pulumi-community #general

shy-butcher-69105

10/14/2021, 10:21 AM

Hi everyone. Loving pulumi 🙂 On a

pulumi up

today I'm getting a non-ending run (at least 17m). • logging with

v=9

didn't reveal anything • tracing with

pulumi up --logtostderr -v=9 --tracing=file:./trace

then

PULUMI_DEBUG_COMMANDS=1 pulumi view-trace ./up.trace

shows: ◦ 17m in

pulumi plan

, which includes 17m in both

/pulumirpc.LanguageRuntime/Run

and

/pulumirpc.ResourceProvider/Configure

is there a way to debug this further? (for context, Win10 powershell (replicates with CMD), pulumi v3.14.0, making a single change on AWS.IAM, using hosted

boundless-angle-56560

10/14/2021, 2:56 PM

Hello, I'd like to ask if its possible to somehow optimize Pulumi running time when using Docker images. It seems that pulumi rebuilds images even when there is no change to the image in the sources. Also it seems to me that it doesn't happen always. Sometimes Pulumi happily skips this phase

high-morning-17948

10/14/2021, 6:58 PM

Have anyone implemented a rollback logic with Github actions or CircleCI for pulumi. If not, does exporting the stack json before a deploy and checking for any error to import the backup stack and refresh with the exported stack a good approach?

brave-angle-33257

10/14/2021, 8:16 PM

hi guys is there a better way to read in a local file with node? I have a

buildspec.yml

file I'm trying to read in to aws.codebuild.Project as a variable, but using

fs.readFileSync

I get:

Type 'Buffer' is not assignable to type 'Input<string>'.

brave-angle-33257

10/15/2021, 3:29 AM

my automation API just failed with message:

Copy code

"Error: Detected multiple versions of '@pulumi/pulumi' in use in an inline automation api program.\nUse the yarn 'resolutions' field to pin to a single version: <https://github.com/pulumi/pulumi/issues/5449>."

I locked my version to

3.14.0

but I see the dependency of

pulumi/aws

has:

Copy code

"@pulumi/aws@4.24.1":
  version "4.24.1"
  ...
  dependencies:
    "@pulumi/pulumi" "^3.0.0"

and also the package was just updated an hour ago.. is this the cause? not sure how else I can avoid this issue and it just popped up

brave-angle-33257

10/15/2021, 3:35 AM

im building this all in a docker container, i think i'll need to build it "nocache" each time to get the latest version of the binary, and also move my package to read

^3.0.0

to match the dependency of the pulumi/aws package and build the whole thing at once each time to make sure they're all on same version

loud-bear-51491

10/15/2021, 8:01 AM

Hi.. I am having the same problem in deleting acm certificates as we have a really big stack.. Is there any solution to this problem? I tried deleting the pending_operations in export and then imported yet it still goes and tries to delete the certificates and fails.. Not putting the whole error logs as it has account information.. cc: @strong-house-36411 @fierce-france-59052

Copy code

Type                    Name                           Status                  Info
 pulumi:pulumi:Stack     Infra-dev                      **failed**              1 error

• ├─ awsacmCertificate dev-albCertificate deleting failed 2 errors • ├─ awsacmCertificate dev-albCertificate_website2 deleting failed 2 errors • ├─ awsacmCertificate dev-albCertificate_website deleting failed 2 errors • ├─ awsacmCertificate dev-albCertificate_doc_api_bo deleting failed 2 errors • ├─ awsacmCertificate dev-albCertificate_doc_api deleting failed 2 errors • ├─ awsacmCertificate dev-albCertificate_flower deleting failed 2 errors • ├─ awsacmCertificate dev-albCertificate_pgweb deleting failed 2 errors • └─ awsacmCertificate dev-albCertificate_bo deleting failed 2 errors Diagnostics: Resources: wsacmCertificate (dev-albCertificate): error: deleting urnpulumidev:Infraawsacm/certificateCertificatedev albCertificate 1 error occurred: * error deleting ACM Certificate (arnawsacmus west 2xxx:certificate/79945fcc-dd08-4bbb-b3d4-2081c1069f66): ResourceInUseException: Certificate arnawsacmus west 2xxx:certificate/79945fcc-dd08-4bbb-b3d4-2081c1069f66 in account 287991343765 is in use. error: post-step event returned an error: failed to save snapshot: renewing lease: [403] The provided update token has expired. Duration: 20m9s error: failed to complete update: renewing lease: [403] The provided update token has expired.

hundreds-airport-37168

10/15/2021, 10:50 AM

HI anyone been able to succesfully use the confluent provider?`No matter if i put in a cloud api key or just a normal account information according to https://github.com/pulumi/pulumi-confluent, it still doesnt work

hundreds-airport-37168

10/15/2021, 11:41 AM

Also, is there no support to create topics through the confluent provider? The underlying terraform provider has support

astonishing-quill-88807

10/15/2021, 1:10 PM

I'm running into an issue with creating a Provider instance for Vault. I'm trying to use the

auth_logins

parameter, and as part of that I'm setting the

address

in the initialization and setting the token to an empty string. Until I set the environment variable myself (

VAULT_ADDR

) I kept getting errors saying that I needed to set the

vault:address

parameter in the stack (which was already there). Now I'm getting an error of

no vault token found

. Has anyone had experience of using username/password login for the Vault provider? This is the code I'm using to create the provider:

Copy code

vault_provider = vault.Provider(
    "vault-provider",
    address=vault_address.apply("https://{}".format),
    add_address_to_env=True,
    token="",
    auth_logins=[
        vault.ProviderAuthLoginArgs(
            path=f"auth/pulumi/login/{pulumi_vault_creds['auth_username']}",
            method="userpass",
            parameters={
                "password": pulumi_vault_creds["auth_password"],
            },
        )
    ],
)

(vault_address is a stack output from another stack)

astonishing-quill-88807

10/15/2021, 1:50 PM

I figured it out. The problem was due to old state in the stack related to the provider.

bitter-island-28909

10/15/2021, 2:12 PM

Something’s not clear to me from the docs: can I write a “Native Pulumi Provider Package” in a language other than Go? It looks like you could follow the same approach outlined in (e.g) https://github.com/pulumi/pulumi-component-provider-ts-boilerplate, but then just implement a full Provider instead of a Component Provider?

steep-toddler-94095

10/15/2021, 4:31 PM

does Pulumi Cloud have a feature similar to Terraform's run trigger? or some automated or semi-automated way to update stacks that depend on another stack whose outputs have changed

👀 1

mammoth-honey-6147

10/15/2021, 4:40 PM

Perhaps I'm approaching this the wrong way but in my Pulumi code I use my languages' ssh lib to make ssh calls to VM's provisioned by Pulumi (from another stack, I pass the VM's details to another stack) to run some commands. When I run a

pulumi preview

, it seems to run these commands, how should I prevent this?

gorgeous-keyboard-22299

10/15/2021, 6:05 PM

Can Pulumi IaC be directly converted to Terraform? I'm asking b/c my client is now demanding TF instead of Pulumi to complete the hadn-off (UGHH). Since Pulumi is using the TF provider, maybe there's a way.

💩 1

😬 1

bitter-island-28909

10/15/2021, 6:08 PM

When building a Pulumi Package, is there any way to generate SDKs with a different organization? My package is called

foobar

, and when I build the Node package it builds as

@pulumi/foobar

, which I can’t publish because I don’t own Pulumi. Is it possible to get it to build as

@acme/foobar

instead?

rough-hydrogen-27449

10/15/2021, 7:26 PM

Hi, I'm running into a strange issue with a dynamic provider where it appears a pulumi dependency called

dill

is hitting the recursion limit trying to serialize something with

pickle

... Is there something I should be doing to avoid this? FWIW here's the tail end of a very long stack trace:

Copy code

File "/home/jgrillo/src/confluent-cloud-infrastructure/build-support/venv/lib/python3.7/site-packages/dill/_dill.py", line 990, in save_module_dict
        StockPickler.save_dict(pickler, obj)
      File "/home/jgrillo/src/confluent-cloud-infrastructure/build-support/venv/lib/python3.7/site-packages/pulumi/dynamic/dynamic.py", line 221, in save_dict_sorted
        self._batch_setitems(sorted(obj.items())) # pylint: disable=protected-access
      File "/home/jgrillo/.pyenv/versions/3.7.10/lib/python3.7/pickle.py", line 885, in _batch_setitems
        save(v)
      File "/home/jgrillo/.pyenv/versions/3.7.10/lib/python3.7/pickle.py", line 549, in save
        self.save_reduce(obj=obj, *rv)
      File "/home/jgrillo/.pyenv/versions/3.7.10/lib/python3.7/pickle.py", line 637, in save_reduce
        save(func)
      File "/home/jgrillo/.pyenv/versions/3.7.10/lib/python3.7/pickle.py", line 504, in save
        f(self, obj) # Call unbound method with explicit self
      File "/home/jgrillo/src/confluent-cloud-infrastructure/build-support/venv/lib/python3.7/site-packages/dill/_dill.py", line 1423, in save_type
        obj.__bases__, _dict), obj=obj)
      File "/home/jgrillo/.pyenv/versions/3.7.10/lib/python3.7/pickle.py", line 638, in save_reduce
        save(args)
      File "/home/jgrillo/.pyenv/versions/3.7.10/lib/python3.7/pickle.py", line 504, in save
        f(self, obj) # Call unbound method with explicit self
      File "/home/jgrillo/.pyenv/versions/3.7.10/lib/python3.7/pickle.py", line 789, in save_tuple
        save(element)
      File "/home/jgrillo/.pyenv/versions/3.7.10/lib/python3.7/pickle.py", line 504, in save
        f(self, obj) # Call unbound method with explicit self
      File "/home/jgrillo/src/confluent-cloud-infrastructure/build-support/venv/lib/python3.7/site-packages/dill/_dill.py", line 990, in save_module_dict
        StockPickler.save_dict(pickler, obj)
      File "/home/jgrillo/src/confluent-cloud-infrastructure/build-support/venv/lib/python3.7/site-packages/pulumi/dynamic/dynamic.py", line 221, in save_dict_sorted
        self._batch_setitems(sorted(obj.items())) # pylint: disable=protected-access
      File "/home/jgrillo/.pyenv/versions/3.7.10/lib/python3.7/pickle.py", line 885, in _batch_setitems
        save(v)
      File "/home/jgrillo/.pyenv/versions/3.7.10/lib/python3.7/pickle.py", line 549, in save
        self.save_reduce(obj=obj, *rv)
      File "/home/jgrillo/.pyenv/versions/3.7.10/lib/python3.7/pickle.py", line 637, in save_reduce
        save(func)
      File "/home/jgrillo/.pyenv/versions/3.7.10/lib/python3.7/pickle.py", line 502, in save
        f = self.dispatch.get(t)
      File "/home/jgrillo/src/confluent-cloud-infrastructure/build-support/venv/lib/python3.7/site-packages/dill/_dill.py", line 434, in get
        return self[key]
    RecursionError: maximum recursion depth exceeded
    error: an unhandled error occurred: Program exited with non-zero exit code: 1

➕ 1

icy-jordan-58549

10/15/2021, 8:10 PM

Copy code

Run pulumi/setup-pulumi@v2
Configured range: 3.15.0
Error: Could not find a version that satisfied the version range

ambitious-camera-87750

10/15/2021, 8:27 PM

Hello all, happy Friday! We are trying to build out a global RDS and getting this very strange error message. There is no duplicate URN in our stack that would conflict with this. Any ideas?

Copy code

Diagnostics:
  aws:rds:GlobalCluster (my-global-test2):
    error: Duplicate resource URN 'urn:pulumi:accounts-dev::rds::aws:rds/globalCluster:GlobalCluster::my-global-test2'; try giving it a unique name

bored-activity-40468

10/15/2021, 10:01 PM

What are the quickstart projects all about? 🙂 https://github.com/pulumi/pulumi-aws-quickstart-vpc Is that new or part of multi-language component creation?

brave-pharmacist-67045

10/15/2021, 11:47 PM

Hey there this is

whatnick

from Twitter hopping on here after connecting with

aurel

over there.

fast-grass-52071

10/16/2021, 8:41 AM

Team, This is related to https://pulumi-community.slack.com/archives/C01PF3E1B8V/p1631723058094400. I have combined the python code which uses both pulumi and pyvim modules in it. But, I am getting ’ModuleNotFoundError: No module named ‘pyVim’ ’ while executing the code although I have installed pyvim module in the venv using pip install pyvim inside the venv. Can anyone help me get rid of this?

billowy-laptop-45963

10/16/2021, 5:40 PM

Is there some utility that already exists for when I want to get the contents of a file to use as Input<string>? I know about assets.FileAsset but that's not an Input<string>. I can easily write my own but figured that it must already exist somewhere.

future-refrigerator-88869

10/16/2021, 7:21 PM

Hello everyone, I'm trying to build a docker image with multiple tags but I'm not really sure how ? I was able to create the image and push it but I'd like to use more than one tag.

Copy code

new docker.Image("name", {
  build: { context: "../src", },
  imageName: pulumi.interpolate`${repositoryUrl}:tag1`,
  registry: registry,
});

Basically I want to use

-t tag1 -t tag2

from docker build command any ideas ?

numerous-portugal-47563

10/17/2021, 10:38 PM

Hi Everyone, I'm deploying an Azure user assigned managed identity which i then assign to a specific role. I then attempt to use this user assigned managed identity on a Azure Blueprint assignment to a subscription. Sometimes the blueprint assignment works and sometimes it complains that i don't have the permissions assigned and if it has been assigned it hasn't fully replicated it. It there a way to add a delay to the execution, i.e. wait 10 seconds before doing the Azure blueprint assignment?

brash-airline-37413

10/17/2021, 10:55 PM

In pulumi are all languages at the same point of the roadmap or are some languages slightly further ahead than others ? IE given a blank canvas is there a preferred language to write multi language components in?

damp-ram-18047

10/18/2021, 3:30 AM

Hi there, I deployed gcp cloud sql database user with random generated password, but I need to set the password in my env config file, how can I get the password?

red-football-97286

10/18/2021, 9:03 AM

Hi, I'm trying to return the arn of a certificate in AWS ACM, but I don't a return..

Copy code

pulumi.Run(func(ctx *pulumi.Context) error {

		_, err := acm.LookupCertificate(ctx, &acm.LookupCertificateArgs{
			Domain: "mft-dev.cloud.internal",
			Statuses: []string{
				"ISSUED",
			},
		})
		if err != nil {
			return err
		}

		return nil
	})

Any ideas?

wet-noon-14291

10/18/2021, 12:59 PM

Is there a way to not replace all resources just because you change the credentials for a provider? To be more precise, we would like it to be possible run deployment to our kubernetes dev environment for all developers without creating new resources if they exists while using their existing credentials instead of storing config in pulumi yaml.

sticky-airline-40485

10/18/2021, 3:32 PM

Hello all, I'm fairly new to Pulumi (cool platform by the way). I'm trying to create a docker image using Crosswalk w/ Typescript. I can create the image, but the environment variables aren't being set. Any ideas?

Copy code

const repo = new awsx.ecr.Repository("repo")

const image = repo.buildAndPushImage({
    context: '..', dockerfile: '../App/Dockerfile', env: {
        'ASPNETCORE_ENVIRONMENT': 'Dev',
        'ASPNETCORE_URLS': 'https://+:443',
        'ASPNETCORE_HTTPS_PORT': '443',
    }
})