Hey guys, whats the best way to share an

index.ts

file across multiple projects? I want my structure to look like this:

--Shared:
Index.ts
package.json

--Project_1:
Pulumi.<dev-stack-name>.yaml
Pulumi.<test-stack-name>.yaml
tsconfig.json

--Project_2:
Pulumi.<dev-stack-name>.yaml
Pulumi.<test-stack-name>.yaml
tsconfig.json

I am running my code in a

pulumi/pulumi-nodejs:3.11.0

container, and my

tsconfig.json

file has the following reference.

"files": [
        "../shared/index.ts"
    ]

Pulumi is failing with the following error, so im assuming that it doesnt like referencing an index outside of the project directory..

error: It looks like the Pulumi SDK has not been installed. Have you run npm install or yarn install?

How can I feed in a

Promise<string>

, like the output from

vault.generic.getSecret

, into a provider input, like

datadog.Provider

, which only takes

string

?

Does

pulumi stack export

preserve order? I wanted to compare 2 outputs and I get way more differences than I expected - many of them seem to be caused by a different order of the resources.

I’m getting

missing required configuration key "aws:region"

when trying to update a stack where this config is definitely set.

pulumi up

and

pulumi destroy

both give a similar output

pulumi destroy -y --show-config


...

     Type                       Name                Status                  Info
     pulumi:pulumi:Stack        app-petetest        **failed**              1 error; 1 message
 -   └─ aws:ecs:TaskDefinition  api                 **deleting failed**     1 error
 
Diagnostics:
  pulumi:pulumi:Stack (app-petetest):
    Configuration:
        aws:region: eu-west-1
    error: update failed
 
  aws:ecs:TaskDefinition (api):
    error: 1 error occurred:
        * missing required configuration key "aws:region": The region where AWS operations will take place. Examples are us-east-1, us-west-2, etc.
    Set a value using the command `pulumi config set aws:region <value>`.

so I have to manage state with a remote pulumi service? either that or I have to host it myself...

how do I use a

Promise

as an

input

in pulumi? Example I want to use:

get privateSubnetIds(): Promise<pulumi.Output<string>[]>;

from a `Vpc`:

const vpc = new awsx.ec2.Vpc(..., {
  ...
});

in a `NetworkAssociation`:

const networkAssociation = new aws.ec2clientvpn.NetworkAssociation(`...`, {
      subnetId: vpc.privateSubnetIds[0],
  });

I somehow got my stack into a really odd state. I tried manually deleting some resources, which put it into an even odder state. Now I'm getting these errors when trying to tear down my stack completely (

pulumi destroy

). Is there a way I can tell pulumi to destroy and ignore if the resource is not found?

aws:ec2:SecurityGroupRule (api-cluster-toli-egress):
    error: deleting urn:pulumi:[secret]::accrue-api::awsx:x:ecs:Cluster$awsx:x:ec2:SecurityGroup$awsx:x:ec2:EgressSecurityGroupRule$aws:ec2/securityGroupRule:SecurityGroupRule::api-cluster-[secret]-egress: 1 error occurred:
        * couldn't find resource

Identify all non-Pulumi managed resources in an AWS Account?

Is there a way to create stack references across projects when not using the pulumi service? Say I have a project in

<s3://foo/project1|s3://foo/project1>

and an other in

<s3://foo/project2|s3://foo/project2>

Hello is there a more effective way to test for errors like duplicate rules before doing "pulumi up" . I see such errors only when I do "up", most probably due to edit of the security groups names which shows in replace. Is there a way to debug before I actually run. "pulumi preview" would not foresee any such errors.

rror: 1 error occurred:
[Step 5/7] 	* [WARN] A duplicate Security Group rule was found on (sg-XXXXXXXXXX). This may be
[18:51:37]
[Step 5/7] a side effect of a now-fixed Terraform issue causing two security groups with
[18:51:37]
[Step 5/7] identical attributes but different source_security_group_ids to overwrite each
[18:51:37]
[Step 5/7] other in the state. See <https://github.com/hashicorp/terraform/pull/2376> for more
[18:51:37]
[Step 5/7] information and instructions for recovery. Error message: the specified rule "peer: XX.XX.XX.XX/XX, UDP, from port: X, to port: XXXX, ALLOW" already exists

Hi All, Can we create "Credentials for RDS database" in Secret Manager using Pulumi?

Has anyone come across the following whilst running a preview with an azure AD Group resource?

Previewing update (obfuscated):
Type Name Plan Info
pulumi:pulumi:Stack obfuscated
+ ├─ LogWorkspaceComponent obfuscated
~ ├─ pulumi:providers:azure-native obfuscated update [diff: ~version]
~ ├─ pulumi:providers:azure-native obfuscated update [diff: ~version]
~ ├─ pulumi:providers:azure-native obfuscated update [diff: ~version]
~ ├─ pulumi:providers:azure-native obfuscated update [diff: ~version]
└─ azuread:index:Group obfuscated 1 error

Resource type azuread:index/group:Group not found

Is there any easy way without juggling configs/stacks to be able to deploy pulumi to something locally without it trying to store the state remotely? The example is, we have local kubernetes clusters for dev and I want to configure them with baseline services, such as ingress and databases etc. But it doesn't make sense that it has a remote stack tracking it as it is only needed for each dev locally

Are there any limits on the number or size of stack outputs?

So I registered for the summit last night and just attempted to reregister, still not seeing any pulumi comms. The

Send join link

button doesn’t work either.

I have a bunch of resources that I want to reparent underneath a new

ComponentResource

to logically group them. However, when I run a preview, the provider wants to delete and create all these resources, even though nothing has changed besides the structure of my code. Am I doing something wrong? Or is there a way to work around this?

Does anyone know if I can basically

kubectl apply {some-url}

within pulumi/kubernetes?

where some-url is this nginx ingress thing https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v1.0.4/deploy/static/provider/do/deploy.yaml

https://www.pulumi.com/registry/packages/kubernetes/api-docs/yaml/configfile/ maybe?

thanks!

Has anyone tried the new registry with Safari? What’s the performance been like? For me it’s abysmal.

I'd like to create an AWS SSO provider config in pulumi, along with an app configuration, for my VPN, and the appropriate iam saml provider. I haven't been able to find this in pulumi. I found this in terraform, just for the iam saml provider, but nothing related to the SSO: https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_saml_provider Any ideas what to do here?

For the users of the Pulumi GitOps operator, how do you solve the problem of being able to see infra diff in a PR before merging it, without granting the CI job access to cloud resources? Can the operator scan PRs and comment the

pulumi preview

output? Or am I limited to running

pulumi preview

within my CI and granting the CI service user read access to my cloud resources and Pulumi state?

Weird... I've got a stack output that is supposedly being deleted when the corresponding resource gets deleted, but running

pulumi stack

immediately afterward shows the output is still present, and it persists across multiple `pulumi up`s, despite the fact that the underlying resource is long gone. I think I'm going to do some manual surgery on the stack state (using

pulumi stack export

and

pulumi stack import

), but I'm curious if anybody else has come across this before.

In the docs, if an item doesn't have a 'Import' section, is it a resource that can't be imported? For example,

aws:ec2/mainRouteTableAssociation:MainRouteTableAssociation

or is a matter of figuring out the correct Id to use?

I have a stack that has a bunch of AWS resources, including a Fargate task. Sometimes I want to update parts of the stack but I don't want to build the image and deploy a new Fargate task. Is there a way to skip a particular resource without deleting it?

I built a few reusable

ComponentResources

for things like creating VPNs, Fargate services, validated certificates, etc. If I wanted to publish them to the registry, how would I do this?