Hi, is it possible to run just a part of the Pulumi program? Let's say I have a React app and want to send logs to AWS CloudWatch. First I'd like to create a log group and an IAM user that can create log streams and send logs in that log group. Then I need to expose the log group name and user credentials to the React app during build step. Finally I'd like to provision the infrastructure for the app and deploy it.

I’d have thought not since it’s meant to be declarative not imperative. I’d guess that you should either split them up so that you can consume them separately and maybe feature flag each piece, eg. have a

config.cloudWatchEnabled

then only run Pulumi components if that’s true

hi, can anyone help or advise with this: we are using packer to spin up an AMI (AWS) image of one of our web app servers, we would like to use pulumi to run additional configuration in the form of powershell scripts on the server to install and configure instances of our web application. What is the best way to go about doing this? Advice and guidance much appreciated, thanks!

Hello, we have a ci/cd pipeline (monorepo) where we build frontend, backend and some infra, each of those have their own stack. To speed things up, we build in parallel (codebuild/codepipeline) fe in one build, be in one build and infra in another build. We did notice that the infra stack (which is referenced by fe/be) sometimes is null. I assume that happens because we use s3 as backend and possibly that's locked when when doing a pulumi up in a different process. But how else could we structure this? Are we using the tooling in a wrong way?

Anyone that has example of using pulumi with kafka on confluent?

Is the webinar happening? The "Ask the Expert - NA" one?

Hello, I'm pulling a secret from k8s

const secret = k8s.core.v1.Secret.get(...)

and using it in a new Secret. The

data

field is being displayed in my plan rather than being obscured. I tried adding

additionalSecretOutputs: ['data']

. Is there something else I should be doing, or would it be displayed in the plan as text but is being encrypted in Pulumi?

I got an error when trying to import crawlers, it returns an error telling me that I must especify at least one target, but it alredy has the S3Target. Does anybody knows how to skip it?

Hello, just getting started on the Slack here, we have a question with @colossal-camera-57941 about running nodeJs task on aws from an image ( using .fromFunction ); we’re not sure how to import others npm packages into this function. Is it here the right place to ask for that?

Is it possible in pulumi to create a temporary resource ? Consider a situation where you need to provision a resource that is useful only during provisioning of another resource. How to deal with that? Example situation: I want to provision some "state" into a persistent volume that is later used by some containers. In order to provision that data I'd like to 1) create temporary EC2 instance, 2) attach and mount that volume to that ec2 instance 3) run some scripts that provision some data 4) detach volume & delete temporary EC2 instance

A general question. If you do apply on a property of a resource to use that as input to another resource, when will the apply resolve? Will it resolve when the property has a value or will it resolve when the resource is ready? If it is the former, what is the recommended way of running some code after a resource is ready to calculate the input to another resource?

Hi, Got a question : i want to deploy on my gcloud cluster a deployment using an online yaml file . The only way i found on your documentation is to use Kubernetes.yaml.Configfile, but it use the default kubectl config file and not my current provider, and their is no way to pass the provider to the ConfigFile. Why? And do you have any Id why? Thanks, Gautier

Where is the "current stack" saved (for instance when running

pulumi stack select foo

)? How can I see which stack is currently selected?

Does the pulumi CLI support JSON output for the response? and more specifically, is there a way to do that in the managed GitHub action?

I've been using Pulumi in production for nearly a year - very happy with it. But our organization needs to refactor our applications we've built using Pulumi - in particular, we need to decompose some monolithic stacks down into some smaller ones. Is there a way to transfer resources between stacks without deleting them? We have some resources, i.e. databases and file storage, that we really do not want to delete / recreate from backup

Did pulumi 3.0 introduce any changes to unit testing related to resource reads? I've updated the

pulumi.runtime.setMocks

. I have some tests that work fine before updating, but after updating fail with an error like

failed to read resource #user 'test-user' [aws:dynamodb/table:Table]: req.getCustom is not a function

Hello! We use Rancher and I am listing the Rancher clusters in the Pulumi config file and looping over them to deploy a Helm chart. It looks like I am missing something as there are resource name collisions. I want the _release_name_ to be the same in both releases but simply applied to different clusters. I tried looking at the transformations stuff but I don't think I can update the resource_names with that. Any tips are appreciated!

I got an error when trying to import crawlers, it returns an error telling me that I must especify at least one target, but it alredy has the S3Target. Does anybody knows how to skip it?

Can all organizations have policy packs published? I'm getting a 409 error...

[409] This organization does not support Policy as Code.

Also, does policy as code support mono repos? I've deleted the generated package.json and added the dependency to my shared package.json, but I'm getting

Error: Cannot find module '/pulumi/projects/main/pulumi/policy-packs/localpolicies/package.json'

Related to above: policy packs don't use the creds in a resource's provider property. Is this something that could reasonably happen? I can raise an issue about it, if it's fixable.

Hi, curious why pulumi sets file permissions to 600 when running pulumi new?

Hi, I'm wondering if there is a way to set configuration values (secrets especially) from code using Pulumi's APIs? I know I can always invoke a shell command but that seems silly if there is a programmatic access to this somewhere. The use case in this regard would be to ask for initial users to be created into a system. Passwords are the important part here. Sure one can just generate those and print those out but in this case it would be useful to be able to type the preferred passwords in. Why I'm thinking using configuration mechanism with this is because this would allow checking if those have already been set or not when executing the code for the first time. If they are in remote state then this would apply over all use cases no matter the developer - meaning initial users don't get created several times.

Hey all! I'm trying to rollout gradually my cloud run service but with no success so far and I would love your advise:

const runningService = pulumi.output(
  gcp.cloudrun.getService(
    { name, location },
    {
      async: true,
    },
  ),
);
const service = new gcp.cloudrun.Service(
  name,
  {
    name,
    // autogenerateRevisionName: true,
    location,
    traffics: runningService.traffics,
    template: {
      metadata: {
        name: 'api-rolling-test3',
        annotations: {
          '<http://run.googleapis.com/vpc-access-connector|run.googleapis.com/vpc-access-connector>': vpcConnector.name,
          '<http://run.googleapis.com/vpc-access-egress|run.googleapis.com/vpc-access-egress>': 'private-ranges-only',
        },
      },
      spec: {
        serviceAccountName: serviceAccount.email,
        containers: [
          {
            image,
            resources: { limits: { cpu: '1', memory: '512Mi' } },
            envs: secrets,
          },
        ],
        containerConcurrency: 250,
      },
    },
  },
  { dependsOn: [...iamMembers, redis] },
);

Above is the service creation and then I want to update only the traffic property so I'm trying to create another service:

new gcp.cloudrun.Service(
  name,
  {
    name,
    location,
    traffics: [
      {
        revisionName: runningService.traffics[0].revisionName,
        percent: 99,
      },
      {
        revisionName: service.template.apply(
          (template) => template?.metadata.name || '',
        ),
        percent: 1,
      },
    ],
  },
  { dependsOn: [service] },
);

But it throws duplicate urn error 🥴

Hi everyone, would it be a valid Pulumi scenario to resize an existing Amazon EBS volume that was not created as part of Pulumi stack? It was created for an EC2 instance that use an Image from the Marketplace, volumes were provisioned automatically there and they are too small. Overall EC2 instance setup is managed by Pulumi though. Any suggestions welcomed :)

can I get some links toward any information regarding writing your own pulumi provider?

Is there a way to refer to an existing container image on the local host in order to, say, push it to a remote repository during a Pulumi run, but not build that image during the Pulumi run? https://www.pulumi.com/docs/reference/pkg/docker/image/ looks close, but seems to require the building of the image. I'd like to be able to decouple image building from infrastructure provisioning.

hey guys, does pulumi work with vmware tanzu?

just upgraded to 3.2 and now getting an error with saying it cant find an env var (but it's there):

root@6d65e624ef9c:/data/pulumi/infra/aws/environment/appsync# pulumi stack select appsync.e_stage.n_main.r_us-west-2
error: constructing secrets manager of type "passphrase": unable to find either `PULUMI_CONFIG_PASSPHRASE` or `PULUMI_CONFIG_PASSPHRASE_FILE` when trying to access the Passphrase Secrets Provider; please ensure one of these environment variables is set to allow the operation to continue

root@6d65e624ef9c:/data/pulumi/infra/aws/environment/appsync# env | grep PULUMI_CONFIG_PASSPHRASE
PULUMI_CONFIG_PASSPHRASE=

root@6d65e624ef9c:/data/pulumi/infra/aws/environment/appsync# pulumi version
v3.2.0

Hi, When I am running

pulumi up

, I was given this message

Previewing update (dev)                                                                                                                                                                          
                                                                                                                                                                                                 
View Live: <https://app.pulumi.com/zhouyu1800/documents_api/dev/previews/d3783c77-2df4-436a-a792-a9b8205c9be8>                                                                                     
                                                                                                                                                                                                 
     Type                 Name               Plan     Info                                                                                                                                       
     pulumi:pulumi:Stack  documents_api-dev                                                                                                                                                      
     └─ aws:iam:Role      documentsPost               1 error                                                                                                                                    
                                                                                                                                                                                                 
Diagnostics:                                                                                                                                                                                     
  aws:iam:Role (documentsPost):                                                                                                                                                                  
    error: AWS Account ID not allowed: 228886564947

But I never know that account.