https://pulumi.com logo
Join the conversationJoin Slack
Channels
announcements
automation-api
aws
azure
blog-posts
built-with-pulumi
cloudengineering
cloudengineering-support
content-share
contribex
contribute
docs
dotnet
finops
general
getting-started
gitlab
golang
google-cloud
hackathon-03-19-2020
hacktoberfest
install
java
jobs
kubernetes
learn-pulumi-events
linen
localstack
multi-language-hackathon
office-hours
oracle-cloud-infrastructure
plugin-framework
pulumi-cdk
pulumi-crosscode
pulumi-deployments
pulumi-kubernetes-operator
pulumi-service
pulumiverse
python
registry
status
testingtesting123
testingtesting321
typescript
welcome
workshops
yaml
Powered by Linen
general
  • c

    colossal-australia-65039

    03/25/2021, 6:50 PM
    I'm using S3 as my state store. Does a
    StackReference.getOutput('name')
    require the IAM user be able to read the entire stack state including all secrets in the state?
    b
    w
    • 3
    • 8
  • g

    great-evening-28439

    03/25/2021, 11:02 PM
    Hello all. I’ve gotten myself into a world of hurt and hoping someone here can help me get out of it. I believe the problem started when I ctrl-C-ed a
    pulumi up
    . However it happened, one of my stacks is just no longer there when I
    pulumi stack ls
    . My state is stored in an s3 bucket so there are many days worth of backups for this state, but I can’t seem to figure out how to import those json backup files into a new state. So I guess my question how do I use checkpoint files to recreate the stack that was deleted? By “checkpoint” files I mean the ones that start like this…
    o
    d
    • 3
    • 7
  • b

    billions-yak-67755

    03/26/2021, 10:24 AM
    Does anyone know if there is a nice way to "default" ACM certificates to creating the appropriate validation DNS records if the relevant HostedZone exists? (using AWS and python)
    o
    • 2
    • 3
  • e

    enough-truck-34175

    03/26/2021, 2:44 PM
    Hi all. Is it possible to combine multiple stack files? For context, I need to deploy 12 Kubernetes clusters globally and have a separate stack for each cluster. All the clusters are production clusters, so it would be great to overlay each cluster stack onto another config like
    Pulumi.production.yaml
    . This would make it easy to maintain common configuration in one place.
    b
    • 2
    • 9
  • b

    billions-yak-67755

    03/26/2021, 2:49 PM
    Trying to create an alias record in AWS and Python is returning this error. I have tried the "dualstack" address, the actual DNS name, etc. Always something like:
    * [ERR]: Error building changeset: InvalidChangeBatch: [Tried to create an alias that targets myelbname.us-west-2.elb.amazonaws.com., type A in zone myzoneid, but the alias target name does not lie within the target zone, Tried to create an alias that targets myelbname.us-west-2.elb.amazonaws.com., type A in zone myzoneid, but that target was not found]
    The code:
    a_record = aws.route53.Record(
            'my-a-record',
            allow_overwrite=True,
            name=my_domain,
            aliases=[aws.route53.RecordAliasArgs(
                evaluate_target_health=False,
                name=the_elb_dns,
                zone_id=my_zone
            )],
            type='A',
            zone_id=my_zone
        )
    Docs say:
    DNS domain name for a CloudFront distribution, S3 bucket, ELB, or another resource record set in this hosted zone.
    https://www.pulumi.com/docs/reference/pkg/aws/route53/record/#recordalias Is there something I am obviously doing wrong here? It seems to me that the change is only looking for other resource record sets, not ELB resources?
    c
    • 2
    • 2
  • n

    numerous-artist-1705

    03/26/2021, 3:58 PM
    hi all, do you have any ETA on the PowerShell support for Pulumi? This is the second customer I speak to and is really keen on getting that (they want to reuse their existing sysadmin skills with the features of Pulumi).
    b
    • 2
    • 2
  • s

    swift-agency-29333

    03/26/2021, 11:43 PM
    I am creating EC2 machine and right after that I am running ansible. But the problem is machine state gets to “running” after some time and due to that ansible fails to reach the server. Is there await or anything in native pulumi as an option while creating EC2? I know we can add our own custom loop and check state of the machine and then continue but I want to try pulumi option if available.
    b
    s
    w
    • 4
    • 6
  • p

    purple-jelly-68780

    03/27/2021, 1:07 AM
    Not sure if I'm running into a bug or not but after upgrading to the latest version, Pulumi now seems to want any new config settings to be pre-pended by my project name? Is that expected?
    pulumi:pulumi:Stack (health-directory-dev):
        error: Missing required configuration variable 'health-directory:newrelicAccountId'
        	please set a value using the command `pulumi config set health-directory:newrelicAccountId <value>`
    Here is where it's trying to be read (have also tried just
    config.require
    with the same results):
    config.requireSecret('newrelicAccountId')
    Here is my Pulumi config:
    > pulumi config
    KEY                   VALUE
    aws:region            us-west-2
    bastionPrivateKey     [secret]
    bastionPublicKey      [secret]
    dbPassword            [secret]
    dbPrivateKey          [secret]
    dbPublicKey           [secret]
    newRelicAccountId     3112141
    slackAlertsUrl        [secret]
    newrelic:accountId    3112141
    newrelic:adminApiKey  [secret]
    newrelic:apiKey       [secret]
    No issues with the other values currently, just the new ones for New Relic (using either newRelicAccountId or newrelic:accountId appears to exhibit the same behavior)
    • 1
    • 2
  • s

    sparse-state-34229

    03/27/2021, 3:06 AM
    I’m experiencing a panic when running
    pulumi up
    on an existing stack: https://gist.github.com/ohlol/4c06ba68c395f80c38434385454950f7 in this gist, you can see the first couple lines are a successful
    pulumi up
    on a brand new stack. then when I run
    pulumi up
    again, there is a panic. I found a few similar github issues around this but nothing suggesting a resolution. anyone seen this?
    b
    • 2
    • 5
  • b

    better-shampoo-48884

    03/27/2021, 10:00 AM
    Just a thought - would it be possible to visualize the pulumi preview in Ascii as a form of dependency graph? i.e. illustrate the order in which they will be updated based on the internal dependencies? Absolutely useless, but would be quite cool 😉
    b
    • 2
    • 5
  • h

    hundreds-painter-6367

    03/27/2021, 4:34 PM
    Hello everyone, maybe someone can help me?, i’m trying to deploy a starter pulumi project, but i have an issue with this. i made the next steps: •
    mkdir example-stack
    •
    pulumi new--dir example-stack
    • i choosed 
    aws-python
    •
    cd example-stack
    •
    pulumi up
    And the console showed me this: error: failed to load language plugin python: could not read plugin [/usr/local/bin/pulumi-language-python] stdout: EOF ¿Did someone know how to solve this error? I’m on Mac with python installed on version 3.8
    b
    • 2
    • 4
  • a

    agreeable-ram-97887

    03/27/2021, 8:55 PM
    Is there a way to specify a namespace for a kubernetes ConfigFile resource? This is do-able with a
    kubectl apply
    command by setting
    -n <namespace>
    , so it feels like something that should be supported by Pulumi as well. But I don't see any obvious argument candidates on the documentation 🤔
    b
    • 2
    • 2
  • c

    clever-cartoon-41433

    03/28/2021, 1:02 AM
    Does pulumi have a "Pulumi Cloud" provider?
    b
    w
    • 3
    • 4
  • s

    swift-agency-29333

    03/28/2021, 3:47 PM
    Can we convert pulumi.IDOutput to string and *string?
    b
    l
    w
    • 4
    • 7
  • n

    narrow-airport-65967

    03/28/2021, 9:55 PM
    Hi guys. I need configure istio virtualservice in deploy pulumi k8s, but not have a resource for this. I tried configure in client-go lib istio, but I don't how export an external resource, somebody help me? Thank you
    b
    • 2
    • 2
  • n

    narrow-airport-65967

    03/29/2021, 1:36 AM
    Hi ! I can execute pulumi up in more one project in same time ?
    l
    • 2
    • 2
  • l

    little-vegetable-79574

    03/29/2021, 4:49 AM
    Looking for some guidance on best practices for what can be outputs of a custom ComponentResource. More specifically how should one share a resource created by the component resource so it can be referenced from a different project / stack. Can resource object be an output? Case in point: Project A uses custom ComponentResource to provision a complex set of resources including a public IP address (in Azure). We want to reference this public IP address resource in a different project for registration in DNS / firewall / etc. What should the output property be?
    l
    • 2
    • 5
  • l

    lemon-vase-32091

    03/29/2021, 1:43 PM
    Hi guys, any help would be much appreciated! I am looking for a way to clean up stale dev stacks (no actual resources, just api object in pulumi api). My thought was to list all projects, then iterate over those with
    pulumi stack ls -p $PROJECT
    and destroy whatever is redundant. Is there an easy way to list all projects for my organisation using the cli or api (couldn't find such cmd)? Also using
    pulumi stack ls -a
    could be a good for the job, but it is limited to 300 results and we currenly have >3000.
    👀 2
    b
    • 2
    • 11
  • b

    better-shampoo-48884

    03/29/2021, 1:45 PM
    wow. On the one hand I envy your 3000+ stacks - on the other.. I really don't have that problem 😄
    l
    • 2
    • 2
  • l

    lemon-machine-35564

    03/29/2021, 2:02 PM
    Is there any way to add permissions to a stack on creation? I’d like a certain team to get assigned write permissions when I first create a stack from my personal account.
    c
    • 2
    • 3
  • h

    handsome-state-59775

    03/29/2021, 2:03 PM
    Hey guys, I'm suddenly having issues setting config items:
    ✅ 1
    • 1
    • 3
  • p

    proud-pizza-80589

    03/29/2021, 3:54 PM
    If i have a secret as an output in the pulumi dashboard, how do i get it out in plain text?
    l
    l
    r
    • 4
    • 8
  • a

    adamant-translator-31969

    03/29/2021, 4:21 PM
    Hi ... I have a question. I have a previously created resource but I want to later modify an attribute within another function passing the resource as an argument. Is there a mechanism for this?
    l
    • 2
    • 5
  • w

    wonderful-napkin-50018

    03/29/2021, 5:08 PM
    Hey, I am using pulumi with an S3 backend. While renaming my stack pulumi apparently "lost" it (stack ls didn't show anything). So I am trying to import a backup I downloaded from S3. But when I run
    stack init staging
    and
    stack import --file staging.json.bak
    pulumi says:
    error: could not deserialize deployment: unexpected end of JSON input
    Any idea how to debug this or what to try next? I am lost.
    d
    • 2
    • 4
  • w

    wonderful-napkin-50018

    03/29/2021, 5:28 PM
    One more question: In the documentation it says:
    If you are using Pulumi in your organization, by default the stack will be created in your user account. To target the organization, name the stack using `orgName/stackName`:
    Does this only apply to pulumi.com as state backend? If I try this with S3 backend it says:
    $> pulumi stack init orgName/test
    error: stack names may not contain slashes
    b
    • 2
    • 6
  • w

    wonderful-napkin-50018

    03/29/2021, 7:32 PM
    I want to define a Fargate
    Cluster
    in one Stack and reference it in a
    FargateService
    in another stack. How do I do this with awsx? The FargateService expects a whole Cluster argument, not just an ID or name. And I don't see how I can "get" an existing cluster with
    awsx.ecs.Cluster
    . Do I have to export the whole cluster from the first stack?
    m
    l
    c
    • 4
    • 27
  • e

    elegant-carpet-8859

    03/29/2021, 7:48 PM
    If I want to keep multiple stacks for one project in a monorepo, can I do sub-dirs for each stack, or is that an anti-pattern?
    l
    m
    c
    • 4
    • 10
  • w

    wonderful-napkin-50018

    03/29/2021, 11:15 PM
    I have two stacks, one for core infrastructure like VPC and one for application stuff. I want to reference the VPC in the other stack with all info like subnets etc. How do I do this with just the vpcId as an Output/Input?
    b
    r
    c
    • 4
    • 8
  • s

    shy-bird-55689

    03/29/2021, 11:43 PM
    Hey, i'm probably missing something really simple but i'm getting the following when trying to deploy an api gateway backed by lambda
    error: 1 error occurred:
        	* Error creating API Gateway Deployment: BadRequestException: The REST API doesn't contain any methods
    (using python) i'm specifying an OpenAPI spec for the body of
    aws.apigateway.RestApi
    which has routes and methods configured. Not sure what i'm maybe missing somewhere, new to Pulumi (coming from Serverless Framework)
    l
    • 2
    • 11
  • e

    eager-lion-7694

    03/30/2021, 2:23 AM
    is there an example, preferrably in typescript/javascript, that demonstrates how to set up an s3 bucket that a web application can upload to, but has full public read access?
    l
    • 2
    • 2
Powered by Linen
Title
e

eager-lion-7694

03/30/2021, 2:23 AM
is there an example, preferrably in typescript/javascript, that demonstrates how to set up an s3 bucket that a web application can upload to, but has full public read access?
l

little-cartoon-10569

03/30/2021, 2:25 AM
All of the static website examples set up a bucket that has full public read access. E.g. https://www.pulumi.com/docs/get-started/aws/begin/
Adding write access to a application running in AWS is documented in AWS. Some places to start might include https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies.html and https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_examples_s3_rw-bucket.html
View count: 1