I’m wondering what’s the reason for

pulumi state delete

to not support resource deletion if it has children. I’m trying to delete a

k8s.yaml.ConfigFile

, which subsequently expands into ~100 k8s resources and deleting them one by one manually is just not feasible..

When I run pulumi up for the first time it goes fine, but when I try again without any changes, I am getting the following error: error: Code="InUseSubnetCannotBeDeleted" Message="Subnet functions is in use by ***virtualNetworks/***/subnets/functions/serviceAssociationLinks/AppServiceLink and cannot be deleted. In order to delete the subnet, delete all the resources within the subnet. See aka.ms/deletesubnet." Details=[] Any suggestion is greatly appreciated!

hi all! i have encapsulated the logic for obtaining a viewer certificate for cloudfront (aws) into a function (note I'm returning it in the very first line):

function getViewerCertificate(
  customDomain: string | undefined,
  ... // other parameters
): pulumi.Input<aws.types.input.cloudfront.DistributionViewerCertificate> {
  if (!customDomain) {
    return {
      minimumProtocolVersion: 'TLSv1.1_2016',
      cloudfrontDefaultCertificate: true,
    }
  }

which I later call it (with

customDomain

set to

undefined

)

const viewerCertificate = getViewerCertificate(customDomain,...)

and use it:

const distributionArgs: aws.cloudfront.DistributionArgs = {enabled: true, aliases: customDomain ? [customDomain] : [], viewerCertificate, ...}

and after running the

update

command with automation api this change is detected on every deploy as an updated resource, taking a lot of time to complete the operation. I understand that pulumi should not detect this as a change. is this an expected behavior? it seems like a bug to me

Any way to easily edit a specific value in state? I have a

RandomUuid

value and everything is working correctly except it was in different value when it was applied to specific service and it stored it into it's database during initial startup. I would like to use that value and change it into Pulumi state so that it gets set correctly elsewhere but still keep the

RandomUuid

so that if and when a new env is setup with Pulumi configs it will get generated as it should

hello people! got a question about github callbacks. So we had a bash script that was doing sequential previews on PRs (just calling pulumi preview), with time we got more and more projects and this has become unsustainable; we then refactored a bit the bash script with a python version which now uses the automation API + some concurrency to speed things up. The issue tho, is that we are not getting callbacks on github with this new model, is this because we use the automation API?

Where can I find the specification for the Pulumi state JSON?

hi to all

I am having issues with pulumi_azuread

I have install the lib thru pip3, it is install etc..

but pulumi does not seem to recognize it

on another issue

I want to generate stack on the fly

is there a way to do that bypassing the passphrase step

any suggestion?

What would be the recommended pattern to have

async

"things" happening inside of a ComponentResource? I need to use await and inside of the constructor, AFAIK, is not possible.

pulumi.DependsOn only declares a dependency between pulumi resources. Is there a way to declare a dependency on Pulumi outputs?

I'm trying to create a

BigQuery

Dataset

with code like the following:

ds = Dataset('product_metrics_dataset',
                 dataset_id='pm',
                 location=location,
                 project=project_id)

and I'm getting this error:

googleapi: Error 400: Invalid dataset ID "projects/fullsuitetest/datasets/pm". Dataset IDs must be alphanumeric (plus underscores and dashes) and must be at most 1024 characters long., invalid

it appears that the

projects/fullsuitetest/datasets/

prefix is an error but Pulumi is adding that on my behalf. Any ideas what's going wrong?

@all I have some issue with pulumi i am trying to create folders and projects in google cloud using pulumi python....i did

pulumi up

and it created the 29 resources after that if i do

pulumi preview

it again deleting the resources i did not change any of my source code i am using pulumi version

3.5.1

There's no way to set permissions on a stack programmatically, is there? e.g. by setting a key in Pulumi.yaml? (I would like "derivative" stacks to be shared with other people in my org without having to click through the UI)

Just a simple question out of curiosity.. what's the performance like for most of you in terms of pulumi and resource usage? On my end, node (running typescript pulumi) consumes at minimum 2gb of memory for infrastructure provisioning, and 3.5 gigs for kubernetes (these are the two programs I'm predominantly running). Also, with any major changes to code or if there's been a while, the first run takes about 10 minutes (at least) to reach preview stage. For me - the benefits far outweigh the gains, but I'm wondering if there might be a blog post somewhere about pulumi performance tuning that I could peruse to see if i'm having any pitfalls..

My Pulumi automation program has started throwing exceptions (via the dotnet-sdk) when I call stack.UpAsync(). The exception message includes "stderr: warning: A new version of Pulumi is available. To upgrade from version '3.5.1' to '3.6.0'". Is the Pulumi sdk really throwing an exception to force me to upgrade?

Hey guys, I am trying to add env variables from stack config to lambda API in API Gateway with awsx. But I am getting error

Type 'Output<string> | undefined' is not assignable to type 'Input<string>'.

How can I add these variables neatly? This example shows only one API and few variable but in actual code, I have many routes and 20+ env variable. Any help is appreciated

export const apiGateway = new awsx.apigateway.API('retool-lambda-api-gw', {
    routes: [
        {
            path: '/oc/d-sup',
            authorizers: authorizerAPI,
            method: 'POST',
            eventHandler: new aws.lambda.CallbackFunction('retool-lambda-delete-supporter', {
                callback: async (event: awsx.apigateway.Request) => {
                    return routes.deleteSupporterHandler(event);
                },
                environment: {
                    variables: {
                        DB_HOST: config.getSecret('DB_HOST'), // this and the below vars throw error
                        DB_USER: config.getSecret('DB_USER'),
                        DB_PASSWORD: config.getSecret('DB_PASSWORD'),
                        DB_NAME: config.getSecret('DB_NAME'),
                    }
                },
                role: role,
                vpcConfig: {
                    subnetIds: [awsNetworkingEnvVariables.SUBNET_ID],
                    securityGroupIds: [lambdaSecurityGroup.id],
                }
            }),
        },
    ],
});

When using the automation API I sometimes wish to schedule a workspace.Refresh() followed by an workspace.Up(). Should the workspace be recreated between these calls or is it safe to call Refresh then Up consecutively using the same workspace instance? My motivation here is to speed up deployments because in the case of a small component stack I find the workspace initialization is about 30% of the overall deployment time. I am using the C# Pulumi sdk.

hey guys having some issues using outputs im attempting to use them like so

'secrets': [{ 'name': "dbpassword", 'valueFrom': str(db_password.arn.apply(lambda a : f"{a}"))}],

when I use the lambda to write the value down to the log *pulumi.warn im getting the expected arn value however this doestn appear to be what is sent to aws

no matter what I seem to do I just get this warning: payload is ------ [{‘name’: ‘pulumi-test-app’, ‘image’: ‘nginx’, ‘portMappings’: [{‘containerPort’: 80, ‘hostPort’: 80, ‘protocol’: ‘tcp’}], ‘secrets’: [{‘name’: ‘dbpassword’, ‘valueFrom’: {<pulumi.output.Output object at 0x109bbc400>}}]}]

What resource types are the quickest to create and tear down in Azure? Sometimes I just want to test something in my Pulumi automation code and need to create 3 resources of any type in my project.

Hello all, I am working with an AzureAD.Application (https://www.pulumi.com/docs/reference/pkg/azuread/application/). I need to set the Web RedirectUris property to something like: "msal{id}://auth", where id is the actual provider-assigned unique ID for this managed resource (in that case, the Application (client) ID). The Web property is read-only. @billowy-army-68599 @tall-librarian-49374 is this actually possible?

hi everyone! the cloud sever provider i use doesn't have a terraform/pulumi provider, i decide to implement the provider according to their API docs. since i have very limited knowledge about writing tf/pulumi provider, i'd like to consult you a few questions. appreciate any help!

Asked this in #golang but sharing here also if anybody can help.