I have setup AWS-SES on my stack only to learn that you have to request production access for you to send emails to other domains. Do I just accept I have to do this step manually or is there something else I could do?

Question about this example around creating a GKE cluster and generating the kubeconfig and exporting it: Will

kubeconfig

end up as plaintext in state? My reading of the Secrets docs leads me to believe it would not be encrypted in this case because none of the `Output`s seem to be marked as secret (based on a quick scan of the sdk)

I have kind of an interesting question I'd like to ask here or any other spot anyone might have advice. We want to update some mongodb cloud resources so we can set a new property, "defaultWriteConcern: majority". The problem is we're on an old version of the provider so we can't quite set that field. So today, we're trying to upgrade the pulumi/mongodbatlas packages from 1.7.0 to 3.3.0 and we're seeing that some connectionString property here changed from a string to connectionString[]. We are trying to upgrade the package, run a pulumi refresh, and we are hoping to get the existing cluster resource updated so we could access the connectionStrings array and store values in a kubernetes secret later in our project. That pulumi refresh after upgrade doesn't seem to be update the shape of the resource for us though. we still see connectionStrings looking like it used to and not the array of values the new package/provider says we should be using. Any advice on what we might do to get the resource updated so we can set that value?

Hi , I am trying to deploy EKS cluster using go automation api and getting following error Error: Could not find aws CLI for EKS. See https://github.com/pulumi/pulumi-eks for installation instructions.: Error: Could not find aws CLI for EKS. See https://github.com/pulumi/pulumi-eks for installation instructions. Just wonder is there a way to install AWS cli using Pulumi autmation api or do I need to install in manually

when using an explicit provider for something, do I need to use

pulumi.ToSecret

for the

Token

parameters (and other related secrets)? Are these values for the provider stored in state?

anyone?

Is it possible to have nested component resources, ie. a component resource (Entity) containing another component resource (Pipeline)? For me it looks like the resources are successfully created but they are not and when trying to delete I get an error message with a really weird reference to the resource, i.e. I can't even delete the resource.

pulumi state delete urn:pulumi:prod::astro::custom:app:Entity$custom:app:Pipeline$gcp:cloudscheduler/job:Job::o40-malmo-scheduler

> error: No such resource "urn:pulumi:prod::astro::custom:app:Entitypp:Pipelineloudscheduler/job:Job::o40-malmo-scheduler" exists in the current state

Might be a super basic question, but i’ve been using managed k8s + services on top of that for years, but if i wanted to use pulumi to spin up an instance and then install stuff on there and configure it, is that even possible? Or should i use pulumi + ansible or something similar for this?

Hi, I want to create private elb that listening on private subnets , and i got this error, how to fix?

* error creating application Load Balancer: ValidationError: At least two subnets in two different Availability Zones must be specified

does pulumi has something with argocd?

Hi I'm trying to create a monitor in Datadog using Pulumi using the MonitorJSON(https://www.pulumi.com/registry/packages/datadog/api-docs/monitorjson/) I am trying to create monitor that is muted at creation. I added this: but I got an error message saying NameError: name 'null' is not defined error: an unhandled error occurred: Program exited with non-zero exit code: 1 . anyone knows how to fix this?

"silenced": { "*": null }

Hi Everyone, I am new to pulumi, new to k8s as a whole. I am looking to move our monolith CRM saas product to a more modern infrastructure. It is a fairly large multi-tenant app that we are restructuring to use Hasura, Postgres and node (coming from azure sql and .net). I am looking for any insight, examples and such on this pattern. So some general questions to start off: • Are most people doing namespaces to split out their tenants? • We have 500-1k tenants, if we need 3 pods per customer essentially, is there any thing we should be prepared for? We most likely will host on azure’s k8. • Any suggestions for backing up the postgres from the postgres node? • Any other suggestions?

Is there a way to output to a JSON file what the result of the stack will be after running

pulumi up

?

Getting this error when try to update ingress resource in a Kubernetes cluster (AKS). I'm using the NGINX Ingress Controller here. Apricated if anyone could help to sort this out

Not sure in which canal I should post that but for French-speaking people that interested, there will be a debate "Terraform vs. Pulumi" live on YouTube the 29/03. You can register here: https://www.eventbrite.fr/e/billets-clash-session-10-terraform-vs-pulumi-292044481907

Is there any statement Pulumi have around mitigating supply chain attacks using the github action. Specifically how you're protecting your action code from being compromised. As I understand it, versions aren't immutable as they're based on git tags? And therefore opening up that pulumi could be compromised and someone change the code therefore consumers be compromised?

Hi, could you point me to or explain to me an example when the

read

method of a dynamic resource would be called? The explanation in the documentation is very generic and I’d like to have a more concrete idea of when this would happen.

Regardign dynamic providers, how do I wire the outputs to appear in the resource member fields? I return an output in the corresponding provider functions but the member of the resource stays

undefined

hey folks 👋 is there a way to show secrets when inspecting the

pulumi up

details? Something similar to

--show-secrets

for the

pulumi stack

command

We're looking to deploy AWS Config across our AWS Organization with Pulumi. If anyone can point to an example of this that would be great.

Anyone have any experience or knowledge of databricks? I could use some pointers

Am I correct in thinking that there's no support for actually creating directories and files in a FileShare? I'm looking for the functionality that would wrap this: https://docs.microsoft.com/en-us/rest/api/storageservices/operations-on-files cc: @salmon-airport-51456

I am trying to open a user account attached to a google group email address to be used as a systems account. However, the verification email does not seem to deliver to the group. Has anyone faced/resolved something like this?

Hi everyone. What's wrong ? I am trying to create CertManager chart --------------------------------- --------------------------------- --------------------------------- --------------------------------- --------------------------------- --------------------------------- --------------------------------- Diagnostics: pulumi😛ulumi:Stack (pulumi-kuber-dev): error: Running program '/home/nariman/Desktop/LPDF/pulumi-kuber' failed with an unhandled exception: Error: failed to register new resource cert-manager [kuber:CertManager]: 3 INVALID_ARGUMENT: Type 'kuber:CertManager' is not a valid type token (must have format '*:*:*') --------------------------------- --------------------------------- --------------------------------- --------------------------------- --------------------------------- --------------------------------- --------------------------------- export class CertManager extends pulumi.CustomResource implements CertManagerOutputs { readonly meta: pulumi.Output<abstractions.HelmMeta>; constructor(name: string, props: CertManagerInputs, opts?: pulumi.CustomResourceOptions) { super('kuber:CertManager', name, props, opts); this.meta = pulumi.output({ chart: 'cert-manager', version: 'v1.7.1', repo: 'https://charts.jetstack.io', }); const chart = new k8s.helm.v3.Chart(name, { namespace: props.namespace, chart: this.meta.chart, version: this.meta.version, fetchOpts: { repo: this.meta.repo, }, values: { replicaCount: 2, installCRDs: true, webhook: { timeoutSeconds: 30, }, }, }, {parent: this} );

Hi everyone! I found the Native Google Cloud Provider and would love to use it for a new project. How much longer will it be in preview (ballpark)?

Hi everyone, i am new to Pulumi and i am setting up a SWA on Azure this all works fine. But i can’t find out a way to set the AppSettings (to configure the environment variables), there only seems to be a function to list the settings of a existing SWA https://www.pulumi.com/registry/packages/azure-native/api-docs/web/liststaticsiteappsettings/

Hi, could you share what the status of aws-native is? Is it ready for prime-time use? Should I base new projects on aws-native?

Hi i am new to Pulumi, whats the best way to convert a kubernetes yaml to Pulumi python? i have tried using kube2pulumi but the data section of my Kubernetes configmap is still in yaml.

Edit: Nevermind, solved it! Hello Pulumi Folks! I have a Kubernetes situation that I'm curious how you would model: I am creating a

<http://cert-manager.io/v1|cert-manager.io/v1>

Certificate

which will create and store values in a

Secret

. I need to fetch a key from the

Secret

to configure something. It seems the

get()

methods for k8s objects can only fetch objects create explicitly by pulumi. So what's the best option for retrieving this value? (I did try creating the

Secret

explicitly before creating the

Certificate

and then

get()

ing the

Secret

again after the

Certificate

has been created. This didn't seem to work (I think I ended up with two different

Secrets

-- this may have been user error on my part)