stack delete <urn>

says it doesn’t exist

Is any Template file solution in Pulumi instead of TF template file?

Anyone had to deal with trying to destroy an AWS stack that has an ACM certificate attached to an ALB via an https listener? I think AWS wants you to delete the https listener first but since the dependency path is ALB -> Listener -> Certificate pulumi will try to delete the certificate first and fail with “the certificate is in use.”

Just fyi, a new organization on app.pulumi.com shows this when you hover over ‘trial’

hello! I'm currently trying to use Mozilla SOPS with Pulumi. The only way I've found now was to use environment variables generated by SOPS, but I would like to be able to use the "file version" of it. There problem is that he file generated by Mozilla SOPS has no extension, therefore Pulumi can't read it 'cause it doesn't know whether it is a

json

or a

yaml

file I suppose. Is there a workaround for it? Another option would be to implement another secrets/config provider altogether, but I also didn't find any information on how to do it.

hey. what's the best way to install istio operator? I'd usually do

istioctl operator install

and then install istio itself via manifest. here, I'm not sure where to start

can we specify different secret outputs to be encrypted using multiple keys ? output A -> key A , output B -> key B , I'm trying to achieve child stacks to have access to only certain output.

Hello everyone, fairly new to Pulumi here… Is there a way to execute shell script(s) with pulumi (or exec cli tools like gcloud) or you should build you own custom Dynamic Provisioner? I’m trying to figure out how to run MySQL DB preparation (create DB and import templated dump from GCS Bucket) in CloudSQL before the main App deployment to GKE k8s. For some reason

@pulumi/gcp

and the underlying

terraform-provider

don’t support yet the SQL import from GCP bucket. Currently i’ve created my own shell scripts utilising gcloud sql import cli but i want to make the whole deployment flow with Pulumi as well as put it in GitLab CI/CD. Any suggestion is welcomed! Thanks

I keep getting

completing deletion from previous update

on an ACM Certificate that can't be deleted due to "certificate is in use" error whenever I try to

pulumi destroy

. Any idea how to clear or reset this pending deletion?

Can state resource dependencies be URNs from another stack? i'm splitting a stack and need to know how to deal with leftover dependencies. If not, are there any other consequences of removing them manually?

I'm attempting to use

StackReference

to the

test

stack with everything using the same S3 backend but I run into this error

pulumi:pulumi:StackReference (test):
    error: Preview failed: decrypting secret value: failed to decrypt: incorrect passphrase, please set PULUMI_CONFIG_PASSPHRASE to the correct passphrase

I can't find documentation on how to resolve this. I've tried exporting

PULUMI_CONFIG_PASSPHRASE

as the one for

test

instead of my current stack, but then i get another error since the secrets password for the current stack is mismatching

👋 I have somehow completely hosed my local Pulumi CLI (Mac OS 10.15.7 | Pulumi CLI v2.20.0). Whenever I run any command like

pulumi stack select

or

pulumi refresh

I get the following:

error: invalid character '"' after top-level value

Some commands work though - like

pulumi stack ls

(but I can't then switch to any of the stacks). I have tried uninstall and re-installing the cli (

brew remove pulumi

|

brew install pulumi

), but between installations it remembers who I am. I'm assuming there's some cached configuration that is corrupted - any idea where that file may be (I checked Homebrew cache)?

I'm having trouble with my Pulumi runs taking a long time to complete. I have roughly 1200 resources on my stack and running

pulumi pre

is over in a minute, but the smallest change with

pulumi up

, like updating just one resource, doesn't matter which, takes more than 30 minutes to run. This happens even if I use

-t

. My backend is AWS. I've enabled some verbose logging and there is a lot of

incoming output value translated

and

incoming output property translated

, it seems to be covering the whole of the stack, once again even with

-t

. It ends with a

waiting for quiescence

with a counter on the upper hundreds going to zero, which I can't seem to be able to even find on Google. It almost feels like the whole of the stack is being processed even though there is a single change to be made. I'm not sure how to progress from here, having to wait between 30 minutes to an 1+ hour just to add an environment variable to a service is killing us. Any ideas? Thank you.

are there any examples of pulumi ts projects that are not contained in a single

index.ts

? super excited to be moving my infra to code. for now I'm just procedurally dumping my resources in a single file, but want to eventually structure and modularize it properly. what I'm most interested in is passing dependencies and context around. (e.g k8s provider)

I am thinking of laying out the directory as follows: infra/ dev/ stg/ prod/ In this sense, naming the stack as dev is meaningless as it contains both the stg and prod setup. So I wonder what’s the desired workflow for pulumi?

Hi guys, did some one tried using crd2pulumi with tekton crds? The generated code seems to be lacking spec property for all resources I am generating it from there https://storage.googleapis.com/tekton-releases/pipeline/latest/release.notags.yaml

spec:
  group: tekton.dev
  preserveUnknownFields: false
  versions:
    - &version
      name: v1alpha1
      served: true
      storage: false
      # Opt into the status subresource so metadata.generation
      # starts to increment
      subresources:
        status: {}
      schema:
        openAPIV3Schema:
          type: object
          # One can use x-kubernetes-preserve-unknown-fields: true
          # at the root of the schema (and inside any properties, additionalProperties)
          # to get the traditional CRD behaviour that nothing is pruned, despite
          # setting spec.preserveUnknownProperties: false.
          #
          # See <https://kubernetes.io/blog/2019/06/20/crd-structural-schema/>
          # See issue: <https://github.com/knative/serving/issues/912>
          x-kubernetes-preserve-unknown-fields: true
    - !!merge <<: *version
      name: v1beta1
      storage: true
  names:
    kind: Pipeline
    plural: pipelines
    categories:
      - tekton
      - tekton-pipelines
  scope: Namespaced
  conversion:
    strategy: Webhook
    webhook:
      conversionReviewVersions: ["v1beta1"]
      clientConfig:
        service:
          name: tekton-pipelines-webhook
          namespace: tekton-pipelines

I presume problem is with !!merge and &version thing but I am not sure

it is not the problem I tried equivalent without these tags

Does somone have an idea?

can’t find this in the docs, would be great if someone can point me into it, how I can understand if

pulumi

is currently running in

preview

mode ?

👋 I’m here! What’d I miss?

Is Pulumi only for infra provisioning or can it be used as a configuration management tool as well? For example it is recommended terraform be used as a provisioning tool along with ansible as the config managment tool. Is it the same for Pulumi?

after i import an existing resource into a project, why do i have to keep the resource name hard-coded? if i remove it, Pulumi wants to do delete-replace just to give it a new name.

Hi @broad-dog-22463 I think provider then language would read well.

Hi @red-football-97286 if you can, can you make a wee comment on the GH issue? We want to try and collate the responses

Sure 🙂

Indeed in favor of @red-football-97286s alternative. Did a thumbs up for that on the GH issue 🙂

thanks @quiet-lock-69596!

Heya guys, Having some issues with pulumi which I hope one of you will be able to assist with. I am trying to use an application called "prisma.io" to generate database and graphQL scheme's automatically and handle how the application makes the calls to the database. However I encounter an error whenever I try to upload the code due to

@prisma/client

not initialising. A simular issue is found within

serverless

, where the main issue was webpack running another yarn install prior to packaging, which was not running my prisma generate properly. This caused my @prisma/client to be either empty, or at least not include the required binaries. The solution when using

serverless

would be to create an custom webpack. How would I solve the same issue in pulumi?

hey guys. how can I use

default

namespace from k8s? I did an import, but if I delete the k8s cluster it will try to remove the default namespace first, which is not possible.