For the users of the Pulumi GitOps operator, how do you solve the problem of being able to see infra diff in a PR before merging it, without granting the CI job access to cloud resources? Can the operator scan PRs and comment the

pulumi preview

output? Or am I limited to running

pulumi preview

within my CI and granting the CI service user read access to my cloud resources and Pulumi state?

Weird... I've got a stack output that is supposedly being deleted when the corresponding resource gets deleted, but running

pulumi stack

immediately afterward shows the output is still present, and it persists across multiple `pulumi up`s, despite the fact that the underlying resource is long gone. I think I'm going to do some manual surgery on the stack state (using

pulumi stack export

and

pulumi stack import

), but I'm curious if anybody else has come across this before.

In the docs, if an item doesn't have a 'Import' section, is it a resource that can't be imported? For example,

aws:ec2/mainRouteTableAssociation:MainRouteTableAssociation

or is a matter of figuring out the correct Id to use?

I have a stack that has a bunch of AWS resources, including a Fargate task. Sometimes I want to update parts of the stack but I don't want to build the image and deploy a new Fargate task. Is there a way to skip a particular resource without deleting it?

I built a few reusable

ComponentResources

for things like creating VPNs, Fargate services, validated certificates, etc. If I wanted to publish them to the registry, how would I do this?

Hello, trying to run a

pulumi preview --refresh

on a pulumi stack in

azure pipelines

and I am getting this error

refresh error: connection error: desc = "transport: Error while dialing dial tcp 127.0.0.1:40321: connect: connection refused"

any idea about what might cause this? tried running it multiple times and getting the same error, The odd thing is that running the command locally works without issues

How exactly do I use

pulumi import

on an existing resource. Say I have an ARN of a resource I manually created:

arn:aws:iam::12345:saml-provider/VPN

. How would I import it?

Hi, I'm trying to setup automated CI/CD using codebuild and codedeploy, I'm successfully building the artifact I want to deploy and storing it in s3 but I can't find anywhere in the docs where I should be referencing this artifact when setting up codedeploy. How is codedeploy supposed to be aware of the existence of this artifact i've created and then subsequently deploy this to the different ec2 instances I have created?

Hi, I noticed that during unit testing the Stack is initialised only once and is kept for all the execution, this is a problem for me because during test we execute

register_stack_transformation

and is not removed after a single test execution. I found a workaround to reset the Stack for each test, do you think is good or I'm messing with pulumi internals?

@pytest.fixture(autouse=True)
def pulumi_mocks():
    pulumi.runtime.set_mocks(BaseMocks())
    yield
    pulumi.runtime.settings.ROOT = None

why are commits to my pulumi stack co-authored by

lblackstone

?

my pulumi up is only creating the stack, and not the actual resources

I noticed in azure provider all resource lookups require resource name. There does not seem to be a way to search for resources by tags. Is this just and Azure provider issue? It is common practice to use tags only when searching for resources in the cloud and just leave the resource name as random. Is there any support coming for search by tag?

I am getting an error while building a dynamic Resource but im not sure what exactly this means:

Error: Secret outputs cannot be captured by a closure.

I created a resource outside the pulumi stack (manually in the console). But I make a reference to it in the pulumi stack. However...when I try to take down my stack, it tries to take down my external resource. Any way I can prevent this?

aws:iam:SamlProvider (default):
    error: Preview failed: unable to delete resource "urn:pulumi:toli::xxx::aws:iam/samlProvider:SamlProvider::default"
    as it is currently marked for protection. To unprotect the resource, either remove the `protect` flag from the resource in your Pulumiprogram and run `pulumi up` or use the command:
    `pulumi state unprotect urn:pulumi:toli::xxx::aws:iam/samlProvider:SamlProvider::default`

With Team Stack Permissions, can I grant access to a tag this way any new stack with the tag gets automatically added to their stack access? Or do I have to add in each new stack every time one is created?

Hey everyone ! anybody already created OpenVPN certificates (CA, server and client) with Pulumi - in order to deploy a Client VPN Endpoint ?

or more generally worked with certificates and pulumi ?

is there a good way to work with pulumi and multiple stacks (i.e. a dev, test, staging, prod) where you can promote between them? It seems that since the current stack is denoted by a Pulumi.{stackname}.yaml there isn't a good way to version the configuration embedded within that stack yaml, and you end up accruing merge commits as you push changes to the next stack

Hi there, trying to evaluate Pulumi and doing the AWS tutorial to files to S3 here: https://pulumi.awsworkshop.io/20_cloud_engineering_python/20_getting_started_with_pulumi/30_updating_infrastructure.html Getting a stack overflow that times out

<http://github.com/pulumi/pulumi/sdk/v3/go/pulumi.marshalInput({0x18b6000|github.com/pulumi/pulumi/sdk/v3/go/pulumi.marshalInput({0x18b6000>, 0xc0001b08c0}, {0x1a6ec10, 0x181b1a0}, 0x1)
        /Users/jordan/go/pkg/mod/github.com/pulumi/pulumi/sdk/v3@v3.15.0/go/pulumi/rpc.go:281 +0x27c5
    <http://github.com/pulumi/pulumi/sdk/v3/go/pulumi.marshalInput({0x18b6000|github.com/pulumi/pulumi/sdk/v3/go/pulumi.marshalInput({0x18b6000>, 0xc0001b08c0}, {0x1a6ec10, 0x181b1a0}, 0x1)
        /Users/jordan/go/pkg/mod/github.com/pulumi/pulumi/sdk/v3@v3.15.0/go/pulumi/rpc.go:281 +0x27c5
    <http://github.com/pulumi/pulumi/sdk/v3/go/pulumi.marshalInput({0x18b6000|github.com/pulumi/pulumi/sdk/v3/go/pulumi.marshalInput({0x18b6000>, 0xc0001b08c0}, {0x1a6ec10, 0x181b1a0}, 0x1)
        /Users/jordan/go/pkg/mod/github.com/pulumi/pulumi/sdk/v3@v3.15.0/go/pulumi/rpc.go:281 +0x27c5
    <http://github.com/pulumi/pulumi/sdk/v3/go/pulumi.marshalInput({0x18b6000|github.com/pulumi/pulumi/sdk/v3/go/pulumi.marshalInput({0x18b6000>, 0xc0001b08c0}, {0x1a6ec10, 0x181b1a0}, 0x1)
        /Users/jordan/go/pkg/mod/github.com/pulumi/pulumi/sdk/v3@v3.15.0/go/pulumi/rpc.go:281 +0x27c5
    ...additional frames elided...
    created by <http://github.com/pulumi/pulumi/sdk/v3/go/pulumi.(*Context).registerResource|github.com/pulumi/pulumi/sdk/v3/go/pulumi.(*Context).registerResource>
        /Users/jordan/go/pkg/mod/github.com/pulumi/pulumi/sdk/v3@v3.15.0/go/pulumi/context.go:773 +0x772
    exit status 2

Any ideas would be greatly appreciated as I am not sure how to debug this

Hey there, I'm doing some evaluations on Pulumi for GCP. I'm testing importing a (basic) instance and can't seem to get past this:

user1@linux1:~/pulumi/project> pulumi import 'gcp:compute/instance:Instance' instance4 "<https://www.googleapis.com/compute/v1/projects/test-gcp-project/zones/us-west1-a/instances/instance4>"
Previewing import (dev)

     Type                     Name            Plan       Info
 +   pulumi:pulumi:Stack      proj-dev  create     1 error
 =   └ gcp:compute:Instance  instance4     import     7 errors

Diagnostics:
  pulumi:pulumi:Stack (proj-dev):
    error: preview failed

  gcp:compute:Instance (instance4):
    error: gcp:compute/instance:Instance resource 'instance4' has a problem: Computed attribute cannot be set. Examine values at 'Instance.NetworkInterfaces[0].Name'.
    error: gcp:compute/instance:Instance resource 'instance4' has a problem: Computed attribute cannot be set. Examine values at 'Instance.NetworkInterfaces[0].Ipv6AccessType'.
    error: gcp:compute/instance:Instance resource 'instance4' has a problem: expected network_interface.0.nic_type to be one of [GVNIC VIRTIO_NET], got . Examine values at 'Instance.NetworkInterfaces[0].NicType'.
    error: gcp:compute/instance:Instance resource 'instance4' has a problem: ConflictsWith: "boot_disk.0.disk_encryption_key_raw": conflicts with boot_disk.0.kms_key_self_link. Examine values at 'Instance.BootDisk.DiskEncryptionKeyRaw'.
    error: gcp:compute/instance:Instance resource 'instance4' has a problem: Computed attribute cannot be set. Examine values at 'Instance.BootDisk.DiskEncryptionKeySha256'.
    error: gcp:compute/instance:Instance resource 'instance4' has a problem: ConflictsWith: "boot_disk.0.kms_key_self_link": conflicts with boot_disk.0.disk_encryption_key_raw. Examine values at 'Instance.BootDisk.KmsKeySelfLink'.
    error: Preview failed: one or more inputs failed to validate

Hello, a colleague (who's not available right now so I can't ask much) had an issue with his internet connectivity while doing a pulumi up. The state is now in a bit of a 'state'... A refresh is not helping and pulumi thinks that it has to create almost the entire stack from scratch. I am tempted to pick a json file from the .pulumi/history folder and save it into ./pulumi/stacks but I don't want to mess things further. Any idea how to get out of this mess? Thanks

Just updated pulumi and now getting this:

error: /home/wayne/highstreetly-pulumi/node_modules/@pulumi/pulumi/provider/server.js:424
               �    coniole.error(`${e}: ${e.stack}`);

coniole <<<

Hello

Has someone worked with rancher using pulumi? I am kinda stuck when try to bootstrap rancher and setting github as auth provider for rancher

Hello, I have a question about renaming GitHub repos. Aliases work well for

Repository

resource but how to deal with the other resources which reference repo by name:

BranchDefault

,

TeamRepository

,

ActionSecret

?

Hello guys, I'm having an issue with Pulumi, AWS and Lambda with NodeJS 14.x. Hope someone of you can help me with the problem There are two projects, one of them is a

npm library

and the other one is a

web service

, either the web service and the npm library have the following Pulumi dependencies: package.json -> "dependencies"

"@pulumi/aws": "^4.23.0",
"@pulumi/awsx": "^0.32.0",
"@pulumi/pulumi": "^3.0.0",

The web service also dependes of the npm library. When i push changes to AWS with the command

pulumi up -y

everything works fine, but when i make a request to the ApiGateway that calls one of the created lambda functions i'm having this error output in Cloudwatch:

Cannot find module '@pulumi/pulumi'

One of the functions in the npm library needs that dependency but i looks like Pulumi is excluding it because regardless the package.json shows that dependency it doesn't appear in node_modules. Anyone have an idea of what could be happening in that case? Thank you.

Hello! 😄 One issue that affected my work these past few weeks was the inability to pass the same

opts

object around between resources from different pulumi providers. In particular, this issue is challenging because the error messages lead you fixes that don't work. I noticed that there are currently three issues in

pulumi/pulumi

discussing this: - https://github.com/pulumi/pulumi/issues/7532 - https://github.com/pulumi/pulumi/issues/6293 which is closed, but should not be - https://github.com/pulumi/pulumi/issues/3393 and there are quite a few related issues that are wrongly attributed to providers misbehaving, such as https://github.com/pulumi/pulumi-vault/issues/129. Would it make sense to combine all of these issues into a new issue, or maybe to re-open https://github.com/pulumi/pulumi/issues/6293 and to mark the other issues as duplicates? Right now, this was a very difficult issue to track down the root cause of. https://github.com/pulumi/pulumi-vault/issues/129 shows images of what the error messages I was seeing with the node sdk

Can I run create a stack automatically if it doesn't exists with `pulumi up`some how? Or do I have to run

pulumi stack init

in that case?

Congrats on putting together a killer conference and incredible panel of speakers.