Hello! Quick question about API Gateway and the

awsx

package. When creating an API gateway, it seems like the

Integration Request

Lambda is configured correctly with the right ARN, however, there is no

Execution Role

listed. That field is left empty and we have to configure it manually. Do you know how could we automatically set the execution role for the integration request? Here's the creation of the API Gateway for your reference:

const api = new awsx.apigateway.API('api-name', {
    routes: [{
        path: "/targetpath",
        method: "ANY",
        eventHandler: lambda,
    }]
...

👋 - Hello everyone! I have a question regarding configuration for stacks... I noticed that when I make a stack, a

yaml

file is created for it in my project. I generally don't like to keep environment specific information in source control. Is there any other way to manage stack configurations in pulumi?

Hey Guys, I’m trying to get azure subscriptionId from azure-native. And a bit confused with Input/Output

const azure = authorization.getClientConfig();
const subscriptionId = azure.then(azure => azure.subscriptionId)

new authorization.RoleAssignment("ass", {
  principalId: kprincipalId,
  principalType: "ServicePrincipal",
  roleDefinitionId:
    `/subscriptions/${subscriptionId}/providers/Microsoft.Authorization/roleDefinitions/${id}`,
  scope: resourceGroup.id,
});

And I’m still got

[object Promise]

for subscriptionId. What I’m missing?

Hi, is it possible with the new helm Release resource to use local chart without repository ?

hi all. Using CircleCI - anyone know where to get the PULUMI_ACCESS_TOKEN ?

I've looked everywhere in the dashboard but can't find anywhere to generate a token

Hi all! I want to import an existing S3 bucket into my project. I followed the steps here: https://www.pulumi.com/docs/guides/adopting/import/#adopting-existing-resources. The import command succeeded and I added the output source to my project file. I then run

pulumi up

and during the preview stage I get the error message “error: Preview failed: unable to delete resource... ...as it is currently marked for protection. To unprotect the resource, either remove the

protect

flag from the resource in your Pulumi program and run

pulumi up

or...“. I don’t want to delete it; I want to adopt it. Can anyone help me understand why preview seems to be trying to delete a protected/imported resource?

hello. i'm following the example in the pulumi go SDK for creating an apigatewayv2.Route(https://github.com/pulumi/pulumi-aws/blob/master/sdk/go/aws/apigatewayv2/route.go#L82); however the example fails to compile:

So are many people using

PULUMI_SELF_MANAGED_STATE_LOCKING

? Wondering about the status of making that a default https://github.com/pulumi/pulumi/issues/6536

Once I import an existing resource, is it possible to generate the equivalent typescript code for this resource's current state?

Is there a convention to follow for the ComponentResource type argument? Something like companyprojectResourceName?

Hey, everyone! I have a problem importing resources from another project. I create an EKS cluster in the first project and want to import it in my second to add managed node groups. But somethings wrong, because I get the error

'dict' object has no attribute 'core'

(I am using

cluster.core

as an input of the managed node group). The exported resource is of type

pulumi_eks.Cluster

. I used imports from other projects before and it worked without a problem. What could be wrong?

Do output types always have to be primitive? (string, int)

Or does pulumi support me having outputs of language-specific complex types, like in C#

List

, etc... ?

I know the pulumi state mgmt for s3 providers is limited, but can anyone tell me if there is a way to avoid corrupted state when two deployments get kicked off concurrently?

General question, though I know it applies to #gcp... What's the status of the GCP providers? Activity seems to be down and the native repository hasn't seen any commits for a while. Do certain providers in Pulumi see better support than others?

We’re beginning to adopt Pulumi more broadly within our organization. As such, we’re needing simple abstractions that can be re-used across projects, namely helper functions to create opinionated AWS and Kubernetes providers (we just fetch kubeconfigs from S3 and create k8s providers accordingly). I’m just working in a single repository that contains multiple subdirectories, each containing their own Pulumi project. I’d like to create

/lib/**/*.ts

, then install it by adding something like

"lib": "file:../lib"

to my

package.json

in each of the other directories. However, I don’t want this lib to define provider versions, rather I’d like the lib’s

package.json

to simply reference

peerDependencies

of the referenced Pulumi providers. However, when I do this, pulumi fails to preview thanks to

error TS2307: Cannot find module '@pulumi/aws|kubernetes'.

This is probably just a Typescript question, but surely there’s a way to tell typescript that the types referenced in the libs should refer to the types defined in the project package.json.

Hello I’ve got a multi language component building and distributing into a number of tarballs for each platform which I can install with

pulumi plugin install resource $name $version -f mydist.tar.gz

However once installed I don’t understand what the point of installing it as a package is since doing that alone doesn’t let me import the component resources that are declared in that package. Is the point of

pulumi plugin install resource …

to allow the component resources to be imported in my language of choice or am I still expected to import via nuget/npm/pip etc as well?

Bit of a strange one, if I run

pulumi preview

locally I get 196 unchanged, if I run it in my CI (exact same command), I get - 58 to delete, 138 unchanged. Any ideas why this would happen?

Error: ENOENT: no such file or directory, stat '/tmp/automation-logs-preview-9DtLoU/eventlog.txt' error: [runtime] Unhandled exception: Error: ENOENT: no such file or directory, stat '/tmp/automation-logs-preview-9DtLoU/eventlog.txt' error: [runtime] Unhandled exception: Error: ENOENT: no such file or directory, stat '/tmp/automation-logs-preview-9DtLoU/eventlog.txt Hi we are getting this error constantly while using the automation api with typescript SDK while previewing or applying. The resources are deployed properly and there is no indication in diagnostic logs as well. The program is an inline program and the preview is being called via an express router . The error stops coming when the node js server is restarted but we are not able to find the reason for this. The cli version is 3.16.0 Node module @pulumi/pulumi is also 3.16.0 Also is there a way to pass --logtostderr flag via the automation api so we can maybe bypass this issue till we find the cause.

Is there a way to turn off the pulumi[bot] notifications on github actions plugin?

Hey all! Is anyone aware of a way to set a delay time for creation/update/deletion of a resource? Use case: K8s cluster with the external-dns (ED) and aws-load-balancer-controller (ALB) Helm chart installed. The ED chart tracks your ingresses/services and will create DNS records for them. The ALB chart will create loadbalancers for them. (I don’t think the ALB chart is relevant to this question, but noting it just in case it may be). If i decide to tear down the ingresses and ED helm chart, it seems that there can be a race condition between the ED chart being deleted and it deleting any records it created for the ingresses. I have tried setting

dependsOn

on the ingresses to be be

[ALB, ED]

so that pulumi understands that the ingresses have a dependency on these 2 Helm charts. It doesn’t seem to completely have helped. A delay option would be nice, because then the 2 Helm charts can delete the resources within the given delay time, and only then be removed from the cluster.

Hey all! I am trying to use a resource imported from another project but I get the error

'dependsOn' was passed a value that was not a Resource.

I'm unable to find any helpful explanation where the error comes from and most important how to solve it.

Hi everyone. Coming back with another issue. I am trying to run

pulumi preview

as part of a github action and keeps complaining about not finding the eks provider:

error: no resource plugin 'eks' found in the workspace or on your $PATH

In my package.json as part of dependencies i have eks

"@pulumi/eks": "^0.34.0"

. This seems to be working locally but in the actions it fails. As part of the

npm install

in CI, I can see that the other pulumi packages that I use (for example cloudflare) are getting registered as part of npm install, however EKS package does not produce any log. Any ideas ?

Triggered by previous question ☝️: does anyone have recommendations on setting up provider creds (Azure, AWS) retrieved from an external IdP (e.g. Okta, Auth0), possibly using SAML?

I'm building an EC2 which creates a network interface and attaches to the instance as a primary eni. I've set the 

deleteOnTermination

 to false (as I want to keep the eni on deletion of the ec2. To do with an app license). But running 

pulumi destroy

 removes the eni. If I terminate through the console, the eni remains. Is there a way I can remove everything apart from the eni? (

protect

prevents deletion of the whole stack).

Is it possible to somehow create resource which will be shared across all stacks? I want to create eks cluster which will be used by dev, staging and prod stack instead of creating a cluster per stack. I can create a separate pulumi folder for the cluster but I'm looking is there any other option I missed?

Hi, everyone, i’m new in pulumi, so i added some resources to a stack stack that is already deployed and when i ran

pulumi preview

i got some of the old resources in yellow…my question is those resource will get modified?

Is there a way to run a

pulumi up

command from a different directory than the one your project is stored in? I'm trying something like

pulumi up ./path/to/project

Where my stack yaml and pulumi yaml are stored. However, pulumi starts asking me for the project name and description when I do this rather than running the existing one and then errors with a

no file or directory

. I've tried specifying using the

--stack

flag or using the

file://

system specifier but no luck. Any ideas always appreciated. Thanks 😄

Just playing with

pulumi import

(btw, I might have discovered a small bug but first need to run some tests to make sure it’s something worth reporting) and I came across one issue: is it possible to simply list all defined resources with their URNs (so I can remove them using

pulumi state delete

) or the only way to do that right now is to manually parse

pulumi stack export

? EDIT: the answer is

pulumi stack --show-urns