https://pulumi.com logo
Docs
Join the conversationJoin Slack
Channels
announcements
automation-api
aws
azure
blog-posts
built-with-pulumi
cloudengineering
cloudengineering-support
content-share
contribex
contribute
docs
dotnet
finops
general
getting-started
gitlab
golang
google-cloud
hackathon-03-19-2020
hacktoberfest
install
java
jobs
kubernetes
learn-pulumi-events
linen
localstack
multi-language-hackathon
office-hours
oracle-cloud-infrastructure
plugin-framework
pulumi-cdk
pulumi-crosscode
pulumi-deployments
pulumi-kubernetes-operator
pulumi-service
pulumiverse
python
registry
status
testingtesting123
testingtesting321
typescript
welcome
workshops
yaml
Powered by Linen
general
  • s

    shy-library-2927

    03/21/2022, 12:55 PM
    I have setup AWS-SES on my stack only to learn that you have to request production access for you to send emails to other domains. Do I just accept I have to do this step manually or is there something else I could do?
  • b

    bright-receptionist-28471

    03/21/2022, 3:25 PM
    Question about this example around creating a GKE cluster and generating the kubeconfig and exporting it: Will
    kubeconfig
    end up as plaintext in state? My reading of the Secrets docs leads me to believe it would not be encrypted in this case because none of the `Output`s seem to be marked as secret (based on a quick scan of the sdk)
  • h

    happy-optician-17286

    03/21/2022, 5:40 PM
    I have kind of an interesting question I'd like to ask here or any other spot anyone might have advice. We want to update some mongodb cloud resources so we can set a new property, "defaultWriteConcern: majority". The problem is we're on an old version of the provider so we can't quite set that field. So today, we're trying to upgrade the pulumi/mongodbatlas packages from 1.7.0 to 3.3.0 and we're seeing that some connectionString property here changed from a string to connectionString[]. We are trying to upgrade the package, run a pulumi refresh, and we are hoping to get the existing cluster resource updated so we could access the connectionStrings array and store values in a kubernetes secret later in our project. That pulumi refresh after upgrade doesn't seem to be update the shape of the resource for us though. we still see connectionStrings looking like it used to and not the array of values the new package/provider says we should be using. Any advice on what we might do to get the resource updated so we can set that value?
    p
    • 2
    • 23
  • l

    late-energy-66663

    03/21/2022, 6:20 PM
    Hi , I am trying to deploy EKS cluster using go automation api and getting following error Error: Could not find aws CLI for EKS. See https://github.com/pulumi/pulumi-eks for installation instructions.: Error: Could not find aws CLI for EKS. See https://github.com/pulumi/pulumi-eks for installation instructions. Just wonder is there a way to install AWS cli using Pulumi autmation api or do I need to install in manually
    h
    • 2
    • 6
  • b

    busy-island-31180

    03/21/2022, 8:41 PM
    when using an explicit provider for something, do I need to use
    pulumi.ToSecret
    for the
    Token
    parameters (and other related secrets)? Are these values for the provider stored in state?
  • w

    wet-fall-68417

    03/22/2022, 9:37 AM
    anyone?
    l
    • 2
    • 3
  • e

    eager-thailand-33661

    03/22/2022, 2:38 PM
    Is it possible to have nested component resources, ie. a component resource (Entity) containing another component resource (Pipeline)? For me it looks like the resources are successfully created but they are not and when trying to delete I get an error message with a really weird reference to the resource, i.e. I can't even delete the resource.
    pulumi state delete urn:pulumi:prod::astro::custom:app:Entity$custom:app:Pipeline$gcp:cloudscheduler/job:Job::o40-malmo-scheduler
    
    > error: No such resource "urn:pulumi:prod::astro::custom:app:Entitypp:Pipelineloudscheduler/job:Job::o40-malmo-scheduler" exists in the current state
    s
    b
    • 3
    • 9
  • p

    proud-pizza-80589

    03/22/2022, 4:33 PM
    Might be a super basic question, but i’ve been using managed k8s + services on top of that for years, but if i wanted to use pulumi to spin up an instance and then install stuff on there and configure it, is that even possible? Or should i use pulumi + ansible or something similar for this?
    • 1
    • 1
  • h

    helpful-account-44059

    03/22/2022, 5:04 PM
    Hi, I want to create private elb that listening on private subnets , and i got this error, how to fix?
    * error creating application Load Balancer: ValidationError: At least two subnets in two different Availability Zones must be specified
    s
    • 2
    • 2
  • b

    big-potato-91793

    03/22/2022, 8:59 PM
    does pulumi has something with argocd?
    m
    • 2
    • 2
  • h

    happy-cat-93167

    03/22/2022, 9:40 PM
    Hi I'm trying to create a monitor in Datadog using Pulumi using the MonitorJSON(https://www.pulumi.com/registry/packages/datadog/api-docs/monitorjson/) I am trying to create monitor that is muted at creation. I added this: but I got an error message saying NameError: name 'null' is not defined error: an unhandled error occurred: Program exited with non-zero exit code: 1 . anyone knows how to fix this?
    "silenced": { "*": null }
    l
    • 2
    • 2
  • b

    best-state-21371

    03/22/2022, 10:09 PM
    Hi Everyone, I am new to pulumi, new to k8s as a whole. I am looking to move our monolith CRM saas product to a more modern infrastructure. It is a fairly large multi-tenant app that we are restructuring to use Hasura, Postgres and node (coming from azure sql and .net). I am looking for any insight, examples and such on this pattern. So some general questions to start off: • Are most people doing namespaces to split out their tenants? • We have 500-1k tenants, if we need 3 pods per customer essentially, is there any thing we should be prepared for? We most likely will host on azure’s k8. • Any suggestions for backing up the postgres from the postgres node? • Any other suggestions?
  • a

    aloof-leather-66267

    03/22/2022, 10:09 PM
    Is there a way to output to a JSON file what the result of the stack will be after running
    pulumi up
    ?
    s
    • 2
    • 3
  • b

    better-forest-70644

    03/22/2022, 10:22 PM
    Getting this error when try to update ingress resource in a Kubernetes cluster (AKS). I'm using the NGINX Ingress Controller here. Apricated if anyone could help to sort this out
    q
    • 2
    • 1
  • m

    millions-journalist-34868

    03/22/2022, 10:43 PM
    Not sure in which canal I should post that but for French-speaking people that interested, there will be a debate "Terraform vs. Pulumi" live on YouTube the 29/03. You can register here: https://www.eventbrite.fr/e/billets-clash-session-10-terraform-vs-pulumi-292044481907
  • w

    worried-knife-31967

    03/23/2022, 9:37 AM
    Is there any statement Pulumi have around mitigating supply chain attacks using the github action. Specifically how you're protecting your action code from being compromised. As I understand it, versions aren't immutable as they're based on git tags? And therefore opening up that pulumi could be compromised and someone change the code therefore consumers be compromised?
    👍 1
  • a

    adorable-gpu-98268

    03/23/2022, 11:07 AM
    Hi, could you point me to or explain to me an example when the
    read
    method of a dynamic resource would be called? The explanation in the documentation is very generic and I’d like to have a more concrete idea of when this would happen.
    e
    • 2
    • 2
  • a

    adorable-gpu-98268

    03/23/2022, 12:20 PM
    Regardign dynamic providers, how do I wire the outputs to appear in the resource member fields? I return an output in the corresponding provider functions but the member of the resource stays
    undefined
    e
    • 2
    • 11
  • e

    enough-potato-36582

    03/23/2022, 2:19 PM
    hey folks 👋 is there a way to show secrets when inspecting the
    pulumi up
    details? Something similar to
    --show-secrets
    for the
    pulumi stack
    command
  • m

    millions-umbrella-34765

    03/23/2022, 5:06 PM
    We're looking to deploy AWS Config across our AWS Organization with Pulumi. If anyone can point to an example of this that would be great.
  • b

    bitter-eve-53295

    03/23/2022, 5:10 PM
    Anyone have any experience or knowledge of databricks? I could use some pointers
    w
    • 2
    • 1
  • q

    quick-rain-24827

    03/23/2022, 8:22 PM
    Am I correct in thinking that there's no support for actually creating directories and files in a FileShare? I'm looking for the functionality that would wrap this: https://docs.microsoft.com/en-us/rest/api/storageservices/operations-on-files cc: @salmon-airport-51456
    g
    • 2
    • 1
  • b

    busy-lion-51883

    03/23/2022, 9:10 PM
    I am trying to open a user account attached to a google group email address to be used as a systems account. However, the verification email does not seem to deliver to the group. Has anyone faced/resolved something like this?
  • a

    ancient-energy-2517

    03/23/2022, 9:35 PM
    Hi everyone. What's wrong ? I am trying to create CertManager chart --------------------------------- --------------------------------- --------------------------------- --------------------------------- --------------------------------- --------------------------------- --------------------------------- Diagnostics: pulumi😛ulumi:Stack (pulumi-kuber-dev): error: Running program '/home/nariman/Desktop/LPDF/pulumi-kuber' failed with an unhandled exception: Error: failed to register new resource cert-manager [kuber:CertManager]: 3 INVALID_ARGUMENT: Type 'kuber:CertManager' is not a valid type token (must have format '*:*:*') --------------------------------- --------------------------------- --------------------------------- --------------------------------- --------------------------------- --------------------------------- --------------------------------- export class CertManager extends pulumi.CustomResource implements CertManagerOutputs { readonly meta: pulumi.Output<abstractions.HelmMeta>; constructor(name: string, props: CertManagerInputs, opts?: pulumi.CustomResourceOptions) { super('kuber:CertManager', name, props, opts); this.meta = pulumi.output({ chart: 'cert-manager', version: 'v1.7.1', repo: 'https://charts.jetstack.io', }); const chart = new k8s.helm.v3.Chart(name, { namespace: props.namespace, chart: this.meta.chart, version: this.meta.version, fetchOpts: { repo: this.meta.repo, }, values: { replicaCount: 2, installCRDs: true, webhook: { timeoutSeconds: 30, }, }, }, {parent: this} );
    • 1
    • 3
  • f

    few-dog-63447

    03/24/2022, 9:49 AM
    Hi everyone! I found the Native Google Cloud Provider and would love to use it for a new project. How much longer will it be in preview (ballpark)?
    g
    • 2
    • 2
  • f

    flaky-yak-39108

    03/24/2022, 11:38 AM
    Hi everyone, i am new to Pulumi and i am setting up a SWA on Azure this all works fine. But i can’t find out a way to set the AppSettings (to configure the environment variables), there only seems to be a function to list the settings of a existing SWA https://www.pulumi.com/registry/packages/azure-native/api-docs/web/liststaticsiteappsettings/
  • a

    adorable-gpu-98268

    03/24/2022, 11:52 AM
    Hi, could you share what the status of aws-native is? Is it ready for prime-time use? Should I base new projects on aws-native?
    g
    • 2
    • 2
  • h

    hundreds-crowd-24787

    03/24/2022, 11:52 AM
    Hi i am new to Pulumi, whats the best way to convert a kubernetes yaml to Pulumi python? i have tried using kube2pulumi but the data section of my Kubernetes configmap is still in yaml.
  • b

    bright-receptionist-28471

    03/24/2022, 1:57 PM
    Edit: Nevermind, solved it! Hello Pulumi Folks! I have a Kubernetes situation that I'm curious how you would model: I am creating a
    <http://cert-manager.io/v1|cert-manager.io/v1>
    Certificate
    which will create and store values in a
    Secret
    . I need to fetch a key from the
    Secret
    to configure something. It seems the
    get()
    methods for k8s objects can only fetch objects create explicitly by pulumi. So what's the best option for retrieving this value? (I did try creating the
    Secret
    explicitly before creating the
    Certificate
    and then
    get()
    ing the
    Secret
    again after the
    Certificate
    has been created. This didn't seem to work (I think I ended up with two different
    Secrets
    -- this may have been user error on my part)
    • 1
    • 1
  • c

    crooked-spring-277

    03/24/2022, 4:52 PM
    Hey Guys! Got a question here. Doing GCP Infra with pulumi. We are deploying Managed Instance Groups, and we are running into a problem. When we do a pulumi up as part of our stack, the Instance Templates will be created as I have delete_before_replace set to true if the instance template needs an update. Then the code will update the MIGs updating the version to use the new instance template. However, if part of the update fails, and doesn't update the MIGs to use the new instance template, subsequent runs will try to delete the instance templates from the replace in a previous run, but can't because the MIGs still reference them. I am having a super hard time sorting dependency management when it comes to this. I have found some issues on the terraform side but was wondering has anyone run into this before. https://github.com/hashicorp/terraform-provider-google/issues/6277 I tried the recommended steps there with no luck.
    • 1
    • 1
Powered by Linen
Title
c

crooked-spring-277

03/24/2022, 4:52 PM
Hey Guys! Got a question here. Doing GCP Infra with pulumi. We are deploying Managed Instance Groups, and we are running into a problem. When we do a pulumi up as part of our stack, the Instance Templates will be created as I have delete_before_replace set to true if the instance template needs an update. Then the code will update the MIGs updating the version to use the new instance template. However, if part of the update fails, and doesn't update the MIGs to use the new instance template, subsequent runs will try to delete the instance templates from the replace in a previous run, but can't because the MIGs still reference them. I am having a super hard time sorting dependency management when it comes to this. I have found some issues on the terraform side but was wondering has anyone run into this before. https://github.com/hashicorp/terraform-provider-google/issues/6277 I tried the recommended steps there with no luck.
Its almost as if Pulumi forgets that it didn't update the MIG with the instance template but still wants to delete the instance template
View count: 1