https://pulumi.com logo
Docs
Join the conversationJoin Slack
Channels
announcements
automation-api
aws
azure
blog-posts
built-with-pulumi
cloudengineering
cloudengineering-support
content-share
contribex
contribute
docs
dotnet
finops
general
getting-started
gitlab
golang
google-cloud
hackathon-03-19-2020
hacktoberfest
install
java
jobs
kubernetes
learn-pulumi-events
linen
localstack
multi-language-hackathon
office-hours
oracle-cloud-infrastructure
plugin-framework
pulumi-cdk
pulumi-crosscode
pulumi-deployments
pulumi-kubernetes-operator
pulumi-service
pulumiverse
python
registry
status
testingtesting123
testingtesting321
typescript
welcome
workshops
yaml
Powered by Linen
general
  • s

    steep-beach-52652

    11/19/2021, 9:56 AM
    can i get the same using some pulumi code instead? or how can i get rid of the warning
  • b

    brave-planet-10645

    11/19/2021, 10:54 AM
    @steep-beach-52652 what version of the CLI are you using?
  • s

    steep-beach-52652

    11/19/2021, 11:05 AM
    latest
    b
    c
    • 3
    • 32
  • e

    early-intern-90238

    11/19/2021, 2:29 PM
    Has anyone had success getting the new Prometheus Helm to work? I can't figure out if it's a Pulumi issue or an issue with our Cluster. The previous version of Prometheus has been working for us fine. This is what I get for trying to upgrade I guess...
  • s

    strong-gold-74444

    11/19/2021, 3:07 PM
    Is anyone integrating their Pulumi projects to pull parameters/config from a CMDB or external datasource, in order to drive infrastructure build? Is this a common pattern? Can anyone point me to any examples/write-ups/whitepapers of this type of use/pattern? (Or, is this a bad thing, and why?)
  • a

    agreeable-ram-97887

    11/19/2021, 3:11 PM
    When creating an Ingress via the kubernetes-pulumi sdk, is it possible to get the resulting endpoint of the loadbalancer? I am hoping to use this to automatically update a DNS record on Route53 within the same project
  • s

    sticky-airline-40485

    11/19/2021, 4:01 PM
    Hi folks - anyway to get the history of an AWS Parameter Store parameter along with labels in Pulumi?
  • p

    purple-lawyer-35555

    11/19/2021, 4:27 PM
    Hi all! is there any way to configure the default path where
    .pulumi
    is stored?
    m
    • 2
    • 1
  • p

    proud-pizza-80589

    11/19/2021, 5:03 PM
    Is there any way to make the pulumi binary to use more system resources. Launching a run of a big project causes it to max out my 2 efficiency cores (top spec mbp m1 max) for a few minutes before actually starting to do anything. Actually twice per run, as it does this for preview and the actual run. It would be cool if it made use of all the cores at its disposal šŸ˜‰
  • l

    lively-student-98057

    11/19/2021, 5:44 PM
    Hi! I had a project working last night. This morning, when I try to do anything, even select a stack:
    failed to load checkpoint: blob (key ".pulumi/stacks/dev.json") (code=Unknown): ExpiredToken: The provided token has expired.
            status code: 400, request id: ..., host id: ...
    I’ve tried replacing the backend’s dev.json with the dev.json.bak, but that didn’t work. Any thoughts?
    r
    • 2
    • 3
  • h

    helpful-afternoon-10938

    11/19/2021, 6:44 PM
    Hi, I am working with automation api and need to know if there is any way to get stack diff in a json. like only the resource that has been changed with the change. I can only get dict with two value dict_items([('same', 1), ('update', 1)])
    diff = stack.preview(diff=True)
    print(diff.change_summary)
    but I need the changed resource in some json format
    r
    • 2
    • 9
  • p

    polite-portugal-60022

    11/19/2021, 7:55 PM
    I cannot for the life of me get pulumi to import existing GCP resources (instances). What am I doing wrong? resources.json:
    {
      "resources": [
        {
          "boot_disk": {
            "auto_delete": true,
            "initialize_params": {
              "image": "projects/suse-byos-cloud/global/images/sles-15-sp2-byos-v20210604",
              "size": 100
            }
          },
          "guest_accelerator": null,
          "id": "test-instance",
          "machine_type": "n1-standard-1",
          "network_interfaces": [
            {
              "address": "10.10.10.10",
              "subnetwork": "<https://www.googleapis.com/compute/v1/projects/myproj/regions/us-west1/subnetworks/mysubnet>",
              "type": "VIRTIO_NET"
            }
          ],
          "project": "myproj",
          "shielded_instance_config": null,
          "tags": null,
          "type": "gcp:compute/instance:Instance",
          "zone": "us-west1-a"
        }
      ]
    }
    command out:
    pulumi import -f resources.json
    Previewing import (dev)
    
    View Live: <https://app.pulumi.com/user/test-import/dev/previews/b6937451-d5e6-46ca-8d05-2fd6055e3119>
    
         Type                     Name             Plan       Info
     +   pulumi:pulumi:Stack      test-import-dev  create     1 error; 1 message
     =   └─ gcp:compute:Instance                   import     7 errors
    
    Diagnostics:
      gcp:compute:Instance ():
        error: gcp:compute/instance:Instance resource '' has a problem: expected network_interface.0.nic_type to be one of [GVNIC VIRTIO_NET], got . Examine values at 'Instance.
    NetworkInterfaces[0].NicType'.
        error: gcp:compute/instance:Instance resource '' has a problem: Computed attribute cannot be set. Examine values at 'Instance.NetworkInterfaces[0].Ipv6AccessType'.
        error: gcp:compute/instance:Instance resource '' has a problem: Computed attribute cannot be set. Examine values at 'Instance.NetworkInterfaces[0].Name'.
        error: gcp:compute/instance:Instance resource '' has a problem: ConflictsWith: "boot_disk.0.kms_key_self_link": conflicts with boot_disk.0.disk_encryption_key_raw. Examine values at 'Instance.BootDisk.KmsKeySelfLink'.
        error: gcp:compute/instance:Instance resource '' has a problem: ConflictsWith: "boot_disk.0.disk_encryption_key_raw": conflicts with boot_disk.0.kms_key_self_link. Examine values at 'Instance.BootDisk.DiskEncryptionKeyRaw'.
        error: gcp:compute/instance:Instance resource '' has a problem: Computed attribute cannot be set. Examine values at 'Instance.BootDisk.DiskEncryptionKeySha256'.
        error: Preview failed: one or more inputs failed to validate
    
      pulumi:pulumi:Stack (test-import-dev):
        Python 3.7 is approaching EOL and will not be supported in Pulumi soon. Check <https://github.com/pulumi/pulumi/issues/8131> for more details
    
        error: preview failed
  • g

    gorgeous-minister-41131

    11/19/2021, 9:32 PM
    Is there still yet not a way to have a pulumi’s resource_name be generated using an Output[T] component? I’d really like to be able to leverage a previous resource’s Output properties as part of generating a resource_name (which becomes part of the URN) when constructing another dependent resource off it…
    šŸ‘€ 1
    g
    l
    • 3
    • 7
  • g

    gorgeous-minister-41131

    11/20/2021, 12:37 AM
    Changing a resource’s provider forces it to get re-created, even if the provider is also another, say, AWS provider…??? šŸ¤”
    f
    • 2
    • 6
  • a

    acceptable-oil-81004

    11/20/2021, 2:03 AM
    Hey all, quick question. Is there a way to change the project name without having to re-deploy stacks? ty!
    s
    • 2
    • 3
  • b

    brave-nightfall-19158

    11/20/2021, 6:19 PM
    Hey! Can someone help me understand the pulumi refresh a little bit more? When I do it, I get a "20 changes" warning. However, not too sure what it does if I continue. For example, I created a public route with
    new aws.ec2.RouteTable('public-route-table', {
          vpcId: this.vpc.id
        })
    and now when i do refresh I get this attached. Can anyone help me understand what's happened / gone wrong here?
    l
    • 2
    • 2
  • h

    helpful-afternoon-10938

    11/21/2021, 4:18 PM
    Hi, I am using automation api and want to know is there any way to get resource urn list for particular stack. similar to
    pulumi stack --show-urns
  • f

    few-army-64952

    11/21/2021, 10:25 PM
    hi ppl, is there anybody who is using pulumi with C# and ever encountered this
    • 1
    • 1
  • e

    enough-animal-75031

    11/22/2021, 1:33 AM
    Hello! I'm just trying to get subnets from an imported VPC, do I have to import the subnets themselves? This doesn't work:
    // Dox VPC, leave protected so this project can't destroy it
    const vpc = new aws.ec2.Vpc("dox", {
        assignGeneratedIpv6CidrBlock: false,
        cidrBlock: "172.31.0.0/16",
        enableDnsSupport: true,
        instanceTenancy: "default",
        tags: {
            Name: "test-VPC",
        },
    }, {
        protect: true,
    });
    
    
    export vpc.publicSubnetIds
    ⚔ 1
    l
    • 2
    • 3
  • b

    brash-airline-37413

    11/22/2021, 4:05 AM
    Has anybody got pulumi multi language components working with hcl as a base language using tf-bridge?
    b
    • 2
    • 1
  • f

    famous-leather-94346

    11/22/2021, 10:26 AM
    Hi, I struggle with mocking a StackReference in python. This doesn't work:
    class MyMocks(pulumi.runtime.Mocks):
            def new_resource(self, args: pulumi.runtime.MockResourceArgs):
                outputs = args.inputs
                if args.typ == "pulumi:pulumi/StackReference":
                    outputs = {
                        **args.inputs,
                        "outputs": {"key": "value, "key2: "value2", "secret1": "secret_value1"},
                        "secret_output_names": ["secret1"],
                    }
                return args.name + '_id', outputs
    
            def call(self, args: pulumi.runtime.MockCallArgs):
                return {}, None
    It fails with:
    >   value = Output.all(Output.from_input(name), self.outputs).apply(lambda l: l[1][l[0]]) # type: ignore
    E   TypeError: 'NoneType' object is not subscriptable
    
    ../.venv/lib/python3.9/site-packages/pulumi/stack_reference.py:82: TypeError
    Is there any example how to do it? šŸ™
  • c

    colossal-boots-62227

    11/22/2021, 10:50 AM
    The web console (in Activity / Changes, for the ā€œDiffā€ and also the file obtained via ā€œDown stack checkpointā€) shows the raw output of each state change ,which including things like plaintext passwords, even for things marked as secrets. The ā€œResourcesā€ view correctly identifies these as encrypted (as per https://www.pulumi.com/docs/intro/concepts/secrets/)
    h
    r
    f
    • 4
    • 27
  • f

    future-refrigerator-88869

    11/22/2021, 1:51 PM
    Hi everyone, any way I can set stack tags via automation api in typescript ? I would like to have some metadata about the stacks I'm creating but I can't find a way to do that šŸ™‚
  • s

    straight-country-5874

    11/22/2021, 2:19 PM
    Hi, I want to add
    disableLocalAuth: true
    setting to my Azure CosmosDB Account to disable accessing to it with connection string. I couldn't find it in the code or Pulumi documentation. Does anybody know how to add that please?
  • s

    sticky-country-73582

    11/22/2021, 4:18 PM
    Hi, For EMR
    Cluster
    class in pulumi-aws v4.28.0, when trying to add
    auto_termination_policy=aws.emr.ClusterAutoTerminationPolicyArgs(
        idle_timeout=300,
    )
    I get the following error - AttributeError: module 'pulumi_aws.emr' has no attribute 'ClusterAutoTerminationPolicyArgs' error: an unhandled error occurred: Program exited with non-zero exit code: 1 Is this the right way to use this? I am using pulumi v.3.17.1
    b
    • 2
    • 2
  • p

    polite-napkin-90098

    11/22/2021, 5:50 PM
    Hello, again: I've managed to get back to trying some Pulumi. Today I'm trying to get an EKS stack running by following the guide here https://www.pulumi.com/docs/guides/crosswalk/aws/eks/ I don't want to launch the cluster in my default VPC, so I am at the section https://www.pulumi.com/docs/guides/crosswalk/aws/eks/#configuring-your-eks-clusters-networking In the code example there the lookup/create for the vpc is not specified
    // Create or lookup a VPC for our cluster.
    vpc := ...
    So I tried adding the ec2 module to my imports
    import {
            "<http://github.com/pulumi/pulumi-aws/sdk/v4/go/aws/ec2|github.com/pulumi/pulumi-aws/sdk/v4/go/aws/ec2>"
    }
    and then
    // Look up the Test VPC
                    vpcid := "vpc-xxxxxxx"
                    vpc, err := ec2.LookupVpc(ctx, &ec2.LookupVpcArgs{ Id: &vpcid })
                    if err != nil {
                            return err
                    }
    in main() But this doesn't let me get at the vpc.PublicSubnetIds or the vpc.PrivateSubnetIds as they're from the Crosswalk module. I've had a look but https://www.pulumi.com/docs/guides/crosswalk/aws/vpc/#getting-the-default-vpc only shows me how to get it using the pulumi cli. Is there a golang awsx module I can load? Can someone point me in the right direction please?
    • 1
    • 1
  • b

    breezy-table-35227

    11/22/2021, 7:19 PM
    Hello, is there a way to turn on asyncio debug mode for pulumi (python)?
    r
    • 2
    • 2
  • e

    enough-animal-75031

    11/22/2021, 11:01 PM
    @polite-napkin-90098 You need to import all the subnets individually if you're putting EKS onto existing subnets: https://www.pulumi.com/registry/packages/aws/api-docs/ec2/subnet/#import
    p
    • 2
    • 3
  • b

    brash-airline-37413

    11/23/2021, 3:29 AM
    Has anybody got a working solution like tf2pulumi for converting terraform modules into pulumi componentresources?
  • c

    colossal-boots-62227

    11/23/2021, 8:41 AM
    Calling
    aws.secretsmanager.get_secret(name="mySecret").arn
    results in several deprecated warnings for attributes which are not being accessed
    l
    • 2
    • 17
Powered by Linen
Title
c

colossal-boots-62227

11/23/2021, 8:41 AM
Calling
aws.secretsmanager.get_secret(name="mySecret").arn
results in several deprecated warnings for attributes which are not being accessed
Example:
warning: rotation_enabled is deprecated: Use the aws_secretsmanager_secret_rotation data source instead
    warning: rotation_lambda_arn is deprecated: Use the aws_secretsmanager_secret_rotation data source instead
    warning: rotation_rules is deprecated: Use the aws_secretsmanager_secret_rotation data source instead
These attributes are deprecated (see: https://www.pulumi.com/registry/packages/aws/api-docs/secretsmanager/getsecret/#result) but as i’m not accessing them the warning seems spurious
Please confirm if this is a bug and if so I will raise an issue in GH
Also applies to
aws.secretsmanager.get_secret_output()
Pulumi
3.17.1
, Python, AWS classic
4.29.0
l

little-cartoon-10569

11/23/2021, 6:53 PM
Can you try aws_native.secretsmanager.get_secret instead? That uses the Cloud Control API instead of the SecretsManager API and might sidestep the issue.
That error message is from TF, so there's nothing that can be done in the Pulumi codebase to fix it. Avoiding the TF provider might help. (Of course, the error might be at AWS' end, so it might still occur...)
c

colossal-boots-62227

11/24/2021, 3:24 AM
@little-cartoon-10569 I understood that Pulumi does not ā€œuseā€ TF, rather it uses only the schema that was crested by the TF folks: https://www.leebriggs.co.uk/blog/2021/11/06/pulumi-faqs.html
l

little-cartoon-10569

11/24/2021, 3:27 AM
Maybe, but that error message implies otherwise. There's nothing called aws_secretsmanager_secret_rotation in Pulumi. Or "data source", for that matter. They're both TF-only.
c

colossal-boots-62227

11/24/2021, 3:27 AM
In which case I’m imagine this is a Pulumi bug and something they could fix. I will try the native provider as well (i’ve been sticking to classic as Native doesn’t seem quite ready for prime time)
l

little-cartoon-10569

11/24/2021, 3:27 AM
It could be something sucked out of the schema though...
You can use native and classic together. Native is totally robust, but it doesn't cover everything. You can't use only native, but you can use them both together.
c

colossal-boots-62227

11/24/2021, 3:31 AM
I started with native, very first thing I tried failed (now fixed) so I switched to classic only and it’s been mostly solid. No objection to mixing classic and native. I’ll raise the above as a bug against classic in any case, if it’s an upstream problem the Pulumi guys can fill that issue with TF I guess
šŸ’Æ 1
Thanks for the input @little-cartoon-10569 and i’m very jealous you get to be in NZ šŸ™‚
šŸ„ 1
https://github.com/pulumi/pulumi-aws/issues/1716
FYI: ā€œSecret is not yet supported by AWS Native, so its creation will currently fail. Please use the classic AWS provider, if possible.ā€ from
pulumi_aws_native
0.7.0
View count: 1