pulumi-community #general

general

loud-bear-51491

10/15/2021, 8:01 AM

Hi.. I am having the same problem in deleting acm certificates as we have a really big stack.. Is there any solution to this problem? I tried deleting the pending_operations in export and then imported yet it still goes and tries to delete the certificates and fails.. Not putting the whole error logs as it has account information.. cc: @strong-house-36411 @fierce-france-59052

Type                    Name                           Status                  Info
 pulumi:pulumi:Stack     Infra-dev                      **failed**              1 error

• ├─ aws:acm:Certificate dev-albCertificate deleting failed 2 errors • ├─ aws:acm:Certificate dev-albCertificate_website2 deleting failed 2 errors • ├─ aws:acm:Certificate dev-albCertificate_website deleting failed 2 errors • ├─ aws:acm:Certificate dev-albCertificate_doc_api_bo deleting failed 2 errors • ├─ aws:acm:Certificate dev-albCertificate_doc_api deleting failed 2 errors • ├─ aws:acm:Certificate dev-albCertificate_flower deleting failed 2 errors • ├─ aws:acm:Certificate dev-albCertificate_pgweb deleting failed 2 errors • └─ aws:acm:Certificate dev-albCertificate_bo deleting failed 2 errors Diagnostics: Resources: ws:acm:Certificate (dev-albCertificate): error: deleting urn😛ulumi:dev::Infra::aws:acm/certificate:Certificate::dev-albCertificate: 1 error occurred: * error deleting ACM Certificate (arn:aws:acm:us-west-2:xxx:certificate/79945fcc-dd08-4bbb-b3d4-2081c1069f66): ResourceInUseException: Certificate arn:aws:acm:us-west-2:xxx:certificate/79945fcc-dd08-4bbb-b3d4-2081c1069f66 in account 287991343765 is in use. error: post-step event returned an error: failed to save snapshot: renewing lease: [403] The provided update token has expired. Duration: 20m9s error: failed to complete update: renewing lease: [403] The provided update token has expired.

hundreds-airport-37168

10/15/2021, 10:50 AM

HI anyone been able to succesfully use the confluent provider?`No matter if i put in a cloud api key or just a normal account information according to https://github.com/pulumi/pulumi-confluent, it still doesnt work

hundreds-airport-37168

10/15/2021, 11:41 AM

Also, is there no support to create topics through the confluent provider? The underlying terraform provider has support

astonishing-quill-88807

10/15/2021, 1:10 PM

I'm running into an issue with creating a Provider instance for Vault. I'm trying to use the

auth_logins

parameter, and as part of that I'm setting the

address

in the initialization and setting the token to an empty string. Until I set the environment variable myself (

VAULT_ADDR

) I kept getting errors saying that I needed to set the

vault:address

parameter in the stack (which was already there). Now I'm getting an error of

no vault token found

. Has anyone had experience of using username/password login for the Vault provider? This is the code I'm using to create the provider:

vault_provider = vault.Provider(
    "vault-provider",
    address=vault_address.apply("https://{}".format),
    add_address_to_env=True,
    token="",
    auth_logins=[
        vault.ProviderAuthLoginArgs(
            path=f"auth/pulumi/login/{pulumi_vault_creds['auth_username']}",
            method="userpass",
            parameters={
                "password": pulumi_vault_creds["auth_password"],
            },
        )
    ],
)

(vault_address is a stack output from another stack)

astonishing-quill-88807

10/15/2021, 1:50 PM

I figured it out. The problem was due to old state in the stack related to the provider.

bitter-island-28909

10/15/2021, 2:12 PM

Something’s not clear to me from the docs: can I write a “Native Pulumi Provider Package” in a language other than Go? It looks like you could follow the same approach outlined in (e.g) https://github.com/pulumi/pulumi-component-provider-ts-boilerplate, but then just implement a full Provider instead of a Component Provider?

steep-toddler-94095

10/15/2021, 4:31 PM

does Pulumi Cloud have a feature similar to Terraform's run trigger? or some automated or semi-automated way to update stacks that depend on another stack whose outputs have changed

👀 1

mammoth-honey-6147

10/15/2021, 4:40 PM

Perhaps I'm approaching this the wrong way but in my Pulumi code I use my languages' ssh lib to make ssh calls to VM's provisioned by Pulumi (from another stack, I pass the VM's details to another stack) to run some commands. When I run a

pulumi preview

, it seems to run these commands, how should I prevent this?

gorgeous-keyboard-22299

10/15/2021, 6:05 PM

Can Pulumi IaC be directly converted to Terraform? I'm asking b/c my client is now demanding TF instead of Pulumi to complete the hadn-off (UGHH). Since Pulumi is using the TF provider, maybe there's a way.

💩 1

😬 1

bitter-island-28909

10/15/2021, 6:08 PM

When building a Pulumi Package, is there any way to generate SDKs with a different organization? My package is called

foobar

, and when I build the Node package it builds as

@pulumi/foobar

, which I can’t publish because I don’t own Pulumi. Is it possible to get it to build as

@acme/foobar

instead?

rough-hydrogen-27449

10/15/2021, 7:26 PM

Hi, I'm running into a strange issue with a dynamic provider where it appears a pulumi dependency called

dill

is hitting the recursion limit trying to serialize something with

pickle

... Is there something I should be doing to avoid this? FWIW here's the tail end of a very long stack trace:

File "/home/jgrillo/src/confluent-cloud-infrastructure/build-support/venv/lib/python3.7/site-packages/dill/_dill.py", line 990, in save_module_dict
        StockPickler.save_dict(pickler, obj)
      File "/home/jgrillo/src/confluent-cloud-infrastructure/build-support/venv/lib/python3.7/site-packages/pulumi/dynamic/dynamic.py", line 221, in save_dict_sorted
        self._batch_setitems(sorted(obj.items())) # pylint: disable=protected-access
      File "/home/jgrillo/.pyenv/versions/3.7.10/lib/python3.7/pickle.py", line 885, in _batch_setitems
        save(v)
      File "/home/jgrillo/.pyenv/versions/3.7.10/lib/python3.7/pickle.py", line 549, in save
        self.save_reduce(obj=obj, *rv)
      File "/home/jgrillo/.pyenv/versions/3.7.10/lib/python3.7/pickle.py", line 637, in save_reduce
        save(func)
      File "/home/jgrillo/.pyenv/versions/3.7.10/lib/python3.7/pickle.py", line 504, in save
        f(self, obj) # Call unbound method with explicit self
      File "/home/jgrillo/src/confluent-cloud-infrastructure/build-support/venv/lib/python3.7/site-packages/dill/_dill.py", line 1423, in save_type
        obj.__bases__, _dict), obj=obj)
      File "/home/jgrillo/.pyenv/versions/3.7.10/lib/python3.7/pickle.py", line 638, in save_reduce
        save(args)
      File "/home/jgrillo/.pyenv/versions/3.7.10/lib/python3.7/pickle.py", line 504, in save
        f(self, obj) # Call unbound method with explicit self
      File "/home/jgrillo/.pyenv/versions/3.7.10/lib/python3.7/pickle.py", line 789, in save_tuple
        save(element)
      File "/home/jgrillo/.pyenv/versions/3.7.10/lib/python3.7/pickle.py", line 504, in save
        f(self, obj) # Call unbound method with explicit self
      File "/home/jgrillo/src/confluent-cloud-infrastructure/build-support/venv/lib/python3.7/site-packages/dill/_dill.py", line 990, in save_module_dict
        StockPickler.save_dict(pickler, obj)
      File "/home/jgrillo/src/confluent-cloud-infrastructure/build-support/venv/lib/python3.7/site-packages/pulumi/dynamic/dynamic.py", line 221, in save_dict_sorted
        self._batch_setitems(sorted(obj.items())) # pylint: disable=protected-access
      File "/home/jgrillo/.pyenv/versions/3.7.10/lib/python3.7/pickle.py", line 885, in _batch_setitems
        save(v)
      File "/home/jgrillo/.pyenv/versions/3.7.10/lib/python3.7/pickle.py", line 549, in save
        self.save_reduce(obj=obj, *rv)
      File "/home/jgrillo/.pyenv/versions/3.7.10/lib/python3.7/pickle.py", line 637, in save_reduce
        save(func)
      File "/home/jgrillo/.pyenv/versions/3.7.10/lib/python3.7/pickle.py", line 502, in save
        f = self.dispatch.get(t)
      File "/home/jgrillo/src/confluent-cloud-infrastructure/build-support/venv/lib/python3.7/site-packages/dill/_dill.py", line 434, in get
        return self[key]
    RecursionError: maximum recursion depth exceeded
    error: an unhandled error occurred: Program exited with non-zero exit code: 1

➕ 1

icy-jordan-58549

10/15/2021, 8:10 PM

Run pulumi/setup-pulumi@v2
Configured range: 3.15.0
Error: Could not find a version that satisfied the version range

ambitious-camera-87750

10/15/2021, 8:27 PM

Hello all, happy Friday! We are trying to build out a global RDS and getting this very strange error message. There is no duplicate URN in our stack that would conflict with this. Any ideas?

Diagnostics:
  aws:rds:GlobalCluster (my-global-test2):
    error: Duplicate resource URN 'urn:pulumi:accounts-dev::rds::aws:rds/globalCluster:GlobalCluster::my-global-test2'; try giving it a unique name

bored-activity-40468

10/15/2021, 10:01 PM

What are the quickstart projects all about? 🙂 https://github.com/pulumi/pulumi-aws-quickstart-vpc Is that new or part of multi-language component creation?

brave-pharmacist-67045

10/15/2021, 11:47 PM

Hey there this is

whatnick

from Twitter hopping on here after connecting with

aurel

over there.

fast-grass-52071

10/16/2021, 8:41 AM

Team, This is related to https://pulumi-community.slack.com/archives/C01PF3E1B8V/p1631723058094400. I have combined the python code which uses both pulumi and pyvim modules in it. But, I am getting ’ModuleNotFoundError: No module named ‘pyVim’ ’ while executing the code although I have installed pyvim module in the venv using pip install pyvim inside the venv. Can anyone help me get rid of this?

billowy-laptop-45963

10/16/2021, 5:40 PM

Is there some utility that already exists for when I want to get the contents of a file to use as Input<string>? I know about assets.FileAsset but that's not an Input<string>. I can easily write my own but figured that it must already exist somewhere.

future-refrigerator-88869

10/16/2021, 7:21 PM

Hello everyone, I'm trying to build a docker image with multiple tags but I'm not really sure how ? I was able to create the image and push it but I'd like to use more than one tag.

new docker.Image("name", {
  build: { context: "../src", },
  imageName: pulumi.interpolate`${repositoryUrl}:tag1`,
  registry: registry,
});

Basically I want to use

-t tag1 -t tag2

from docker build command any ideas ?

numerous-portugal-47563

10/17/2021, 10:38 PM

Hi Everyone, I'm deploying an Azure user assigned managed identity which i then assign to a specific role. I then attempt to use this user assigned managed identity on a Azure Blueprint assignment to a subscription. Sometimes the blueprint assignment works and sometimes it complains that i don't have the permissions assigned and if it has been assigned it hasn't fully replicated it. It there a way to add a delay to the execution, i.e. wait 10 seconds before doing the Azure blueprint assignment?

brash-airline-37413

10/17/2021, 10:55 PM

In pulumi are all languages at the same point of the roadmap or are some languages slightly further ahead than others ? IE given a blank canvas is there a preferred language to write multi language components in?

damp-ram-18047

10/18/2021, 3:30 AM

Hi there, I deployed gcp cloud sql database user with random generated password, but I need to set the password in my env config file, how can I get the password?

red-football-97286

10/18/2021, 9:03 AM

Hi, I'm trying to return the arn of a certificate in AWS ACM, but I don't a return..

pulumi.Run(func(ctx *pulumi.Context) error {

		_, err := acm.LookupCertificate(ctx, &acm.LookupCertificateArgs{
			Domain: "mft-dev.cloud.internal",
			Statuses: []string{
				"ISSUED",
			},
		})
		if err != nil {
			return err
		}

		return nil
	})

Any ideas?

wet-noon-14291

10/18/2021, 12:59 PM

Is there a way to not replace all resources just because you change the credentials for a provider? To be more precise, we would like it to be possible run deployment to our kubernetes dev environment for all developers without creating new resources if they exists while using their existing credentials instead of storing config in pulumi yaml.

sticky-airline-40485

10/18/2021, 3:32 PM

Hello all, I'm fairly new to Pulumi (cool platform by the way). I'm trying to create a docker image using Crosswalk w/ Typescript. I can create the image, but the environment variables aren't being set. Any ideas?

const repo = new awsx.ecr.Repository("repo")

const image = repo.buildAndPushImage({
    context: '..', dockerfile: '../App/Dockerfile', env: {
        'ASPNETCORE_ENVIRONMENT': 'Dev',
        'ASPNETCORE_URLS': 'https://+:443',
        'ASPNETCORE_HTTPS_PORT': '443',
    }
})

late-scooter-70174

10/18/2021, 4:06 PM

(Meta question) I am new to Pulumi and come from a Terraform background, so it's best to look at the following questions while keeping that in mind: 1. Will choosing one language supported by Pulumi limit me from support from the community? In particular, I'm wondering how popular Go is compared to Typescript for Pulumi. Personally I think Go makes more sense to invest in (other tools in the ecosystem such as k8s and its controllers, operators etc are written in Go, lots of precedent for unit testing on cloud resources set by Terratest, etc). But, I think based on the documentation and examples in the

pulumi

GitHub org, Typescript is the de-facto "Pulumi language". 2. How come it's difficult to find upstream packages modules for Pulumi? In Terraform, there's such an abundance of modules — some of them good, some of them not — but I cannot find the same parallel with Pulumi. Thanks 🙂

most-lighter-95902

10/18/2021, 4:22 PM

Has anyone encountered this issue before? I’m trying to update a CustomResource (it’s for Knative service) and keep getting this error:

most-lighter-95902

10/18/2021, 4:22 PM

error: 1 error occurred: * the Kubernetes API server reported that "sidetrek-webapp-staging-cd3aydbs/frontend-svc" failed to fully initialize or become live: the body of the request was in an unknown format - accepted media types include: application/json-patch+json, application/merge-patch+json, application/apply-patch+yaml

most-lighter-95902

10/18/2021, 4:22 PM

I’m having to recreate this resource on every

pulumi up

rapid-raincoat-36492

10/18/2021, 7:14 PM

Does gitpod work well with github workspaces? Do they play together at all, or are they used entirely separately?

bitter-island-28909

10/18/2021, 8:27 PM

In the readme from the Pulumi Component Package example, it says

TODO explain custom server hosting in more detail.

Any place where that’s documented, at all? Is Pulumi capable of discovering & downloading the binaries it needs automatically, or does the user currently need to download & place on their PATH?

Title

bitter-island-28909

10/18/2021, 8:27 PM

In the readme from the Pulumi Component Package example, it says

TODO explain custom server hosting in more detail.

Any place where that’s documented, at all? Is Pulumi capable of discovering & downloading the binaries it needs automatically, or does the user currently need to download & place on their PATH?

Just from reading the other docs, it looks like

pluginDownloadURL

in the schema.json is what controls where it will look?

View count: 1