I'm using S3 as my state store. Does a

StackReference.getOutput('name')

require the IAM user be able to read the entire stack state including all secrets in the state?

Hello all. I’ve gotten myself into a world of hurt and hoping someone here can help me get out of it. I believe the problem started when I ctrl-C-ed a

pulumi up

. However it happened, one of my stacks is just no longer there when I

pulumi stack ls

. My state is stored in an s3 bucket so there are many days worth of backups for this state, but I can’t seem to figure out how to import those json backup files into a new state. So I guess my question how do I use checkpoint files to recreate the stack that was deleted? By “checkpoint” files I mean the ones that start like this…

Does anyone know if there is a nice way to "default" ACM certificates to creating the appropriate validation DNS records if the relevant HostedZone exists? (using AWS and python)

Hi all. Is it possible to combine multiple stack files? For context, I need to deploy 12 Kubernetes clusters globally and have a separate stack for each cluster. All the clusters are production clusters, so it would be great to overlay each cluster stack onto another config like

Pulumi.production.yaml

. This would make it easy to maintain common configuration in one place.

Trying to create an alias record in AWS and Python is returning this error. I have tried the "dualstack" address, the actual DNS name, etc. Always something like:

* [ERR]: Error building changeset: InvalidChangeBatch: [Tried to create an alias that targets myelbname.us-west-2.elb.amazonaws.com., type A in zone myzoneid, but the alias target name does not lie within the target zone, Tried to create an alias that targets myelbname.us-west-2.elb.amazonaws.com., type A in zone myzoneid, but that target was not found]

The code:

a_record = aws.route53.Record(
        'my-a-record',
        allow_overwrite=True,
        name=my_domain,
        aliases=[aws.route53.RecordAliasArgs(
            evaluate_target_health=False,
            name=the_elb_dns,
            zone_id=my_zone
        )],
        type='A',
        zone_id=my_zone
    )

Docs say:

DNS domain name for a CloudFront distribution, S3 bucket, ELB, or another resource record set in this hosted zone.

https://www.pulumi.com/docs/reference/pkg/aws/route53/record/#recordalias Is there something I am obviously doing wrong here? It seems to me that the change is only looking for other resource record sets, not ELB resources?

hi all, do you have any ETA on the PowerShell support for Pulumi? This is the second customer I speak to and is really keen on getting that (they want to reuse their existing sysadmin skills with the features of Pulumi).

I am creating EC2 machine and right after that I am running ansible. But the problem is machine state gets to “running” after some time and due to that ansible fails to reach the server. Is there await or anything in native pulumi as an option while creating EC2? I know we can add our own custom loop and check state of the machine and then continue but I want to try pulumi option if available.

Not sure if I'm running into a bug or not but after upgrading to the latest version, Pulumi now seems to want any new config settings to be pre-pended by my project name? Is that expected?

pulumi:pulumi:Stack (health-directory-dev):
    error: Missing required configuration variable 'health-directory:newrelicAccountId'
    	please set a value using the command `pulumi config set health-directory:newrelicAccountId <value>`

Here is where it's trying to be read (have also tried just

config.require

with the same results):

config.requireSecret('newrelicAccountId')

Here is my Pulumi config:

> pulumi config
KEY                   VALUE
aws:region            us-west-2
bastionPrivateKey     [secret]
bastionPublicKey      [secret]
dbPassword            [secret]
dbPrivateKey          [secret]
dbPublicKey           [secret]
newRelicAccountId     3112141
slackAlertsUrl        [secret]
newrelic:accountId    3112141
newrelic:adminApiKey  [secret]
newrelic:apiKey       [secret]

No issues with the other values currently, just the new ones for New Relic (using either newRelicAccountId or newrelic:accountId appears to exhibit the same behavior)

I’m experiencing a panic when running

pulumi up

on an existing stack: https://gist.github.com/ohlol/4c06ba68c395f80c38434385454950f7 in this gist, you can see the first couple lines are a successful

pulumi up

on a brand new stack. then when I run

pulumi up

again, there is a panic. I found a few similar github issues around this but nothing suggesting a resolution. anyone seen this?

Just a thought - would it be possible to visualize the pulumi preview in Ascii as a form of dependency graph? i.e. illustrate the order in which they will be updated based on the internal dependencies? Absolutely useless, but would be quite cool 😉

Hello everyone, maybe someone can help me?, i’m trying to deploy a starter pulumi project, but i have an issue with this. i made the next steps: •

mkdir example-stack

•

pulumi new--dir example-stack

• i choosed 

aws-python

•

cd example-stack

•

pulumi up

And the console showed me this: error: failed to load language plugin python: could not read plugin [/usr/local/bin/pulumi-language-python] stdout: EOF ¿Did someone know how to solve this error? I’m on Mac with python installed on version 3.8

Is there a way to specify a namespace for a kubernetes ConfigFile resource? This is do-able with a

kubectl apply

command by setting

-n <namespace>

, so it feels like something that should be supported by Pulumi as well. But I don't see any obvious argument candidates on the documentation 🤔

Does pulumi have a "Pulumi Cloud" provider?

Can we convert pulumi.IDOutput to string and *string?

Hi guys. I need configure istio virtualservice in deploy pulumi k8s, but not have a resource for this. I tried configure in client-go lib istio, but I don't how export an external resource, somebody help me? Thank you

Hi ! I can execute pulumi up in more one project in same time ?

Looking for some guidance on best practices for what can be outputs of a custom ComponentResource. More specifically how should one share a resource created by the component resource so it can be referenced from a different project / stack. Can resource object be an output? Case in point: Project A uses custom ComponentResource to provision a complex set of resources including a public IP address (in Azure). We want to reference this public IP address resource in a different project for registration in DNS / firewall / etc. What should the output property be?

Hi guys, any help would be much appreciated! I am looking for a way to clean up stale dev stacks (no actual resources, just api object in pulumi api). My thought was to list all projects, then iterate over those with

pulumi stack ls -p $PROJECT

and destroy whatever is redundant. Is there an easy way to list all projects for my organisation using the cli or api (couldn't find such cmd)? Also using

pulumi stack ls -a

could be a good for the job, but it is limited to 300 results and we currenly have >3000.

wow. On the one hand I envy your 3000+ stacks - on the other.. I really don't have that problem 😄

Is there any way to add permissions to a stack on creation? I’d like a certain team to get assigned write permissions when I first create a stack from my personal account.

Hey guys, I'm suddenly having issues setting config items:

If i have a secret as an output in the pulumi dashboard, how do i get it out in plain text?

Hi ... I have a question. I have a previously created resource but I want to later modify an attribute within another function passing the resource as an argument. Is there a mechanism for this?

Hey, I am using pulumi with an S3 backend. While renaming my stack pulumi apparently "lost" it (stack ls didn't show anything). So I am trying to import a backup I downloaded from S3. But when I run

stack init staging

and

stack import --file staging.json.bak

pulumi says:

error: could not deserialize deployment: unexpected end of JSON input

Any idea how to debug this or what to try next? I am lost.

One more question: In the documentation it says:

If you are using Pulumi in your organization, by default the stack will be created in your user account. To target the organization, name the stack using `orgName/stackName`:

Does this only apply to pulumi.com as state backend? If I try this with S3 backend it says:

$> pulumi stack init orgName/test

error: stack names may not contain slashes

I want to define a Fargate

Cluster

in one Stack and reference it in a

FargateService

in another stack. How do I do this with awsx? The FargateService expects a whole Cluster argument, not just an ID or name. And I don't see how I can "get" an existing cluster with

awsx.ecs.Cluster

. Do I have to export the whole cluster from the first stack?

If I want to keep multiple stacks for one project in a monorepo, can I do sub-dirs for each stack, or is that an anti-pattern?

I have two stacks, one for core infrastructure like VPC and one for application stuff. I want to reference the VPC in the other stack with all info like subnets etc. How do I do this with just the vpcId as an Output/Input?

Hey, i'm probably missing something really simple but i'm getting the following when trying to deploy an api gateway backed by lambda

error: 1 error occurred:
    	* Error creating API Gateway Deployment: BadRequestException: The REST API doesn't contain any methods

(using python) i'm specifying an OpenAPI spec for the body of

aws.apigateway.RestApi

which has routes and methods configured. Not sure what i'm maybe missing somewhere, new to Pulumi (coming from Serverless Framework)