pulumi-community #general

melodic-car-16900

10/01/2021, 7:44 PM

🙏 are there plans to add this as a provider any time soon? https://github.com/elastic/terraform-provider-ec

boundless-tailor-35598

10/01/2021, 8:07 PM

Has anyone ever had pulumi up hang in preview mode when creating a stack and reading a Stack Reference? I have a stack that has a stack reference to a Network Stack and it hangs every time upon preview. Never seen this before and wondering if anyone else has and has any tips on how to handle?

boundless-tailor-35598

10/01/2021, 8:07 PM

basically is stuck on Create...

boundless-tailor-35598

10/01/2021, 8:20 PM

I worked out the cause of the issue above. Looks like the application stack was referencing a later version of Pulumi.Aws then the Network stack that it was referencing as a stack reference. Changing the reference to the same Pulumi.Aws version fixed the issue.

little-market-63455

10/02/2021, 7:11 PM

Hello everyone, question regarding Dynamic Resource Providers. With typical resource providers like AWS, at least in the case of Terraform and according to my understanding, the provider itself merely handles auth and general configuration that is applicable to all downstream API calls while the resources themselves seem to handle the details of how to CRUD which kinda makes sense as the provider would otherwise be a massive switch statement. In Pulumi and with dynamic resource providers, it seems the right usage pattern is to have a one to one mapping between the dynamic provider and the resource it manages Am I understanding this correctly? For example, if I were to build a resource provider to support provisioning a Database and a User in fictitious database server then I would end up with two dynamic providers for each kind of resource and not one provider that can handle both resources?

most-lighter-95902

10/02/2021, 11:55 PM

Hi everyone, a quick question regarding using secret values in code. I’d think this is a common use case, but how do you take a secret (say db password) and save that as an environment variable inside a docker container? Doing the following throws this error:

Calling [toString] on an [Output<T>] is not supported.

most-lighter-95902

10/02/2021, 11:55 PM

Copy code

const dbPassword = pulumi.interpolate`${config.requireSecret('db_password')}`

crooked-sunset-90921

10/03/2021, 4:22 AM

Hi all, does anyone have any suggestions how to get a list of all outputs which are exported by another stack? I can get a named output using StackReference..get_output('foo'), but how do I get all outputs?

crooked-sunset-90921

10/03/2021, 4:23 AM

On the CLI there's the command: pulumi stack outputs - thinking there must be an equivalent through the SDK?

little-market-63455

10/03/2021, 4:54 PM

A suggestion, please let me know if it should go on the GitHub repository. While using

awsx.ec2.Vpc.getDefault().publicSubnetIds

I noticed that it always returns only exactly

subnets Checking the code, I found this comment:

back compat. We always would just use the first two public subnets of the region we're in. So preserve that, even though we could get all of them here. Pulling in more than the two we pulled in before could have deep implications for clients as those subnets are used to make many downstream resource-creating decisions.

But the documentation doesn't mention this which is a surprising behavior.

rapid-raincoat-36492

10/03/2021, 9:09 PM

In typescript, how can I say "Don't create resource X until 15 seconds after the IAM Role it depends on finishes provisioning?"

crooked-pillow-11944

10/04/2021, 12:06 AM

I'm trying to pass my GitHub token from a secret exposed by another stack:

Copy code

github = pulumi.StackReference(f"github-{environment}")
github_token = secrets.github("token")
os.environ['GITHUB_TOKEN'] = github_token

Is there any way to force the output to resolve before a github resource is requested?

nutritious-australia-90040

10/04/2021, 7:25 AM

I am trying to create an Azure Private Endpoint in a different Subscription so I want to pass a ResourceGroupId instead of just ResourceGroupName for PrivateEndPointArgs, but that option seems to be absent. is there any solution to this problem?

rough-rain-68282

10/04/2021, 7:42 AM

Hello I need some help, can I somehow get the security group ID from the group name, I am trying to create multiple SGs from a single file using

Copy code

aws.ec2.SecurityGroupRule

this leads me to a problem where the newly created groups cannot be referenced in other groups using the name. The field

Copy code

security_group_id

expects a sg id. Not sure how I can get that dynamically . Thanks

lemon-monkey-228

10/04/2021, 9:48 AM

Totally didnt realise stacks were not unique between projects

lemon-monkey-228

10/04/2021, 9:48 AM

Trying to use the same GCS bucket for 3 projects (they're all components of a larger project) and I kept getting told the stack

production

already existed

lemon-monkey-228

10/04/2021, 9:55 AM

So, I've gone for

some-project-a_production

some-project-b_production

etc.

lemon-monkey-228

10/04/2021, 9:57 AM

Does that mean if I jump between these project directories, I'm going to have to keep `pulumi stack select`ing? 🤔

lemon-monkey-228

10/04/2021, 10:00 AM

My current directory structure is

Copy code

projects
    prometheus
        Pulumi.yaml, Pulumi.prometheus-production.yaml, Pulumi.prometheus-staging.yaml
    grafana
        Pulumi.yaml, Pulumi.grafana-production.yaml, Pulumi.grafana-staging.yaml
    rules
        Pulumi.yaml, Pulumi.rules-production.yaml, Pulumi.rules-staging.yaml

able-doctor-68496

10/04/2021, 3:12 PM

Hi there - I’m really trying to wrap my head around the

props

argument to the

ComponentResource

constructor: https://www.pulumi.com/docs/reference/pkg/python/pulumi/#the-pulumi-python-resource-model-1 My main questions about it are: • When would I want to pass something to this

props

argument? • What would I pass to that argument? For example, currently I’m passing a Kubernetes namespace to a “parent”

ComponentResource

that I’ve created. I’m passing it like so:

Copy code

def __init__(..., namespace: Namespace, ...):
  super().__init__(
    ...,
    props={'namespace': namespace},
    ...
  )

Is that the correct way to use

props

? My thinking was that this would let the Pulumi “engine” know that there is an ordering requirement between the namespace and my

ComponentResource

. Is that how it works? If not, then what are

props

for?

damp-accountant-65956

10/04/2021, 3:42 PM

is there a standard practice for validating inputs into a component that are passed in as

pulumi.StringInput

types in go? I know I could just make them a

string

and validate them but there may be cases where they could be supplied by the end user or as an output from like a data source. So I wasn't sure how to validate them when they are

pulumi.StringInput

values... do I need to do a

.ToStringOutput().ApplyT()

and validate within the applier?

damp-accountant-65956

10/04/2021, 4:39 PM

hmmm... okay so if I use the

ApplyT

and return an error, things still seem to continue on... If i try and use the

pulumi.Output

object returned by calling

ApplyT

I don't see how to convert that back to an Input object?

rapid-raincoat-36492

10/04/2021, 5:21 PM

Has anyone looked into maintaining a terraform provider for Pulumi, especially now that the REST API is available? I'm moving a large terraform codebase over, and being able to access

terraform.state.RemoteStateReference

is lovely, but it only lets me migrate over modules that no other terraform modules depend on (without using SSM as a intermediary step). If I could access Pulumi Stack outputs from Terraform, I would be able to migrate over any terraform module, making it a lot easier to switch over

sparse-gold-10561

10/04/2021, 5:59 PM

Is there any way to pass credentials to use a private repo in a FROM statement line in a Dockerfile, during the DockerBuild phase of pulumi_docker.

purple-train-14007

10/04/2021, 8:20 PM

Can pulumi pull in shell environment variables? Like lets say we dont want to store it in the config file but rather store some shell vars in a jenkins secret. Is there a way to access that in pulumi?

little-market-63455

10/05/2021, 8:39 AM

Hello, does the GitHub Action's

edit-pr-comment

has cases where it cannot detect earlier comments? I have a RP with a lot of pushes/force-pushes and it keeps adding new comments. I am sure I have seen it work before

fast-oyster-42706

10/05/2021, 1:51 PM

Looking for a good example of testing pulumi automation api in golang. Code works and I have done testing when using the CLI but with automation API I am missing something.

cuddly-lion-92829

10/05/2021, 3:18 PM

Hi all - Open office hours today at noon pacific - come with your questions and stories https://pulumi.zoom.us/meeting/register/tZMvf-yprT8qGND7Huc4j2YW1ESX5GoMZZMX

fresh-wire-95028

10/05/2021, 5:43 PM

Hi there! What's the best way to get an ECS service name? It seems that a unique hash is assigned when I specify a name. For example, if my service name is "blah" it will actually be called "blah-3hd8d".

Copy code

const fgService = new awsx.ecs.FargateService('blah', {
...
});

const autoScaleTarget = new aws.appautoscaling.Target(`appautoscaling-target-api-${stack}`, {
  resourceId: `service/${apiClusterName}/${apiServiceName}`, <----- ???
});

alert-glass-49407

10/05/2021, 6:05 PM

Silly question, if I want to get resource nesting in

pulumi preview

output, do I need to create a component resource, or similar? Or is there something I can put into

opts

that would give me control over the display? edit: it turns out this is `parent`: <https://www.pulumi.com/docs/intro/concepts/resources/#parent>