Hi, Pulumi team! I’m wondering if there are any tutorials/articles on splitting a large project into multiple subprojects. Right now I have thousands of resources all originating from the same index.ts. Most of them are created implicitly, as children of things like EKS clusters, cofig groups, etc. For various reasons I’d like to split it into 4-5 subprojects and I’m wondering what would be the most efficient way of doing this without disrupting existing infrastructure. I guess, my main challenge is around properly renaming all URNs and ensuring that a new state won’t trigger any unexpected updates. Thanks for any help!

Hey Pulumi Team, I found an issue with Azures API I'm working with MSFT to solve. This is for AADDS under azure native. So what's happening is not a Pulumi issue but when you build AADDS, their API doesn't complete an important part of its workflow which is creating the NSG with special service tags on it; this is breaking workflows that build AADDS.

The NSG, NICs and NSG are all auto generated by this api

Hi Team, kindly help ... we are facing issue with pulumi stack - getting below error :

[2021-10-06T06:47:38.665Z] error: the current deployment has 1 resource(s) with pending operations:
[2021-10-06T06:47:38.665Z]   * urn:pulumi:stack-test::project-test::aws:elasticsearch/domain:Domain::stack-test, interrupted while deleting

While updating the inbound rule for existing pulumi stack [12:50 PM] Kindly help, we are mentaining the stack from remote cloud

quick question - in my pulumi code, is it possible to fetch some kind of a current-stack’s unique ID? I just need to ensure uniqueness when defining my cognito user pool domain, and I think that might help me in achieving that 🙂

Hello, I accidentally manually deleted a resource created by pulumi infrastructure, I am sure that the resource I delete doesnt have dependency on any other resource. Can I use "pulumi delete state 'urn of the resource I deleted' " to get rid of it from the state ?

snapshot integrity failure; refusing to use it

Hi anyone how I can get rid of this error ?

A generic design question: why is a stack reference output an instance of

Output

? Stack reference outputs are read-only at runtime and they don't change during the execution, right? Why is it a promise then?

Are there any risks in doing an

pulumi import

of a CloudFormation stack? My understanding is it just shows what code you need to add via stdout and doesn't actually add anything to the CF or Pulumi state until you actually add it to your code. Is that correct?

Is there any way to speed up the transfer of s3 objects?  I have a directory of images that is taking a very long time to upload via pulumi, but only takes a few seconds via 

aws s3 sync

. I tried doing a sync and refresh first so pulumi could just handle deltas, but it wound up recreating all the files the first time I ran 

up

, so it didn't save me any time. (edited)

What is the best doc link I can have to create my own pulumi provider 😁 ?

Hello!! I need to deploy an App Service Plan, a WebApp and then push the nodejs application to this appservice, can i do this with pulumi?

Question - is there a way to capture the code that pulumi executes ? (hopefully this makes sense and will try to explain - example., we have a js program with variables that we will pass using a custom program/script through a json file that has the names of the variables Now when we call pulumi up, Is there a way to capture the code pulumi is using to deploy ? Alternately, is it possible to recreate the code using the state ?

Is there a way to permanently suppress stack outputs when using

pulumi

CLI? I'm developing some resources and doing a lot of iterations and adding

--supproess-outputs

every time is a bit uncomfortable. Ideally, this could be part of the configuration so each developer can set their own settings.

Aloha! Is there a way to set the verbose logging mode for the node SDK? Or pass along arguments to the CLI? The way escapes me 😞

[QUESTION] Hi there, I may have missed something in the docs, but could anyone help me out with splitting existing resources from one single stack into multiple stacks without re-deploying the resources? I've created a new stack but not sure how the code structure should look like.. when I do

pulumi up

it detects all existing resources and tries to re-deploy them into the newly created stack... Thanks!

Hello, Quick Question: can I use Custom Resource to control state of a resource that I manage in a custom way ? I am working with Atlas MongoDB provider and I'd like to be able to create a database as a part of stack. In order to do it, I need to use Mongo driver. At the same time, I'd like to be able to keep the state of the created databases in Pulumi, as for me a database is part of infra. When I try to use a CustomResource class, I need to provide a type. If I just make up the type, I get exception like

error: unrecognized resource type (Check):

I guess I am doing something incorrectly.

I've refactored a bunch of code into a new component resource. It's basically creating a nicer abstraction over a Kubernetes helm chart. The problem now is that when I

pulumi up

I get the following types of errors:

kubernetes:<http://rbac.authorization.k8s.io/v1:ClusterRole|rbac.authorization.k8s.io/v1:ClusterRole> (datadog-chart):
    error: resource datadog-chart was not successfully created by the Kubernetes API server : <http://clusterroles.rbac.authorization.k8s.io|clusterroles.rbac.authorization.k8s.io> "datadog-chart" already exists
 
  kubernetes:<http://rbac.authorization.k8s.io/v1:ClusterRole|rbac.authorization.k8s.io/v1:ClusterRole> (datadog-chart-cluster-agent):
    error: resource datadog-chart-cluster-agent was not successfully created by the Kubernetes API server : <http://clusterroles.rbac.authorization.k8s.io|clusterroles.rbac.authorization.k8s.io> "datadog-chart-cluster-agent" already exists

I guess this is expected since Pulumi cannot associate the old resource with the refactored resource. What is the best way to go about doing with without me manually deleting these resources from Kubernetes?

What's the best way to get speakers for a meetup about pulumi? I run my local #golang meetup and I'd love to do a focused session on pulumi. For context, this would include a meetup with a talk or two, then a workshop style session following it. I'm just looking for help with the first meetup

Hi community. Does soemone knows why I am getting this error when doing

pulumi login

against a specific organization?

pulumi login -c <https://app.pulumi.com/myorg>
Logging in using access token from PULUMI_ACCESS_TOKEN
error: problem logging in: getting user info from <https://app.pulumi.com/myorg>: unmarshalling response object: invalid character '<' looking for beginning of value

I have configured as environment variable in my shell the

PULUMI_ACCESS_TOKEN

variable, but it seems that the response i got has to do with this comment in this issue https://github.com/pulumi/pulumi/issues/3194#issuecomment-892976293

Hi Team, We have deployed the elastic stack in AWS using pulumi. We have push some data into elasticsearch stack. Later we are trying to update the SG rule of elasticsearch stack. While updating the SG rule in the exiting cluster, old elasticsearch stack is deleted and new ES stack is created and we loss the data also.

I’m trying to install RMQ using the helm stuff and I need to know the service name after it’s created so that I can set some config for a service that uses it. So far everything I try causes the error to be injected into the config - I’ve tried apply and interpolation

Hello, I am trying to open a PR to fix some of your documentation, but I get

ERROR: Permission to pulumi/docs.git denied to kevinneville.
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

Any ideas?

Update on Azure Domain Services API issue: I've managed to work around the issue (which goes against their instructions in their docs) so the azure domain services API is supposed to build a few things in its workflow, an NSG, 2 Nics, LB and a namespace. The API currently doesn't build the NSG which is what lets their backend VM test ports. In order to get around the issue we can build the NSG ourselves and associate it with the subnet that Domain Services is being deployed to. Their documentation explicitly says not to do this but..... _¯\_(ツ)_/¯. Anywho so you create the NSG with the following rules and make sure to use the service tags:_

export const AllowPSRemoting = {
    name: "AllowPSRemoting",
    priority: 301,
    direction: "Inbound",
    access: "Allow",
    protocol: "Tcp",
    sourcePortRange: "*",
    destinationPortRange: "5986",
    sourceAddressPrefix: "AzureActiveDirectoryDomainServices",
    destinationAddressPrefix: "*",
}


export const AllowRD = {
    name: "AllowRD",
    priority: 201,
    direction: "Inbound",
    access: "Allow",
    protocol: "Tcp",
    sourcePortRange: "*",
    destinationPortRange: "3389",
    sourceAddressPrefix: "CorpNetSaw",
    destinationAddressPrefix: "*",
}

export const PortForWACService = {
    name: "PortForWACService",
    priority: 100,
    direction: "outbound",
    access: "Allow",
    protocol: "Tcp",
    sourcePortRange: "*",
    destinationPortRange: "443",
    sourceAddressPrefix: "VirtualNetwork",
    destinationAddressPrefix: "WindowsAdminCenter",
}

@gentle-diamond-70147 we may wanna add this to the Pulumi docs just to help the community or put it somewhere we can share the info around

Hello, is the app down? https://app.pulumi.com/ I am getting a 404

Hi guys, where is the best place to find learnings for Azure-TypeScript unit testing? I am unable to find many resources using Azure. Running into issue after issue with the Mocking functions and the documentation isn't straight forward. Keen to see examples / common issues.

Is there currently a service like https://www.fugue.co/ or https://bridgecrew.io/ (IaC security/compliance scans) that support Pulumi?

Hello! Just getting started with pulumi, coming from terraform. I feel like there is something that I don't quite get about how logical names are supposed to be used. If someone has insights on how to solve https://github.com/pulumi/pulumi/issues/8134

Hello 👋, I'm trying to setup ci/cd using pulumi and circleci (pulumi orb), but I'm having an issue with

pulumi/stack_init

step as it fails because of the already existing stack. Is there any way how to select stack if it exists or init new one if doesn't other than piping command's stderr to null output so that my circleci job doesn't fail? This is my circleci job config:

jobs:
  deploy-infra:
    <<: *default-executor
    working_directory: ~/project/infrastructure
    steps:
      - checkout:
          path: ../
      - node/install-packages
      - pulumi/login
      - pulumi/stack_init:
          stack: 'dev'
      - run:
          name: Add stack config
          command: |
            pulumi config set aws:region us-east-1
            pulumi config set bucket:name cicd-test-bucket
      - pulumi/update:
          stack: 'dev'

I can assign build number to stack name like it's in the orb example:

- pulumi/stack_init:
          stack: 'robot-co/test-pr_${CIRCLE_BUILD_NUM}'

but I don't want to create new stack and new resources on every ci/cd trigger, I just want to have 3 stacks which are

dev

,

staging

and

prod

.

Hi, I have a rather poor error message when doing pulumi up through my automation project, see picture. Is there a way to figure out more exactly what it is that fails?

One or more errors occurred

doesn't help that much.