pulumi-community #general

fast-river-57630

10/27/2021, 7:09 PM

Strange. Our org does not list any admins. Did we become admin-less when I removed Regy?

elegant-pager-5412

10/28/2021, 5:05 AM

Has anyone else experienced a bug with attaching an Authorizer to routes in HTTP API Gateway? I’m creating a JWT authorizer and then attaching it to several routes using the

authorizerId

property on the route. Pulumi detects it and says it’s going to update it, however, it does nothing on AWS. In fact, when I try to re-deploy, it shows me again that it’s going to update the routes but once again, it does nothing

better-shampoo-48884

10/28/2021, 7:19 AM

Is there any way to target -only- a new code block for

pulumi up

? I know it's possible to

-t

existing URNs for updating (again, would also work if there was an -exclude, but hey) - but if its new code it wouldn't have a URN to target yet.. Basically, can i get pulumi to create only this:

Copy code

+   │  ├─ azure-native:keyvault:Secret                                                     secret-keypair-vault-public-1                                  create

bumpy-bear-61087

10/28/2021, 8:42 AM

Is it possible to run pulumi locally comparable to terraform? I don't want to use a SaaS for storing sensitive state.

bland-cat-29878

10/28/2021, 10:25 AM

Not sure if this has been shared before but Pulumi are on the ThoughtWorks tech radar 🙂 https://www.thoughtworks.com/content/dam/thoughtworks/documents/radar/2021/10/tr_techno[…]XEllw7vwdHcftAKzcLAgSUg-rvPc8NiKdRTaUbr4IHjvtfHLCoaasKBS94

👍 1

high-holiday-63390

10/28/2021, 10:34 AM

Is there a way to reference the current stack so it gets included in an AWS resource name?

great-sunset-355

10/28/2021, 12:51 PM

Is it possible to sort exported stack JSON in order it should be in case it was reordered?

limited-rainbow-51650

10/28/2021, 1:17 PM

If I want to use Dynamic Providers for an unsupported API, where I want to model more than 1 resource type, does every resource type then need its own

pulumi.dynamic.ResourceProvider

(1-1 relationship) or can I implement a single dynamic provider for multiple dynamic resource types? If I can use a single dynamic provider, who do I differentiate between the resource type to create/update/delete?

sparse-gold-10561

10/28/2021, 2:23 PM

With Team Stack Permissions, can I grant access to a tag this way any new stack with the tag gets automatically added to their stack access? Or do I have to add in each new stack every time one is created? What is the best way to manage Team Stack permissions?

faint-ambulance-18922

10/28/2021, 9:03 PM

does anyone know how can i reference the default config values set in the pulumi.<project>.yaml inside the code? i want to set the default gcpproject as the one specified in the initial configuration file as a function parameter so it’s optional:

Copy code

pulumi config set gcp:project test
let config = new pulumi.Config();
let defaultGCPProject = config.require("gcp:project");

doesn’t work.

full-artist-27215

10/28/2021, 9:05 PM

pulumi.Config("gcp").require("project")

full-artist-27215

10/28/2021, 9:05 PM

I ran into this problem myself just a few days ago 😅

✅ 1

billowy-army-68599

10/28/2021, 9:07 PM

@faint-ambulance-18922

Copy code

let config = new pulumi.Config()
let defaultGCPProject = config.get("gcp:project") || "a-default-project;

billowy-army-68599

10/28/2021, 9:07 PM

config.get

makes it optional

faint-ambulance-18922

10/28/2021, 9:08 PM

thanks for that, got it!

little-soccer-5693

10/29/2021, 4:03 PM

the pulumi new help for --config shows:

Copy code

...
Flags:
  -c, --config stringArray        Config to save

but then doesn't describe the correct syntax for stringArray. Is there an example somewhere that I could look at?

icy-pager-11287

10/29/2021, 4:16 PM

Is there any support for Azure Front Door Standard/Premium? I can see AFD (classic) support in Azure Native's API Docs but not the latest Standard/Premium service. If not, do we know when Preview services are made available in Pulumi?

chilly-hairdresser-56259

10/29/2021, 4:41 PM

Ok I am assuming this answer is yes. But for Pulumi and looking at Cloudtrail events. will those events show up under terraform.io? Since Pulumi.Aws is built-off of terraform aws provider?

straight-eye-78015

10/29/2021, 5:29 PM

Is it possible to provision an Identity in Auth0 to Snowflake using the Automation API? Since Auth0 doesn’t support SCIM in its product, and only has a professional services offering for SCIM, I’m wondering if Pulumi could be used instead of SCIM. https://community.auth0.com/t/provisioning-users-into-aws-sso-with-scim/47724

sparse-student-54516

10/29/2021, 7:19 PM

Hello, I am looking for secret management options for pulumi apart from default service which pulumi provides. What is mostly used or preferred? Some things which we have currently are below: • Vault • GitHub secrets • AWS secret manager • 1password/secrets Any document or experience someone can share would be great as we have recently started using pulumi.

most-lighter-95902

10/29/2021, 8:57 PM

Hi, how do you find out the type of a custom resource? I’ve been struggling to use the

pulumi import

cli to import a Istio Gateway created by Knative because I can’t figure out what the resource type is. I read the docs on this and also tried to infer the type via

pulumi stack --show-urns

etc but I can’t seem to successfully import this resource due to unknown resource type error. Any pointers would be appreciated.

gray-mechanic-96597

10/29/2021, 9:01 PM

Hi everyone! Just starting with Pulumi, I'm trying to do something which seems deadly simple - but struggling 😄 I have a CI/CD process that builds & deploys my image to ECR registry, in my pulumi stack I want to grab an image from that registry and pass it to ECS cluster but I can't find the proper types/methods to use. All the use cases in tutorials either use docker public repo or an image build on the spot (which doesn't work for me - I'm using a gradle JIB library to build an image from a kotlin app without even writing dockerfile 😄 ). Basically I want to setup a service in the cluster and point the task to an image coming from my private ECR registry, any pointers?

nice-father-44210

10/31/2021, 1:16 PM

I’d like to import an existing

ec2.RouteTable

(that has existing routes) but I want to manage the

ec2.Route

resources in a standalone manner (as opposed to in-line). What’s the right way to accomplish this? Should it work if construct the

RouteTable

object with

ResourceOptions(import_ = "rtb-xxx")

while omitting the

routes

parameter?

dazzling-sundown-39670

10/31/2021, 2:06 PM

Is there any good way to create like a bastion for the postgres package? Can't really use it since I can't access the database from my local machine

most-lighter-95902

10/31/2021, 4:40 PM

Is there a way to update previously created Pulumi CustomResource? Knative has a KnativeServing resource where you can specify configs for different resources it manages and I need to be able to update that config (

spec.config

) after its creation - i.e. KnativeServing CustomResource is already in Pulumi state and I need to update that state later in the code (after some other operation is finished).

most-lighter-95902

10/31/2021, 4:43 PM

Is the best practice using import and transform in this case?

most-lighter-95902

10/31/2021, 4:45 PM

Import doesn’t sound quite right given that I’ve already created the resource in Pulumi?

cold-motherboard-287

11/01/2021, 12:47 PM

hello 👋 I'm using AWS KMS to encrypt secrets in Pulumi, but I would like to ask if it's possible to set

passphrase

as a fallback in case you lose access to the AWS KMS key.

early-keyboard-41388

11/01/2021, 1:19 PM

Hi, I lost the

passphrase

and kind of stuck with error

error: incorrect passphrase

. Is there a way to get around it? Do I have to delete the

Pulumi.<stack>.yaml

and files in the

.Pulumi

directory (and any cloud resources deleted manually)? Thanks.

sticky-airline-40485

11/01/2021, 2:13 PM

hello all, I'm now running into an issue where my AWS credentials are not being picked up from one stack, but running fine on another. I'm using a multi-profile configuration following the docs. Everything was running fine yesterday, but now for some reason one of my stacks says

unable to discover AWS AccessKeyID and/or SecretAccessKey

. Anyone else encountering this?