pulumi-community #general

Channels

general

calm-quill-21760

08/17/2021, 5:30 PM

Good morning! I’m trying to automate deployment of several steps in EKS, including the creation of a CA, the CSR, and the Kubernetes secret. I see classes like

CertificateSigningRequestConditionArgs

and

CertificateSigningRequestStatusArgs

but have yet to find documentation as to how these tie into a

CertificateSigningRequest

so I can get the Kubernetes secret signed (“Approved,Issued”). Anyone have a pointer to an example?

refined-terabyte-65361

08/17/2021, 6:05 PM

Hello, I have pulumi stack in aws s3 how to import it to local ?

mysterious-lighter-33699

08/17/2021, 6:33 PM

hm, strike that question above - but is there an easy way to get, from

pulumi up

the URL where people can follow along, in a machine-readable form? I'd like to provide a link to that from a github workflow and it's only really accessible in logs right now

ancient-night-64850

08/17/2021, 7:14 PM

(typescript) How can I append a key value to this array? public static tags: pulumi.Input<{[key: string]: pulumi.Input<string>}>; tags = { "key1": "val1", "key2": "val2" }; Doing this replaces all the current tags with just the one key/value pair tags && { "key3": "val3" }

rough-window-15889

08/17/2021, 7:41 PM

How is everyone organizing their pulumi stacks? Are you using monolith stacks? Are you using microstacks? Have you used one and changed to the other? What were lessons learned or advantages to the different approaches?

wet-fall-57893

08/18/2021, 2:22 AM

hey everyone. what do I need to do in order to run

spread

const ssmPolicyDocumentStatement: pulumi.Input<pulumi.Input<aws.iam.PolicyStatement>[]>

context: need to merge 2 statements one from AWS managed policy the other is custom

rich-cat-16319

08/18/2021, 2:35 AM

Hi. I'm playing around with creating pulumi component providers using this example. and one of the properties of the component I am creating is an Azure App Service. The example uses an S3 bucket and has a

"$ref": "/aws/v4.0.0/schema.json#/resources/aws:s3%2Fbucket:Bucket"

that is in the

schema.json

Does anyone know where can I find the same reference but for the

azure-native:web:WebApp

fast-florist-41572

08/18/2021, 8:45 AM

Is there any easy way to rename a project a move around the files/folder root of the project

ancient-eve-13947

08/18/2021, 9:51 AM

is there a way to un-secret a pulumi.Output<> that's marked as secret because it depends/derives from a secret value in order to generate a config file for a non-Pulumi managed application?

ancient-eve-13947

08/18/2021, 11:03 AM

also, when creating docker images with pulumi, is there a way to suppress the output of all the layers when doing

pulumi up

pulumi preview

sparse-intern-71089

08/18/2021, 1:32 PM

This message was deleted.

icy-jordan-58549

08/18/2021, 3:13 PM

team, I want to highlight it here, we’ve had monorepo together with pulumi code for a long time and it was tough to keep it together due to performance issues, typescript was trying to index definition files forever, today we are gonna remove pulumi out from our codebase and keep it separately, which totally disables an ability to use interfaces across infra + backend in a single monorepo. https://github.com/pulumi/pulumi/issues/7082 (this issue was created in May 2021, no response, I hope you will find some time to have at least your input on this issue)

billowy-pilot-50934

08/18/2021, 3:34 PM

Hi, silly question here, how is pulumi pronounced?

stocky-magazine-78486

08/18/2021, 3:37 PM

Reposting here, to have a better reach

many-psychiatrist-74327

08/18/2021, 4:30 PM

👋 hello! qq: is there a way to see the historical outputs of my stack?

pulumi stack output

tells me what the outputs are now, but can I see the outputs for a previous revision/version?

👍 1

billowy-pilot-50934

08/18/2021, 6:42 PM

#general I'm testing out importing resources in AWS. I am using a dotnet application with the AWS SDK. I was able to import the VPC, security group and subnets. When I go online and view my resources, I see that Pulumi has imported additional information that I did not supply. In this case, Pulumi shows the egress and ingress information in the resource tab. I did not specify that information, but it is correct. Is there a way to import that additional information into the application? I see that I can copy the JSON for the security group by clicking details, but is there a way to have Pulumi update my c# code? my stack.yaml only has the region I an using, and the Pulumi.yaml only has the name, description and runtime. Example code below

billowy-pilot-50934

08/18/2021, 6:43 PM

This is the JSON for the ingress array of the security group I imported

billowy-pilot-50934

08/18/2021, 6:43 PM

[
  {
    "cidrBlocks": [],
    "description": "Traffic from subnet",
    "fromPort": 0,
    "ipv6CidrBlocks": [],
    "prefixListIds": [],
    "protocol": "-1",
    "securityGroups": [],
    "self": true,
    "toPort": 0
  },
  {
    "cidrBlocks": [],
    "description": "Traffic VPN",
    "fromPort": 0,
    "ipv6CidrBlocks": [],
    "prefixListIds": [],
    "protocol": "-1",
    "securityGroups": [
      "sg-Hidden"
    ],
    "self": false,
    "toPort": 0
  },
  {
    "cidrBlocks": [
      "0.0.0.0/0"
    ],
    "description": "HTTPS",
    "fromPort": 443,
    "ipv6CidrBlocks": [],
    "prefixListIds": [],
    "protocol": "tcp",
    "securityGroups": [],
    "self": false,
    "toPort": 443
  }
]

billowy-pilot-50934

08/18/2021, 6:43 PM

Here is the c# code I am using

billowy-pilot-50934

08/18/2021, 6:43 PM

private SecurityGroup ImportSecurityGroup()
    {
        var tags = new InputMap<string>();
        tags.Add("Name", "subnet-1_SG");

        return new SecurityGroup("dev-1a_sg",
            new SecurityGroupArgs
            {
                Name = "dev-public-1a_sg",
                VpcId = "vpc-097dc5c3d016997a8",
                Description = "Security group",
                Tags = tags,
                // I would like to get this information
                // which shows in my stack online
                Egress = null
                //^^^^^^^
            },
            new CustomResourceOptions
            {
                ImportId = "sg-Hidden"
            });
    }

billowy-pilot-50934

08/18/2021, 6:44 PM

Other than using the JSON online, is there a way to generate the properties with that additional info?

calm-quill-21760

08/18/2021, 10:56 PM

How do I prevent

pulumi

from downloading a plugin? I have a previous version installed but it insists on downloading a later one (that I suspect has a bug).

rapid-iron-52715

08/18/2021, 11:07 PM

I get an "refusing to proceed" when I try to import an exported stack where I deleted resources from "pending_operations", but this is the solution offered by the CLI.

rapid-iron-52715

08/18/2021, 11:08 PM

I had the impression these manual imports would get me around this refusal, haha

echoing-jelly-67975

08/18/2021, 11:50 PM

I believe there may be a bug with

awsx.autoscaling.AutoScalingLaunchConfiguration

and spot instances. I'm getting a

Placement tenancy is not supported for spot instances.

, and

placementTenancy

is defaulting to

default

with no way to not set it.

limited-rainbow-51650

08/19/2021, 6:49 AM

I just read the

August 18

release blog article: https://www.pulumi.com/blog/pulumi-release-notes-m60/#dependson-now-works-for-pulumi-component-packages-and-more In the linked section on

dependsOn

, I read this:

Now, depending on a Pulumi Component Package's component will always wait on all of that component's children, regardless of language.

ComponentResource

and a Pulumi Component Package are 2 different things. Does this change impacts the dependency management of a

ComponentResource

salmon-guitar-84472

08/19/2021, 6:54 AM

Has there ever been a proper solution to this chart deployment issue. the SkipCRDRendering = true, doesnt seem to work and transforming the names of lots of CRDs seems very counter productive

error: Duplicate resource URN 'urn:pulumi:xxxaks::ZGA.Infrastructure.NewPartner.AKS::kubernetes:<http://helm.sh/v3:Chart$kubernetes:apiextensions.k8s.io/v1:CustomResourceDefinition::monitoring/prometheus-kube-prometheus-alertmanager';|helm.sh/v3:Chart$kubernetes:apiextensions.k8s.io/v1:CustomResourceDefinition::monitoring/prometheus-kube-prometheus-alertmanager';> try giving it a unique name

👀 1

rich-action-28775

08/19/2021, 8:52 AM

Hi, when creating an alias for a resource, where can I see the all of the resources aliases? Tried running the following:

pulumi stack --show-ids
pulumi stack --show-urns

Also searched for it in the UI in Pulumi.com

👀 1

elegant-pager-5412

08/19/2021, 12:51 PM

Hey. We have an organization account, but I cannot allow other members participate in stacks I transferred from my test individual account. It says I need to upgrade to the Enterprise plan to do so. It seems only logical and basic that my team members will be able to access those stacks. What should I do?

acoustic-arm-10406

08/19/2021, 6:29 PM

I'm feeling daft... can anyone explain to me how to follow these instructions and use

import * as awsx from "@pulumi/awsx";

https://www.pulumi.com/docs/guides/crosswalk/aws/api-gateway/#defining-a-lambda-function-event-handler-route When I do

pulumi up

It's saying I have to use

require

because of a node_module from pulumi is using require. I would like to use import instead of refactoring all my code to use require Error:

require() of /index.js from /node_modules/@pulumi/pulumi/cmd/run/run.js is an ES module file as it is a .js file whose nearest parent package.json contains "type": "module" which defines all .js files in that package scope as ES modules.
    Instead rename index.js to end in .cjs, change the requiring code to use import(), or remove "type": "module" from /package.json.

Title

acoustic-arm-10406

08/19/2021, 6:29 PM

I'm feeling daft... can anyone explain to me how to follow these instructions and use

import * as awsx from "@pulumi/awsx";

https://www.pulumi.com/docs/guides/crosswalk/aws/api-gateway/#defining-a-lambda-function-event-handler-route When I do

pulumi up

It's saying I have to use

require

because of a node_module from pulumi is using require. I would like to use import instead of refactoring all my code to use require Error:

require() of /index.js from /node_modules/@pulumi/pulumi/cmd/run/run.js is an ES module file as it is a .js file whose nearest parent package.json contains "type": "module" which defines all .js files in that package scope as ES modules.
    Instead rename index.js to end in .cjs, change the requiring code to use import(), or remove "type": "module" from /package.json.

Hmm... turns out all the examples I'm seeing (including this docs page) are in typescript, which seems to handle the import. So if you choose javascript you have to use require.

little-cartoon-10569

08/19/2021, 10:08 PM

Lambdas cannot use

"type":"module"

even if your runtime is node14. Don't know why. So if you want to create a pure JS package for your lambdas, you either need to use commonJS, or transpile down to that. I don't know how to transpile JS->JS; the TS->JS transpilation done with Pulumi's default config has always worked for me.

acoustic-arm-10406

08/20/2021, 4:25 PM

Yeah TS -> JS just moves it to commonJS ... We opted not to use TS so I'll just write it in commonJS. Thanks.

View count: 2