Hey all, I was wondering if someone else got this behaviour. Running pulumi up, the preview shows something different than what the update will actually do. For example the preview: 2022-03-16T072425.3394059Z ~ 7 to update 2022-03-16T072425.3394311Z - 1 to delete 2022-03-16T072425.3394599Z 8 changes. 376 unchanged But the update finishes successfully reporting this: 2022-03-16T072710.8394827Z Resources: 2022-03-16T072710.8395196Z ~ 2 updated 2022-03-16T072710.8395579Z 382 unchanged 2022-03-16T072710.8395722Z 2022-03-16T072710.8395984Z Duration: 2m8s Is this normal?

I'm getting an internal assertion thrown here: https://github.com/pulumi/pulumi/blob/8b516bb05434ca8c6dac94b76a5583e855ffd0b6/sdk/go/common/resource/plugin/provider_plugin.go#L808 (Actually, it's line 807 in the stack trace, but presumably either the URN or ID is empty..) This is in a brand new project/stack. Never been deployed. Any ideas on what I should be looking for?

By chance has anyone setup AWS with Okta SSO, and are managing group/policy assignments with Pulumi? In order to assign a Okta Push Group to an AWS account, one has to know the Group ID that AWS created when the group was pushed from Okta. I don't see a way to get that ID with Pulumi and really don't want to have to hard code each group.

Hi everybody, Is there a way to change a resource ID without hacking the stack state or bastardizing resources with aliases? If I could manage this using the CLI, that would be great. Many thanks!

Hey all, has anyone had any chance using

stageVariables

to define AWS API Gateway integrations? I have been trying to do something like this:

new Aws.ApiGatewayV2.Integration("lambda", new Aws.ApiGatewayV2.IntegrationArgs
{
    ApiId = "...",
    IntegrationMethod = "POST",
    IntegrationType = "AWS_PROXY",
    IntegrationUri = "${stageVariables.apiFunc}",
    PayloadFormatVersion = "2.0",
});

but pulumi is complaining the

IntegrationUri

is not a proper ARN

Is Go 1.18 usable in Pulumi?

I have a feature request 😅 - I'd love

pulumi up --yes-if-unchanged

it would make workflows way easier for us

hi all, is there a list of permissions

pulumi preview

requires in various cloud providers? use case is running

pulumi preview

on feature branches but not having the env have "full admin" to execute the actual changes

Does the pulumi github app provide a way to have pulumi submit reviews instead of comments on changes? I want to require that any pulumi state changes are reviewed by the team before a merge is allowed.

Hi, is there a way to see documentation for older versions of the providers on the website? Thank you

Hey guys, I've run into a problem where Pulumi keeps thinking that a resource have changed even when I haven't edited it. This appears to happen with the alb listener and taskdefinition + service

pulumi:pulumi:Stack    currents-prod                  
 ~  ├─ aws:alb:Listener    so-shared-prod-swell-https-forward update   [diff: ~defaultActions]
 +- ├─ aws:ecs:TaskDefinition so-shared-prod-swell        replace   [diff: ~containerDefinitions]
 ~  └─ aws:ecs:Service     so-shared-prod-swell        update   [diff: ~taskDefinition]

Has anyone had this issue before?

pulumi preview

ran in CI builds sometimes formats oddly. example: any idea what packages / flags i can use to get it to format correctly?

above vs the standard 4 column format

Hey everyone! I am supposed to create a GCP bucket with private access (through pulumi), as per docs https://www.pulumi.com/registry/packages/gcp/api-docs/storage/bucket/#create there is an attribute public_access_prevention to support but pulumi gives an error on its implementation: • TypeError: _internal_init() got an unexpected keyword argument 'public_access_prevention'

I recently started looking for a Google workspace provider And found this. Does anyone have more details on what the plan with this provider is? @broad-dog-22463 https://github.com/pulumi/pulumi-googleworkspace

Hello! i'm getting the following error when using the experimental update plans:

pulumi preview --save-plan plan.json
pulumi up --plan=plan.json
Previewing update (redacted/dev)



     Type                 Name             Plan        
     pulumi:pulumi:Stack  test-dev  running.    
panic: fatal: An assertion has failed

goroutine 77 [running]:
<http://github.com/pulumi/pulumi/sdk/v3/go/common/util/contract.failfast(...)|github.com/pulumi/pulumi/sdk/v3/go/common/util/contract.failfast(...)>
        /Users/runner/work/pulumi/pulumi/sdk/go/common/util/contract/failfast.go:23
<http://github.com/pulumi/pulumi/sdk/v3/go/common/util/contract.Assert(...)|github.com/pulumi/pulumi/sdk/v3/go/common/util/contract.Assert(...)>
        /Users/runner/work/pulumi/pulumi/sdk/go/common/util/contract/assert.go:26
<http://github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*ResourcePlan).checkGoal|github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*ResourcePlan).checkGoal>(0x184ce40, 0xc0013d4700, 0xc0013d4700, 0x3d)
        /Users/runner/work/pulumi/pulumi/pkg/resource/deploy/plan.go:479 +0xf94
<http://github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*stepGenerator).generateSteps(0xc0006546c0|github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*stepGenerator).generateSteps(0xc0006546c0>, {0x7f67304ac0b8, 0xc0025a0790})
        /Users/runner/work/pulumi/pulumi/pkg/resource/deploy/step_generator.go:471 +0x16cb
<http://github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*stepGenerator).GenerateSteps(0xc0006546c0|github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*stepGenerator).GenerateSteps(0xc0006546c0>, {0x7f67304ac0b8, 0xc0025a0790})
        /Users/runner/work/pulumi/pulumi/pkg/resource/deploy/step_generator.go:186 +0x46
<http://github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*deploymentExecutor).handleSingleEvent(0xc00063a2d0|github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*deploymentExecutor).handleSingleEvent(0xc00063a2d0>, {0x1e77f20, 0xc0025a0790})
        /Users/runner/work/pulumi/pulumi/pkg/resource/deploy/deployment_executor.go:413 +0xe5
<http://github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*deploymentExecutor).Execute.func3(0xc00065a720|github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*deploymentExecutor).Execute.func3(0xc00065a720>, 0xc00063a2d0, 0xc0006462d0, {0x1ea9c50, 0xc000644400}, 0x0, 0x0, {0x1ea9cf8, 0xc00232e6c0})
        /Users/runner/work/pulumi/pulumi/pkg/resource/deploy/deployment_executor.go:250 +0x273
<http://github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*deploymentExecutor).Execute(0xc00063a2d0|github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*deploymentExecutor).Execute(0xc00063a2d0>, {0x1ea9cf8, 0xc00232e6c0}, {{0x7f6730403008, 0xc000bfcf20}, 0x7fffffff, 0x0, 0x0, {0x2cb4720, 0x0, ...}, ...}, ...)
        /Users/runner/work/pulumi/pulumi/pkg/resource/deploy/deployment_executor.go:266 +0x95f
<http://github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*Deployment).Execute(0xc0020dc420|github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*Deployment).Execute(0xc0020dc420>, {0x1ea9cf8, 0xc00232e6c0}, {{0x7f6730403008, 0xc000bfcf20}, 0x7fffffff, 0x0, 0x0, {0x2cb4720, 0x0, ...}, ...}, ...)
        /Users/runner/work/pulumi/pulumi/pkg/resource/deploy/deployment.go:447 +0xd0
<http://github.com/pulumi/pulumi/pkg/v3/engine.(*deployment).run.func1()|github.com/pulumi/pulumi/pkg/v3/engine.(*deployment).run.func1()>
        /Users/runner/work/pulumi/pulumi/pkg/engine/deployment.go:269 +0x250
created by <http://github.com/pulumi/pulumi/pkg/v3/engine.(*deployment).run|github.com/pulumi/pulumi/pkg/v3/engine.(*deployment).run>
        /Users/runner/work/pulumi/pulumi/pkg/engine/deployment.go:252 +0x371

when i do a regular pulumi up on the same program (which i presume uses an internally generated plan file) it works fine. any idea why passing the plan file causes the assert failure? should i create a github issue?

does anyone know how to fix my issue? I'm on Windows 10, using PowerShell. I installed Python and Pulumi via Chocolatey. When I do a

pulumi up

I get this error:

Failed to resolve python version command: exit status 103

Is it possible to set configuration options on the default provider, or is that only possible if you create a non-default provider? (edit: set within a Pulumi program specifically)

Hi,is it possible to run a job within a aws ec2 or some other resource，then delete the resources after the job done

Hi, does pulumi function serialization support handling of ESM or only CommonJS modules?

Is PHP + PhpStorm support on the roadmap?

Can I use auto-naming of resources with dynamic resource providers? Or do I have to implement the auto-naming logic myself?

Hi guys, i got stuck with ssm string manipulation (Typescript Pulumi AWS), what i need :

"dnsIpAddresses": [
          "10.0.2.66",
          "10.0.1.148"
        ]

What I get :

"dnsIpAddresses": [
            "10.0.2.108,10.0.1.47"
          ]

My code :

"dnsIpAddresses": ["${barDirectory.dnsIpAddresses}"]

My silly solution :

"dnsIpAddresses": ["${barDirectory.dnsIpAddresses[0]}", "${barDirectory.dnsIpAddresses[1]}"]

Any suggestion guys? thx a lot for your time

Is there any reason to avoid adding dynamic names to

ComponentResource

type

parameters to help with namespacing resources? I.E:

class VPC extends ComponentResource {
  constructor(name: string, opts: ComponentResourceOptions = {}) {
    super(`VPCComponent/${name}`, name, undefined, opts)
  }
}

more deets here: https://github.com/pulumi/pulumi/discussions/9250

Is there a way to change the type name of dynamic resources? I always have the type

pulumi-nodejs:dynamic:Resource

, so the URN’s would conflict if I don’t choose the names carefully.

@billions-glass-17089 Sorry, didn’t recognise you just asked the same question 🙂

Hello, I’m trying to create an aws lambda permissions resource. I want to pass it the ID of the api gateway authorizer. The thing is I create the authorizer with

aws.apigatewayv2.Api

resource, using the body input, and not with the

aws.apigatewayv2.Authorizer

resource. Is there a way to get the authorizer id from the

aws.apigatewayv2.Api

resource? At the moment in order to make it work, we have to run pulumi up twice. First to create the authorizer, manually updating the code with its id, then running pulumi up again to create the lambda permissions.

localAuthFuncID = "as3dsc"
const localAuthSourceARN = pulumi.interpolate`arn:aws:execute-api:${region}:${account}:${APIGateWaylocal.id}/authorizers/${localAuthFuncID}`
new aws.lambda.Permission("localAuthorizerFunctionpolicylambda", {
    action: "lambda:InvokeFunction",
    "function": authorizerFunctionLambda.name,
    principal: "<http://apigateway.amazonaws.com|apigateway.amazonaws.com>",
    sourceArn: localAuthSourceARN,
    statementId: "localAuthorizerFunctionpolicylambda"
})

Last time @great-queen-39697 helped me with another aws issue. Thanks!

What is the default behaviour of dynamic resources with regards to the

__provider

input? Should I be checking this in

diff

when I want to force a replacement when it’s changed?

Hey guys, I’m trying to fetch an aws cert using

getIssuerCAThumbprint()

function on ts, and i’m using a native https.Agent, and an

Output<>

as the

issueUrl

. For some reason when i’m trying to

preview

it’s waiting the cert to be fetched instead of skipping it (as output functions should work), and i’m getting this error (on the image). Any help please ? Thanks guys.

Hey! Is there any example of pulumi- automation API with GCP??