pulumi-community #general

general

stocky-petabyte-29883

02/24/2022, 3:59 PM

Hey If I am using awsguard for policies and if I have all the available awsguard policies enabled, does this mean this includes all policies in the vanilla policies pack in crossguard that applies to aws?

some-continent-1577

02/24/2022, 4:51 PM

Hello, I’m struggling to import an aws IAM role created externally into my pulumi stack; I ran the pulumi import command and added the code snippet it gave me to my script, but pulumi keeps trying to delete and replace the role still. Pointers would be appreciated

bored-table-20691

02/24/2022, 8:56 PM

Is there a good example of a Terraform bridge repo to start from? All the official Pulumi ones (e.g.

tls

random

, etc) depend on quite a bit of Pulumi specific things (e.g.

pulumictl

) and it’s not clear if it is the right place to start. Ideally the repo should also take care of things like building the SDK binaries, etc

worried-oxygen-57301

02/24/2022, 10:37 PM

Has anybody encountered this before ? or has any idea what could be the issue This is only happening on one pulumi program locally and only to me, my colleagues can run this program with no problem, I tried cloning the repo again in case pulumi was cashing something for that folder but same issue..

error: resource complete event returned an error: failed to save snapshot: [403] The provided update token has expired.

late-energy-66663

02/25/2022, 12:57 AM

Hi Team , I am deploying EC2 machine using golang api. After provisioning we would like to confirm if the machine is fully provisioned before deploying other services. Is there a way to check using pulumi automation api to confirm that machine is fully provisioned?

eager-jordan-39489

02/25/2022, 1:42 AM

Hi team, I'm trying to deploy a Lambda that should be triggered by an object creation in an S3 bucket. My stack is working on AWS, and so far it has been coded in Python. I've seen this post https://www.pulumi.com/docs/guides/crosswalk/aws/lambda/, is there any analogy for

onObjectCreated

in Python? I couldn't find it..

fancy-spoon-46046

02/25/2022, 2:12 PM

Hey. I changed the name of our github repository. How can I change the linked VCS Github App Repo in Pulumi Console online? It always tells me, that the project is linked to VCS. But I want to change it!

astonishing-beach-12529

02/25/2022, 3:55 PM

anyone know if it's possible to create a "configurable" typescript source Pulumi provider? looking at the provider server source, it seems like it is just not implemented https://github.com/pulumi/pulumi/blob/master/sdk/nodejs/provider/server.ts#L93 while the Go server source shows it implemented

steep-beach-52652

02/25/2022, 4:15 PM

Is there a tool to convert docker compose to pulumi

rapid-raincoat-36492

02/25/2022, 4:19 PM

I opened up a PR with some benchmarks that I believe cuts down on Pulumi startup time for Typescript projects by over 50% (from 20s to 7s on a basic example using small CI executors): https://github.com/pulumi/pulumi/pull/9049 Some sample runs using pulumi v3.25.0 and using my fork on the same project can be found in the CI runs of my repo here: https://github.com/dmattia/pulumi-fork-perf-test/actions/runs/1899441732

👀 1

little-library-54601

02/25/2022, 4:32 PM

I'm guessing this has already been reported, but just in case... "pulumi import" for the Azure resources I've imported so far will generate code where a resource Input property is set to a string rather than a strongly-typed property, e.g.

new AzureNative.Web.Inputs.HostNameSslStateArgs
                {
                    HostType = "Standard",
                    Name = "<http://my-app-service.azurewebsites.net|my-app-service.azurewebsites.net>",
                    SslState = "Disabled",
                },

when it should be:

new AzureNative.Web.Inputs.HostNameSslStateArgs
                {
                    HostType = HostType.Standard,
                    Name = "<http://my-app-service.azurewebsites.net|my-app-service.azurewebsites.net>",
                    SslState = SslState.Disabled,
                },

As it stands, the generated code won't compile. If there's a better place to report this (again, assuming it hasn't been), lmk.

melodic-car-16900

02/25/2022, 4:46 PM

has anyone come across this error recently?

pulumi:pulumi:Stack (mast-snowflake-non-pro):
    error: preview failed

  snowflake:index:RoleGrants (snowflake_user_reader_role_grant):
    error: Preview failed: refreshing urn:pulumi:non-pro::mast-snowflake::snowflake:index/roleGrants:RoleGrants::snowflake_user_reader_role_grant: 1 error occurred:
    	* 5 or 6 fields allowed

melodic-car-16900

02/25/2022, 4:46 PM

it's come about since upgrading some dependencies, but the object I'm declaring is basically straight out of the documentation so...

melodic-car-16900

02/25/2022, 4:47 PM

I'm at a bit of a loss as to what this pertains to

melodic-car-16900

02/25/2022, 4:47 PM

new snowflake.RoleGrants('snowflake_user_reader_role_grant', {
  roleName: readRole.name,
  roles: ['SYSADMIN'],
  users: [readUser.name],
});

melodic-car-16900

02/25/2022, 4:48 PM

/**
 * Input properties used for looking up and filtering RoleGrants resources.
 */
export interface RoleGrantsState {
    /**
     * The name of the role we are granting.
     */
    roleName?: pulumi.Input<string>;
    /**
     * Grants role to this specified role.
     */
    roles?: pulumi.Input<pulumi.Input<string>[]>;
    /**
     * Grants role to this specified user.
     */
    users?: pulumi.Input<pulumi.Input<string>[]>;
}

melodic-car-16900

02/25/2022, 4:48 PM

am I missing something here?

creamy-carpet-23943

02/25/2022, 9:35 PM

I've tried what feels like every combo of escape characters and quotes, but I can't seem to get what I think should be a simple command to work. azSubscription = local.Command( "AzureSubscription", create='%SystemRoot%\\System32\\WindowsPowerShell\\v1.0\\powershell.exe -NoProfile -InputFormat None -ExecutionPolicy Bypass -Command "Get-AzSubscription | select {$_.Id}"', delete='Write-Output "This is a test"' ) export("AzureSubscription", azSubscription.stdout) Any thoughts?

thousands-hairdresser-72380

02/25/2022, 9:42 PM

I’m using the

aws:region

configuration to configure my stacks. A stack was deployed to

us-east-1

then the

aws:region

was swapped to

us-west-2

and deployed. It got half way through and then failed. It now fails to delete any resources from either region and returns errors like:

error reading ELBv2 Target Group [omitted] is not a valid target group ARN

and

InvalidParameterException: Invalid Region in ARN

What’s the best way to reconcile this without deleting all the resources manually then force deleting the stack? Thank you!

fancy-vase-72193

02/26/2022, 5:31 AM

Hey everyone 👋 Where’s the best place to ask questions about NodeJS custom provider issues? I’m having trouble importing

fs/promises

bulky-bird-93072

02/26/2022, 8:57 AM

Hi everyone. I'm new to Pulumi and trying to learn if there is a way to use it with Proxmox Virtual Environment (PVE). Can anyone tell me something about this? Is there a way?

bulky-bird-93072

02/26/2022, 3:06 PM

Hmm. Trying the same in #getting-started ; maybe the ~7k people in here are the wrong audience ..

red-scooter-62880

02/26/2022, 3:22 PM

Hi. How do you automatically name resources based on cloud resource type in Pulumi ?

gentle-account-13294

02/26/2022, 6:45 PM

pulumi.Outputs

question tied to

resource_name

: I would like to have a

resource_name

by dynamic and tied to a

function

that is taking a

Output

as parameter. e.g.

def some_func(database_name: Output[str], schema: Output[str]) :
   snowflake.SchemaGrant(f"database_{database_name}_schema_{schema}_privilege_{one_privilege}_future_false_{role_hash}",
                database_name=database_name,
                privilege=one_privilege,
                roles=roles,
                schema_name=schema,
                with_grant_option=False)

In this specific case I’m trying to write a generic function that will creates schema’s using the Snowflake provider but in principle this question should be applicable to any resource. It seems like the

resource_name

should be a

str

and using the

Output

just causes the resource name to have something like:

<pulumi.output.Output object at 0x111f482d0>_schema_<pulumi.output.Output object at 0x111f51290>_privilege_CREATE

instead of the actual name of the Output. Note that the Output is already known in this case. I also tried using

apply

For e.g.

all_outputs = pulumi.Output.all(database_name, schema)
    all_outputs.apply(inner). # where inner function just encapsulates the real work

the only way i could think of is using two

apply

one inside the other for the two outputs to resolve this. I’m hoping there is a better way or I’m missing something in my understanding of using

Outputs

bulky-tent-99405

02/26/2022, 11:46 PM

@here Hi I am new to pulumi and I am trying to deploy azure function using python. I could not find the exact module in the Azure Native API doc. Can someone help please?

late-finland-24917

02/27/2022, 6:26 PM

Hi all, I'm trying Pulumi for my company and up until today everything was perfect. But since today, when I want to hit

pulumi up

command, it stuck and doesn't do anything. This is the whole preview:

Previewing update (kaas-test)

View Live: <https://app.pulumi.com/armanjtehrani/kubetest/kaas-test/previews/98576566-8eea-4e58-a906-48399e49a05d>
     Type                 Name                Plan        Info
     pulumi:pulumi:Stack  kubetest-kaas-test  running     E0227 21:41:27.190963493    9981 <http://fork_posix.cc:70]|fork_posix.cc:70]>           Fork support is only compatible with the epoll1 and poll polling strategies
     pulumi:pulumi:Stack  kubetest-kaas-test  running.    E0227 21:41:27.190963493    9981 <http://fork_posix.cc:70]|fork_posix.cc:70]>           Fork support is only compatible with the epoll1 and poll polling strategies

few-petabyte-79686

02/27/2022, 8:53 PM

I can’t seem to find resources for Cloudflare Pages in

pulumi-cloudflare

provider docs - Is it available or needs an issue to track in the

pulumi-cloudflare

repo?

agreeable-terabyte-59853

02/28/2022, 8:38 AM

Hello all, I do not seem to be able to set the

feedPollDelay

on my Azure CosmosDB trigger through Pulumi. Any idea on how I could set it without manually accessing the property through Azure Portal?

wet-fall-68417

02/28/2022, 9:54 AM

Hello, when trying to create aws target group of type ‘alb’ we get the following:

error: aws:lb/targetGroup:TargetGroup resource 'internal-lb-target-group' has a problem: expected target_type to be one of [instance ip lambda], got alb. Examine values at 'TargetGroup.TargetType'.

The alb type seems to not be supported by pulumi, which is a big problem for our pulumi managed infrastructure.

adorable-gpu-98268

02/28/2022, 10:22 AM

Hi, it seems to me the checksums for pulumi 3.25.0 for linux-x64 do not match the file:

curl -O "<https://get.pulumi.com/releases/sdk/pulumi-v3.25.0-linux-x64.tar.gz>"
curl -O "<https://get.pulumi.com/releases/sdk/pulumi-3.25.0-checksums.txt>"
sha256sum -c pulumi-3.25.0-checksums.txt

returns:

...
sha256sum: WARNING: 1 computed checksum did NOT match

Title

adorable-gpu-98268

02/28/2022, 10:22 AM

Hi, it seems to me the checksums for pulumi 3.25.0 for linux-x64 do not match the file:

curl -O "<https://get.pulumi.com/releases/sdk/pulumi-v3.25.0-linux-x64.tar.gz>"
curl -O "<https://get.pulumi.com/releases/sdk/pulumi-3.25.0-checksums.txt>"
sha256sum -c pulumi-3.25.0-checksums.txt

returns:

...
sha256sum: WARNING: 1 computed checksum did NOT match

echoing-dinner-19531

02/28/2022, 10:28 AM

Odd, checks out ok to me and matches what our release job printed:

sha256sum pulumi-v3.25.0-linux-x64.tar.gz
7c283885947a563fd956d6b6146aa0ab243569dae20a912328afc3b7ca568596  pulumi-v3.25.0-linux-x64.tar.gz

https://github.com/pulumi/pulumi/runs/5312955548?check_suite_focus=true:

7c283885947a563fd956d6b6146aa0ab243569dae20a912328afc3b7ca568596  pulumi-v3.25.0-linux-x64.tar.gz

adorable-gpu-98268

02/28/2022, 10:29 AM

This is what I get:

~ % sha256sum pulumi-v3.25.0-linux-x64.tar.gz 
fded5fbde6f9f6eec598ce17b047d96536824dfc4dbba2028f48eba36a1a78f0  pulumi-v3.25.0-linux-x64.tar.gz

echoing-dinner-19531

02/28/2022, 10:32 AM

Interesting, let me test another machine

Can you raise an issue on our github about this, it all seems ok to my machines but maybe there's some location variation on how this is downloaded.

adorable-gpu-98268

02/28/2022, 10:35 AM

That’s the file that

curl -O "<https://get.pulumi.com/releases/sdk/pulumi-v3.25.0-linux-x64.tar.gz>"

downloads for me:

pulumi-v3.25.0-linux-x64.tar.gz

echoing-dinner-19531

02/28/2022, 10:38 AM

Yeh I'm not equipped to try and decipher potentially compromised files. Please raise an issue.

adorable-gpu-98268

02/28/2022, 10:49 AM

I’ll link to this thread here with the file in the github issue

https://github.com/pulumi/pulumi/issues/9063

echoing-dinner-19531

02/28/2022, 11:03 AM

Thanks, some more digging that checksum matches whats on github releases. Not sure how we've ended up with different files on releases vs get.pulumi.com

I'll post any further updates on the github issue.

adorable-gpu-98268

02/28/2022, 11:04 AM

Thanks, that looks like a good lead!

Strange thing is: I get different files based on downloading with

culr/wget

Safari

from this same url. The cmd tools give me the file that doesn’t match and the Safari download gives me the file that matches.

Any updates on this? I use the checksum to lock the pulumi version used in a build, so to upgrade to 3.25.0 I’d like to have checksums that match the binary.

echoing-dinner-19531

03/01/2022, 9:03 AM

Sorry, the release went out twice but it looks like between the first binaries being pushed and then the seconds ones being pushed and overwriting them someone hit the download link and populated the cloudfront cache in one location. I don't have write access to that aws account and I guess our ops team (in America) missed the thread yesterday, I'll give them a nudge and try to get that done this evening. You could download from github releases instead of get.pulumi.com for now if you need the checksums to match.

adorable-gpu-98268

03/01/2022, 9:11 AM

Thanks 👍 I’ll wait with the update until this is fixed.

miniature-musician-31262

03/01/2022, 7:19 PM

Hi there. We’ve cleared the cache on both

/releases/sdk/pulumi-3.25*

and

/releases/sdk/pulumi-v3.25.*

, so I believe this is fixed. Let us know if you’re still seeing otherwise, though.

View count: 2