Another question, I don't think I understand outputs properly, neither of these work

const vpcId = terraformState.outputs["vpc_id"];
const infraVPC = await aws.ec2.getVpc({ id: vpcId });

const vpcId = terraformState.outputs["vpc_id"];
const infraVPC = await aws.ec2.getVpc({ id: vpcId.get() });

since

getVpc

doesn't accept Inputs/Ouputs, how can I achieve this?

Question about plugins. We are seeing this error, but only in CI. We aren’t using this alpha package anymore and it doesn’t exist in our code anywhere.

stderr: error: could not load plugin for aws provider 'urn:pulumi:development-johnstonbl01::nacelle-services-dilithium::pulumi:providers:aws::default_3_35_0_alpha_1617104857': no resource plugin 'aws-v3.35.0-alpha.1617104857' found in the workspace or on your $PATH, install the plugin using pulumi plugin install resource aws v3.35.0-alpha.1617104857

Is it possible to assert within code if pulumi is running in preview mode?

Just a quick question, say I provision a s3 bucket A using pulumi, and provision another bucket B via web console. If I run

pulumi refresh

, will bucket B reflect in state file? Thanks in advance.

What does a specific pulumi plugin include? How is it related to language specific packages?

When using the OpenStack provider (and possibly other providers?) it seems to be storing both username and password the Pulumi state – how to avoid that? Very unsafe and unnecessary (it also generates a diff depending on who updates the stack) 😅

Hi folks! I'm trying to deploy my infrastructure to AWS China and have an issue during s3 creation. Behavior is same as in the following terraform issue: https://github.com/hashicorp/terraform-provider-aws/issues/15420. That problem was fixed in terraform provider 3.16.0, but looks like is still relevant for pulumi cli 2.24.1 (which is dependent on terraform provider 3.36.0) I'm using the same code which works fine for AWS in eu-central-1, so I'm sure that it's correct. Also, buckets themselves are created, it's related to some post-creation checks, I believe. Can anybody advice some workaround, or shall I open an issue on github?

When setting config values via Pulumi CLI, the .yaml indentation is different from when making manual changes in vs code with format-on-save. Anyone figured out the right .editorconfig or plugin to have the same formatting in VS Code as the Pulumi CLI?

What's a good workflow for transferring Pulumi resources from Project A to Project B, within the same org? Would we import the resources into Project B, and then somehow delete Project A without destroying the resources in Project A?

Ok.. I've got a bit of a crazy idea for something. I'll paste more info in the thread of this message - but the gist is: I would like to generate passwords for rabbitmq (which is done with a silly sha256/512 hashing algorithm with a salt converted to base64). To do that, I'd like to use pulumi/random RandomPassword module for the passwords themselves - and put them into azure keyvault. However, I also need to pass those passwords in their rabbitmq-obfuscated-hashed form into a json object as values for rabbitmq config and put into a kubernetes secret (or more likely, throw into keyvault and use keyvault sync to create the secret). The fun begins..

has anyone ever used the datadog provider ? I am in a mouse/cat game where it looks like 'something' (could be our ci/cd pipeine?) is changing the integration all the times, even if I don't see a diff with pulumi up. is that possible? I basically go on the datadog ui and I read

Datadog is not authorized to perform action sts:AssumeRole Account affected:...

I wonder if this snippet:

<https://www.pulumi.com/docs/reference/pkg/datadog/aws/integration/> 

Calls also their APIs messing around stuff, the Role doesn't change at all so I am a bit puzzled on what is breaking the integration

Hi, anyone confirm this is correct cli Pulumi up --yes --config-file Pulumi.oct.yaml , its in the right directory etc, but its saying these are unknown flags

try = between --config-file and the file name

Anyone know if https://www.pulumi.com/docs/guides/continuous-delivery/github-app/ can work with an s3 backend?

Pulumi Kubernetes / Blue-Green Deployment outside scope Pulumi I have created a k8s cluster on GCE, created the Deployment/ClusterIp/Ingress on Pulumi My Dev Team use Codefresh for CI/CD with Blue/Green to deliver/deploy the new feature/bug fixes to the cluster. The question or challenge is, the deployment/cluster ip change in name, labels, matchLabels accordly the plugin/script provided by Codefresh to do this. So my question is: how can I sync this modification made outside Pulumi ?

Modifyng GKE cluster If I modify the machine Type on a GKE cluster using pulumi, which be the expected behaviors? The new cluster is created with the new machine Type while the resources on the old cluster are moved graduately to this new cluster?

I am often struggling to write reusable code and I think im doing something wrong. For example right now im provisioning a second database and migrating the main one to it. Something that could've been 3 lines of code ended up forcing me to copy paste a bunch of methods or add parameters because every resource URN ended up being a duplicate (including passwords). There should be a better way of doing this, but with the length limitations im struggling to find a good convention for URNs that can be done programatically (eg concatenating a couple of parameters).

Hello guys I was using

<https://github.com/pulumi/pulumi-tf-provider-boilerplate>

to setup bridge to yandex.cloud. I was able to generate all the necessary files for sdk and depend on it in my go infra. But it keeps saying that there is not resource found for yandex provider How should I fix that?

I am pulling from this directory

<https://github.com/aladmit/pulumi-yandex>

anyone knows how to get provider related configuration from code (basically from another namespace)? (for example gcp project)

Design question: I have a microservice™️ that will handle SNS topics, for instance posting a message the topic

arn:aws:sns:us-east-1:1234:foo

will send a HTTP call to example.com/myservice/foo-sns-handler Now, I need Pulumi to subscribe to that topic once that service is deployed, something like

new aws.sns.TopicSubscription(
    'my-topic',
    {
      topic: 'arn:aws:sns:us-east-1:1234:foo',
      endpoint: `${myServiceEndpoint}/foo-sns-handler`,
      protocol: 'https',
    },

I would like to avoid having to define the SNS topic in my service and in Pulumi, ideally there would be a single place where the "topic -> handler" relation is defined. Does that make sense? Any ideas? -- In other words, I'm looking for a way to have a service declare the resources it needs, and have pulumi handle those resources during deployment (doesn't have to be an SNS topic, could be S3 buckets or any other pulumi resources)

hello guys, quick question.. he have been running pulumi on a trial version for the last few weeks and we have made the decision to continue using it when the trial is over. for that we need to put a credit card and activate the subscription. issue is, that I do not have access to the company credit card, I need to create a user for the financial department so they can put the credit card and every month download the invoice. I could do this creating a user in the gui, but I don't want to waste a seat on a user that is only gonna be active to put the credit card and once a month download an invoice. so.. is there a way to give access to billing to a user without having to pay for that user ?

I'm using pulumi but have multiple AWS environments. How can I tell which environment pulumi is configured to use? Also, how can I switch between them

I'm trying to "glue" together Pulumi (or any infra-as-code) code and application code. Traditionally if you have an app that needs an S3 bucket (or any other cloud resource) to store things, you would create that S3 bucket in Pulumi, and then pass the bucket's information to your app during the deployment (at least that's how most Terraform project I've worked on do things). The issue I have with this is that your Pulumi project, in a sense, has business logic that should be in the app itself. If my app now needs the S3 bucket to be public, I have to edit seperate Pulumi code. Any cleaner way to do this or am I trying to be too DRY?

is it possible to specify a region here?

account_id = aws.get_caller_identity().account_id

Hey y’all, is Pulumi SaaS down? We’re seeing

error: [500] Internal Server Error

when running commands.

Hey all, I just wanted to put out a quick plug for the #jobs channel. We’ve got a couple job postings in there (with hopefully more to come), so please join and check it out if you’re interested!

Hi guys, i am trying to refresh a stack from GCP cloud functions however I can see that the node ones are captured however the python cloud functions are never captured

Man.. i'm starting to lose my mind on this whole Output<T> stuff 😄 I'm trying to use an Output inside an object that is a parameter to a resource (hem chart values to be precise). No matter what I do - every permutation of .apply and interpolate and everything in between - it always fails. Anyone have a surefire way of converting an Output string to an actual string prior to resource execution?