is there a better way to generate secret than the cli? We are using s3 bucket for the state. Some people doesn’t have the role in production to set the secret. I wanted to know if someone is using another way to generate the secret correclty? awskms is the security provider.

Howdy. I'm new to Pulumi and moving from CDK-only to multicloud. I'm wondering if it's possible to start out with S3 for state management and then migrate to hosted in the future (if it's what we end up adopting).

i’m not sure if anyone else here is dealing with performance issues with overconsumption of CPU and RAM/memory on medium-to-large stacks, but figured I would drop this discussion here if my research helps: https://github.com/pulumi/pulumi/discussions/9477

I'm wondering, is there a nice abstraction for adding another language, or any hints for where the code for that is?

been out of Pulumi for a bit but getting back in! is there or is there planned support storing stack config (especially encrypted stack values) in a remote backend? Like S3 bucket, Pulumi hosted etc? We have constraints on storing secrets in git (even if encrypted inside of a pulumi stack file)

If anyone has experience with Pulumi + #localstack would love some new members in the Slack channel! 🙏 thx

Or perhaps I should ask, if you’re not using localstack, how do you debug your application code - just deploy to AWS in your feedback loop?

I'm trying to deploy an azure container apps instance using the example provided, but I'm getting an invalid operation exception back from Azure. Now this is likely something I need to take up with azure support, but perhaps somebody else has run into this issue or has an idea of what might be going wrong?

error: Code="InternalServerError" Message="Internal server error occurred. Error validating expected pods status in the k8s cluster" Details=[{"Message":"Internal server error occurred. Error validating expected pods status in the k8s cluster"},{"Code":"InternalServerError"},{"ErrorEntity":{"Code":"InternalServerError","ExtendedCode":"51017","Message":"Internal server error occurred. Error validating expected pods status in the k8s cluster","MessageTemplate":"Internal server error occurred. {0}","Parameters":["Error validating expected pods status in the k8s cluster"]}}]

I've written my first blog post about my experience doing an initial deep dive of Pulumi, what I learned, what surprised me, along with how I think it adds values beyond just "use code". I used Terraform as my basic comparison - more or less as that's my only other IaC experience in production. I would like to know if anyone would be willing to proof read it - correct me if I told porkies or otherwise did something "less than optimal". I'm always learning and I value the hints / tips I've received already in the community. Before I link; is this the right place / channel to do so? Thanks.

Hey, folks! 👋 I'm new to Pulumi and trying to wrap my head around using it for multi-region and multi-account AWS deployment, are there any examples the community may know? Pulumi documentation and GitHub lack examples, more or less, what I'm trying to achieve:

for (const accountId of accountsIds) {
  const accountConfig = accountsConfig[accountId];
  const accountCreds = assumeAccountAdminRole(accountId);
  
  for (const region of accountConfig.regions) {
    // deploy resources in each region of the account
  }
}

I read about the Automation API, but there's no way to pass on-the-fly credentials to it (or at least I didn't find it), I ended up wrapping the Pulumi CLI in a loop passing env vars something like:

AWS_REGION AWS_SESSION pulumi ${command} -s ${stack}

Any guidance would be great! 💪 Thanks everyone!

Hi all, 🙂👋 I'm using Pulumi to deploy resources on AWS, and I'm running into a limitation. When I want to create, for example, 15 new WorkSpaces in AWS using Pulumi, Pulumi deploy the first 6 WorkSpaces, then once these 6 are finished creating the next 6, and then the last 3 to complete the 15. Not just for WorkSpaces, the same behavior is true for any other type of resource in AWS. I'm using the AWS Classic provider. In Terraform I don't have this limitation. I understand that the classic providers use the Terraform bridge that the Terraform community built from when the cloud providers didn't have CRUD interfaces. I would like to know if there is any way to pass in Pulumi the same flags that we set in Terraform and allow us past that limit. Any guidance would be great! Thanks everyone!!!

I'm trying to build Pulumi from source tarball. Is there any documentation on how to build it from source tarball ? Also, I split my build process into 2 phases: 1. Download and verify SHA256 resources; 2. Build (without network access) and a naive approach to building Pulumi failed due to trying to fetch unchecked resources during the build phase.

Did anyone manage to control Slack integrations using Pulumi? Our scenario: When a Pulumi-managed GitHub repository is created, we want to automatically create a channel in Slack and configure the GitHub-Slack integration for that new repo in the channel.

When installing Pulumi Plugins using "`pulumi plugin install`", how is the executable code verified ? Through a signature, or a checksum somewhere ?

I’m writing a Pulumi Component Resource Provider in Golang, and would like my component resource to accept a

map[string]string

. I’ve added the inputProperty to my schema as

type: object

with no properties, required, nor default. I’m invoking this via the automation API from another golang CLI, and just getting “error: an unhandled error occurred: go inline source runtime error, an unhandled error occurred: unknown error”. Something tells me the protocol doesn’t support generic maps?

<!here> Hello friendly community! As you may know, having slack as a community meeting space is great for usability, but what you gain in usability you lose in archiving. Slack's walled garden means the treasure trove of knowledge isn't always accessible. With that said, we are making plans to archive the slack to a public website which is searchable. As users, this means anything you post in here will be available as a public archive. Its worth pointing out that you should not share sensitive data in this chat anyway, but please be aware this will be publicly accessible shortly. If anyone has any concerns, please feel free to reach out to me via DM

What is the best way to handle multiple (Output<>) variable interpolation into a string. We are building a container definition set with multiple containers are have properties such as imageName and environment variables driven from Output of various resource types. What is the "Pulumi" way to handling this case of merging all the results of those properties into the final string. A hacky workaround we have now is to create a Task<> around the result of the .Apply<> call, but this seems to create some scenarios of unexpected hangs. Any help would be appreciated!

Hello all! 🙂 Im running a Pulumi preview command in Github Actions but it is failing due to the following error:

error configuring Terraform AWS Provider: failed to get shared config profile,

I am able to run preview, refresh and deploy locally with no issues. I have checked the correct AWS Credentials and Pulumi Access Token are being passed to the GH Actions workflow. Anyone seen and fixed this error before?

Not a question, not a problem - the reverse. I wanted to express my thanks to the community so far - in the open. THANK YOU for your contributions, ideas, answers, tips & tricks, grammatical adjustments and critique that helps us to grow - it's a pleasure to be in this group. Have a great day.

Hey guys, small question about state and backend. How do I know if my state file is fully backed by the pulumi saas backend ? I can see my stacks on the

projects

page, all of the resources are there, but I have no idea if the state file is uploaded. Any help with that ?

Guys - what do you think about creating dedicated implementation for different custom state backends? Right now, it works purely on object storage level and although it’s dead simple (and I adore simple solutions as a first version), it does have some missing parts (see discussion: https://github.com/pulumi/pulumi/pull/2697/files#r314900986).

Hello again! Using the

@pulumi/awsx

package for API Gateway, how are subroutes setup? Im trying to setup a route like this:

/test/{proxy+}

but get this error:

Unable to create resource at path '/{proxy+}/{proxy+}': Cannot create a child of a resource with a greedy path variable: {proxy+}

I cant find an example of how to setup subroutes, this is how Ive seupt my routes:

{
            path: '/test/{proxy+}',
            apiKeyRequired: false,
            method: 'ANY',
            eventHandler: functions.testFunction,
          },
          {
            path: '/{proxy+}',
            method: 'ANY',
            apiKeyRequired: true,
            target: apiServerTarget,
          },

Hi Guys, In Azure AKS is possible to disable the public FQDN of the API server, using the enablePrivateClusterPublicFQDN property. See the template in the official documentation. The azure-native Pulumi SDK seems to be missing the option to configure this. Any thoughts on this? I have created an issue as well: github.com/pulumi/pulumi-azure-native/issues/1682

Hi folks, Is there a way to setup and use pulumi without the access keys, and only the IAM Role

export AWS_ACCESS_KEY_ID=<YOUR_ACCESS_KEY_ID> && export AWS_SECRET_ACCESS_KEY=<YOUR_SECRET_ACCESS_KEY>

Basically, Want to know if this step has a workaround, as I want to run pulumi from a container

Hi everyone! - How would I go about splitting a monolithic stack into a separate stacks (application, common, core) This is how I intend to restructure: • core would contain VPC, TGW, VPN, etc. • common would contain security groups, iam, s3, sns, and other shared resources • application would contain ECS, ALB, ASG Questions: 1. Is it possible to reference resources in another stack? For example, if I needed a SNS topic ARN, from common for a resource in application? 2. Are there CLI commands I should look into that exports / moves resources to a new stack?

Does Pulumi have any youtube videos on authoring code packages? Id really be interested in watching one

Hi folks, are there any tutorials, how to import existing values into a resource, for the inline program (preferably Go)?

Question for the collective Pulumi brain about

StackReference

outputs. I've got one project that sets up all our Github repositories, and another project that sets up our CI/CD pipelines for those repositories. Based on whether the repository in question is public or private, I will tweak how the pipelines are set up. I think "no problem, that's what

StackReferences

are for!" So I'm exporting the visibility of each of my repositories as an output from my Github project for consumption by my CI/CD project. However, anything I get from a

StackReference

is an

Output

, which is fine if I only needed to pass that output directly to a new

Resource

as an input. Unfortunately, I need to perform some extra-

Resource

logic based on the value of this

Output

("do I pass this pipeline definition to the Resource, or that pipeline definition?").

Output.apply

doesn't do the trick because this is happening in the initial "compilation"/pre-processing stage of the Pulumi run, rather than the "execution"/actual-creation-of-Resources stage. Is there some trick I'm missing in this situation? Alternatively, is there some other way of structuring things that would make this more straightforward? (I'm using the Python SDK, FWIW.) Thanks in advance.

I'm trying to use Pulumi with an async handler and TypeScript (as documented https://www.pulumi.com/docs/intro/languages/javascript/#entrypoint ) and it seems like it just doesn't actually work. It runs the code up to the first yield from a promise and then stops, so I get a portion of the resources.

Can you use StackReference without using the pulumi backend? what would I use as the unique stack name?