know where I go to resolve this? "error: problem logging in: PULUMI_ACCESS_TOKEN must be set for login during non-interactive CLI sessions"

Hello! I am pretty new to Pulumi, but encountering trouble creating an EKS cluster in AWS using the Pulumi Python library. When creating the cluster, I invariably run into some variant of the error:

error: aws:eks/cluster:Cluster resource 'training-eks-cluster' has a problem: Computed attribute cannot be set

Adding debug / verbose logs has not provided anything that seemed useful, and none of the many variants to parameters (providing, omitting, computed, hardcoded, etc.) have provided any progress, either. Any ideas on next steps for digging in and figuring out if this is user-error or a bug?

hello, how can i upload/rsync some project dir after droplet creation? is it possible with pulumi?

I have somehow managed to get two stacks to think that they have the same name. When I try and run

pulumi up

in one of them it says the name from Pulumi.yaml doesn't match the stack's project name. If I rename it to match then the other one has the problem. Where is this information stored? Something must be referring back to this directory which seems strange.

Hi, I have just started looking at Pulumi and using it with S3 as a state store. We use separate accounts for each env (dev etc) and use a central S3 store that can be used across each account, coming from Terragrunt we can set the account ID and profile to use for the store. From what I can tell from issues such as https://github.com/pulumi/pulumi/issues/4665 this is not possible?

Is there a way to express that I depend on resource a and all its children? Is it just by saying I depend on resource a? My use case is I'm creating IAM roles in AWS and I want to say eks -> iam role -> policy attachment but the policy attachments are generated in a callback so I dont think I can do eks -> (all created policy attachments). Am I able to do this by creating a ComponentResource and not registering outputs until the callback is completed?

I'll try here instead of #typescript, Is there a way, using awsx.apigateway.API, to add a default static route that serves the contents of /index.html?  So that an SPA will be loaded when the route isn't an API call, and the response from the s3 bucket is 404?  I cannot find the configuration, I think it needs to be added to the route config I have to the s3 static bucket:

routes.push({
  method: 'ANY',
  path: '/',
  localPath: path.join(__dirname, '../', 'frontend', 'build'),
})

but I don't see any options for it. I could set the content of /index.html to the 404 error page from s3, but I also don't obviously see how to do this.

hello everyone - has anyone successfully used the secretsmanager.getSecretValue? I’m doing something like the following:

const tokenSecret = pulumi.output(args.tokenSecretArn).apply(secretArn =>
            aws.secretsmanager.getSecretVersion({
                secretId: secretArn,
            })
        )

So

Output.all()

(in Python) creates a list. Is it possible to have some variant of

Output.all()

that creates a dict so keys / objects are easier to reference by name? If not, is this something it would be worth writing up as a feature request? I.e.

# instead of
Output.all(output1, output2).apply(lambda x: x[0])

# something like
Output.all(name=output1, name2=output2).apply(lambda x: x['name'])

Another question 🙂 I have seen musings in a few issues about how to do control flow with

Output

objects, but most of that seemed to be within JavaScript. (i.e. if Output object attribute defined, then proceed, otherwise do not). Is this something do-able within python today? My invocations of

Output.apply()

have thus far not been successful. I.e. something like:

if (myoutput.apply(lambda x: x['arn']) !== ''):
  # do something

https://github.com/pulumi/pulumi/issues/3942#issuecomment-588693999 Alternatively, I would like to schedule a "callback" to run within the Pulumi workflow between resources where I can call the Kubernetes API, etc. Context - I need to deploy a configmap (for node registration) to an EKS cluster before I define the node group. I have been poking around

pulumi_kubernetes

, but the auth to a newly created cluster seems that it will be a hangup (esp. with AWS and their

iam-authenticator

business), and I already have a solution for this in native python. I just need to figure out how to get it into the Pulumi execution model. Should I do something like this inside of a big

myoutput.apply()

(that feels wrong)?

I have started getting preview failures that output this message.

kubernetes:apps/v1:Deployment (my-deployment):
    error: Preview failed: unexpected unknown property value

That's it. That's the extent of the message 🙂 I took the tried and true "comment things out until it works" approach, working it all the way back to a DeploymentArgs.spec.template.spec.containers[0].env[0].value (pod env value) being a pulumi.Input. This error was provoked by upgrading to pulumi 2.16.1 from 2.15.4. Not really sure what the fix is for this one.

Is there a way to view the raw requests that pulumi is sending? I've tried using

TF_LOG=TRACE pulumi up -v9 --logtostderr

but there is not enough detail for me to debug what's going on under the hood.

Curious what folks are doing here for the same situation in Pulumi -- https://stackoverflow.com/questions/62403030/terraform-wait-till-the-instance-is-reachable

When creating an EKS cluster on AWS (using python library), it creates a tag on every subnet provided that looks like

key:value

of

<http://kubernetes.io/cluster/cluster-name:shared|kubernetes.io/cluster/cluster-name:shared>

. However, this creates a chicken/egg problem, because the subnets must exist before the EKS cluster, but any subsequent runs will remove this tag and break the cluster. Is there a way to apply tags "after the fact" to subnets? My workaround at present is to try to name the EKS cluster in a deterministic way so that I can set the tags on the subnet at create time. What I imagine is a

aws.ec2.subnettag

provider or something of that sort... or if the

aws.eks.cluster

provider somehow notified the

subnet

provider that these tags should stay

Hi all 👋 . I've been trying out Pulumi and I really like it. I've got a question on how might I achieve the following: (using Azure) I have a secret from an external application (say, a Slack bot token) I want to store that secret in the KeyVault I am exposing the secret as an env var to an App Service via the

@Microsoft.KeyVault(SecretUri={slackBotTokenSecretUri})

format My question is: I could obviously pass in that slack token via a parameter to the pulumi client, but where is it safely stored beforehand? I'm in a bit of a chicken/egg problem that I'm not quite sure how to solve. Any help is appreciated, thank you!

and one more, I all of a sudden am getting

azure:appservice:AppService (WisrBotAppService):
    error: transport is closing

  pulumi:pulumi:Stack (WisrBot-dev):
    panic: interface conversion: interface {} is nil, not map[string]interface {}

I have rolled back all my changes to a known state but I still get it

After learning Pulumi (And Python) through this year and being able to migrate my Terraform modules to Pulumi components, Pulumi has become one of my favorite tools 🙂 I'd like to decorate my Laptop with a new Pulumi sticker ❤️ any ideas where I can find some? I didn't find them at redbubble Link

Hi All, Just quick question, How could we import the existing configmap from Kubernetes to pulumi so that we can update it later? Thanks

Hi guys, How do I append a div to it's parent without replacing the previous content of it's parent. like section.appendChild += (randomBtn) ?

can someone help me understand better what the docs about inner stack dependencies mean by:

From that point onwards, Pulumi understands the inter-stack dependency for scenarios like cascading updates.

So in in project1 I export some resourceA-id. then I import it in project2. and use it to deploy resourceB. If i make changes on project1-resourceA, it may end-up changing its id. So does pulumi automatically picks that for project B? or puts some output to warn about it? do i manually have to run an pulumi up on project B for it to not break? will i need to keep this changes in mind to avoid possible errors?? or is there a way to be more aware of this?

Hi all, when using S3 as the self-managed backend, how would you provide options around

kms_key_id

etc. when logging in, as you would in the equivalent Terraform S3 backend below?

terraform {
  backend "s3" {
    bucket     = "pulumi-state"
    key        = "test-state"
    region     = "eu-west-1"
    encrypt    = "true"
    kms_key_id = "arn:aws:kms:eu-west-1:325425235:key/2345645645-210a-4ab6-a9ad-534536456"
    acl        = "private"
  }
}