https://pulumi.com logo
Docs
Join the conversationJoin Slack
Channels
announcements
automation-api
aws
azure
blog-posts
built-with-pulumi
cloudengineering
cloudengineering-support
content-share
contribex
contribute
docs
dotnet
finops
general
getting-started
gitlab
golang
google-cloud
hackathon-03-19-2020
hacktoberfest
install
java
jobs
kubernetes
learn-pulumi-events
linen
localstack
multi-language-hackathon
office-hours
oracle-cloud-infrastructure
plugin-framework
pulumi-cdk
pulumi-crosscode
pulumi-deployments
pulumi-kubernetes-operator
pulumi-service
pulumiverse
python
registry
status
testingtesting123
testingtesting321
typescript
welcome
workshops
yaml
Powered by Linen
general
  • g

    gorgeous-translator-67757

    11/08/2021, 9:44 PM
    how do i create a server listener rule for a second listener for my AWS NLB?
    l
    • 2
    • 3
  • c

    curved-summer-41191

    11/08/2021, 9:52 PM
    I'm trying to target an URN of a new resource to be created and pulmui is telling me that resource doesn't exist in the stack -- is it not possible to use --target with new resources?
  • s

    sparse-beach-51011

    11/08/2021, 10:30 PM
    hey all, we've been using pulumi for our kubernetes resources, and overall its pretty nice but often times we're getting "timeout" errors speaking to the GKE cluster which is strange because its GKE and sure we have like 20 resources we're deploying, but that is quite small, any suggestions?
    s
    • 2
    • 3
  • s

    sparse-beach-51011

    11/08/2021, 10:31 PM
    for pulumi/kubernetes, I assume it will generate the yaml and essentially run the equivalent of kubectl -f apply behind the scenes, right? .. so I should expect pulumi up for a k8s config to work very similarly to hand written kube yml file? but of course code-generated/templated?
    s
    • 2
    • 1
  • a

    abundant-book-94104

    11/08/2021, 11:27 PM
    I am looking at how I structure our infrastructure within Pulumi. Is it right to have a single project with multiple stacks eg one stack to set up resource groups, another for networks, then for databases of various ilk and so on? The laternative is to have them in multiple projects, one for resource groups, one for networks, databases, key vaults and so on?
    p
    l
    • 3
    • 10
  • l

    little-cartoon-10569

    11/09/2021, 2:13 AM
    How can I diagnose why the GitHub action cannot edit my PR comment?
    • 1
    • 1
  • c

    colossal-furniture-61502

    11/09/2021, 2:33 AM
    Is there a channel for the auth0 provider? Have some unusual behaviour and we're interested in some new resources that do have terraform definitions.
    b
    • 2
    • 2
  • s

    sparse-tomato-5980

    11/09/2021, 3:38 AM
    Hi folks, is there a way to get organizations to play well with
    pulumi login --local
    ? If I try to do a
    pulumi stack init myusername/something
    I get back a
    error: stack names may not contain slashes
    My understanding is that
    stack init
    respects org names, and under file:// your org name is just your username.
    l
    e
    • 3
    • 4
  • s

    steep-portugal-37539

    11/09/2021, 4:53 AM
    Hey there does anyone have advice how to configure package/tsconfig .json files so that i can
    npm install
    a pulumi repo via a github url? I keep getting error
    SyntaxError: Cannot use import statement outside a module
    when running pulumi in the repo that installed the pulumi package. It seems i may need to set the “main” field in package.json to point to the compiled entrypoint .js file. However, that then messes up pulumi when i try and run it locally from the repo. As now pulumi tries to invoke the index.js file instead of the index.ts file. I’m trying to mimic how an installed pulumi npm module works. There are .js, .js.map, and .d.ts files. No .ts files. I’m not sure how to replicate this so that the install via github url works, as well as running pulumi within the pulumi pkg repo itself (I do that for testing) I can’t figure this out 🙂 Any advice would be much appreciated
    m
    • 2
    • 9
  • b

    bored-barista-23480

    11/09/2021, 11:45 AM
    Hey folks, I get the error
    Exception: 'dependsOn' was passed a value that was not a Resource.
    , but I don't explicitly set the
    dependsOn
    parameter. I boiled it down to one specific parameter creating the problem. I create an EKS cluster in my first project, export
    cluster.core
    , import it in my second project and use it as the
    cluster
    input to a
    ManagedNodeGroup
    . Currently it's the only resource created in the second project and every other input is given explicitly (= not as an
    Output
    type). Does any one have a clue where the error could originate or even how to solve it?
    l
    • 2
    • 5
  • f

    future-refrigerator-88869

    11/09/2021, 6:52 PM
    With the automation api, can I set a project to be one within an organization ? I have a devops user which is part of the organization and I setup the automation arguments as :
    const stackArgs: InlineProgramArgs = {
          stackName: 'some name',
          projectName: "org/project",
          program: inlineProgram,
        };
    However, when executing this i get
    error: could not create stack: provided project name "org-project" doesn't match Pulumi.yaml
    . However, there's no
    pulumi.yaml
    file within the folder I run this so I'm a bit confused. everything works fine if i don't use the
    org
    but that creates the project within the devops user environment. Any ideas ?
    • 1
    • 1
  • l

    limited-rainbow-51650

    11/09/2021, 7:30 PM
    A stack config typically looks like this (ignoring structured config for the moment):
    config:
      <your-project-name>:<key>: <value>
    Providers often look up their config with another "project-name", e.g.:
    config:
      aws:region: eu-west-1
      <your-project-name>:<key>: <value>
    If I create an abstraction in a reusable library, I could for example use a separate project key to store all the config for my component.
    config:
      aws:region: eu-west-1
      <your-project-name>:<key>: <value>
      <my-component-name>:<key1>: <value1>
      <my-component-name>:<key2>: <value2>
    Do other Pulumi developers use this ability for such use cases? Would this be a good pattern to use, or rather an anti-pattern?
    l
    w
    • 3
    • 17
  • w

    wide-jackal-86020

    11/10/2021, 3:22 AM
    Hi, is there a best practice for running
    npm build
    inside pulumi? Here's the use case: We need to build and deploy a frontend REACT application to S3. And we need to know which stack to deploy while building the application, so we can set up the environment variables properly. For example, if we are deploying to
    dev
    , we should run
    ENV=dev npm build
    . Since we can easily get the stack name in pulumi, it would be convenient if I can run
    npm build
    inside pulumi.
    l
    s
    +2
    • 5
    • 8
  • s

    steep-portugal-37539

    11/10/2021, 4:22 AM
    Hey guys. Has anyone created a typescript pulumi project that utilizes absolute paths? I’m having many complications with using them at runtime. There are issues on Github about this. But it isn’t so simple to get absolute paths working. But am curious if anyone here is using this in their projects.
  • b

    busy-magazine-48939

    11/10/2021, 9:57 AM
    I wonder how do you guys profile your CI builds? I observe performance degradation in Github Action builds which I can't reproduce on my local.
  • s

    square-coat-62279

    11/10/2021, 10:18 AM
    hi all, in Terraform, we can set output to expose certain attribute of the resource of a module, so that other module can refer to it directly when creating other resources that depends on that attribute, how can I do that in Pulumi?
    p
    m
    e
    • 4
    • 18
  • n

    nutritious-shampoo-16116

    11/10/2021, 10:56 AM
    can anyone retrigger this job https://github.com/pulumi/pulumi-aws/actions/runs/1441710772 please ?
    🙏 1
  • g

    great-breakfast-56601

    11/10/2021, 11:55 AM
    Hi. Can someone confirm for me whether the
    new CustomResourceOptions { Protect }
    option should be preventing destruction of resources by my pulumi up script or not?
  • g

    great-breakfast-56601

    11/10/2021, 11:56 AM
    Am I correct in saying it doesn't work on the first pass?
    l
    • 2
    • 3
  • g

    great-breakfast-56601

    11/10/2021, 12:01 PM
    I need to protect a cluster from possible deletion, but the first pass might change the vmSize. Anyone know how to order things so it can be protected even on first pass?
    e
    l
    • 3
    • 15
  • a

    able-camera-57198

    11/10/2021, 3:16 PM
    Can pulumi be used for deployment of static web site content? For example, to google storage containers? Or is this something to be avoided? (I ask as there's a line some like to observe between infra management and releases.)
    p
    m
    +2
    • 5
    • 29
  • s

    sparse-student-54516

    11/10/2021, 3:21 PM
    For storing state file of my pulumi stack I am using s3 bucket. Should I use single s3 bucket for all stacks/env? or should I create 3 different buckets for state file of 3 different stacks? Which is better/preferred? Our aim it to keep state file of different env as isolated as possible. Please suggest.
    l
    • 2
    • 4
  • b

    bored-barista-23480

    11/10/2021, 3:50 PM
    I am using the
    pulumi_eks
    package to set up an EKS cluster in a project. I have to import the cluster in a second project and ran into a problem:
    pulumi_eks.Cluster
    does not provide a
    get()
    method. Under the hood there is a child resource of type
    pulumi_aws.eks.Cluster
    with a static
    get()
    method but it does not work ,Pulumi can't find it. Did I miss something or is there no way of importing the cluster if using the
    pulumi_eks
    package to deploy it?
    d
    • 2
    • 4
  • a

    able-camera-57198

    11/10/2021, 4:56 PM
    Is it possible to initialize a stack without creating a
    .yaml
    file in the current folder? (I plan on using
    --config-file
    )
    m
    • 2
    • 9
  • b

    bulky-policeman-29913

    11/10/2021, 8:44 PM
    Has anyone used the
    @pulumi/vault
    provider yet by any chance? I am not finding good examples/documentation around this on retrieving secrets from Hashicorp Vault.
    l
    • 2
    • 6
  • f

    freezing-sugar-24066

    11/10/2021, 9:08 PM
    Hello, I’m just getting started with Pulumi, in a Webiny project. I need to simulate a Terraform
    data
    block. I saw that this can be done by
    aws.ec2.getVpc()
    . However, this returns a
    Promise<aws.ec2.GetVpcResult>
    instead of a
    Vpc
    (which has
    pulumi.Output<string>
    properties) and the two objects are very different. Am I barking up the right tree, here? I see the static
    Vpc.get()
    method, but it has parameters I don’t know the meaning of, such as `id: pulumi.Input<pulumi.ID>`… what would I pass in there? If I go down the
    getVpc()
    route with the Promise, could I end up having any kind of race condition issue between the time the details of that VPC are fetched and the actual stack deploys?
    l
    • 2
    • 8
  • f

    full-dress-10026

    11/10/2021, 11:06 PM
    Hello. I am trying to create an AWS provider for a different AWS account than the one the Pulumi program is launched with. I do so like this:
    const provider = new aws.Provider(`${acctName}-provider`, {
        region: "us-west-2",
        assumeRole: {
            roleArn: pulumi.interpolate`arn:aws:iam::${args.id}:role/${args.roleName}`
        }
    });
    I later create a resource by passing the provider as the 3rd arg to the resource
    {provider: provider}
    . After running
    pulumi up
    , I receive the following message:
    aws:iam:Role (access):
        error: 1 error occurred:
        	* error configuring Terraform AWS Provider: IAM Role (arn:aws:iam::<<account id>>:role/<<role name>>) cannot be assumed.
        
        There are a number of possible causes of this - the most common are:
          * The credentials used in order to assume the role are invalid
          * The credentials do not have appropriate permission to assume the role
          * The role ARN is not valid
        
        Error: NoCredentialProviders: no valid providers in chain. Deprecated.
        	For verbose messaging see aws.Config.CredentialsChainVerboseErrors
    How can I go about further debugging this?
    l
    f
    • 3
    • 35
  • l

    lemon-lamp-41193

    11/11/2021, 1:16 AM
    Hello! Is it possible to define a region for the backend s3 bucket url (within
    backend=auto.ProjectBackend(url="<s3://pulumistate/>")
    )? I have a central bucket for managing state but it throws an error when deploying a new instance in another region.
    could not create stack: could not list bucket: blob (code=Unknown): BucketRegionError: incorrect region, the bucket is not in 'us-west-1' region
    l
    • 2
    • 2
  • w

    white-train-9300

    11/11/2021, 2:39 AM
    Hello! Did someone already had issues updating Kubernetes certificates and refreshing pulumi stack? I’m currently getting the following error
    kubernetes:core/v1:PersistentVolume storage-3 refreshing warning: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
  • a

    abundant-book-94104

    11/11/2021, 3:26 AM
    When running a preview there is an output column Plan, The possible values and definitions is hard to find. Can some point point me in the direction?
    l
    • 2
    • 6
Powered by Linen
Title
a

abundant-book-94104

11/11/2021, 3:26 AM
When running a preview there is an output column Plan, The possible values and definitions is hard to find. Can some point point me in the direction?
l

little-cartoon-10569

11/11/2021, 3:32 AM
That's the same as "Operation" when doing an
up
. I think I saw that enum in code once... let me browse..
Nope, can't find it anywhere. Do you have a specific question about Pulumi operations?
a

abundant-book-94104

11/11/2021, 3:57 AM
I'm configuring a key vault in azure and I noted operations showing the plan as update. While in the present case a drop and rebuild of the key vault in question would be fine, I'm interested in what else I might encounter. What the effects of the various plan decisions are to help me spread the love with my team as we adopt Pulumi. I read about Pulumi dropping databases for example and it would be helpful to say if x with Azure service yy then that's destructive in the change
l

little-cartoon-10569

11/11/2021, 4:41 AM
Update means an in-place change. Other operations are Create, Delete and Replace. Replace is used only when the provider does not support an Update, and a new resource is required.
There are other operations behind the scenes (import, query, sync maybe?), but those are the ones that can end up in the Plan (preview) or Operation (up) column.
a

abundant-book-94104

11/11/2021, 12:43 PM
Thanks for that, appreciate you digging that out
View count: 2