https://pulumi.com logo
Join the conversationJoin Slack
Channels
announcements
automation-api
aws
azure
blog-posts
built-with-pulumi
cloudengineering
cloudengineering-support
content-share
contribex
contribute
docs
dotnet
finops
general
getting-started
gitlab
golang
google-cloud
hackathon-03-19-2020
hacktoberfest
install
java
jobs
kubernetes
learn-pulumi-events
linen
localstack
multi-language-hackathon
office-hours
oracle-cloud-infrastructure
plugin-framework
pulumi-cdk
pulumi-crosscode
pulumi-deployments
pulumi-kubernetes-operator
pulumi-service
pulumiverse
python
registry
status
testingtesting123
testingtesting321
typescript
welcome
workshops
yaml
Powered by Linen
general
  • r

    rapid-byte-24256

    12/14/2021, 12:02 PM
    Hello All, I'm new to Pulumi and I'm getting an issue while creating new K8s deployment but I get this issue
    error: the current deployment has 1 resource(s) with pending operations:
    * urn:pulumi:temp-production::test::kubernetes:apps/v1:Deployment::flagship, interrupted while updating
    tried the recommend solution appeared in this error message by applying Pulumi stack export then import after removing pending operation but I get another issue
    error: could not import deployment: [503] Service Unavailable
    , Can anyone help me, please🙏?
    b
    • 2
    • 12
  • m

    many-dress-54535

    12/14/2021, 12:41 PM
    Hello, I am getting a
    error: autorest/azure: Service returned an error. Status=400 Code="RoleAssignmentUpdateNotPermitted" Message="Tenant ID, application ID, principal ID, and scope are not allowed to be updated."
    when trying to create a
    azure_native.authorization.RoleAssignment
    , I did a full
    destroy
    and
    up
    again but got the same results. Also, when I checked the role assignment isn't there, any ideas?
  • m

    millions-journalist-34868

    12/14/2021, 1:15 PM
    Hi. I just wanted to share my latest blog article about using Pulumi without Pulumi Service: https://www.techwatching.dev/posts/pulumi-azure-backend You will find there an azure cli script to provision the azure storage blob container to store the state and the azure key vault key to encrypt/decrypt the secrets.
    👍 1
  • s

    square-coat-62279

    12/14/2021, 1:38 PM
    While trying to do pulumi refresh, I encountered "Preview failed: error when reading or editing FirebaseProject, Error 403: your application has authenticated using end user credentials from the Google Cloud SDK or Google Cloud Shell which are not supported by firebase.goolgeapis.com" How can run pulumi refresh in this case?
    b
    • 2
    • 2
  • b

    billowy-laptop-45963

    12/14/2021, 4:05 PM
    Anyone have any thoughts/opinions on kitchen-pulumi?
    b
    a
    • 3
    • 4
  • b

    brave-nightfall-19158

    12/14/2021, 4:24 PM
    hey team. I've got a problem when I update a task definition for an ECS service in AWS, Pulumi up indicates changes, which I make however when I run pulumi up again (with no code changes) it again indicates an update to perform. Does anyone know how to diagnose this? Ive compared the AWS json task definitions of before and after and they are exactly the same. 😞
    b
    • 2
    • 4
  • b

    brave-nightfall-19158

    12/14/2021, 4:27 PM
    I also ran pulumi refresh, which didn't indicate any differences
  • a

    abundant-book-94104

    12/14/2021, 10:51 PM
    Hi All, I use a naming convention of services and servers where it has DEV TSTS PRD etc in the name. When changing stacks do people use automation to get the stack and then change the name from DEV to PRD based on selected stack? This would also be used for selecting our azure subscription if that's the pattern. What's the convention here to do this?
    r
    l
    • 3
    • 3
  • l

    limited-army-96747

    12/15/2021, 1:08 AM
    Hey guys, I am trying to create a iam role using eks oidc information, but I keep getting an error that I can't seem to solve
    const albPodRole = new aws.iam.Role('alb-service-account-role', {
      assumeRolePolicy: `{
      "Version": "2012-10-17",
      "Statement": [
        {
          "Sid": "",
          "Effect": "Allow",
          "Principal": {
            "Federated": "${eksCluster.core.oidcProvider?.arn}"
          },
          "Action": "sts:AssumeRoleWithWebIdentity",
          "Condition": {
            "ForAnyValue:StringEquals": {
              "${eksCluster.core.oidcProvider?.url}:sub": ["system:serviceaccount:kube-system:alb-controller-aws-load-balancer-controller"]
            }
            
          }
        }
      ]
    }
    `,
    }, {
      dependsOn: eksCluster,
    })
    b
    • 2
    • 3
  • l

    limited-army-96747

    12/15/2021, 1:09 AM
    Keep getting
    error: aws:iam/role:Role resource 'alb-service-account-role' has a problem: "assume_role_policy" contains an invalid JSON: invalid character '\n' in string literal. Examine values at 'Role.AssumeRolePolicy'.
  • l

    limited-army-96747

    12/15/2021, 1:09 AM
    If I replace the eksCluster outputs with any other string it works fine
  • l

    limited-army-96747

    12/15/2021, 1:10 AM
    and I know that the arn and the url are available because they output just fine
  • h

    handsome-candle-10543

    12/15/2021, 3:32 AM
    Hello! I currently cannot install the pulumi packages in a new project because the DNS records for npmjs.pulumi.com seems to have gone away. The same thing happened this weekend, and a few weeks ago. Does anyone know whats going on? 🙂 https://www.nslookup.io/dns-records/npmjs.pulumi.com
    b
    b
    • 3
    • 8
  • a

    abundant-book-94104

    12/15/2021, 4:05 AM
    In some clouds a resource can be automated even when name is specify Azure does this. How can I query to retrieve that name when I want to use it in another project Example a Managed Identity might name with auto naming and I need to capture that to link the MI to say data factory. How does one find out what name it was provided?
    l
    • 2
    • 2
  • s

    sparse-spring-91820

    12/15/2021, 10:31 AM
    When I try to send SES mail from my eks cluster using nodejs aws-sdk I got the following error:
    error: User 'arn:xxxxx:assumed-role/cluster-instanceRole-role-xxxxx' is not authorized to perform 'ses:SendRawEmail' on resource 'arn:aws:ses:us-east-1:xxxxx:identity/<mailto:no-reply@xxxxxx.com|no-reply@xxxxxx.com>'
    . But when I try it locally using the same AWS access and secret key and email it works. Does anyone know how I can attach required ses policy to aws eks cluster? My cluster code:
    const cluster = new eks.Cluster('cluster', {
      name: 'my-eks-cluster',
      vpcId: vpc.id,
      publicSubnetIds: vpc.publicSubnetIds,
      privateSubnetIds: vpc.privateSubnetIds,
      desiredCapacity: 2,
      minSize: 1,
      maxSize: 3
    });
    l
    • 2
    • 11
  • n

    nutritious-shampoo-16116

    12/15/2021, 3:25 PM
    is pulumi offline? seems we can't talk to the API
    ➕ 3
    1️⃣ 2
    s
    • 2
    • 2
  • m

    melodic-car-16900

    12/15/2021, 3:45 PM
    Yeah, things seem broken, can't load anything any idea when this might be resolved?
  • p

    proud-pizza-80589

    12/15/2021, 3:46 PM
    Yup, all dead on for me as well
  • s

    sticky-airline-40485

    12/15/2021, 3:46 PM
    same
  • m

    melodic-car-16900

    12/15/2021, 3:47 PM
    🙃
  • m

    melodic-car-16900

    12/15/2021, 3:49 PM
    https://status.npmjs.org/
  • p

    proud-pizza-80589

    12/15/2021, 3:49 PM
    why would the api depend on npm?
  • p

    proud-pizza-80589

    12/15/2021, 3:50 PM
    oh, it is running on github now, and the status page now mentions github api
  • p

    proud-pizza-80589

    12/15/2021, 3:50 PM
    fun, that means my CI is down as well 😉
  • p

    proud-pizza-80589

    12/15/2021, 3:51 PM
    they are still unaware https://www.githubstatus.com
  • f

    freezing-van-87649

    12/15/2021, 3:52 PM
    https://downdetector.com/
  • p

    proud-pizza-80589

    12/15/2021, 3:52 PM
    ok, everyone is down 😉
    ☝️ 2
    ☝️🏽 1
  • g

    green-daybreak-98726

    12/15/2021, 3:59 PM
    Don't worry, it's not just pulumi
    😖 1
  • p

    proud-pizza-80589

    12/15/2021, 4:03 PM
    status page mentions it is back and it works again for me
    🙌 1
  • p

    powerful-furniture-83753

    12/15/2021, 5:23 PM
    yea, US-West died today... whatever they're rolling out will probably hit EU next. Can't wait!
    🎇 1
Powered by Linen
Title
p

powerful-furniture-83753

12/15/2021, 5:23 PM
yea, US-West died today... whatever they're rolling out will probably hit EU next. Can't wait!
🎇 1
View count: 1