Hi, I'm using Pulumi C# AWS - I'm recently getting a lot of random

System.InvalidOperationException: This operation cannot be performed on a default instance of ImmutableArray<T>

errors. They pop up at random places and the only thing I can do is comment code, do

pulumi up

, and then uncomment the code and hopefully it will go away. Anyone coming across this

How are people, if at all, managing the stack name/referencing variation between

local

and

default

state backends? On the cloud a stack reference is derived from project name and stack name (ie.

[ORG/]PROJECT/STACK

) but locally it’s just the stack (ie.

STACK

). This means I end up with conflicts because every project has a

"local"

stack. You can specify a location per login but I presume logging in separately for every project is going to be a pain and mean I cannot do anything in parallel (a non-starter). Is my only solution to have an inconsistent stack name of “local-PROJECT” (

Pulumi.production.yml

next to

Pulumi.local-projec.yml

) or am I missing something else? Slightly unfortunate that I also have to propagate logic for handling name convention difference into my runtime for StackReference too.

Hi Guys - has anybody configured the CodeDEploy Role on AWS using Pulumi - Can u please help how I can set the policy for AmazonEC2RoleforAWSCodeDeploy and AmazonEC2FullAccess, AWSCodeDeployFullAccess, AdministratorAccess, AWSCodeDeployRole managed polocies???

I am trying tor create a role with these policies

hey y'all question regarding stack export - is this file the full state of the entire of the infrastructure or is there something else hidden in Pulumi backend? The reason I ask - I want to move a resource from one stack to another but it would cause downtime which I want to avoid. Can I just export the stack, cut the resource + any dependencies and add into the stack file of my other stack, then reimport both? It's necessary as I'm refactoring the code and unfortunately put a resource where it shouldn't be 😅

Is there any way to Pulumi to list all current state with keys and paths so that I can easily figure out the parameters I need to do a manual delete?

Does

pulumi destroy

respect the

dependsOn

option? I have two custom component resources where one

dependsOn

the other, and it errors out because it destroys both in parallel. Anyway to make sure one is destroyed before the other?

Hello folks 👋 , I am wondering how do you handle

error: [409] Conflict: Another update is currently in progress

errors? I have pulumi job inside my circleci pipeline and if I merge multiple PRs in develop branch in a short time my build fails

Hey guys: • I currently encountered this error: (when trying to intialize new cloudInit.Config `error: no resource plugin 'cloudinit-v4.28.0' found in the workspace or on your $PATH, install the plugin using `pulumi plugin install resource cloudinit v4.28.0`` • but when i do

pulumi plugin install resource cloudinit v4.28.0:

the following error appears:

error: [resource plugin cloudinit-4.28.0] downloading from : 403 HTTP error fetching plugin from <https://get.pulumi.com/releases/plugins/pulumi-resource-cloudinit-v4.28.0-windows-amd64.tar.gz>

• it looks like the access is denied, even if i try open that downlad url in my browser (see on image) • And I cannot find anywhere, the lists of available plugins, or anything like that, does it even exists? Investigation • First of all what I see, the version which is it trying to download is wrong ◦ the current cloudInit version is 1.3.0 but it wants to download plugin for version 4.28.0 ▪︎ The only 4.28.0 version library I have is @pulumi/aws, so there's some I think naming problem... because when I downgraded the @pulumi/aws to 4.27.0 it now wants to download cloudinit v4.27.0 which is wrong, this should always download 1.3.0 and the version shouldn't be based on aws library WTFF

Hello, Is there a way to deploy a local on prem kubernetes cluster using pulumi?

im currently using RKE terraform module to do it. is there going to be a support for RKE from pulumi

i see something https://www.pulumi.com/registry/packages/rke/

but no way how to use it

What's the safest way to reference the project directory? I'm assuming

process.cwd()

(nodejs) would be different between inline programs, automation and cli usage? Context: I'd like a ComponentResource (not contained within the project) to be able to look for config files in the project dir without having to pass a path explicitly through as an arg.

When working with secrets, is it by design that if you use

export const myOutput = myConfig.get("secretProperty")

that the output isn't a secret? The behavior is strange since when you run the program it seems looks like it is a secret, but when you do

pulumi stack output

it isn't. If I use

getSecret

it works as intended. Why do we need both

get

and

getSecret

? I would be more than happy if pulumi just dealt with it so I don't have to think about if it is a secret or not when working with it .

How do I specify a namespace for k8s.yaml.ConfigFile

btw, i guessed my way into {metadata:name} for disabling resource naming on namespaces, is there a way I could have figured that out from the docs?

Any way to do this ?

Sorry if a repeated question but I can't find the answer. Is there a way to ignore the dynamic resource cache? I'm hitting problems where I'm seeing an old version (after file modifications) of my resource provider get run. Can see an option in runtime module but nothing in the cli. I've tried setting

PULUMI_NODEJS_CACHE_DYNAMIC_PROVIDERS=0

or

PULUMI_NODEJS_CACHE_DYNAMIC_PROVIDERS=false

but it doesn't seem to be having any effect?

after upgrading to v3.18.1 today i'm having an issue where "pulumi new" will occasionally hang for several minutes. is anyone else seeing this?

Hi I am working on a solution to create Resource Group , Functionapp and Storage account and register the Function app endpoint in APIM. Resources are in one subscription whereas APIM is in other subscription. Is there any way to execute the first half of the stack in one subscription and the other half of the stack in another subscription. Any thoughts on this ? When i execute this the stack cannot find the APIM in the subscription. However i can create one APIM which i dont want to do, i just want to utilize the existing one in other subscription.

Hello everyone! Is there a way to extend the AWS fargate pulumi example to use https instead of just http? I'm looking to terminate SSL at the load balancer, something like:

client <- port 443 -> ALB <- port 80 -> Fargate task

hi everyone, I have a use case in which I need to parse a string array to create k8s secret, however the array is dynamic, i.e. depending on some condition, it may contain a predefined list or it may need to join the predefined list with another dynamic list which is pulumi.Output<string []>. I keep getting Output string[] is not compatible with string [] due to missing operator such as push etc. Is there anything that I can "marry" these 2 data types?

there is an on prem install of EKS, EKS anywhere, how does pulumi work with that.

can we manage those using pulumi

hey, it is great to join pulumi community. I am using the pulumi_terraform python module to import existing terraform state file from s3 as below

from pulumi_terraform import state

tf_state = state.RemoteStateReference("resources", "s3", state.S3BackendArgs(
    bucket = "bucketName",
    key = "terraform.tfstate",
    region = "us-west-2"
    ))
pulumi.export('====', tf_state)

My terraform state file includes multiple terraform modules to build AWS ECS fargate cluster, which includes ALB, listener, security group, IAM, target group, fargate cluster, log group. But with RemoteStateReference, it only import the root outputs block, which is the output variables in outputs.tf in my terraform module. Is this by design or i missed anything? Thanks!

hi everyone, a quick question for dependsOn, what happen if the dependency may or may not be created? say resource A depends on resource B and resource B may or may not be created, would resource A still be created if resource B is not?

Hello everybody, great to join the community! I’m using Pulumi to install a datadog agent on a Fargate container. The datadog documentation asks me to create a container, which, when using docker-compose, would look like this:

// docker-compose
agent:
    image: ...
    environment:
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro <-- ??? How do I convert these???
      - /proc/:/host/proc/:ro
      - /sys/fs/cgroup/:/host/sys/fs/cgroup:ro

I’m struggling to understand how the volumes syntax would map onto the Pulumi mount points interface. My pulumi code looks like this:

new awsx.ecs.FargateService('ecs-name', {
    name: `resource-name`,
    cluster: cluster,
    taskDefinitionArgs: {
        ...
        containers: {
            containerName: {
                ...
                mountPoints: [{???}]
            }
        }
    },
    ...
})

Each MountPoint expects this type:

export interface MountPoint {
    containerPath?: string;
    readOnly?: boolean;
    sourceVolume?: string;
}

When it comes to translating each of the volumes, how do I convert them to this format? For example, what would the Pulumi MountPoint look like for this volume

/var/run/docker.sock:/var/run/docker.sock:ro

? I’ve had limited success using the documentation. Thank you 🙏

I tried to convert a fairly large arm template a short while ago It's around 1900 lines long and it wouldn't convert online. I'll try and import it instead with Pulumi import, but might be an issue with the online service for conversions with larger files