pulumi-community #general

shy-microphone-28807

03/02/2021, 6:19 PM

Hi, I am trying to import existing AWS resources within my stack. According to the demo, when there is a mismatch between the imported resource and the definition, a meaningful error message should tell you what doesn’t match, however I only see

inputs to import do not match the existing resource; importing this resource will fail

. Is there some way to get a diff so I can adjust the parameters to match the existing resource?

square-dress-80180

03/02/2021, 8:34 PM

Hi, I am just getting started with Pulumi and can’t seem to find an answer to what I think is a simple issue. Let’s say I create stack, do

pulumi up

and it’s off and running. I can see it in my pulumi console. Now, what if I am out of town and another developer wants to work on that stack from their machine. How do they effectively

clone

and

pull

the latest info from the pulumi console to work on it? Or am I missing a basic principle of how teams should be working on the infrastructure together?

wet-noon-14291

03/02/2021, 10:57 PM

I guess this is maybe a question that isn’t specific to dotnet. https://pulumi-community.slack.com/archives/CQ2QFLNFL/p1614636397010100

clever-cartoon-41433

03/03/2021, 12:45 AM

Every single time I update, pulumi will change the shared secrets in the gitlab helm chart for some reason. Is this something to be concerned about? Doesn't seem to be causing issues atm

clever-cartoon-41433

03/03/2021, 1:27 AM

Do you guys use the gitlab provider or just configure it yourselves? Also; is it bad practice to host the pulumi CI/CD inside the cluster that it manages?

rich-easter-89163

03/03/2021, 3:28 AM

Hi guys! I have an specific stack that takes to much to show the preview (5-6 minutes), the apply is super fast like less than a minute, and comparing it to other stacks that are more complex (more resources, more stack references) this one is still super slow to do the preview. There is any way to debug this?

limited-caravan-48625

03/03/2021, 5:59 AM

Hey I'm starting to learn pulumi and i had a question about project setup. Is is recommended to have the pulumi code in the same repo as application code? I've got multiple apps in a monorepo and I'd like to deploy each only when they change, but im not sure if that is possible with pulumi

acceptable-stone-35112

03/03/2021, 8:39 AM

is it possible to split config.yaml into separate files? e.g. instead of Pulumi.dev.yaml I want to have Pulumi.frontend.yaml, Pulumi.backend.yaml, Pulumi.kms.yaml, etc.

👀 1

alert-pillow-96521

03/03/2021, 10:59 AM

Hi, anybody has experience with deploying CosmosDB through Azure devops? I am trying to deploy CosmosDB Account with EnableServerless option, as Pipeline task Pulumi@1 version 1.0.8, downloads latest PulumiSDK 2.21.2 I have added to the project

Capabilities = { new AccountCapabilityArgs { Name = "EnableServerless" } }

, however the deployment fails on

expected capabilities.0.name to be one of [EnableAggregationPipeline EnableCassandra EnableGremlin EnableTable EnableMongo MongoDBv3.4 mongoEnableDocLevelTTL], got EnableServerless

I have found it could be related to old Terraform version. Is possible to upgrade Pulumi task somehow? or I need to wait for new version? in the Devops pipeline it is enabled via "Pulumi Azure Pipelines Task" I have seen this preview already cosmos serverless , but that was using Pulumi with TypeScript.

breezy-apartment-46543

03/03/2021, 2:55 PM

Can I set an input to pulumi up from the CLI? Or how do I assign an input to pulumi?

agreeable-ram-97887

03/03/2021, 3:01 PM

Is the only way to access resource properties via the CLI by adding them to the pulumi exports? Or (hopefully) is there a way to extract any arbitrary property when you know the resource's URN? I ask because I am considering using Pulumi to create many user accounts and to keep track of their metadata, but it would be unwieldy to simply dump all of this information in the exports.

tall-shoe-66375

03/03/2021, 4:09 PM

Istio: Hello, I’m working with DigitalOcean and K8s, do you have a tutorial for implement the istio ingress from scratch?

modern-dress-7144

03/03/2021, 7:38 PM

👋 I'm using Pulumi to manage ~100 Datadog monitors and it's awesome. But for some reason today, previews & updates started taking 5+ minutes instead of seconds. Are there any Pulumi system issues that would cause this? I don't even know who to ask about it - Datadog? I don't really know where to find any debugging information to give them

stocky-student-96739

03/03/2021, 10:53 PM

This is happening again right now: https://pulumi-community.slack.com/archives/C84L4E3N1/p1613513722156300

stocky-student-96739

03/03/2021, 10:53 PM

@gentle-diamond-70147 ^^

breezy-apartment-46543

03/04/2021, 12:07 AM

I have the following lambda function defined in index.js:

Copy code

const fn = new aws.lambda.Function('InfraLambda', {
  code: new pulumi.asset.AssetArchive({
    '__index.js': new pulumi.asset.FileAsset('./handler.js'),
  }),
  handler: '__index.fnInfra',
  runtime: aws.lambda.NodeJS12dXRuntime,
  role: role.arn,
  tracingConfig: {
    mode: 'Active', // Enable X-ray
  },
});

The handler.js file have require(‘@pulumi/pulumi’) and require(‘@pulumi/aws’) at the top and is using some classes from those packages. When deploying the app and then calling the apigateway for the lambda, ‘internal server error’ occurs and cloudwatch logs ’Error: Cannot find module ‘@pulumi/pulumi’' etc. How can I solve this problem, it looks like pulumi only respects dependencies declared in index.js and not the ones in handler.js

brash-airline-37413

03/04/2021, 2:02 AM

I’ve built an arm64 binary of pulumi-aws and moved it onto my gopath with it’s default name pulumi-resource-aws but when I run pulumi up I’m getting:

Copy code

pulumi:providers:aws (default_3_31_0):
    error: no resource plugin 'aws-v3.31.0' found in the workspace or on your $PATH, install the plugin using `pulumi plugin install resource aws v3.31.0`

I’ve confirmed my gopath with

go env

and I get the same thing when renaming the artifact to aws-v3.31.0 and verbose logs say nothing additional. Is there something special I need to do in order for pulumi to pick up a locally compiled version of pulumi-aws?

clever-cartoon-41433

03/04/2021, 5:10 AM

be me

install loft helm chart

after installation, every update brings errors where pulumi tries to create CRD resources that already exist

try removing loft from index.ts so that I can just manually install it via helm myself

the removal of the chart also breaks my stack, as now the namespace is stuck in a perpetually terminating state

clever-lawyer-94920

03/04/2021, 5:46 AM

Can I rename a pulumi stack?

elegant-island-39916

03/04/2021, 10:08 AM

Hi, how would I go about ignoring the changes to my provider? This does not seem to work

Copy code

ResourceOptions(provider=eks_provider, ignore_changes=["provider"])

👀 1

miniature-leather-70472

03/04/2021, 11:15 AM

Is there anyway to run some code on a destroy action? I've got some code I run to create a resource through a REST API on up, and I want to delete it on destroy. I can't find something like isDryRun() for destroy. This is C# so no custom providers

brash-kite-78002

03/04/2021, 12:18 PM

Hello Everyone! As far as I can see, there are plugins for the CLI and modules for the code itself in the Pulumi. In a normal case scenario, I would want to lock modules to the specific version, but it turns out, that I need to lock plugins also. Can I avoid it?

tall-shoe-66375

03/04/2021, 5:52 PM

Attach a Firewall to my droplets on Digital Ocean On the link below mention how to link a FW to each Droplet created https://www.digitalocean.com/community/questions/can-i-assign-a-firewall-while-creating-a-droplet-via-api However the Pulumi Docs mention to attach one FW to One Droplet https://www.pulumi.com/docs/reference/pkg/digitalocean/firewall/ I’ve tried on a for-each loop with TS attaching the droplet.id but this trigger an error. Exists an example to solve this?

colossal-australia-65039

03/04/2021, 7:54 PM

I'm trying to remove

aws:region

from my Pulumi config file and instead have it as a provider in code so I have fewer dependencies on the config file. But this is causing every resource to be recreated even though it's ultimately being applied to the same cloud environment. Is there no way around this?

clever-cartoon-41433

03/05/2021, 6:15 AM

Hi; I need to .get() a specific secret created by another pulumi resource, and pulumi is erroring because that resource doesnt exist, even though I put a dependsOn in the secrets' config. Is there any way around this?

chilly-analyst-14900

03/05/2021, 8:02 AM

With the new azure-native provider, how do I get the PrimaryAccessKey from a storageaccount?

damp-school-17708

03/05/2021, 10:12 AM

Hello what do you use for local testing? Starting lambdas locally, etc. Sam Cli?

tall-shoe-66375

03/05/2021, 1:50 PM

Userdata update on Droplets trigger an Error on Firewall previously created

Copy code

Diagnostics:
  digitalocean:index:Firewall (doroplets-webmago-firewall):
    error: transport is closing
 
  pulumi:pulumi:Stack (digitalocean-ts-droplets-dev):
    panic: interface conversion: interface {} is string, not int
    goroutine 13 [running]:
    <http://github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema.SerializeValueForHash(0xc000561100|github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema.SerializeValueForHash(0xc000561100>, 0x148c740, 0x1927410, 0xc0006cb900)
    	/home/runner/go/pkg/mod/github.com/pulumi/terraform-plugin-sdk/v2@v2.0.0-20201218231525-9cca98608a5e/helper/schema/serialize.go:24 +0x959
    <http://github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema.HashSchema.func1(0x148c740|github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema.HashSchema.func1(0x148c740>, 0x1927410, 0xc0008feec0)
    	/home/runner/go/pkg/mod/github.com/pulumi/terraform-plugin-sdk/v2@v2.0.0-20201218231525-9cca98608a5e/helper/schema/set.go:43 +0x68
    <http://github.com/pulumi/pulumi-terraform-bridge/v2/pkg/tfshim/sdk-v2.v2Schema.SetHash(0xc0006cba40|github.com/pulumi/pulumi-terraform-bridge/v2/pkg/tfshim/sdk-v2.v2Schema.SetHash(0xc0006cba40>, 0x148c740, 0x1927410, 0x0)
    	/home/runner/go/pkg/mod/github.com/pulumi/pulumi-terraform-bridge/v2@v2.19.0/pkg/tfshim/sdk-v2/schema.go:176 +0x62
    <http://github.com/pulumi/pulumi-terraform-bridge/v2/pkg/tfbridge.visitPropertyValue(0xc000a729a4|github.com/pulumi/pulumi-terraform-bridge/v2/pkg/tfbridge.visitPropertyValue(0xc000a729a4>, 0xb, 0xc000b693e0, 0xa, 0x146d820, 0xc00069e040, 0x198e3a0, 0xc0006cba40, 0x0, 0xc0006cba00, ...)
    	/home/runner/go/pkg/mod/github.com/pulumi/pulumi-terraform-bridge/v2@v2.19.0/pkg/tfbridge/diff.go:114 +0x486
    <http://github.com/pulumi/pulumi-terraform-bridge/v2/pkg/tfbridge.doIgnoreChanges(0x19800a0|github.com/pulumi/pulumi-terraform-bridge/v2/pkg/tfbridge.doIgnoreChanges(0x19800a0>, 0xc0004e9650, 0xc00057bec0, 0xc000397e90, 0xc0006f8cf0, 0x0, 0x0, 0x0, 0x19845a0, 0xc000792220)
    	/home/runner/go/pkg/mod/github.com/pulumi/pulumi-terraform-bridge/v2@v2.19.0/pkg/tfbridge/diff.go:259 +0x4e5
    <http://github.com/pulumi/pulumi-terraform-bridge/v2/pkg/tfbridge.(*Provider).Diff(0xc00000a1e0|github.com/pulumi/pulumi-terraform-bridge/v2/pkg/tfbridge.(*Provider).Diff(0xc00000a1e0>, 0x19765c0, 0xc000397d70, 0xc0002da000, 0xc00000a1e0, 0x1520001, 0xc000953e40)
    	/home/runner/go/pkg/mod/github.com/pulumi/pulumi-terraform-bridge/v2@v2.19.0/pkg/tfbridge/provider.go:689 +0x785
    <http://github.com/pulumi/pulumi/sdk/v2/proto/go._ResourceProvider_Diff_Handler.func1(0x19765c0|github.com/pulumi/pulumi/sdk/v2/proto/go._ResourceProvider_Diff_Handler.func1(0x19765c0>, 0xc000397d70, 0x1678e80, 0xc0002da000, 0x1687960, 0x22d3870, 0x19765c0, 0xc000397d70)
    	/home/runner/go/pkg/mod/github.com/pulumi/pulumi/sdk/v2@v2.20.1-0.20210212181059-f4b0fa86fedc/proto/go/provider.pb.go:2251 +0x89
    <http://github.com/grpc-ecosystem/grpc-opentracing/go/otgrpc.OpenTracingServerInterceptor.func1(0x19765c0|github.com/grpc-ecosystem/grpc-opentracing/go/otgrpc.OpenTracingServerInterceptor.func1(0x19765c0>, 0xc000396600, 0x1678e80, 0xc0002da000, 0xc000b57de0, 0xc000b57e00, 0x0, 0x0, 0x1950560, 0xc00036de90)
    	/home/runner/go/pkg/mod/github.com/grpc-ecosystem/grpc-opentracing@v0.0.0-20180507213350-8e809c8a8645/go/otgrpc/server.go:57 +0x2f6
    <http://github.com/pulumi/pulumi/sdk/v2/proto/go._ResourceProvider_Diff_Handler(0x16c0c20|github.com/pulumi/pulumi/sdk/v2/proto/go._ResourceProvider_Diff_Handler(0x16c0c20>, 0xc00000a1e0, 0x19765c0, 0xc000396600, 0xc000600e40, 0xc0007085c0, 0x19765c0, 0xc000396600, 0xc000950a80, 0x9d6)
    	/home/runner/go/pkg/mod/github.com/pulumi/pulumi/sdk/v2@v2.20.1-0.20210212181059-f4b0fa86fedc/proto/go/provider.pb.go:2253 +0x150
    <http://google.golang.org/grpc.(*Server).processUnaryRPC(0xc0003321c0|google.golang.org/grpc.(*Server).processUnaryRPC(0xc0003321c0>, 0x1984d80, 0xc00008a780, 0xc0009a8800, 0xc0006dab40, 0x2290410, 0x0, 0x0, 0x0)
    	/home/runner/go/pkg/mod/google.golang.org/grpc@v1.32.0/server.go:1194 +0x522
    <http://google.golang.org/grpc.(*Server).handleStream(0xc0003321c0|google.golang.org/grpc.(*Server).handleStream(0xc0003321c0>, 0x1984d80, 0xc00008a780, 0xc0009a8800, 0x0)
    	/home/runner/go/pkg/mod/google.golang.org/grpc@v1.32.0/server.go:1517 +0xd05
    <http://google.golang.org/grpc.(*Server).serveStreams.func1.2(0xc0001262c0|google.golang.org/grpc.(*Server).serveStreams.func1.2(0xc0001262c0>, 0xc0003321c0, 0x1984d80, 0xc00008a780, 0xc0009a8800)
    	/home/runner/go/pkg/mod/google.golang.org/grpc@v1.32.0/server.go:859 +0xa5
    created by <http://google.golang.org/grpc.(*Server).serveStreams.func1|google.golang.org/grpc.(*Server).serveStreams.func1>
    	/home/runner/go/pkg/mod/google.golang.org/grpc@v1.32.0/server.go:857 +0x1fd

helpful-van-82564

03/05/2021, 2:17 PM

I imported a GKE cluster and have the kubeconfig as output in the stack, however it's not being marked as a secret - although it does for a gke cluster I did deploy through pulumi. Is this expected?

colossal-australia-65039

03/05/2021, 5:10 PM

is there a way to mark some stack outputs as secret and others as non-secret, so only the secret ones require the

PULUMI_CONFIG_PASSPHRASE

(I'm using S3 to store state)