is there a way to tell pulumi in special cases to NOT delete resources? background: I'm uploading binaries to (Azure) blob storage, their name containing a timestamp. When I upload a new binary, I really don't want the old binary to be deleted, I just want to add a new one.

When I export a stack to json, remove resources from the json and try to import it later, no changes are shown, what could be the reason for this?

btw. are there any articles around the serialization part of pulumi?

I'm fidding around with dynamic providers for a week now and still hit some edge cases

took me days to figure out it doesn't like undefined values

and a few hours to find out that Object.create(null) isn't a good idea

Hi, right now our Pulumi Scripts fail when we do a

pulumi refresh

or

pulumi up

when trying to unmarshal Cloudflare CertificatePack. I wanted to create an issue but someone beat me to it https://github.com/pulumi/pulumi-cloudflare/issues/167. Maybe someone has an idea what caused this bug and if there is a workaround / fix.

Hello, what are the permission required in aws to getAmi? programmic access is enabled for the IAM user...

I'm trying to understand if its better to use a single project with multiple stacks or multiple projects with one or more stacks. Are there any good examples of complexish setups with pulumi?

Tried finding, but all the examples are very trivial setups

Ideally I'm trying to setup my IaC in a monorepo with the following folder structure <account>/<region>/<env>/<resource>

Hey guys - I am having issues running pulumi up whenever I use Get/List* functions in my code. For example I am trying to obtain the Azure Datafactory Self Hosted integration auth keys using this function azure-native.datafactory.listIntegrationRuntimeAuthKeys | Pulumi. My code fails during the preview stage because the resource group and datafactory resources are not created yet.

Exception: invoke of azure-native:datafactory:listIntegrationRuntimeAuthKeys failed: invocation of azure-native:datafactory:listIntegrationRuntimeAuthKeys returned an error: request failed /subscriptions/xxxxxx/resourceGroups/{resourceGroupName}/providers/Microsoft.DataFactory/factories/{factoryName}/integrationRuntimes/{integrationRuntimeName}/listAuthKeys: autorest/azure: Service returned an error. Status=404 Code="ResourceGroupNotFound" Message="Resource group '{resourceGroupName}' could not be found.

Here is a sample code:

from pulumi import export
from pulumi_azure_native import resources, datafactory

# Resource Group
resource_group = resources.ResourceGroup(
    "self-hosted-runtime", resource_group_name="self-hosted-runtime")

# Data Factory
adf = datafactory.factory.Factory(
    "self-hosted-runtime",
    factory_name="self-hosted-runtime",
    resource_group_name=resource_group.name
)

# Self Hosted Runtime
shr = datafactory.IntegrationRuntime(
    "self-hosted-runtime",
    integration_runtime_name="self-hosted-runetime",
    factory_name=adf.name,
    resource_group_name=resource_group.name,
    properties=datafactory.SelfHostedIntegrationRuntimeArgs(
        type="SelfHosted",
    )
)

# Self Hosted Runtime Auth Keys
shr_auth_keys = datafactory.list_integration_runtime_auth_keys(
    adf.name, shr.name, resource_group.name)

export("shr", shr)
export("shr-auth-keys", shr_auth_keys)

Is this provider supported? https://metal.equinix.com/solutions/kubernetes/

Hi, We are trying to setup aws eks cluster using automation api . is there a way to create eks cluster without having to install `aws-iam-authenticator`: on the local machine. All example i see has the prerequistes to install aws-iam-authenticator on the machine .

Hey, maybe I missed that part in the documentation: Using a magic lambda in crosswalks, how can I modify the policy? I am running a ecs task, but the lambdas function does not have the permission to run ecs tasks 🤔

Hi, I am using

Azure.Core.GetSubscription.InvokeAsync()

to get the subscription id. However, we are shifting to Azure Native nuget package and unable to located any similar method. Can someone help me regarding this?

Anybody else experiencing

update failed with AccessDenied: Access Denied

(from app.pulumi.com) while trying to update stacks (starting since this morning)?

is it advisable to do pulumi IaC on ElasticCache Redis or should it be created manually in the Default VPC and not be part of IaC?

Hi all Where would I start with Java support. Are there plans. If so is there a roadmap. Do people need help

Does anyone using aws-javascript have issues with aws vpc not being created with a name?

const vpc = new aws.ec2.Vpc("my-vpc", {
    cidrBlock: `172.99.0.0/16`,
});

This doesn't create the name in aws console

Hello, I need to add a role assignment to a resource group artifact in a blueprint definition. I tried the following example https://www.pulumi.com/docs/reference/pkg/azure-native/blueprint/roleassignmentartifact? What kind of object does the PrincipleId parameter expect? I get the following error: error: azure-nativeblueprintRoleAssignmentArtifact resource 'roleAssignmentArtifact' has a problem: 'principalIds' should be of type '' but got a string

How can I have

pulumi up

create a single resource? There is the

-t

flag but my understanding is that the resource doesn’t have a URN yet, so I’m not sure what I would target. I have some other things that would be updated with

pulumi up

, and I want to make sure I only create this one thing and not run the other updates.

👋 Hi all, I want my Pulumi program to retrieve some files from a GitHub repo (and deploy them somewhere). I looked at the API reference for the GitHub provider but I don’t see a way to retrieve the content of a file in a remote repo. I’m guessing then that I’ll need to use a third-party GitHub API client library for this? Just checking, so if anyone could just confirm that, or tell me what I’m missing, I’d appreciate it!

Hey guys, i don’t know if this is a common problem. but it looks like my the list of AWS resources on pulumi console is out of date with the actual stack. and when i run

pulumi destroy

it fails with a bunch of 404 errors. is there a way to force a sync or something?

Hi all anyone have a tutorial in creating a public domain with https for the AWS ALB using pulumi? I know that route53 and certificate managers are necessary. I am looking for a straight forward tutorial.

Hi, I would like to use StackReference to get k8s

ClusterProvider

from pipeline A and use it in pipeline B. When I do so, I am able to see the

ClusterProvider

in pipeline B properly but, since it is of type

Output<Provider>

, I can't use it as a provider for k8s Namespace resource

const reference = new pulumi.StackReference("A-dev");
const clusterProvider = reference.requireOutput("clusterProvider").get();

const ns = new k8s.core.v1.Namespace("cluster", {
}, { provider: clusterProvider });
// getting error when pulumi up

Error: Cannot call '.get' during update or preview.
    To manipulate the value of this Output, use '.apply' instead.
        at Proxy.get (/Users/u6105440/Workspace/tr/Stratus/a207937_stratus-namespace/node_modules/@pulumi/pulumi/output.js:173:15)
        at Object.<anonymous> (/Users/u6105440/Workspace/tr/Stratus/a207937_stratus-namespace/src/config.ts:7:75)
        at Module._compile (node:internal/modules/cjs/loader:1101:14)
        at Module.m._compile (/Users/u6105440/Workspace/tr/Stratus/a207937_stratus-namespace/node_modules/ts-node/src/index.ts:439:23)
        at Module._extensions..js (node:internal/modules/cjs/loader:1153:10)
        at Object.require.extensions.<computed> [as .ts] (/Users/u6105440/Workspace/tr/Stratus/a207937_stratus-namespace/node_modules/ts-node/src/index.ts:442:12)
        at Module.load (node:internal/modules/cjs/loader:981:32)
        at Function.Module._load (node:internal/modules/cjs/loader:822:12)
        at Module.require (node:internal/modules/cjs/loader:1005:19)
        at require (node:internal/modules/cjs/helpers:94:18)

I understand that the

provider

property is not Input that blocks it from accepting the

Output<Provider>

, and using

get()

or

apply()

will also having issues. In this case, how do I get it around? I need this

ClusterProvider

to use as k8s provider for the following resources

Can someone point me in the right direction about config? I'd like to default to

--suppress-outputs

on my local machine but still have them in CI pipeline. I did not find any information here: https://www.pulumi.com/docs/intro/concepts/project/#pulumi-yaml or here: https://www.pulumi.com/docs/reference/cli/environment-variables/ yet

pulumi up

has an option

--config

or

--config-file

-however I assume its a reference to

Pulumi.<StackName>.yaml

config file right?

Is it an expected that change in pulumi config does not trigger a diff? If I set the value

pulumi config set my_val 1234

then do

pulumi up

- Pulumi reports 0 changes in the state

Hi, I found that I can't create stack with same name under different projects Details is illustrated in https://github.com/pulumi/pulumi/issues/7728 I assume we should be able to create stack with same name in different projects right? Like to create

dev

in both project A and B

Ask the Expert starting in about 45 minutes https://pulumi.zoom.us/j/82682484604?pwd=N0NvR2lTOXVjVGZmQzhpVW9iNnloUT09