how do i create a server listener rule for a second listener for my AWS NLB?

I'm trying to target an URN of a new resource to be created and pulmui is telling me that resource doesn't exist in the stack -- is it not possible to use --target with new resources?

hey all, we've been using pulumi for our kubernetes resources, and overall its pretty nice but often times we're getting "timeout" errors speaking to the GKE cluster which is strange because its GKE and sure we have like 20 resources we're deploying, but that is quite small, any suggestions?

for pulumi/kubernetes, I assume it will generate the yaml and essentially run the equivalent of kubectl -f apply behind the scenes, right? .. so I should expect pulumi up for a k8s config to work very similarly to hand written kube yml file? but of course code-generated/templated?

I am looking at how I structure our infrastructure within Pulumi. Is it right to have a single project with multiple stacks eg one stack to set up resource groups, another for networks, then for databases of various ilk and so on? The laternative is to have them in multiple projects, one for resource groups, one for networks, databases, key vaults and so on?

How can I diagnose why the GitHub action cannot edit my PR comment?

Is there a channel for the auth0 provider? Have some unusual behaviour and we're interested in some new resources that do have terraform definitions.

Hi folks, is there a way to get organizations to play well with

pulumi login --local

? If I try to do a

pulumi stack init myusername/something

I get back a

error: stack names may not contain slashes

My understanding is that

stack init

respects org names, and under file:// your org name is just your username.

Hey there does anyone have advice how to configure package/tsconfig .json files so that i can

npm install

a pulumi repo via a github url? I keep getting error

SyntaxError: Cannot use import statement outside a module

when running pulumi in the repo that installed the pulumi package. It seems i may need to set the “main” field in package.json to point to the compiled entrypoint .js file. However, that then messes up pulumi when i try and run it locally from the repo. As now pulumi tries to invoke the index.js file instead of the index.ts file. I’m trying to mimic how an installed pulumi npm module works. There are .js, .js.map, and .d.ts files. No .ts files. I’m not sure how to replicate this so that the install via github url works, as well as running pulumi within the pulumi pkg repo itself (I do that for testing) I can’t figure this out 🙂 Any advice would be much appreciated

Hey folks, I get the error

Exception: 'dependsOn' was passed a value that was not a Resource.

, but I don't explicitly set the

dependsOn

parameter. I boiled it down to one specific parameter creating the problem. I create an EKS cluster in my first project, export

cluster.core

, import it in my second project and use it as the

cluster

input to a

ManagedNodeGroup

. Currently it's the only resource created in the second project and every other input is given explicitly (= not as an

Output

type). Does any one have a clue where the error could originate or even how to solve it?

With the automation api, can I set a project to be one within an organization ? I have a devops user which is part of the organization and I setup the automation arguments as :

const stackArgs: InlineProgramArgs = {
      stackName: 'some name',
      projectName: "org/project",
      program: inlineProgram,
    };

However, when executing this i get

error: could not create stack: provided project name "org-project" doesn't match Pulumi.yaml

. However, there's no

pulumi.yaml

file within the folder I run this so I'm a bit confused. everything works fine if i don't use the

org

but that creates the project within the devops user environment. Any ideas ?

A stack config typically looks like this (ignoring structured config for the moment):

config:
  <your-project-name>:<key>: <value>

Providers often look up their config with another "project-name", e.g.:

config:
  aws:region: eu-west-1
  <your-project-name>:<key>: <value>

If I create an abstraction in a reusable library, I could for example use a separate project key to store all the config for my component.

config:
  aws:region: eu-west-1
  <your-project-name>:<key>: <value>
  <my-component-name>:<key1>: <value1>
  <my-component-name>:<key2>: <value2>

Do other Pulumi developers use this ability for such use cases? Would this be a good pattern to use, or rather an anti-pattern?

Hi, is there a best practice for running

npm build

inside pulumi? Here's the use case: We need to build and deploy a frontend REACT application to S3. And we need to know which stack to deploy while building the application, so we can set up the environment variables properly. For example, if we are deploying to

dev

, we should run

ENV=dev npm build

. Since we can easily get the stack name in pulumi, it would be convenient if I can run

npm build

inside pulumi.

Hey guys. Has anyone created a typescript pulumi project that utilizes absolute paths? I’m having many complications with using them at runtime. There are issues on Github about this. But it isn’t so simple to get absolute paths working. But am curious if anyone here is using this in their projects.

I wonder how do you guys profile your CI builds? I observe performance degradation in Github Action builds which I can't reproduce on my local.

hi all, in Terraform, we can set output to expose certain attribute of the resource of a module, so that other module can refer to it directly when creating other resources that depends on that attribute, how can I do that in Pulumi?

can anyone retrigger this job https://github.com/pulumi/pulumi-aws/actions/runs/1441710772 please ?

Hi. Can someone confirm for me whether the

new CustomResourceOptions { Protect }

option should be preventing destruction of resources by my pulumi up script or not?

Am I correct in saying it doesn't work on the first pass?

I need to protect a cluster from possible deletion, but the first pass might change the vmSize. Anyone know how to order things so it can be protected even on first pass?

Can pulumi be used for deployment of static web site content? For example, to google storage containers? Or is this something to be avoided? (I ask as there's a line some like to observe between infra management and releases.)

For storing state file of my pulumi stack I am using s3 bucket. Should I use single s3 bucket for all stacks/env? or should I create 3 different buckets for state file of 3 different stacks? Which is better/preferred? Our aim it to keep state file of different env as isolated as possible. Please suggest.

I am using the

pulumi_eks

package to set up an EKS cluster in a project. I have to import the cluster in a second project and ran into a problem:

pulumi_eks.Cluster

does not provide a

get()

method. Under the hood there is a child resource of type

pulumi_aws.eks.Cluster

with a static

get()

method but it does not work ,Pulumi can't find it. Did I miss something or is there no way of importing the cluster if using the

pulumi_eks

package to deploy it?

Is it possible to initialize a stack without creating a

.yaml

file in the current folder? (I plan on using

--config-file

)

Has anyone used the

@pulumi/vault

provider yet by any chance? I am not finding good examples/documentation around this on retrieving secrets from Hashicorp Vault.

Hello, I’m just getting started with Pulumi, in a Webiny project. I need to simulate a Terraform

data

block. I saw that this can be done by

aws.ec2.getVpc()

. However, this returns a

Promise<aws.ec2.GetVpcResult>

instead of a

Vpc

(which has

pulumi.Output<string>

properties) and the two objects are very different. Am I barking up the right tree, here? I see the static

Vpc.get()

method, but it has parameters I don’t know the meaning of, such as `id: pulumi.Input<pulumi.ID>`… what would I pass in there? If I go down the

getVpc()

route with the Promise, could I end up having any kind of race condition issue between the time the details of that VPC are fetched and the actual stack deploys?

Hello. I am trying to create an AWS provider for a different AWS account than the one the Pulumi program is launched with. I do so like this:

const provider = new aws.Provider(`${acctName}-provider`, {
    region: "us-west-2",
    assumeRole: {
        roleArn: pulumi.interpolate`arn:aws:iam::${args.id}:role/${args.roleName}`
    }
});

I later create a resource by passing the provider as the 3rd arg to the resource

{provider: provider}

. After running

pulumi up

, I receive the following message:

aws:iam:Role (access):
    error: 1 error occurred:
    	* error configuring Terraform AWS Provider: IAM Role (arn:aws:iam::<<account id>>:role/<<role name>>) cannot be assumed.
    
    There are a number of possible causes of this - the most common are:
      * The credentials used in order to assume the role are invalid
      * The credentials do not have appropriate permission to assume the role
      * The role ARN is not valid
    
    Error: NoCredentialProviders: no valid providers in chain. Deprecated.
    	For verbose messaging see aws.Config.CredentialsChainVerboseErrors

How can I go about further debugging this?

Hello! Is it possible to define a region for the backend s3 bucket url (within

backend=auto.ProjectBackend(url="<s3://pulumistate/>")

)? I have a central bucket for managing state but it throws an error when deploying a new instance in another region.

could not create stack: could not list bucket: blob (code=Unknown): BucketRegionError: incorrect region, the bucket is not in 'us-west-1' region

Hello! Did someone already had issues updating Kubernetes certificates and refreshing pulumi stack? I’m currently getting the following error

kubernetes:core/v1:PersistentVolume storage-3 refreshing warning: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials