Has anyone used the

@pulumi/vault

provider yet by any chance? I am not finding good examples/documentation around this on retrieving secrets from Hashicorp Vault.

Hello, I’m just getting started with Pulumi, in a Webiny project. I need to simulate a Terraform

data

block. I saw that this can be done by

aws.ec2.getVpc()

. However, this returns a

Promise<aws.ec2.GetVpcResult>

instead of a

Vpc

(which has

pulumi.Output<string>

properties) and the two objects are very different. Am I barking up the right tree, here? I see the static

Vpc.get()

method, but it has parameters I don’t know the meaning of, such as `id: pulumi.Input<pulumi.ID>`… what would I pass in there? If I go down the

getVpc()

route with the Promise, could I end up having any kind of race condition issue between the time the details of that VPC are fetched and the actual stack deploys?

Hello. I am trying to create an AWS provider for a different AWS account than the one the Pulumi program is launched with. I do so like this:

const provider = new aws.Provider(`${acctName}-provider`, {
    region: "us-west-2",
    assumeRole: {
        roleArn: pulumi.interpolate`arn:aws:iam::${args.id}:role/${args.roleName}`
    }
});

I later create a resource by passing the provider as the 3rd arg to the resource

{provider: provider}

. After running

pulumi up

, I receive the following message:

aws:iam:Role (access):
    error: 1 error occurred:
    	* error configuring Terraform AWS Provider: IAM Role (arn:aws:iam::<<account id>>:role/<<role name>>) cannot be assumed.
    
    There are a number of possible causes of this - the most common are:
      * The credentials used in order to assume the role are invalid
      * The credentials do not have appropriate permission to assume the role
      * The role ARN is not valid
    
    Error: NoCredentialProviders: no valid providers in chain. Deprecated.
    	For verbose messaging see aws.Config.CredentialsChainVerboseErrors

How can I go about further debugging this?

Hello! Is it possible to define a region for the backend s3 bucket url (within

backend=auto.ProjectBackend(url="<s3://pulumistate/>")

)? I have a central bucket for managing state but it throws an error when deploying a new instance in another region.

could not create stack: could not list bucket: blob (code=Unknown): BucketRegionError: incorrect region, the bucket is not in 'us-west-1' region

Hello! Did someone already had issues updating Kubernetes certificates and refreshing pulumi stack? I’m currently getting the following error

kubernetes:core/v1:PersistentVolume storage-3 refreshing warning: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials

When running a preview there is an output column Plan, The possible values and definitions is hard to find. Can some point point me in the direction?

Hello. Is there any problem with the pulumi/azure-native 1.45.0 for yarn? So when I try to install it with yarn add, I always get the: Error: unexpected end of file at Zlib.zlibOnError. yarn version: 1.22.17, node 14.18.1, linux

hey. Is there a way to run an image pipeline that I have created from the pulumi instead of running it from the AWS console? This is what I’m trying to run:

I got the following error when trying to deploy infrastructure using circleci:

error: no resource plugin aws-v4.24.1 found in the workspace or on your $PATH, install the plugin using pulumi plugin install resource aws v4.24.1

I am not sure why I need to manually install aws plugin? I didn't do that on my local machine ps. I am using organization account, when I do this on my personal account I don't have this issue

Hi, I asked this is Azure channel, but I think this is basically the usage of

Output

The error is in

azure-native

, which I can't change the source code, but the type is For type like 

*readonly* identity: pulumi.Output<outputs.web.ManagedServiceIdentityResponse | undefined>;

How do I put them into another 

Input

 type? I would get

Type 'Output<string | undefined>' is not assignable to type 'Input<string>'.
  Type 'OutputInstance<string | undefined>' is not assignable to type 'Input<string>'.
    Type 'OutputInstance<string | undefined>' is not assignable to type 'OutputInstance<string>'.
      Type 'string | undefined' is not assignable to type 'string'.
        Type 'undefined' is not assignable to type 'string'.ts(2322)

hey guys, just updated to latest version of pulumi cli and packages and pulumi keeps hanging on me, the first command seems to just sit there...I terminate it...and run it again and sometimes it finishes or gets hung midway through

sounds like an outage perhaps, I am seeing

error: could not deserialize deployment: decrypting secret value: [504]

right now from Pulumi

I'm actually seeing 504s this morning as well

yes I am seeing same

it eventually said that just now

I've put a support ticket in but we should all probably do the same if we have the option.

its very sporadic....

seems back to normal, thanks team

Hello, anyone managed to create a database user for MongoDB? I'm getting

400 (request "MISSING_ATTRIBUTE") The required attribute databaseName was not specified.

though it's provided. https://www.pulumi.com/registry/packages/mongodbatlas/api-docs/databaseuser/

im doing a pulumi ip, but getting the error that a resource already exists. in this case its the register a static ip. The reason for this is there was a previous typo, but seems the pulumi state didnt know about it, and now its conflicting with another name... im kinda stuck. Ideally, I could make pulumi up move forward and sync what is deployed

i thought pulumi refresh would sync from the cloud provider as the "source of truth" to my local state...

in my case which is gcloud

Is it possible to use

awsx.apigateway.API

with

aws.apigatewayv2

? My use case is I need to create multi-level API mapping (like

/a/b/v1

) which is not supported by

aws.apigateway

.

Hi, I'm trying to make some checks for configuration drift. I've got a folder which imports a set of resources and generates a

pulumi preview --json

output from them. I'm struggling to get this output to be deterministic. Each time I generate it, the resources are in a different order. Is there a way around this?

Hi all, is there any concept in pulumi to create a resource at one point in the code, then further down update that same resource?

obviously if I just call the same provider function it complains that the resource already exists

hi all, is there a way for

pulumi config

command to preserve the ordering of keys in the Pulumi.xxx.yaml file..? its quite annoying it keeps re-arranging all the keys

looks like there is work to be done on it

Not sure if this makes sense, I am parsing a list of prefixes to fetch a list of matching secrets from Google Secret Manager:

let var3 = []
      for (let secret of props.secret ){
        let var1 = pulumi.output(gcp.secretmanager.getSecret({
          secretId: `${secret}*`
        }))
        let var2 = var1.name
            var3 = var3.concat(var2)
      }

The idea is to append the result from the getSecret function to var3 and then parse this list to create kubernetes secrets, I saw error: Variable 'var3' implicitly has type 'any[]' in some locations where its type cannot be determined. What's the result type return from the function and how should I append them?