https://pulumi.com logo
Docs
Join the conversationJoin Slack
Channels
announcements
automation-api
aws
azure
blog-posts
built-with-pulumi
cloudengineering
cloudengineering-support
content-share
contribex
contribute
docs
dotnet
finops
general
getting-started
gitlab
golang
google-cloud
hackathon-03-19-2020
hacktoberfest
install
java
jobs
kubernetes
learn-pulumi-events
linen
localstack
multi-language-hackathon
office-hours
oracle-cloud-infrastructure
plugin-framework
pulumi-cdk
pulumi-crosscode
pulumi-deployments
pulumi-kubernetes-operator
pulumi-service
pulumiverse
python
registry
status
testingtesting123
testingtesting321
typescript
welcome
workshops
yaml
Powered by Linen
general
  • m

    most-lighter-95902

    11/26/2021, 9:45 PM
    Does
    pulumi destroy
    respect the
    dependsOn
    option? I have two custom component resources where one
    dependsOn
    the other, and it errors out because it destroys both in parallel. Anyway to make sure one is destroyed before the other?
    w
    • 2
    • 1
  • s

    sparse-spring-91820

    11/27/2021, 11:08 AM
    Hello folks šŸ‘‹ , I am wondering how do you handle
    error: [409] Conflict: Another update is currently in progress
    errors? I have pulumi job inside my circleci pipeline and if I merge multiple PRs in develop branch in a short time my build fails
    f
    s
    • 3
    • 9
  • f

    fierce-lion-84511

    11/27/2021, 11:09 AM
    Hey guys: • I currently encountered this error: (when trying to intialize new cloudInit.Config `error: no resource plugin 'cloudinit-v4.28.0' found in the workspace or on your $PATH, install the plugin using `pulumi plugin install resource cloudinit v4.28.0`` • but when i do
    pulumi plugin install resource cloudinit v4.28.0:
    the following error appears:
    error: [resource plugin cloudinit-4.28.0] downloading from : 403 HTTP error fetching plugin from <https://get.pulumi.com/releases/plugins/pulumi-resource-cloudinit-v4.28.0-windows-amd64.tar.gz>
    • it looks like the access is denied, even if i try open that downlad url in my browser (see on image) • And I cannot find anywhere, the lists of available plugins, or anything like that, does it even exists? Investigation • First of all what I see, the version which is it trying to download is wrong ā—¦ the current cloudInit version is 1.3.0 but it wants to download plugin for version 4.28.0 ā–ŖļøŽ The only 4.28.0 version library I have is @pulumi/aws, so there's some I think naming problem... because when I downgraded the @pulumi/aws to 4.27.0 it now wants to download cloudinit v4.27.0 which is wrong, this should always download 1.3.0 and the version shouldn't be based on aws library WTFF
  • s

    steep-beach-52652

    11/27/2021, 12:31 PM
    Hello, Is there a way to deploy a local on prem kubernetes cluster using pulumi?
  • s

    steep-beach-52652

    11/27/2021, 12:31 PM
    im currently using RKE terraform module to do it. is there going to be a support for RKE from pulumi
  • s

    steep-beach-52652

    11/27/2021, 12:33 PM
    i see something https://www.pulumi.com/registry/packages/rke/
  • s

    steep-beach-52652

    11/27/2021, 12:33 PM
    but no way how to use it
  • m

    magnificent-lifeguard-15082

    11/27/2021, 12:58 PM
    What's the safest way to reference the project directory? I'm assuming
    process.cwd()
    (nodejs) would be different between inline programs, automation and cli usage? Context: I'd like a ComponentResource (not contained within the project) to be able to look for config files in the project dir without having to pass a path explicitly through as an arg.
  • w

    wet-noon-14291

    11/27/2021, 11:05 PM
    When working with secrets, is it by design that if you use
    export const myOutput = myConfig.get("secretProperty")
    that the output isn't a secret? The behavior is strange since when you run the program it seems looks like it is a secret, but when you do
    pulumi stack output
    it isn't. If I use
    getSecret
    it works as intended. Why do we need both
    get
    and
    getSecret
    ? I would be more than happy if pulumi just dealt with it so I don't have to think about if it is a secret or not when working with it .
    b
    r
    • 3
    • 3
  • t

    thankful-father-68341

    11/28/2021, 6:24 AM
    https://abvijaykumar.medium.com/platform-engineering-with-pulumi-episode-1-building-the-aws-landing-zone-with-pulumi-67b559523c78
  • r

    rich-businessperson-35436

    11/28/2021, 2:06 PM
    How do I specify a namespace for k8s.yaml.ConfigFile
    b
    • 2
    • 8
  • r

    rich-businessperson-35436

    11/28/2021, 10:46 PM
    btw, i guessed my way into {metadata:name} for disabling resource naming on namespaces, is there a way I could have figured that out from the docs?
    l
    • 2
    • 4
  • f

    future-refrigerator-88869

    11/29/2021, 9:06 AM
    Any way to do this ?
  • m

    magnificent-lifeguard-15082

    11/29/2021, 3:18 PM
    Sorry if a repeated question but I can't find the answer. Is there a way to ignore the dynamic resource cache? I'm hitting problems where I'm seeing an old version (after file modifications) of my resource provider get run. Can see an option in runtime module but nothing in the cli. I've tried setting
    PULUMI_NODEJS_CACHE_DYNAMIC_PROVIDERS=0
    or
    PULUMI_NODEJS_CACHE_DYNAMIC_PROVIDERS=false
    but it doesn't seem to be having any effect?
  • l

    little-soccer-5693

    11/29/2021, 11:25 PM
    after upgrading to v3.18.1 today i'm having an issue where "pulumi new" will occasionally hang for several minutes. is anyone else seeing this?
    • 1
    • 2
  • w

    witty-honey-13693

    11/29/2021, 11:29 PM
    Hi I am working on a solution to create Resource Group , Functionapp and Storage account and register the Function app endpoint in APIM. Resources are in one subscription whereas APIM is in other subscription. Is there any way to execute the first half of the stack in one subscription and the other half of the stack in another subscription. Any thoughts on this ? When i execute this the stack cannot find the APIM in the subscription. However i can create one APIM which i dont want to do, i just want to utilize the existing one in other subscription.
    • 1
    • 1
  • c

    clean-gigabyte-10143

    11/30/2021, 3:06 AM
    Hello everyone! Is there a way to extend the AWS fargate pulumi example to use https instead of just http? I'm looking to terminate SSL at the load balancer, something like:
    client <- port 443 -> ALB <- port 80 -> Fargate task
    c
    • 2
    • 5
  • s

    square-coat-62279

    11/30/2021, 10:55 AM
    hi everyone, I have a use case in which I need to parse a string array to create k8s secret, however the array is dynamic, i.e. depending on some condition, it may contain a predefined list or it may need to join the predefined list with another dynamic list which is pulumi.Output<string []>. I keep getting Output string[] is not compatible with string [] due to missing operator such as push etc. Is there anything that I can "marry" these 2 data types?
    p
    l
    • 3
    • 6
  • s

    steep-beach-52652

    11/30/2021, 1:45 PM
    there is an on prem install of EKS, EKS anywhere, how does pulumi work with that.
  • s

    steep-beach-52652

    11/30/2021, 1:46 PM
    can we manage those using pulumi
  • s

    steep-window-60101

    11/30/2021, 6:28 PM
    hey, it is great to join pulumi community. I am using the pulumi_terraform python module to import existing terraform state file from s3 as below
    from pulumi_terraform import state
    
    tf_state = state.RemoteStateReference("resources", "s3", state.S3BackendArgs(
        bucket = "bucketName",
        key = "terraform.tfstate",
        region = "us-west-2"
        ))
    pulumi.export('====', tf_state)
    My terraform state file includes multiple terraform modules to build AWS ECS fargate cluster, which includes ALB, listener, security group, IAM, target group, fargate cluster, log group. But with RemoteStateReference, it only import the root outputs block, which is the output variables in outputs.tf in my terraform module. Is this by design or i missed anything? Thanks!
  • s

    square-coat-62279

    11/30/2021, 6:37 PM
    hi everyone, a quick question for dependsOn, what happen if the dependency may or may not be created? say resource A depends on resource B and resource B may or may not be created, would resource A still be created if resource B is not?
    p
    p
    • 3
    • 25
  • a

    alert-candle-88851

    11/30/2021, 8:33 PM
    Hello everybody, great to join the community! I’m using Pulumi to install a datadog agent on a Fargate container. The datadog documentation asks me to create a container, which, when using docker-compose, would look like this:
    // docker-compose
    agent:
        image: ...
        environment:
        volumes:
          - /var/run/docker.sock:/var/run/docker.sock:ro <-- ??? How do I convert these???
          - /proc/:/host/proc/:ro
          - /sys/fs/cgroup/:/host/sys/fs/cgroup:ro
    I’m struggling to understand how the volumes syntax would map onto the Pulumi mount points interface. My pulumi code looks like this:
    new awsx.ecs.FargateService('ecs-name', {
        name: `resource-name`,
        cluster: cluster,
        taskDefinitionArgs: {
            ...
            containers: {
                containerName: {
                    ...
                    mountPoints: [{???}]
                }
            }
        },
        ...
    })
    Each MountPoint expects this type:
    export interface MountPoint {
        containerPath?: string;
        readOnly?: boolean;
        sourceVolume?: string;
    }
    When it comes to translating each of the volumes, how do I convert them to this format? For example, what would the Pulumi MountPoint look like for this volume
    /var/run/docker.sock:/var/run/docker.sock:ro
    ? I’ve had limited success using the documentation. Thank you šŸ™
    l
    • 2
    • 11
  • a

    abundant-book-94104

    11/30/2021, 10:48 PM
    I tried to convert a fairly large arm template a short while ago It's around 1900 lines long and it wouldn't convert online. I'll try and import it instead with Pulumi import, but might be an issue with the online service for conversions with larger files
  • s

    salmon-printer-16080

    12/01/2021, 1:30 AM
    Good afternoon all, has anyone ran into or found a workaround for this issue here: https://github.com/pulumi/pulumi-azure-native/issues/866 It relates to creating the following Pulumi Azure Resource:
    WebAppSwiftVirtualNetworkConnectionSlot
    I am able to create the
    WebAppSwiftVirtualNetworkConnection
    (non-slot variant) fine, just having issues with the slot. Inside the error message, it says the resource already exists, and going to the resource ID on azure, it does. But the subnet I tried to link to the webapp slot does not show up under the networking tab. Error message inside pipeline:
    error: cannot create already existing subresource '/subscriptions/<sub>/resourceGroups/<rg>/providers/Microsoft.Web/sites/<webapp>/slots/deploy/networkConfig/virtualNetwork
    Update: I have done some testing, and created band new ASP's and WebApps, without any networking aspects. After, creation. the resource above will
    network/virtualNetwork
    component always exist. Due to that the
    WebAppSwiftVirtualNetworkConnectionSlot
    will always fail. The API is either checking the wrong resource, or its using the wrong API in the background to try update it.
  • s

    steep-beach-52652

    12/01/2021, 5:04 AM
    running pulumi destroy , there is some dependency issue between resouces, i think pulumi should auto handle this or maybe a bug. do i need to put some dependency logic between resouces
    aws:servicediscovery:Service (authz):
        error: deleting urn:pulumi:dev::dev::aws:servicediscovery/service:Service::authz: 1 error occurred:
        	* error deleting Service Discovery Service (srv-snwdir73q7fvhln4): ResourceInUse: Service contains registered instances; delete the instances before deleting the service
  • s

    steep-beach-52652

    12/01/2021, 5:13 AM
    i think that is fixed in terraform https://github.com/hashicorp/terraform-provider-aws/pull/3538
  • s

    steep-beach-52652

    12/01/2021, 5:13 AM
    is there a force delete option in pulumi
    w
    l
    • 3
    • 2
  • m

    magnificent-lifeguard-15082

    12/01/2021, 12:57 PM
    Would it be within scope to expand the pulumi/cloud api to allow for referencing external functions rather than relying on inline handlers and function serialization? Ie. can I use a FileArchive reference. Where cloud-aws could take that, upload to s3, and use that as the source.
    • 1
    • 1
  • a

    astonishing-monitor-79630

    12/01/2021, 2:43 PM
    Hey guys! I’m a Data Engineer/Consultant working with a client that is moving into Snowflake, where we will not own the whole account ourselves, but will manage our own databases, roles etc. As we currently make extensive use of pulumi to manage our AWS infra, it would be really nice if we could manage Snowflake with the same codebase. The big problem we are facing is that there is no full separation between ā€œenvironmentsā€/stacks in snowflake, i.e. users roles and grants are visible for the whole account, while database-level objects like schemas and tables are naturally separated. Any tips, ideas or pointers are welcome in how to best solve this!
    • 1
    • 1
Powered by Linen
Title
a

astonishing-monitor-79630

12/01/2021, 2:43 PM
Hey guys! I’m a Data Engineer/Consultant working with a client that is moving into Snowflake, where we will not own the whole account ourselves, but will manage our own databases, roles etc. As we currently make extensive use of pulumi to manage our AWS infra, it would be really nice if we could manage Snowflake with the same codebase. The big problem we are facing is that there is no full separation between ā€œenvironmentsā€/stacks in snowflake, i.e. users roles and grants are visible for the whole account, while database-level objects like schemas and tables are naturally separated. Any tips, ideas or pointers are welcome in how to best solve this!
For the interested: After some internal deliberation, we have opted to go the ā€œnamespaceā€ route, where all sf resources visible throughout the accounts vill be suffixet with the stack name, such that roles vill be named like:
ROLE_(DEV|PRE|PROD)
depending on what ā€œenvironmentā€/stack it belongs to.
View count: 1