pulumi-community #general

general

rough-rain-68282

10/06/2021, 12:36 PM

snapshot integrity failure; refusing to use it

Hi anyone how I can get rid of this error ?

billions-xylophone-85957

10/06/2021, 2:41 PM

A generic design question: why is a stack reference output an instance of

Output

? Stack reference outputs are read-only at runtime and they don't change during the execution, right? Why is it a promise then?

sparse-gold-10561

10/06/2021, 3:16 PM

Are there any risks in doing an

pulumi import

of a CloudFormation stack? My understanding is it just shows what code you need to add via stdout and doesn't actually add anything to the CF or Pulumi state until you actually add it to your code. Is that correct?

tall-nightfall-10556

10/06/2021, 5:36 PM

Is there any way to speed up the transfer of s3 objects? I have a directory of images that is taking a very long time to upload via pulumi, but only takes a few seconds via

aws s3 sync

. I tried doing a sync and refresh first so pulumi could just handle deltas, but it wound up recreating all the files the first time I ran

up

, so it didn't save me any time. (edited)

big-potato-91793

10/06/2021, 6:59 PM

What is the best doc link I can have to create my own pulumi provider 😁 ?

quaint-toothbrush-75472

10/06/2021, 8:14 PM

Hello!! I need to deploy an App Service Plan, a WebApp and then push the nodejs application to this appservice, can i do this with pulumi?

hallowed-horse-57635

10/07/2021, 1:51 AM

Question - is there a way to capture the code that pulumi executes ? (hopefully this makes sense and will try to explain - example., we have a js program with variables that we will pass using a custom program/script through a json file that has the names of the variables Now when we call pulumi up, Is there a way to capture the code pulumi is using to deploy ? Alternately, is it possible to recreate the code using the state ?

great-sunset-355

10/07/2021, 8:20 AM

Is there a way to permanently suppress stack outputs when using

pulumi

CLI? I'm developing some resources and doing a lot of iterations and adding

--supproess-outputs

every time is a bit uncomfortable. Ideally, this could be part of the configuration so each developer can set their own settings.

calm-nest-80923

10/07/2021, 8:30 AM

Aloha! Is there a way to set the verbose logging mode for the node SDK? Or pass along arguments to the CLI? The way escapes me 😞

creamy-sugar-83202

10/07/2021, 10:06 AM

[QUESTION] Hi there, I may have missed something in the docs, but could anyone help me out with splitting existing resources from one single stack into multiple stacks without re-deploying the resources? I've created a new stack but not sure how the code structure should look like.. when I do

pulumi up

it detects all existing resources and tries to re-deploy them into the newly created stack... Thanks!

swift-island-2275

10/07/2021, 10:21 AM

Hello, Quick Question: can I use Custom Resource to control state of a resource that I manage in a custom way ? I am working with Atlas MongoDB provider and I'd like to be able to create a database as a part of stack. In order to do it, I need to use Mongo driver. At the same time, I'd like to be able to keep the state of the created databases in Pulumi, as for me a database is part of infra. When I try to use a CustomResource class, I need to provide a type. If I just make up the type, I get exception like

error: unrecognized resource type (Check):

I guess I am doing something incorrectly.

rapid-soccer-18092

10/07/2021, 1:07 PM

I've refactored a bunch of code into a new component resource. It's basically creating a nicer abstraction over a Kubernetes helm chart. The problem now is that when I

pulumi up

I get the following types of errors:

kubernetes:<http://rbac.authorization.k8s.io/v1:ClusterRole|rbac.authorization.k8s.io/v1:ClusterRole> (datadog-chart):
    error: resource datadog-chart was not successfully created by the Kubernetes API server : <http://clusterroles.rbac.authorization.k8s.io|clusterroles.rbac.authorization.k8s.io> "datadog-chart" already exists
 
  kubernetes:<http://rbac.authorization.k8s.io/v1:ClusterRole|rbac.authorization.k8s.io/v1:ClusterRole> (datadog-chart-cluster-agent):
    error: resource datadog-chart-cluster-agent was not successfully created by the Kubernetes API server : <http://clusterroles.rbac.authorization.k8s.io|clusterroles.rbac.authorization.k8s.io> "datadog-chart-cluster-agent" already exists

I guess this is expected since Pulumi cannot associate the old resource with the refactored resource. What is the best way to go about doing with without me manually deleting these resources from Kubernetes?

green-motorcycle-58080

10/07/2021, 1:21 PM

What's the best way to get speakers for a meetup about pulumi? I run my local #golang meetup and I'd love to do a focused session on pulumi. For context, this would include a meetup with a talk or two, then a workshop style session following it. I'm just looking for help with the first meetup

billions-mechanic-26704

10/07/2021, 2:20 PM

Hi community. Does soemone knows why I am getting this error when doing

pulumi login

against a specific organization?

pulumi login -c <https://app.pulumi.com/myorg>
Logging in using access token from PULUMI_ACCESS_TOKEN
error: problem logging in: getting user info from <https://app.pulumi.com/myorg>: unmarshalling response object: invalid character '<' looking for beginning of value

I have configured as environment variable in my shell the

PULUMI_ACCESS_TOKEN

variable, but it seems that the response i got has to do with this comment in this issue https://github.com/pulumi/pulumi/issues/3194#issuecomment-892976293

curved-kitchen-23422

10/07/2021, 5:27 PM

Hi Team, We have deployed the elastic stack in AWS using pulumi. We have push some data into elasticsearch stack. Later we are trying to update the SG rule of elasticsearch stack. While updating the SG rule in the exiting cluster, old elasticsearch stack is deleted and new ES stack is created and we loss the data also.

gifted-engine-92308

10/07/2021, 5:27 PM

I’m trying to install RMQ using the helm stuff and I need to know the service name after it’s created so that I can set some config for a service that uses it. So far everything I try causes the error to be injected into the config - I’ve tried apply and interpolation

acoustic-flag-54195

10/07/2021, 6:12 PM

Hello, I am trying to open a PR to fix some of your documentation, but I get

ERROR: Permission to pulumi/docs.git denied to kevinneville.
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

Any ideas?

purple-train-14007

10/07/2021, 6:58 PM

Update on Azure Domain Services API issue: I've managed to work around the issue (which goes against their instructions in their docs) so the azure domain services API is supposed to build a few things in its workflow, an NSG, 2 Nics, LB and a namespace. The API currently doesn't build the NSG which is what lets their backend VM test ports. In order to get around the issue we can build the NSG ourselves and associate it with the subnet that Domain Services is being deployed to. Their documentation explicitly says not to do this but..... _¯\_(ツ)_/¯. Anywho so you create the NSG with the following rules and make sure to use the service tags:_

export const AllowPSRemoting = {
    name: "AllowPSRemoting",
    priority: 301,
    direction: "Inbound",
    access: "Allow",
    protocol: "Tcp",
    sourcePortRange: "*",
    destinationPortRange: "5986",
    sourceAddressPrefix: "AzureActiveDirectoryDomainServices",
    destinationAddressPrefix: "*",
}


export const AllowRD = {
    name: "AllowRD",
    priority: 201,
    direction: "Inbound",
    access: "Allow",
    protocol: "Tcp",
    sourcePortRange: "*",
    destinationPortRange: "3389",
    sourceAddressPrefix: "CorpNetSaw",
    destinationAddressPrefix: "*",
}

export const PortForWACService = {
    name: "PortForWACService",
    priority: 100,
    direction: "outbound",
    access: "Allow",
    protocol: "Tcp",
    sourcePortRange: "*",
    destinationPortRange: "443",
    sourceAddressPrefix: "VirtualNetwork",
    destinationAddressPrefix: "WindowsAdminCenter",
}

@gentle-diamond-70147 we may wanna add this to the Pulumi docs just to help the community or put it somewhere we can share the info around

purple-pager-67607

10/07/2021, 7:09 PM

Hello, is the app down? https://app.pulumi.com/ I am getting a 404

salmon-printer-16080

10/07/2021, 11:06 PM

Hi guys, where is the best place to find learnings for Azure-TypeScript unit testing? I am unable to find many resources using Azure. Running into issue after issue with the Mocking functions and the documentation isn't straight forward. Keen to see examples / common issues.

sparse-gold-89283

10/08/2021, 1:09 AM

Is there currently a service like https://www.fugue.co/ or https://bridgecrew.io/ (IaC security/compliance scans) that support Pulumi?

refined-appointment-5884

10/08/2021, 3:56 AM

Hello! Just getting started with pulumi, coming from terraform. I feel like there is something that I don't quite get about how logical names are supposed to be used. If someone has insights on how to solve https://github.com/pulumi/pulumi/issues/8134

sparse-spring-91820

10/08/2021, 8:13 AM

Hello 👋, I'm trying to setup ci/cd using pulumi and circleci (pulumi orb), but I'm having an issue with

pulumi/stack_init

step as it fails because of the already existing stack. Is there any way how to select stack if it exists or init new one if doesn't other than piping command's stderr to null output so that my circleci job doesn't fail? This is my circleci job config:

jobs:
  deploy-infra:
    <<: *default-executor
    working_directory: ~/project/infrastructure
    steps:
      - checkout:
          path: ../
      - node/install-packages
      - pulumi/login
      - pulumi/stack_init:
          stack: 'dev'
      - run:
          name: Add stack config
          command: |
            pulumi config set aws:region us-east-1
            pulumi config set bucket:name cicd-test-bucket
      - pulumi/update:
          stack: 'dev'

I can assign build number to stack name like it's in the orb example:

- pulumi/stack_init:
          stack: 'robot-co/test-pr_${CIRCLE_BUILD_NUM}'

but I don't want to create new stack and new resources on every ci/cd trigger, I just want to have 3 stacks which are

dev

staging

and

prod

wet-noon-14291

10/08/2021, 8:15 AM

Hi, I have a rather poor error message when doing pulumi up through my automation project, see picture. Is there a way to figure out more exactly what it is that fails?

One or more errors occurred

doesn't help that much.

wet-noon-14291

10/08/2021, 8:17 AM

Second question of the day... Is there an explanation to when I need to install plugin and when I don't? I thought they were installed automatically when I installed the NPM packages, but now it seems like I miss one package in my when I run the application (it is an automation application). I know I can just install it manually, but I don't feel there is a consistent behavior around when I need to install plugins.

swift-australia-96791

10/08/2021, 8:33 AM

Hi All, I have been trying to use Pulumi GitHub Action and trying the new stack during run time below is the code snippet

- uses: pulumi/actions@v3
        with:
          command: preview
          stack-name: prod
          upsert: true
          work-dir: PulumiProject 
        env:
          PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }}

While GitHub Action runs I m getting an error " pulumi😛ulumi:Stack PulumiProject-prod create error: Missing required configuration variable 'PulumiProject:required_value' ", Can anyone assist me how to pass config values here?

great-breakfast-56601

10/08/2021, 9:59 AM

Func<ImmutableDictionary<string, object>,
    CustomResourceOptions, ImmutableDictionary<string, object>>[] transformations =
{
    (obj, opts) => {
        if ((string)obj["kind"] == "Service" &&
                (string)((ImmutableDictionary<string, object>)obj["metadata"])["name"] == "frontend")
        {
            var spec = ((ImmutableDictionary<string, object>)obj["spec"]);
            obj = obj.SetItem("spec", spec.SetItem("type", "LoadBalancer"));
        }
        return obj;
    },
};
var guestbook = new ConfigFile("guestbook", new ConfigFileArgs
{
    File = "guestbook-all-in-one.yaml",
    Transformations = transformations,
});

The typings in the example don't appear to be current. Anyone have a moment to help?

great-breakfast-56601

10/08/2021, 1:03 PM

TransformationAction[] transformations =

great-breakfast-56601

10/08/2021, 1:04 PM

That's the correct typing for the delegate.

rapid-raincoat-36492

10/08/2021, 4:16 PM

I often see errors like when running Pulumi with typecsript like in the following picture, where it says "Unable to require

.d.ts

file": These errors go away when I run

tsc --build

, but I'm wondering if there's a way to use

--transpile-only

somehow where I would not need to build with

tsc

first

Title

rapid-raincoat-36492

10/08/2021, 4:16 PM

I often see errors like when running Pulumi with typecsript like in the following picture, where it says "Unable to require

.d.ts

file": These errors go away when I run

tsc --build

, but I'm wondering if there's a way to use

--transpile-only

somehow where I would not need to build with

tsc

first

View count: 1