pulumi-community #general

stocky-petabyte-29883

02/23/2022, 8:57 PM

Hey If I am using awsguard for policies and if I have all the available awsguard policies enabled, does this mean this includes all policies in the vanilla policies pack in crossguard that applies to aws?

cool-glass-63014

02/24/2022, 9:33 AM

I have noticed that when using Pulumi with Cloudflare (in TypeScript:

import * as cloudflare from "@pulumi/cloudflare";

) to setup some DNS records it fails to "move" some DNS resources as it does not change a DNS record and instead tries to create the new version of it causing a conflict since the same DNS CNAME record named "cname-record" cannot be created, which then causes the whole upgrade to fail. I've noticed that I first have to comment out (in separate calls of

pulumi up

) the DNS record declaration and then introducing it again after the DNS record has been deleted so that it then can be added again with the new value. Am I alone with this? Is it intended?

modern-tent-49484

02/24/2022, 10:18 AM

Why can I do

pulumi config get google-native:region

, but I can't do

config.require("google-native:region")

thousands-jordan-32051

02/24/2022, 2:32 PM

Hi - I am having some issues with the Pulumi automation API. I guess I'm not doing something right with the secrets provider but the error message is incomprehensible to me. The message is as follows. Not sure how I can start to debug this, any ideas?

error: getting secrets manager: invalid YAML file: could not unmarshal map: yaml: unmarshal errors:

`line 4: cannot unmarshal !!str

null

into config.Value` `at Pulumi.Automation.Commands.LocalPulumiCmd.RunAsyncInner(IList`1 args, String workingDir, IDictionary`2 additionalEnv, Action`1 onStandardOutput, Action`1 onStandardError, EventLogFile eventLogFile, CancellationToken cancellationToken)` `at Pulumi.Automation.Commands.LocalPulumiCmd.RunAsync(IList`1 args, String workingDir, IDictionary`2 additionalEnv, Action`1 onStandardOutput, Action`1 onStandardError, Action`1 onEngineEvent, CancellationToken cancellationToken)` `at Pulumi.Automation.Workspace.RunStackCommandAsync(String stackName, IList`1 args, Action`1 onStandardOutput, Action`1 onStandardError, Action`1 onEngineEvent, CancellationToken cancellationToken)` `at Pulumi.Automation.WorkspaceStack.RunCommandAsync(IList`1 args, Action`1 onStandardOutput, Action`1 onStandardError, Action`1 onEngineEvent, CancellationToken cancellationToken)`

at Pulumi.Automation.WorkspaceStack.RefreshAsync(RefreshOptions options, CancellationToken cancellationToken)

flat-salesclerk-13714

02/24/2022, 3:32 PM

Hi Pulumi Folks, I would like to get the correct syntax for creating a AWS Cloudwatch MetricAlarm via Python in Pulumi. Things work when passing in one k/v pair into the

dimension

property, but passing in multiple k/v pairs results in only the last value being applied. Code is below:

cw_alarm = aws.cloudwatch.MetricAlarm(f'{instance._name}-disk',

alarm_description=f"This metric monitors ec2 disk utilization",

comparison_operator="GreaterThanOrEqualToThreshold",

evaluation_periods=1,

insufficient_data_actions=[],

dimensions= { 'Name':'InstanceId', 'Value':instance.id,

'Name':'Filesystem', 'Value':'/dev/root',

'Name':'MountPath', 'Value':'/',

},

metric_name="DiskSpaceUtilization",

namespace="AWS/EC2",

period=300,

statistic="Minimum",

threshold=80,

alarm_actions=[ alarm_action_arn ])

modern-tent-49484

02/24/2022, 3:39 PM

Is it right that https://www.pulumi.com/registry/packages/google-native/api-docs/vpcaccess/v1/connector/#inputs requires ConnectorId, given it's the connector i'm defining?

stocky-petabyte-29883

02/24/2022, 3:59 PM

some-continent-1577

02/24/2022, 4:51 PM

Hello, I’m struggling to import an aws IAM role created externally into my pulumi stack; I ran the pulumi import command and added the code snippet it gave me to my script, but pulumi keeps trying to delete and replace the role still. Pointers would be appreciated

bored-table-20691

02/24/2022, 8:56 PM

Is there a good example of a Terraform bridge repo to start from? All the official Pulumi ones (e.g.

tls

random

, etc) depend on quite a bit of Pulumi specific things (e.g.

pulumictl

) and it’s not clear if it is the right place to start. Ideally the repo should also take care of things like building the SDK binaries, etc

worried-oxygen-57301

02/24/2022, 10:37 PM

Has anybody encountered this before ? or has any idea what could be the issue This is only happening on one pulumi program locally and only to me, my colleagues can run this program with no problem, I tried cloning the repo again in case pulumi was cashing something for that folder but same issue..

Copy code

error: resource complete event returned an error: failed to save snapshot: [403] The provided update token has expired.

late-energy-66663

02/25/2022, 12:57 AM

Hi Team , I am deploying EC2 machine using golang api. After provisioning we would like to confirm if the machine is fully provisioned before deploying other services. Is there a way to check using pulumi automation api to confirm that machine is fully provisioned?

eager-jordan-39489

02/25/2022, 1:42 AM

Hi team, I'm trying to deploy a Lambda that should be triggered by an object creation in an S3 bucket. My stack is working on AWS, and so far it has been coded in Python. I've seen this post https://www.pulumi.com/docs/guides/crosswalk/aws/lambda/, is there any analogy for

onObjectCreated

in Python? I couldn't find it..

fancy-spoon-46046

02/25/2022, 2:12 PM

Hey. I changed the name of our github repository. How can I change the linked VCS Github App Repo in Pulumi Console online? It always tells me, that the project is linked to VCS. But I want to change it!

astonishing-beach-12529

02/25/2022, 3:55 PM

anyone know if it's possible to create a "configurable" typescript source Pulumi provider? looking at the provider server source, it seems like it is just not implemented https://github.com/pulumi/pulumi/blob/master/sdk/nodejs/provider/server.ts#L93 while the Go server source shows it implemented

steep-beach-52652

02/25/2022, 4:15 PM

Is there a tool to convert docker compose to pulumi

rapid-raincoat-36492

02/25/2022, 4:19 PM

I opened up a PR with some benchmarks that I believe cuts down on Pulumi startup time for Typescript projects by over 50% (from 20s to 7s on a basic example using small CI executors): https://github.com/pulumi/pulumi/pull/9049 Some sample runs using pulumi v3.25.0 and using my fork on the same project can be found in the CI runs of my repo here: https://github.com/dmattia/pulumi-fork-perf-test/actions/runs/1899441732

👀 1

little-library-54601

02/25/2022, 4:32 PM

I'm guessing this has already been reported, but just in case... "pulumi import" for the Azure resources I've imported so far will generate code where a resource Input property is set to a string rather than a strongly-typed property, e.g.

Copy code

new AzureNative.Web.Inputs.HostNameSslStateArgs
                {
                    HostType = "Standard",
                    Name = "<http://my-app-service.azurewebsites.net|my-app-service.azurewebsites.net>",
                    SslState = "Disabled",
                },

when it should be:

Copy code

new AzureNative.Web.Inputs.HostNameSslStateArgs
                {
                    HostType = HostType.Standard,
                    Name = "<http://my-app-service.azurewebsites.net|my-app-service.azurewebsites.net>",
                    SslState = SslState.Disabled,
                },

As it stands, the generated code won't compile. If there's a better place to report this (again, assuming it hasn't been), lmk.

melodic-car-16900

02/25/2022, 4:46 PM

has anyone come across this error recently?

Copy code

pulumi:pulumi:Stack (mast-snowflake-non-pro):
    error: preview failed

  snowflake:index:RoleGrants (snowflake_user_reader_role_grant):
    error: Preview failed: refreshing urn:pulumi:non-pro::mast-snowflake::snowflake:index/roleGrants:RoleGrants::snowflake_user_reader_role_grant: 1 error occurred:
    	* 5 or 6 fields allowed

melodic-car-16900

02/25/2022, 4:46 PM

it's come about since upgrading some dependencies, but the object I'm declaring is basically straight out of the documentation so...

melodic-car-16900

02/25/2022, 4:47 PM

I'm at a bit of a loss as to what this pertains to

melodic-car-16900

02/25/2022, 4:47 PM

Copy code

new snowflake.RoleGrants('snowflake_user_reader_role_grant', {
  roleName: readRole.name,
  roles: ['SYSADMIN'],
  users: [readUser.name],
});

melodic-car-16900

02/25/2022, 4:48 PM

Copy code

/**
 * Input properties used for looking up and filtering RoleGrants resources.
 */
export interface RoleGrantsState {
    /**
     * The name of the role we are granting.
     */
    roleName?: pulumi.Input<string>;
    /**
     * Grants role to this specified role.
     */
    roles?: pulumi.Input<pulumi.Input<string>[]>;
    /**
     * Grants role to this specified user.
     */
    users?: pulumi.Input<pulumi.Input<string>[]>;
}

melodic-car-16900

02/25/2022, 4:48 PM

am I missing something here?

creamy-carpet-23943

02/25/2022, 9:35 PM

I've tried what feels like every combo of escape characters and quotes, but I can't seem to get what I think should be a simple command to work. azSubscription = local.Command( "AzureSubscription", create='%SystemRoot%\\System32\\WindowsPowerShell\\v1.0\\powershell.exe -NoProfile -InputFormat None -ExecutionPolicy Bypass -Command "Get-AzSubscription | select {$_.Id}"', delete='Write-Output "This is a test"' ) export("AzureSubscription", azSubscription.stdout) Any thoughts?

thousands-hairdresser-72380

02/25/2022, 9:42 PM

I’m using the

aws:region

configuration to configure my stacks. A stack was deployed to

us-east-1

then the

aws:region

was swapped to

us-west-2

and deployed. It got half way through and then failed. It now fails to delete any resources from either region and returns errors like:

Copy code

error reading ELBv2 Target Group [omitted] is not a valid target group ARN

and

Copy code

InvalidParameterException: Invalid Region in ARN

What’s the best way to reconcile this without deleting all the resources manually then force deleting the stack? Thank you!

fancy-vase-72193

02/26/2022, 5:31 AM

Hey everyone 👋 Where’s the best place to ask questions about NodeJS custom provider issues? I’m having trouble importing

fs/promises

bulky-bird-93072

02/26/2022, 8:57 AM

Hi everyone. I'm new to Pulumi and trying to learn if there is a way to use it with Proxmox Virtual Environment (PVE). Can anyone tell me something about this? Is there a way?

bulky-bird-93072

02/26/2022, 3:06 PM

Hmm. Trying the same in #getting-started ; maybe the ~7k people in here are the wrong audience ..

red-scooter-62880

02/26/2022, 3:22 PM

Hi. How do you automatically name resources based on cloud resource type in Pulumi ?

gentle-account-13294

02/26/2022, 6:45 PM

pulumi.Outputs

question tied to

resource_name

: I would like to have a

resource_name

by dynamic and tied to a

function

that is taking a

Output

as parameter. e.g.

Copy code

def some_func(database_name: Output[str], schema: Output[str]) :
   snowflake.SchemaGrant(f"database_{database_name}_schema_{schema}_privilege_{one_privilege}_future_false_{role_hash}",
                database_name=database_name,
                privilege=one_privilege,
                roles=roles,
                schema_name=schema,
                with_grant_option=False)

In this specific case I’m trying to write a generic function that will creates schema’s using the Snowflake provider but in principle this question should be applicable to any resource. It seems like the

resource_name

should be a

str

and using the

Output

just causes the resource name to have something like:

<pulumi.output.Output object at 0x111f482d0>_schema_<pulumi.output.Output object at 0x111f51290>_privilege_CREATE

instead of the actual name of the Output. Note that the Output is already known in this case. I also tried using

apply

For e.g.

Copy code

all_outputs = pulumi.Output.all(database_name, schema)
    all_outputs.apply(inner). # where inner function just encapsulates the real work

the only way i could think of is using two

apply

one inside the other for the two outputs to resolve this. I’m hoping there is a better way or I’m missing something in my understanding of using

Outputs