pulumi-community #general

chilly-hairdresser-56259

01/07/2021, 3:04 PM

Has anyone updated a resource name by exporting the state and reimporting with a new name? For instance say you created a ec2 and the resource name was "instanceA" however we wanted to change it, could I export change the ec2 resource name to say "instance-us-east-1a"

echoing-dawn-86996

01/07/2021, 7:17 PM

I have a resource that I wish to recreate on any change (delete and create a new resource). The resource does update on some of the changes (and therefore not recreating). Is there flag or anything I can set so it will always be recreated instead of simply updated?

sparse-gold-89283

01/07/2021, 9:16 PM

Looks like it is a new channel without a lot of members yet but I posted a devX/devOps role in #jobs where we are leveraging Pulumi on AWS / Kubernetes

dry-candle-10379

01/08/2021, 4:36 AM

How does Pulumi deploy to AWS? Cloudformation or does it call into APIs?

dry-candle-10379

01/08/2021, 4:43 AM

Basically, I'm using aws cdk right now, and it's killing me with: 1. Serial execution. We have lots of independent resources in nested stacks and cdk just deploys them one by one, which takes forever. 2. Being based on CF means that right now my stack is sitting there in an infinite "rollback" state, and I can't do a damn thing in that account. Pulumi looks really cool, if I can solve either of the above that'll probably make it worth a POC for me. We're mostly Fargate, EC2, and Lambda, with S3/SQS/SNS between services.

dry-candle-10379

01/08/2021, 5:50 AM

Looking at the SQS docs, with the redrive policy:

Copy code

"deadLetterTargetArn": aws_sqs_queue["queue_deadletter"]["arn"],

What is the

aws_sqs_queue

referring to, as well as the "queue_deadletter" queue?

dry-candle-10379

01/08/2021, 5:55 AM

Copy code

deadLetterQueue = aws.sqs.Queue(
            f"{service_name}-dead-letter-queue",
        )
        redriveQueue = aws.sqs.Queue(
            f"{service_name}-retry-queue",
            redrive_policy=json.dumps({
                "deadLetterTargetArn": deadLetterQueue.arn,
                "maxReceiveCount": 4,
            })
        )

Doesn't look like this is working - the arn isn't serializable. Are there any higher level methods for attaching redrives?

best-belgium-60726

01/08/2021, 5:57 AM

Just wanted to see if anyone else is experiencing this: When using pulumi config

aws:accessKey

aws:secretAccessKey

- these values work and are mostly respected when running

pulumi up

, but appear completely ignored when running

pulumi down

dry-candle-10379

01/08/2021, 6:17 AM

Seems that with Pulumi policies and such have to be declared explicitly? Are there any libraries that abstract that away?

tall-needle-56640

01/08/2021, 7:44 PM

C:\repos\azure-sql-aad-pulumi\pulumi [main +109 ~0 -0 !]> pulumi up --logtostderr -v=3 --skip-preview

I0108 133551.698514 33472 util.go:531] errors detecting git metadata: 2 errors occurred:

* detecting Git remote URL: could not read origin information: remote not found

* getting repository HEAD: reference not found

Updating (dev-asa):

Type Name Status Info

pulumipulumiStack AzureSqlAad-dev-asa 'dotnet build -nologo .' completed successfully

I0108 133605.862638 33472 eventsink.go:59] 2021/01/08 133605 Testing if Service Principal / Client Certificate is applicable for Authentication..

I0108 133605.864664 33472 eventsink.go:59] 2021/01/08 133605 Testing if Multi Tenant Service Principal / Client Secret is applicable for Authentication..

I0108 133605.866641 33472 eventsink.go:59] 2021/01/08 133605 Testing if Service Principal / Client Secret is applicable for Authentication..

I0108 133605.867638 33472 eventsink.go:59] 2021/01/08 133605 Testing if Managed Service Identity is applicable for Authentication..

I0108 133605.867638 33472 eventsink.go:59] 2021/01/08 133605 Testing if Obtaining a token from the Azure CLI is applicable for Authentication..

I0108 133605.868641 33472 eventsink.go:59] 2021/01/08 133605 Using Obtaining a token from the Azure CLI for Authentication

I0108 133605.877643 33472 eventsink.go:59] Resource "https://management.core.windows.net/" isn't for the correct Tenant

I0108 133605.879647 33472 eventsink.go:59] Resource "https://management.core.windows.net/" isn't for the correct Tenant

I0108 133605.881642 33472 eventsink.go:59] Resource "https://management.core.windows.net/" isn't for the correct Tenant

I0108 133605.884640 33472 eventsink.go:59] Resource "https://management.core.windows.net/" isn't for the correct Tenant

I0108 133605.885641 33472 eventsink.go:59] Resource "https://management.core.windows.net/" isn't for the correct Tenant

I0108 133605.886652 33472 eventsink.go:59] Resource "https://management.core.windows.net/" isn't for the correct Tenant

I0108 133605.887657 33472 eventsink.go:59] Resource "499b84ac-1321-427f-aa17-267ca6975798" isn't a management domain

I0108 133605.889653 33472 eventsink.go:59] Resource "https://management.core.windows.net/" isn't for the correct Tenant

I0108 133605.894647 33472 eventsink.go:59] Resource "https://graph.windows.net/" isn't a management domain

I0108 133605.911646 33472 eventsink.go:59] Resource "https://management.azure.com/" isn't for the correct Tenant

I0108 133605.921647 33472 eventsink.go:59] Resource "https://storage.azure.com/" isn't a management domain

I0108 133605.924649 33472 eventsink.go:59] Resource "https://vault.azure.net" isn't a management domain

Type Name Status Info

pulumipulumiStack AzureSqlAad-dev-asa running. 'dotnet build -nologo .' completed successfully

I0108 133613.274790 33472 eventsink.go:59] Fields to assign: ["urn"]

I0108 133613.277788 33472 eventsink.go:59] Registering resource start: t=pulumipulumiStack, name=AzureSqlAad-dev-asa, custom=False, remote=False

I0108 133613.279792 33472 eventsink.go:59] Preparing resource: t=pulumipulumiStack, name=AzureSqlAad-dev-asa, custom=False, remote=False

I0108 133613.283835 33472 eventsink.go:59] Prepared resource: t=pulumipulumiStack, name=AzureSqlAad-dev-asa, custom=False, remote=False

I0108 133613.284796 33472 eventsink.go:59] Registering resource monitor start: t=pulumipulumiStack, name=AzureSqlAad-dev-asa, custom=False, remote=False

I0108 133613.286792 33472 eventsink.go:59] Registering resource monitor end: t=pulumipulumiStack, name=AzureSqlAad-d pulumipulumiStack AzureSqlAad-dev-asa running.. 'dotnet build -nologo .' completed successfully

I0108 133618.644980 33472 eventsink.go:59] Fields to assign: ["id","urn","name","location","properties","type","tags","managedBy"]

I0108 133618.645981 33472 eventsink.go:59] Registering resource start: t=azure-nextgenresources/latestResourceGroup, name=resourceGroup, custom=True, remote=False

I0108 133618.649006 33472 eventsink.go:59] Preparing resource: t=azure-nextgenresources/latestResourceGroup, name=resourceGroup, custom=True, remote=False

Type Name Status Info

pulumipulumiStack AzureSqlAad-dev-asa running error: update failed

+ └─ azure-nextgensql/latestServer sqlServer creating failed error: json: cannot unmarshal a

I0108 133624.578437 33472 ignore.go:44] Explicitly ignoring and discarding error: rpc error: code = Canceled desc = grpc: the client connection is closing

I0108 133624.695790 33472 ignore.go:44] Explicitly ignoring and discarding error: 2 errors occurred:

* TerminateProcess: Access is denied.

pulumipulumiStack AzureSqlAad-dev-asa failed 1 error

+ └─ azure-nextgensql/latestServer sqlServer creating failed 1 error

Diagnostics:

azure-nextgensql/latestServer (sqlServer):

error: json: cannot unmarshal array into Go struct field serviceError2.details of type map[string]interface {}

pulumipulumiStack (AzureSqlAad-dev-asa):

error: update failed

Resources:

2 unchanged

Duration: 19s

tall-needle-56640

01/08/2021, 7:44 PM

Anyone know what this error means?

Diagnostics:

pulumipulumiStack (AzureSqlAad-dev-asa):

error: update failed

azure-nextgensql/latestServer (sqlServer):

error: json: cannot unmarshal array into Go struct field serviceError2.details of type map[string]interface {}

Here's my stack:

Copy code

public MyStack()
{
    string resourceGroupName = "my-rg";
    string location = "WestUS";
    string sqlServerName = "someServer20210108";
    string sqlAdministratorLogin = "admin";
    string sqlAdministratorPassword = "Password1!";

    var resourceGroup = new ResourceGroup("resourceGroup", new ResourceGroupArgs
    {
        ResourceGroupName = resourceGroupName,
        Location = location,
    });

    new Server("sqlServer", new ServerArgs
    {
        ServerName = sqlServerName,
        ResourceGroupName = resourceGroup.Name,
        Location = location,
        AdministratorLogin = sqlAdministratorLogin,
        AdministratorLoginPassword = sqlAdministratorPassword,
    });
}

Here's the full log for `pulumi up --logtostderr -v=3 --skip-preview`:

thousands-london-78260

01/08/2021, 8:49 PM

How do I set the VPC for a GCP Cloud Run service? Do the types need to be updated?

full-dress-10026

01/08/2021, 9:28 PM

Why does Pulumi require the

parameters

for a cloudformation Stack to be a map of string to string (see docs)? Some cloudformation templates use other value types causing them to fail (e.g., "creating CloudFormation stack failed: ValidationError: Parameter 'MinInstancesInService' must be a number."

worried-wall-60272

01/08/2021, 9:43 PM

anyone know how to raise an error condition here?

orange-holiday-79016

01/09/2021, 2:16 PM

Hi all, quite new to Pulumi, does anyone know how to provide k8s cluster credentials to Pulumi from a GCP serviceaccount in a

pulumi/pulumi-python

docker container? We are trying to make the following work using Pulumi (highly simplified): 1. Create a k8s cluster on GKE 2. Create a databaseInstance 3. Deploy the database credentials as a secret in the k8s cluster created in step 1 The pulumi/pulumi-python container doesn’t have gcloud-sdk installed (then we could run

gcloud container clusters get-credentials

), this would be an option, but we’d prefer there to be a more ‘native’ way of doing.

quaint-electrician-41503

01/09/2021, 8:00 PM

I’m trying to use the Pulumi Postgres provider to create databases and roles for an RDS instance provisioned. However I’m getting

Error initializing PostgreSQL client: error detecting capabilities: error PostgreSQL version: dial tcp :5432: connect: connection refused

. But I’m able to connect to the instance using psql. I found some issues via terraform provider, but making similar changes and not having any luck.

kind-mechanic-53546

01/10/2021, 5:26 AM

I have a list in config that I use to create permissions resources for an azure keyvault I need the permissions to be added before I add keyvault secrets I cannot add the permissions resources to the depends block as they're dynamic Is there a clean way to do this? I could theoretically create a custom resource which creates all the permissions resources and then add that resource to the dependson block but it seems like a lot of work

narrow-jackal-57645

01/11/2021, 7:27 AM

Q: What is the solution to set a config with a value that starts with

? For example:

pulumi config set myValue '---hello'

I would expect the command pass however it yields:

Copy code

Error: bad flag syntax: ---helo
Usage:
  pulumi config set <key> [value] [flags]

And if I escape the value with

, that is `pulumi config set myValue

\-\-\-hello

the set value is not correct Any help is appreciated

ancient-actor-17231

01/11/2021, 11:42 AM

Hi, I'm struggling with how to convert an IntOutput to a String for use as an input. Using the Go sdk. Can't seem to find any examples, not sure where to look. In the GCP, I'm capturing the Redis Port from Memorystore which is an IntOutput and want to pass it in a CloudRun template env var, which happens to need to be a String.

millions-market-17062

01/11/2021, 1:34 PM

Hey, Trying to spin up EKS Getting this error

Copy code

error: aws:ec2/launchConfiguration:LaunchConfiguration resource 'eks-matan-ng1-nodeLaunchConfiguration' has a problem: Attribute must be a single value, not a list

sparse-spring-91820

01/11/2021, 2:08 PM

Hello all, I have pulumi config

Copy code

config:
  aws:region: us-east-1
  othernamespace:foo bar
  pulumi-config-test:foo: bar

inside my

pulumi-config-test

project. Inside my code:

Copy code

const pulumi = require('@pulumi/pulumi');

const config = new pulumi.Config();

const foo1 = config.get('foo'); // Outputs bar
const foo2 = config.get('othernamespace:foo'); // undefined
const region = config.get('aws:region'); // undefined

I can't get config variables that are in a different namespace than my project name. So for example, if I want to use

region

variable inside my code I have to set a new config variable:

pulumi-config-test:region

with the same value as

aws:region

variable. Is there any way I can access config variables with a different namespace than the project name inside my code? Thanks for any help!

brash-wall-70218

01/11/2021, 6:35 PM

Hi, all. Looking for some help / insights on

pulumi import

with

SpotFleetRequest

for AWS. I get an error like so:

ec2/spotFleetRequest:SpotFleetRequest resource 'github-runner-spot-fleet-request' has a problem: ExactlyOne: "launch_template_config": one of launch_specification,launch_template_config must be specified

. when importing a spot fleet request definition from AWS. I am importing the launch template as part of the same bulk import.

quaint-electrician-41503

01/11/2021, 10:25 PM

As part of a stack I deployed an RDSInstance to the wrong account. I’ve since recreated the instance in the proper account. Another stack (via StackReference) now created tables, etc in the proper account. But it’s trying to remove the old tables. Can I export the stack and remove the non-existant tables from the stack? Usually there’s a message suggesting to do so

dazzling-fish-70036

01/11/2021, 11:20 PM

Help novice looking for some pointers. I am new to Pulumi it is being used to deploy to Azure. We are creating a Windows Appservice and a Linux Appservice, The Linux Appservice has azure functions to ftp to the Windows Appservice, Problem is we would like to store the Credentials for the Windows Appservice in a keyvault that the azure functions can use. Two options appear to be is to somehow access App Credentials that are system generated for the FTPS Endpoint this I believe will not be possible as the AppService might not exist at the time of creating the linux Appservice. Another option would be to create User Credentials when we create the Windows Appservice. Are either options possible in Pulumi and if so where do I need to start looking at. We are utilizing typescript. Thansk

quaint-electrician-41503

01/12/2021, 12:31 AM

I’m starting to use StackReferences, but unfortunately we followed a pattern where a path element was added to our S3 pulumi state bucket. I’m now going to try to use aws cli tools or similar to remove the path element and merge the state storage together. Not sure if it will work. I’m wondering if anyone has experience with a situation like this. Is there another workaround?

full-dress-10026

01/12/2021, 12:43 AM

Does

ignoreChanges

support nested properties?

red-nest-35390

01/12/2021, 10:27 AM

Hi all First of all hello to everyone and thanks for Pulumi which appears to be really great product. I've got question: how to "unimport/detach" resource accidentaly imported to stack? I was looking for it in doc and in this channel but maybe i'm just looking for wrong keyword.

magnificent-restaurant-51456

01/12/2021, 11:22 AM

are there any examples for kubernetes on how to create a service, take backup?

shy-engine-52236

01/12/2021, 12:15 PM

Hi all, quick question: I'm trying to use Pulumi to provision a multicloud setup. The AWS and Azure legs are up and working great, but I'm a bit confused by the Pulumi docs for GCP. It might just be that what I want to do isn't available through Pulumi, and I was hoping someone better informed could tell me a quick yes/no whether I can. If so I'll keep trying, and if not I'll need to revisit my setup. I'm trying to provision a GCP Firestore database with Pulumi, but the docs seem to only reference provisioning an index for a db, not the db itself. Am I missing something? I know I can use Google's own SDK for it, but I'd prefer a unified IAC solution

gorgeous-match-99659

01/12/2021, 2:16 PM

Hi, been using Pulumi on windows, getting this error quite alot could not read plugin "pulumiprovidersazure::default_3_41_1': could not read plugin [C:\Users\ChrisThorp\.pulumi\plugins\resource-azure-v3.41.1\pulumi-resource-azure.exe] stdout: EOF" Try uninstalling pulumi and installing via chocolatey but no luck. Anyone got a pointers to fix the issue