If you create a resource in Pulumi, then delete that resource out of band (ex. in the AWS console), would you expect the next run of

pulumi up

to realize this and re-create the instance? This is obviously what TF does but I have just tested this and it doesn't realize the resource got deleted manually.

is there any way of affecting URN at the component-resource level? i.e. run the same component resource twice but in such a way that it's referenced separately in the stack?

Hey, what is the proper way of getting keys from StackReference output which is an object? In my source stack I have

export const dbConfig = config.requireSecretObject<Config>("dbConfig");

And in the "destination" stack

const dbConfig = remoteStack.getOutput("dbConfig");

When I'm using dbConfig var in the 2nd stack it evaluates to the Object I need, however, when I'm trying to get specfic keys, like dbConfig["host"], I get an error saying there is no such property on that Object. P.S. TypeScript is not my main programming language, please don't go hard on me 🙂

Hello, given the Pulumi azure-native API and an existing keyvault, what should one use to add a bunch of HTTPS certificate files in the keyvault? The certificate files are placed in my IaC repo and I am having issues identifying an input propriety which can be used to reference the certificate files

I've checked this resource https://www.pulumi.com/docs/reference/pkg/azure-native/web/certificate/

Is this even possible, adding already existing crt files to an azure keyvault?

Does anyone know of a project for Pulumi that’s similar to https://github.com/cycloidio/inframap ?

Hello ! Is there someway to intercept DIFF step ? I need to create a custom update rule: Allow update of machine type only if it will not downsize vm for example.

Is it possible to set "skip_provider_registration" in Pulumi? I am trying to call

pulumi up

with limited Azure access for a client and it fails because it's trying to register all resource providers up front. Terraform gives this error message:

error: Error ensuring Resource Providers are registered.

    Terraform automatically attempts to register the Resource Providers it supports to
    ensure it's able to provision resources.

    If you don't have permission to register Resource Providers you may wish to use the
    "skip_provider_registration" flag in the Provider block to disable this functionality.

I'm trying to conditionally add a new host_rule to a gce URLMap (with python): Is there a way to update parts of already defined objects?

I'm trying to use

pulumi import

to import an existing Azure resource group. I'm trying to specify the resource group as the

--parent

but am getting

error: an inline resource must be specified if no import file is used.

Is there an example of importing an Azure resource that I can compare against?

@billowy-army-68599 @broad-dog-22463 could we have a #localstack channel for those of us working with pulumi locally using https://localstack.cloud and the special problems we encounter?

Getting this error when I do pulumi up: error: Running program 'C:\***\bin\Debug\net5.0\BiResources.dll' failed with an unhandled exception: System.InvalidOperationException: Expected Pulumi.AssetOrArchive but got System.String deserializing Pulumi.Azure.Storage.Blob.source This happens only when I do it for the second time. First time it goes fine. Can someone help me regarding this?

how can I send a message to slackbot after the pulumi is done ?

I have noticed that my program based on the Pulumi automation api will return to signal a complete deployment before some resources are fully initialized on Azure. A managed SQL database or Cosmosdb typically take a few extra minutes to fully create and a managed instance of Redis requires 5 to 10 minutes. What additional events can I monitor to identify when slow-to-create resources are fully initialized and ready for use? I suppose I am looking for the programmatic equivalent the notification in-box on the Azure Portal.

how can I get the string of RandomPassword, I tried almost 2 hours, but always get error:

Calling [toJSON] on an [Output<T>] is not supported.
To get the value of an Output as a JSON value or JSON string consider either:
    1: o.apply(v => v.toJSON())
    2: o.apply(v => JSON.stringify(v))

See <https://pulumi.io/help/outputs> for more details.
This function may throw in a future version of @pulumi/pulumi

``````

☕ Morning everyone. Is it possible to determine if a value is a secret at runtime? I'm using a structured configuration and eventually looping through all the <JsonElement>s and pushing these to AWS Parameter Store. Everything works, other than when looping through I don't know which values are secrets or not, as I'd like to push them to the parameter store as "SecureString" if possible. I'm using C# if that comes in to play.

Hey folks! 👋 I’m a big time Pulumi fan and am in the process of convincing my new employer to move from Terraform to Pulumi. However, with the new Terraform CDK, it’s seems less easy to justify the move with the teams. Does anyone have experience with Terraform CDK and/or has done some comparative/competitive analysis? Would be really interested in any bits you have to share! 😁

Hey everyone! Pulumi provides a way to modify output using apply(), as described in docs:

let url = virtualmachine.dnsName.apply(dnsName => "https://" + dnsName);

Problem is - it doesn't really work for more than one Output<T> var. Here's what I'm trying to do: `'iam.gke.io/gcp-service-account': `${gcpSA.name}@${gcpProject}.iam.gserviceaccount.com`` When this code gets executed, I get an error saying:

Calling [toString] on an [Output<T>] is not supported

Is it possible to somehow run apply() on more than one variable, or is there another solution to my problem?

Hey friends! the CFP for this year’s Cloud Engineering Summit is now open! More details about the event coming Real Soon Now, but we would love for you to submit a talk about your stories about building, deploying, and managing applications and infrastructure in the cloud! https://sessionize.com/cloud-engineering-summit-hosted-by-pulumi/

Just coming back to a query I had - Does the stack’s file (

Pulumi.foo.yaml

) only exist locally?

Mainly concerned about the config/secrets in there

Thought it’d be part of the stack so every dev that logs in to GCS (where we store states) can grab the config too

Hi Is it possible to get 

str

 of Output so I can use it as part of 

rds.Cluster

 's

final_snapshot_identifier

in another resource? Trying to add a randomId to the final snapshot id and I am unable to get an actual value

Is there any easy way to search the release notes to see when a certain functionality was added?

Hi dear community. Thank you so much for so nice product pulumi. My question around Azure Key #Vault. I already have Vault on my Azure account. I want to create a new Azure Function with SystemAssigned Identity and to add KeyVaultAccessPolicy for existed Vault. Is it possible to do in a new pulumi stack Pulumi.AzureNative C#?

Hi everyone! I've been looking for a way to create a pulumi provider plugin, in order to manage an internal resource service from my organisation (mainly the

create

,

delete

,

update

operations for that service (it is a simple CRUD API for managing a single internal resource)). The important part is that we want developers there to be able to import the plugin from a package manager, and then interact with our custom resource service without any hurdle. I've found 2 or 3 solutions online for this use case so far: 1. Pulumi Packages 2. Dynamic Providers In the last days, I tried to clone the TypeScript component package boilerplate and added an

update

member in the provider class. However, after compiling the code, only the

construct

member seems to be taken into consideration when using

pulumi up

or

pulumi preview

, which is not enabling me to support the CRUD nature of our internal service. I've found on Github multiple classes implementing the

pulumi.ProviderResource

interface, but in all of them, only the

construct

member is defined (i.e. not the

update

member), which makes me think this is not the right tool for my use case. We're trying to move away from Terraform, so the bridge solution described in the Packages documentation page doesn't seem appropriate either. I've also considered using a Dynamic Provider instead of the former TypeScript boilerplate. My idea was to simply put the classes implementing the

pulumi.dynamic.ResourceProvider

and

pulumi.dynamic.Resource

interfaces in a package manager. I wonder whether there are any major issue with this approach, other than the source code not scaling to more than one language (we would prefer to support more languages than just TypeScript, but it is not a hard requirement). What is the best way to support our custom CRUD service? I have listed some possible directions above, but I'm lacking pointers. I'm not sure why, but there doesn't seem to exist a lot of documentation about this topic online. Any help would be very appreciated! Also, if I am unaware of a more suitable solution for this case, please don't hesitate to let me know.

Hey, Pulumi people! Sorry for posting here so often, I’m really deep in the process of switching our infra from tf to Pulumi. Hope once it’s doen, things will stabilize 🙂 My question for today would be this: https://github.com/pulumi/pulumi-eks/issues/178 I think I’m running into the same issue with my

eks.Cluster

- I created it about a week ago or so. Things were fine for a while, but then something (default AMI id I guess) changed and produced a diff for Pulumi. Now if I try to

pulumi up

it fails saying it’s unable to delete an old Launch Configuration because it’s still attached to an ASG (which is true). I’m not sure what exactly went wrong, there were no interrupted updates or anything. I believe it’s just doing it in the wrong order, as I see new Launch Configurations are already created, they’re just not associated with an ASG yet. I think it should first attach the new configs and then delete the old ones, not vice versa. Anyway, my real question is what’s the best way out of this situation? Should I manually edit the state? I’m not quite sure how would I edit it though as these things are somewhat entangled. I’ve attached a screenshot of the error I’m getting as well as the code I’m using to create the cluster. Thanks for any help!

Yesterday I had a fully operational stack. Then today I tried to re-import an Azure resource group with

pulumi import

that was protected. Now when I do

pulumi up

it gives an error saying that the stack itself is a duplicate, and I can't get it back to a working state.

pulumi:pulumi:Stack (PulumiArm-hco):
    error: Duplicate resource URN 'urn:pulumi:hco::PulumiArm::pulumi:pulumi:Stack::PulumiArm-hco'; try giving it a unique name