https://pulumi.com logo
Join the conversationJoin Slack
Channels
announcements
automation-api
aws
azure
blog-posts
built-with-pulumi
cloudengineering
cloudengineering-support
content-share
contribex
contribute
docs
dotnet
finops
general
getting-started
gitlab
golang
google-cloud
hackathon-03-19-2020
hacktoberfest
install
java
jobs
kubernetes
learn-pulumi-events
linen
localstack
multi-language-hackathon
office-hours
oracle-cloud-infrastructure
plugin-framework
pulumi-cdk
pulumi-crosscode
pulumi-deployments
pulumi-kubernetes-operator
pulumi-service
pulumiverse
python
registry
status
testingtesting123
testingtesting321
typescript
welcome
workshops
yaml
Powered by Linen
general
  • s

    salmon-printer-16080

    10/18/2021, 9:52 PM
    Hey guys, whats the best way to share an
    index.ts
    file across multiple projects? I want my structure to look like this:
    --Shared:
    Index.ts
    package.json
    
    --Project_1:
    Pulumi.<dev-stack-name>.yaml
    Pulumi.<test-stack-name>.yaml
    tsconfig.json
    
    --Project_2:
    Pulumi.<dev-stack-name>.yaml
    Pulumi.<test-stack-name>.yaml
    tsconfig.json
    I am running my code in a
    pulumi/pulumi-nodejs:3.11.0
    container, and my
    tsconfig.json
    file has the following reference.
    "files": [
            "../shared/index.ts"
        ]
    Pulumi is failing with the following error, so im assuming that it doesnt like referencing an index outside of the project directory..
    error: It looks like the Pulumi SDK has not been installed. Have you run npm install or yarn install?
    b
    • 2
    • 8
  • r

    rapid-raincoat-36492

    10/19/2021, 3:21 AM
    How can I feed in a
    Promise<string>
    , like the output from
    vault.generic.getSecret
    , into a provider input, like
    datadog.Provider
    , which only takes
    string
    ?
    r
    • 2
    • 2
  • g

    great-sunset-355

    10/19/2021, 8:29 AM
    Does
    pulumi stack export
    preserve order? I wanted to compare 2 outputs and I get way more differences than I expected - many of them seem to be caused by a different order of the resources.
    p
    • 2
    • 23
  • a

    ancient-monkey-64322

    10/19/2021, 7:39 PM
    I’m getting
    missing required configuration key "aws:region"
    when trying to update a stack where this config is definitely set.
    pulumi up
    and
    pulumi destroy
    both give a similar output
    pulumi destroy -y --show-config
    
    
    ...
    
         Type                       Name                Status                  Info
         pulumi:pulumi:Stack        app-petetest        **failed**              1 error; 1 message
     -   └─ aws:ecs:TaskDefinition  api                 **deleting failed**     1 error
     
    Diagnostics:
      pulumi:pulumi:Stack (app-petetest):
        Configuration:
            aws:region: eu-west-1
        error: update failed
     
      aws:ecs:TaskDefinition (api):
        error: 1 error occurred:
            * missing required configuration key "aws:region": The region where AWS operations will take place. Examples are us-east-1, us-west-2, etc.
        Set a value using the command `pulumi config set aws:region <value>`.
    b
    • 2
    • 17
  • w

    wonderful-address-62604

    10/19/2021, 7:46 PM
    so I have to manage state with a remote pulumi service? either that or I have to host it myself...
    r
    b
    • 3
    • 9
  • f

    fresh-wire-95028

    10/19/2021, 8:32 PM
    how do I use a
    Promise
    as an
    input
    in pulumi? Example I want to use:
    get privateSubnetIds(): Promise<pulumi.Output<string>[]>;
    from a `Vpc`:
    const vpc = new awsx.ec2.Vpc(..., {
      ...
    });
    in a `NetworkAssociation`:
    const networkAssociation = new aws.ec2clientvpn.NetworkAssociation(`...`, {
          subnetId: vpc.privateSubnetIds[0],
      });
    l
    • 2
    • 11
  • f

    fresh-wire-95028

    10/19/2021, 9:28 PM
    I somehow got my stack into a really odd state. I tried manually deleting some resources, which put it into an even odder state. Now I'm getting these errors when trying to tear down my stack completely (
    pulumi destroy
    ). Is there a way I can tell pulumi to destroy and ignore if the resource is not found?
    aws:ec2:SecurityGroupRule (api-cluster-toli-egress):
        error: deleting urn:pulumi:[secret]::accrue-api::awsx:x:ecs:Cluster$awsx:x:ec2:SecurityGroup$awsx:x:ec2:EgressSecurityGroupRule$aws:ec2/securityGroupRule:SecurityGroupRule::api-cluster-[secret]-egress: 1 error occurred:
            * couldn't find resource
    r
    • 2
    • 2
  • g

    glamorous-jelly-86558

    10/20/2021, 2:35 AM
    Identify all non-Pulumi managed resources in an AWS Account?
    l
    b
    +2
    • 5
    • 24
  • r

    refined-appointment-5884

    10/20/2021, 4:16 AM
    Is there a way to create stack references across projects when not using the pulumi service? Say I have a project in
    <s3://foo/project1|s3://foo/project1>
    and an other in
    <s3://foo/project2|s3://foo/project2>
    b
    l
    +2
    • 5
    • 23
  • r

    rough-rain-68282

    10/20/2021, 5:42 AM
    Hello is there a more effective way to test for errors like duplicate rules before doing "pulumi up" . I see such errors only when I do "up", most probably due to edit of the security groups names which shows in replace. Is there a way to debug before I actually run. "pulumi preview" would not foresee any such errors.
    rror: 1 error occurred:
    [Step 5/7] 	* [WARN] A duplicate Security Group rule was found on (sg-XXXXXXXXXX). This may be
    [18:51:37]
    [Step 5/7] a side effect of a now-fixed Terraform issue causing two security groups with
    [18:51:37]
    [Step 5/7] identical attributes but different source_security_group_ids to overwrite each
    [18:51:37]
    [Step 5/7] other in the state. See <https://github.com/hashicorp/terraform/pull/2376> for more
    [18:51:37]
    [Step 5/7] information and instructions for recovery. Error message: the specified rule "peer: XX.XX.XX.XX/XX, UDP, from port: X, to port: XXXX, ALLOW" already exists
    l
    • 2
    • 4
  • s

    swift-australia-96791

    10/20/2021, 7:37 AM
    Hi All, Can we create "Credentials for RDS database" in Secret Manager using Pulumi?
    p
    • 2
    • 13
  • l

    lemon-garage-82195

    10/20/2021, 12:31 PM
    Has anyone come across the following whilst running a preview with an azure AD Group resource?
    Previewing update (obfuscated):
    Type Name Plan Info
    pulumi:pulumi:Stack obfuscated
    + ├─ LogWorkspaceComponent obfuscated
    ~ ├─ pulumi:providers:azure-native obfuscated update [diff: ~version]
    ~ ├─ pulumi:providers:azure-native obfuscated update [diff: ~version]
    ~ ├─ pulumi:providers:azure-native obfuscated update [diff: ~version]
    ~ ├─ pulumi:providers:azure-native obfuscated update [diff: ~version]
    └─ azuread:index:Group obfuscated 1 error
    
    Resource type azuread:index/group:Group not found
  • f

    fast-florist-41572

    10/20/2021, 1:11 PM
    Is there any easy way without juggling configs/stacks to be able to deploy pulumi to something locally without it trying to store the state remotely? The example is, we have local kubernetes clusters for dev and I want to configure them with baseline services, such as ingress and databases etc. But it doesn't make sense that it has a remote stack tracking it as it is only needed for each dev locally
    p
    • 2
    • 12
  • f

    full-artist-27215

    10/20/2021, 1:47 PM
    Are there any limits on the number or size of stack outputs?
  • f

    freezing-van-87649

    10/20/2021, 3:01 PM
    So I registered for the summit last night and just attempted to reregister, still not seeing any pulumi comms. The
    Send join link
    button doesn’t work either.
    b
    • 2
    • 2
  • s

    swift-intern-18856

    10/20/2021, 3:28 PM
    I have a bunch of resources that I want to reparent underneath a new
    ComponentResource
    to logically group them. However, when I run a preview, the provider wants to delete and create all these resources, even though nothing has changed besides the structure of my code. Am I doing something wrong? Or is there a way to work around this?
    f
    • 2
    • 6
  • m

    melodic-car-16900

    10/20/2021, 3:38 PM
    Does anyone know if I can basically
    kubectl apply {some-url}
    within pulumi/kubernetes?
  • m

    melodic-car-16900

    10/20/2021, 3:38 PM
    where some-url is this nginx ingress thing https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v1.0.4/deploy/static/provider/do/deploy.yaml
  • m

    melodic-car-16900

    10/20/2021, 3:40 PM
    https://www.pulumi.com/registry/packages/kubernetes/api-docs/yaml/configfile/ maybe?
  • m

    melodic-car-16900

    10/20/2021, 3:44 PM
    ❤️
  • m

    melodic-car-16900

    10/20/2021, 3:45 PM
  • m

    melodic-car-16900

    10/20/2021, 3:45 PM
    thanks!
  • c

    cool-egg-852

    10/20/2021, 4:13 PM
    Has anyone tried the new registry with Safari? What’s the performance been like? For me it’s abysmal.
    b
    • 2
    • 4
  • f

    fresh-wire-95028

    10/20/2021, 5:17 PM
    I'd like to create an AWS SSO provider config in pulumi, along with an app configuration, for my VPN, and the appropriate iam saml provider. I haven't been able to find this in pulumi. I found this in terraform, just for the iam saml provider, but nothing related to the SSO: https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_saml_provider Any ideas what to do here?
  • s

    steep-toddler-94095

    10/20/2021, 5:22 PM
    For the users of the Pulumi GitOps operator, how do you solve the problem of being able to see infra diff in a PR before merging it, without granting the CI job access to cloud resources? Can the operator scan PRs and comment the
    pulumi preview
    output? Or am I limited to running
    pulumi preview
    within my CI and granting the CI service user read access to my cloud resources and Pulumi state?
  • f

    full-artist-27215

    10/20/2021, 5:51 PM
    Weird... I've got a stack output that is supposedly being deleted when the corresponding resource gets deleted, but running
    pulumi stack
    immediately afterward shows the output is still present, and it persists across multiple `pulumi up`s, despite the fact that the underlying resource is long gone. I think I'm going to do some manual surgery on the stack state (using
    pulumi stack export
    and
    pulumi stack import
    ), but I'm curious if anybody else has come across this before.
    l
    r
    g
    • 4
    • 12
  • b

    bored-activity-40468

    10/20/2021, 6:32 PM
    In the docs, if an item doesn't have a 'Import' section, is it a resource that can't be imported? For example,
    aws:ec2/mainRouteTableAssociation:MainRouteTableAssociation
    or is a matter of figuring out the correct Id to use?
    l
    • 2
    • 29
  • f

    flat-appointment-12338

    10/20/2021, 7:36 PM
    I have a stack that has a bunch of AWS resources, including a Fargate task. Sometimes I want to update parts of the stack but I don't want to build the image and deploy a new Fargate task. Is there a way to skip a particular resource without deleting it?
    l
    • 2
    • 5
  • f

    fresh-wire-95028

    10/20/2021, 7:44 PM
    I built a few reusable
    ComponentResources
    for things like creating VPNs, Fargate services, validated certificates, etc. If I wanted to publish them to the registry, how would I do this?
    l
    • 2
    • 3
  • m

    many-dress-54535

    10/20/2021, 8:11 PM
    Hello, trying to run a
    pulumi preview --refresh
    on a pulumi stack in
    azure pipelines
    and I am getting this error
    refresh error: connection error: desc = "transport: Error while dialing dial tcp 127.0.0.1:40321: connect: connection refused"
    any idea about what might cause this? tried running it multiple times and getting the same error, The odd thing is that running the command locally works without issues
    b
    • 2
    • 2
Powered by Linen
Title
m

many-dress-54535

10/20/2021, 8:11 PM
Hello, trying to run a
pulumi preview --refresh
on a pulumi stack in
azure pipelines
and I am getting this error
refresh error: connection error: desc = "transport: Error while dialing dial tcp 127.0.0.1:40321: connect: connection refused"
any idea about what might cause this? tried running it multiple times and getting the same error, The odd thing is that running the command locally works without issues
b

billowy-army-68599

10/21/2021, 1:26 AM
did this ever get sorted? looks to be something with the pipeline connectivity?
m

many-dress-54535

10/21/2021, 8:29 AM
not really, still investigating it out, it's always failing, sometimes with the error above, and other times (less frequent) with:
error: failed to complete update: renewing lease: [403] The provided update token has expired.
this happens after more than 20 mins in the pipeline
View count: 1