pulumi-community #general

late-scooter-70174

10/18/2021, 4:06 PM

(Meta question) I am new to Pulumi and come from a Terraform background, so it's best to look at the following questions while keeping that in mind: 1. Will choosing one language supported by Pulumi limit me from support from the community? In particular, I'm wondering how popular Go is compared to Typescript for Pulumi. Personally I think Go makes more sense to invest in (other tools in the ecosystem such as k8s and its controllers, operators etc are written in Go, lots of precedent for unit testing on cloud resources set by Terratest, etc). But, I think based on the documentation and examples in the

pulumi

GitHub org, Typescript is the de-facto "Pulumi language". 2. How come it's difficult to find upstream packages modules for Pulumi? In Terraform, there's such an abundance of modules — some of them good, some of them not — but I cannot find the same parallel with Pulumi. Thanks 🙂

most-lighter-95902

10/18/2021, 4:22 PM

Has anyone encountered this issue before? I’m trying to update a CustomResource (it’s for Knative service) and keep getting this error:

most-lighter-95902

10/18/2021, 4:22 PM

Copy code

error: 1 error occurred: * the Kubernetes API server reported that "sidetrek-webapp-staging-cd3aydbs/frontend-svc" failed to fully initialize or become live: the body of the request was in an unknown format - accepted media types include: application/json-patch+json, application/merge-patch+json, application/apply-patch+yaml

most-lighter-95902

10/18/2021, 4:22 PM

I’m having to recreate this resource on every

pulumi up

rapid-raincoat-36492

10/18/2021, 7:14 PM

Does gitpod work well with github workspaces? Do they play together at all, or are they used entirely separately?

bitter-island-28909

10/18/2021, 8:27 PM

In the readme from the Pulumi Component Package example, it says

TODO explain custom server hosting in more detail.

Any place where that’s documented, at all? Is Pulumi capable of discovering & downloading the binaries it needs automatically, or does the user currently need to download & place on their PATH?

salmon-printer-16080

10/18/2021, 9:52 PM

Hey guys, whats the best way to share an

index.ts

file across multiple projects? I want my structure to look like this:

Copy code

--Shared:
Index.ts
package.json

--Project_1:
Pulumi.<dev-stack-name>.yaml
Pulumi.<test-stack-name>.yaml
tsconfig.json

--Project_2:
Pulumi.<dev-stack-name>.yaml
Pulumi.<test-stack-name>.yaml
tsconfig.json

I am running my code in a

pulumi/pulumi-nodejs:3.11.0

container, and my

tsconfig.json

file has the following reference.

Copy code

"files": [
        "../shared/index.ts"
    ]

Pulumi is failing with the following error, so im assuming that it doesnt like referencing an index outside of the project directory..

error: It looks like the Pulumi SDK has not been installed. Have you run npm install or yarn install?

rapid-raincoat-36492

10/19/2021, 3:21 AM

How can I feed in a

Promise<string>

, like the output from

vault.generic.getSecret

, into a provider input, like

datadog.Provider

, which only takes

string

great-sunset-355

10/19/2021, 8:29 AM

Does

pulumi stack export

preserve order? I wanted to compare 2 outputs and I get way more differences than I expected - many of them seem to be caused by a different order of the resources.

ancient-monkey-64322

10/19/2021, 7:39 PM

I’m getting

missing required configuration key "aws:region"

when trying to update a stack where this config is definitely set.

pulumi up

and

pulumi destroy

both give a similar output

Copy code

pulumi destroy -y --show-config


...

     Type                       Name                Status                  Info
     pulumi:pulumi:Stack        app-petetest        **failed**              1 error; 1 message
 -   └─ aws:ecs:TaskDefinition  api                 **deleting failed**     1 error
 
Diagnostics:
  pulumi:pulumi:Stack (app-petetest):
    Configuration:
        aws:region: eu-west-1
    error: update failed
 
  aws:ecs:TaskDefinition (api):
    error: 1 error occurred:
        * missing required configuration key "aws:region": The region where AWS operations will take place. Examples are us-east-1, us-west-2, etc.
    Set a value using the command `pulumi config set aws:region <value>`.

wonderful-address-62604

10/19/2021, 7:46 PM

so I have to manage state with a remote pulumi service? either that or I have to host it myself...

fresh-wire-95028

10/19/2021, 8:32 PM

how do I use a

Promise

as an

input

in pulumi? Example I want to use:

get privateSubnetIds(): Promise<pulumi.Output<string>[]>;

from a `Vpc`:

Copy code

const vpc = new awsx.ec2.Vpc(..., {
  ...
});

in a `NetworkAssociation`:

Copy code

const networkAssociation = new aws.ec2clientvpn.NetworkAssociation(`...`, {
      subnetId: vpc.privateSubnetIds[0],
  });

fresh-wire-95028

10/19/2021, 9:28 PM

I somehow got my stack into a really odd state. I tried manually deleting some resources, which put it into an even odder state. Now I'm getting these errors when trying to tear down my stack completely (

pulumi destroy

). Is there a way I can tell pulumi to destroy and ignore if the resource is not found?

Copy code

aws:ec2:SecurityGroupRule (api-cluster-toli-egress):
    error: deleting urn:pulumi:[secret]::accrue-api::awsx:x:ecs:Cluster$awsx:x:ec2:SecurityGroup$awsx:x:ec2:EgressSecurityGroupRule$aws:ec2/securityGroupRule:SecurityGroupRule::api-cluster-[secret]-egress: 1 error occurred:
        * couldn't find resource

glamorous-jelly-86558

10/20/2021, 2:35 AM

Identify all non-Pulumi managed resources in an AWS Account?

refined-appointment-5884

10/20/2021, 4:16 AM

Is there a way to create stack references across projects when not using the pulumi service? Say I have a project in

<s3://foo/project1|s3://foo/project1>

and an other in

<s3://foo/project2|s3://foo/project2>

rough-rain-68282

10/20/2021, 5:42 AM

Hello is there a more effective way to test for errors like duplicate rules before doing "pulumi up" . I see such errors only when I do "up", most probably due to edit of the security groups names which shows in replace. Is there a way to debug before I actually run. "pulumi preview" would not foresee any such errors.

Copy code

rror: 1 error occurred:
[Step 5/7] 	* [WARN] A duplicate Security Group rule was found on (sg-XXXXXXXXXX). This may be
[18:51:37]
[Step 5/7] a side effect of a now-fixed Terraform issue causing two security groups with
[18:51:37]
[Step 5/7] identical attributes but different source_security_group_ids to overwrite each
[18:51:37]
[Step 5/7] other in the state. See <https://github.com/hashicorp/terraform/pull/2376> for more
[18:51:37]
[Step 5/7] information and instructions for recovery. Error message: the specified rule "peer: XX.XX.XX.XX/XX, UDP, from port: X, to port: XXXX, ALLOW" already exists

swift-australia-96791

10/20/2021, 7:37 AM

Hi All, Can we create "Credentials for RDS database" in Secret Manager using Pulumi?

lemon-garage-82195

10/20/2021, 12:31 PM

Has anyone come across the following whilst running a preview with an azure AD Group resource?

Copy code

Previewing update (obfuscated):
Type Name Plan Info
pulumi:pulumi:Stack obfuscated
+ ├─ LogWorkspaceComponent obfuscated
~ ├─ pulumi:providers:azure-native obfuscated update [diff: ~version]
~ ├─ pulumi:providers:azure-native obfuscated update [diff: ~version]
~ ├─ pulumi:providers:azure-native obfuscated update [diff: ~version]
~ ├─ pulumi:providers:azure-native obfuscated update [diff: ~version]
└─ azuread:index:Group obfuscated 1 error

Resource type azuread:index/group:Group not found

fast-florist-41572

10/20/2021, 1:11 PM

Is there any easy way without juggling configs/stacks to be able to deploy pulumi to something locally without it trying to store the state remotely? The example is, we have local kubernetes clusters for dev and I want to configure them with baseline services, such as ingress and databases etc. But it doesn't make sense that it has a remote stack tracking it as it is only needed for each dev locally

full-artist-27215

10/20/2021, 1:47 PM

Are there any limits on the number or size of stack outputs?

freezing-van-87649

10/20/2021, 3:01 PM

So I registered for the summit last night and just attempted to reregister, still not seeing any pulumi comms. The

Send join link

button doesn’t work either.

swift-intern-18856

10/20/2021, 3:28 PM

I have a bunch of resources that I want to reparent underneath a new

ComponentResource

to logically group them. However, when I run a preview, the provider wants to delete and create all these resources, even though nothing has changed besides the structure of my code. Am I doing something wrong? Or is there a way to work around this?

melodic-car-16900

10/20/2021, 3:38 PM

Does anyone know if I can basically

kubectl apply {some-url}

within pulumi/kubernetes?

melodic-car-16900

10/20/2021, 3:38 PM

where some-url is this nginx ingress thing https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v1.0.4/deploy/static/provider/do/deploy.yaml

melodic-car-16900

10/20/2021, 3:40 PM

https://www.pulumi.com/registry/packages/kubernetes/api-docs/yaml/configfile/ maybe?

melodic-car-16900

10/20/2021, 3:44 PM

❤️

melodic-car-16900

10/20/2021, 3:45 PM

melodic-car-16900

10/20/2021, 3:45 PM

thanks!

cool-egg-852

10/20/2021, 4:13 PM

Has anyone tried the new registry with Safari? What’s the performance been like? For me it’s abysmal.

fresh-wire-95028

10/20/2021, 5:17 PM

I'd like to create an AWS SSO provider config in pulumi, along with an app configuration, for my VPN, and the appropriate iam saml provider. I haven't been able to find this in pulumi. I found this in terraform, just for the iam saml provider, but nothing related to the SSO: https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_saml_provider Any ideas what to do here?