pulumi-community #general

Docs

Join the conversation Join Slack

Channels

general

great-sunset-355

10/28/2021, 12:51 PM

Is it possible to sort exported stack JSON in order it should be in case it was reordered?

limited-rainbow-51650

10/28/2021, 1:17 PM

If I want to use Dynamic Providers for an unsupported API, where I want to model more than 1 resource type, does every resource type then need its own

pulumi.dynamic.ResourceProvider

(1-1 relationship) or can I implement a single dynamic provider for multiple dynamic resource types? If I can use a single dynamic provider, who do I differentiate between the resource type to create/update/delete?

sparse-gold-10561

10/28/2021, 2:23 PM

With Team Stack Permissions, can I grant access to a tag this way any new stack with the tag gets automatically added to their stack access? Or do I have to add in each new stack every time one is created? What is the best way to manage Team Stack permissions?

faint-ambulance-18922

10/28/2021, 9:03 PM

does anyone know how can i reference the default config values set in the pulumi.<project>.yaml inside the code? i want to set the default gcpproject as the one specified in the initial configuration file as a function parameter so it’s optional:

pulumi config set gcp:project test
let config = new pulumi.Config();
let defaultGCPProject = config.require("gcp:project");

doesn’t work.

full-artist-27215

10/28/2021, 9:05 PM

pulumi.Config("gcp").require("project")

full-artist-27215

10/28/2021, 9:05 PM

I ran into this problem myself just a few days ago 😅

✅ 1

billowy-army-68599

10/28/2021, 9:07 PM

@faint-ambulance-18922

let config = new pulumi.Config()
let defaultGCPProject = config.get("gcp:project") || "a-default-project;

billowy-army-68599

10/28/2021, 9:07 PM

config.get

makes it optional

faint-ambulance-18922

10/28/2021, 9:08 PM

thanks for that, got it!

little-soccer-5693

10/29/2021, 4:03 PM

the pulumi new help for --config shows:

...
Flags:
  -c, --config stringArray        Config to save

but then doesn't describe the correct syntax for stringArray. Is there an example somewhere that I could look at?

icy-pager-11287

10/29/2021, 4:16 PM

Is there any support for Azure Front Door Standard/Premium? I can see AFD (classic) support in Azure Native's API Docs but not the latest Standard/Premium service. If not, do we know when Preview services are made available in Pulumi?

chilly-hairdresser-56259

10/29/2021, 4:41 PM

Ok I am assuming this answer is yes. But for Pulumi and looking at Cloudtrail events. will those events show up under terraform.io? Since Pulumi.Aws is built-off of terraform aws provider?

straight-eye-78015

10/29/2021, 5:29 PM

Is it possible to provision an Identity in Auth0 to Snowflake using the Automation API? Since Auth0 doesn’t support SCIM in its product, and only has a professional services offering for SCIM, I’m wondering if Pulumi could be used instead of SCIM. https://community.auth0.com/t/provisioning-users-into-aws-sso-with-scim/47724

sparse-student-54516

10/29/2021, 7:19 PM

Hello, I am looking for secret management options for pulumi apart from default service which pulumi provides. What is mostly used or preferred? Some things which we have currently are below: • Vault • GitHub secrets • AWS secret manager • 1password/secrets Any document or experience someone can share would be great as we have recently started using pulumi.

most-lighter-95902

10/29/2021, 8:57 PM

Hi, how do you find out the type of a custom resource? I’ve been struggling to use the

pulumi import

cli to import a Istio Gateway created by Knative because I can’t figure out what the resource type is. I read the docs on this and also tried to infer the type via

pulumi stack --show-urns

etc but I can’t seem to successfully import this resource due to unknown resource type error. Any pointers would be appreciated.

gray-mechanic-96597

10/29/2021, 9:01 PM

Hi everyone! Just starting with Pulumi, I'm trying to do something which seems deadly simple - but struggling 😄 I have a CI/CD process that builds & deploys my image to ECR registry, in my pulumi stack I want to grab an image from that registry and pass it to ECS cluster but I can't find the proper types/methods to use. All the use cases in tutorials either use docker public repo or an image build on the spot (which doesn't work for me - I'm using a gradle JIB library to build an image from a kotlin app without even writing dockerfile 😄 ). Basically I want to setup a service in the cluster and point the task to an image coming from my private ECR registry, any pointers?

nice-father-44210

10/31/2021, 1:16 PM

I’d like to import an existing

ec2.RouteTable

(that has existing routes) but I want to manage the

ec2.Route

resources in a standalone manner (as opposed to in-line). What’s the right way to accomplish this? Should it work if construct the

RouteTable

object with

ResourceOptions(import_ = "rtb-xxx")

while omitting the

routes

parameter?

dazzling-sundown-39670

10/31/2021, 2:06 PM

Is there any good way to create like a bastion for the postgres package? Can't really use it since I can't access the database from my local machine

most-lighter-95902

10/31/2021, 4:40 PM

Is there a way to update previously created Pulumi CustomResource? Knative has a KnativeServing resource where you can specify configs for different resources it manages and I need to be able to update that config (

spec.config

) after its creation - i.e. KnativeServing CustomResource is already in Pulumi state and I need to update that state later in the code (after some other operation is finished).

most-lighter-95902

10/31/2021, 4:43 PM

Is the best practice using import and transform in this case?

most-lighter-95902

10/31/2021, 4:45 PM

Import doesn’t sound quite right given that I’ve already created the resource in Pulumi?

cold-motherboard-287

11/01/2021, 12:47 PM

hello 👋 I'm using AWS KMS to encrypt secrets in Pulumi, but I would like to ask if it's possible to set

passphrase

as a fallback in case you lose access to the AWS KMS key.

early-keyboard-41388

11/01/2021, 1:19 PM

Hi, I lost the

passphrase

and kind of stuck with error

error: incorrect passphrase

. Is there a way to get around it? Do I have to delete the

Pulumi.<stack>.yaml

and files in the

.Pulumi

directory (and any cloud resources deleted manually)? Thanks.

sticky-airline-40485

11/01/2021, 2:13 PM

hello all, I'm now running into an issue where my AWS credentials are not being picked up from one stack, but running fine on another. I'm using a multi-profile configuration following the docs. Everything was running fine yesterday, but now for some reason one of my stacks says

unable to discover AWS AccessKeyID and/or SecretAccessKey

. Anyone else encountering this?

white-cat-90296

11/01/2021, 3:11 PM

Hello! Quick question about API Gateway and the

awsx

package. When creating an API gateway, it seems like the

Integration Request

Lambda is configured correctly with the right ARN, however, there is no

Execution Role

listed. That field is left empty and we have to configure it manually. Do you know how could we automatically set the execution role for the integration request? Here's the creation of the API Gateway for your reference:

const api = new awsx.apigateway.API('api-name', {
    routes: [{
        path: "/targetpath",
        method: "ANY",
        eventHandler: lambda,
    }]
...

able-camera-57198

11/01/2021, 3:56 PM

👋 - Hello everyone! I have a question regarding configuration for stacks... I noticed that when I make a stack, a

yaml

file is created for it in my project. I generally don't like to keep environment specific information in source control. Is there any other way to manage stack configurations in pulumi?

wooden-receptionist-75654

11/01/2021, 4:47 PM

Hey Guys, I’m trying to get azure subscriptionId from azure-native. And a bit confused with Input/Output

const azure = authorization.getClientConfig();
const subscriptionId = azure.then(azure => azure.subscriptionId)

new authorization.RoleAssignment("ass", {
  principalId: kprincipalId,
  principalType: "ServicePrincipal",
  roleDefinitionId:
    `/subscriptions/${subscriptionId}/providers/Microsoft.Authorization/roleDefinitions/${id}`,
  scope: resourceGroup.id,
});

And I’m still got

[object Promise]

for subscriptionId. What I’m missing?

boundless-angle-56560

11/01/2021, 6:27 PM

Hi, is it possible with the new helm Release resource to use local chart without repository ?

brave-nightfall-19158

11/01/2021, 7:01 PM

hi all. Using CircleCI - anyone know where to get the PULUMI_ACCESS_TOKEN ?

brave-nightfall-19158

11/01/2021, 7:01 PM

I've looked everywhere in the dashboard but can't find anywhere to generate a token