Does

pulumi destroy

respect the

dependsOn

option? I have two custom component resources where one

dependsOn

the other, and it errors out because it destroys both in parallel. Anyway to make sure one is destroyed before the other?

Hello folks 👋 , I am wondering how do you handle

error: [409] Conflict: Another update is currently in progress

errors? I have pulumi job inside my circleci pipeline and if I merge multiple PRs in develop branch in a short time my build fails

Hey guys: • I currently encountered this error: (when trying to intialize new cloudInit.Config `error: no resource plugin 'cloudinit-v4.28.0' found in the workspace or on your $PATH, install the plugin using `pulumi plugin install resource cloudinit v4.28.0`` • but when i do

pulumi plugin install resource cloudinit v4.28.0:

the following error appears:

error: [resource plugin cloudinit-4.28.0] downloading from : 403 HTTP error fetching plugin from <https://get.pulumi.com/releases/plugins/pulumi-resource-cloudinit-v4.28.0-windows-amd64.tar.gz>

• it looks like the access is denied, even if i try open that downlad url in my browser (see on image) • And I cannot find anywhere, the lists of available plugins, or anything like that, does it even exists? Investigation • First of all what I see, the version which is it trying to download is wrong ◦ the current cloudInit version is 1.3.0 but it wants to download plugin for version 4.28.0 ▪︎ The only 4.28.0 version library I have is @pulumi/aws, so there's some I think naming problem... because when I downgraded the @pulumi/aws to 4.27.0 it now wants to download cloudinit v4.27.0 which is wrong, this should always download 1.3.0 and the version shouldn't be based on aws library WTFF

Hello, Is there a way to deploy a local on prem kubernetes cluster using pulumi?

im currently using RKE terraform module to do it. is there going to be a support for RKE from pulumi

i see something https://www.pulumi.com/registry/packages/rke/

but no way how to use it

What's the safest way to reference the project directory? I'm assuming

process.cwd()

(nodejs) would be different between inline programs, automation and cli usage? Context: I'd like a ComponentResource (not contained within the project) to be able to look for config files in the project dir without having to pass a path explicitly through as an arg.

When working with secrets, is it by design that if you use

export const myOutput = myConfig.get("secretProperty")

that the output isn't a secret? The behavior is strange since when you run the program it seems looks like it is a secret, but when you do

pulumi stack output

it isn't. If I use

getSecret

it works as intended. Why do we need both

get

and

getSecret

? I would be more than happy if pulumi just dealt with it so I don't have to think about if it is a secret or not when working with it .

How do I specify a namespace for k8s.yaml.ConfigFile

btw, i guessed my way into {metadata:name} for disabling resource naming on namespaces, is there a way I could have figured that out from the docs?

Any way to do this ?

Sorry if a repeated question but I can't find the answer. Is there a way to ignore the dynamic resource cache? I'm hitting problems where I'm seeing an old version (after file modifications) of my resource provider get run. Can see an option in runtime module but nothing in the cli. I've tried setting

PULUMI_NODEJS_CACHE_DYNAMIC_PROVIDERS=0

or

PULUMI_NODEJS_CACHE_DYNAMIC_PROVIDERS=false

but it doesn't seem to be having any effect?

after upgrading to v3.18.1 today i'm having an issue where "pulumi new" will occasionally hang for several minutes. is anyone else seeing this?

Hi I am working on a solution to create Resource Group , Functionapp and Storage account and register the Function app endpoint in APIM. Resources are in one subscription whereas APIM is in other subscription. Is there any way to execute the first half of the stack in one subscription and the other half of the stack in another subscription. Any thoughts on this ? When i execute this the stack cannot find the APIM in the subscription. However i can create one APIM which i dont want to do, i just want to utilize the existing one in other subscription.

Hello everyone! Is there a way to extend the AWS fargate pulumi example to use https instead of just http? I'm looking to terminate SSL at the load balancer, something like:

client <- port 443 -> ALB <- port 80 -> Fargate task

hi everyone, I have a use case in which I need to parse a string array to create k8s secret, however the array is dynamic, i.e. depending on some condition, it may contain a predefined list or it may need to join the predefined list with another dynamic list which is pulumi.Output<string []>. I keep getting Output string[] is not compatible with string [] due to missing operator such as push etc. Is there anything that I can "marry" these 2 data types?

there is an on prem install of EKS, EKS anywhere, how does pulumi work with that.

can we manage those using pulumi

hey, it is great to join pulumi community. I am using the pulumi_terraform python module to import existing terraform state file from s3 as below

from pulumi_terraform import state

tf_state = state.RemoteStateReference("resources", "s3", state.S3BackendArgs(
    bucket = "bucketName",
    key = "terraform.tfstate",
    region = "us-west-2"
    ))
pulumi.export('====', tf_state)

My terraform state file includes multiple terraform modules to build AWS ECS fargate cluster, which includes ALB, listener, security group, IAM, target group, fargate cluster, log group. But with RemoteStateReference, it only import the root outputs block, which is the output variables in outputs.tf in my terraform module. Is this by design or i missed anything? Thanks!

hi everyone, a quick question for dependsOn, what happen if the dependency may or may not be created? say resource A depends on resource B and resource B may or may not be created, would resource A still be created if resource B is not?

Hello everybody, great to join the community! I’m using Pulumi to install a datadog agent on a Fargate container. The datadog documentation asks me to create a container, which, when using docker-compose, would look like this:

// docker-compose
agent:
    image: ...
    environment:
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro <-- ??? How do I convert these???
      - /proc/:/host/proc/:ro
      - /sys/fs/cgroup/:/host/sys/fs/cgroup:ro

I’m struggling to understand how the volumes syntax would map onto the Pulumi mount points interface. My pulumi code looks like this:

new awsx.ecs.FargateService('ecs-name', {
    name: `resource-name`,
    cluster: cluster,
    taskDefinitionArgs: {
        ...
        containers: {
            containerName: {
                ...
                mountPoints: [{???}]
            }
        }
    },
    ...
})

Each MountPoint expects this type:

export interface MountPoint {
    containerPath?: string;
    readOnly?: boolean;
    sourceVolume?: string;
}

When it comes to translating each of the volumes, how do I convert them to this format? For example, what would the Pulumi MountPoint look like for this volume

/var/run/docker.sock:/var/run/docker.sock:ro

? I’ve had limited success using the documentation. Thank you 🙏

I tried to convert a fairly large arm template a short while ago It's around 1900 lines long and it wouldn't convert online. I'll try and import it instead with Pulumi import, but might be an issue with the online service for conversions with larger files

Good afternoon all, has anyone ran into or found a workaround for this issue here: https://github.com/pulumi/pulumi-azure-native/issues/866 It relates to creating the following Pulumi Azure Resource:

WebAppSwiftVirtualNetworkConnectionSlot

I am able to create the

WebAppSwiftVirtualNetworkConnection

(non-slot variant) fine, just having issues with the slot. Inside the error message, it says the resource already exists, and going to the resource ID on azure, it does. But the subnet I tried to link to the webapp slot does not show up under the networking tab. Error message inside pipeline:

error: cannot create already existing subresource '/subscriptions/<sub>/resourceGroups/<rg>/providers/Microsoft.Web/sites/<webapp>/slots/deploy/networkConfig/virtualNetwork

Update: I have done some testing, and created band new ASP's and WebApps, without any networking aspects. After, creation. the resource above will

network/virtualNetwork

component always exist. Due to that the

WebAppSwiftVirtualNetworkConnectionSlot

will always fail. The API is either checking the wrong resource, or its using the wrong API in the background to try update it.

running pulumi destroy , there is some dependency issue between resouces, i think pulumi should auto handle this or maybe a bug. do i need to put some dependency logic between resouces

aws:servicediscovery:Service (authz):
    error: deleting urn:pulumi:dev::dev::aws:servicediscovery/service:Service::authz: 1 error occurred:
    	* error deleting Service Discovery Service (srv-snwdir73q7fvhln4): ResourceInUse: Service contains registered instances; delete the instances before deleting the service

i think that is fixed in terraform https://github.com/hashicorp/terraform-provider-aws/pull/3538

is there a force delete option in pulumi

Would it be within scope to expand the pulumi/cloud api to allow for referencing external functions rather than relying on inline handlers and function serialization? Ie. can I use a FileArchive reference. Where cloud-aws could take that, upload to s3, and use that as the source.