https://pulumi.com logo
Docs
Join the conversationJoin Slack
Channels
announcements
automation-api
aws
azure
blog-posts
built-with-pulumi
cloudengineering
cloudengineering-support
content-share
contribex
contribute
docs
dotnet
finops
general
getting-started
gitlab
golang
google-cloud
hackathon-03-19-2020
hacktoberfest
install
java
jobs
kubernetes
learn-pulumi-events
linen
localstack
multi-language-hackathon
office-hours
oracle-cloud-infrastructure
plugin-framework
pulumi-cdk
pulumi-crosscode
pulumi-deployments
pulumi-kubernetes-operator
pulumi-service
pulumiverse
python
registry
status
testingtesting123
testingtesting321
typescript
welcome
workshops
yaml
Powered by Linen
general
  • p

    proud-cricket-86351

    04/29/2022, 5:57 PM
    Hi everyone, how would i verify if the pulumi login is executed by a certain users? Does pulumi set enviroment variables which i can check on in my CLI program?
    b
    1 reply · 2 participants
  • b

    brave-lizard-56518

    04/29/2022, 10:50 PM
    Is there a way to retrieve the raw “outputs” of the NewStackReference(), so I can deserialize it into JSON?
    b
    5 replies · 2 participants
  • m

    magnificent-lifeguard-15082

    04/30/2022, 2:20 PM
    Is there a configuration or pending roadmap item to improve the spammy pulumi comments on pull requests when using the github app<>pulumi.com integration? Come up in a retro that it's very noisy. Would be better if pulumi was only to update an existing comment it had created.
    b
    1 reply · 2 participants
  • b

    brave-lizard-56518

    05/01/2022, 2:03 PM
    I’m using Pulumi Automation API (written in Golang) to provision my EKS and its Managed Nodegroups, but the EC2s that it creates are not named. Is there a way to do this from within the eks.NewNodeGroup() function, or do I have to use the autoscaling package, or perhaps aws-sdk-go, to set the tag/name, in a separate step?
    e
    4 replies · 2 participants
  • p

    proud-cricket-86351

    05/02/2022, 6:47 AM
    hi i have a question about pulumi.yaml files, as there are multiple i kinda see the intention pulumi.dev.yaml for dev env pulumi.prod.yaml for prod env but what is the prupose of pulumi.yaml? Contents of pulumi.yaml (auto generated)
    name: modules
    runtime: nodejs
    description: A minimal AWS TypeScript Pulumi program
    vs pulumi.dev.yaml
    config:
    aws:region: eu-west-1
    q
    e
    2 replies · 3 participants
  • w

    wet-noon-14291

    05/02/2022, 11:20 AM
    Hello. I have an automation app that some times ends up in a weird state and wonder if anyone might know what happens? If our automation project fails once to update a stack all the updates to the same stack after that will end with
    "One or more errors occurred"
    Even though everything has succeeded. If I restart the application it works just fine and the message disappear, which I find pretty strange.
    e
    14 replies · 2 participants
  • b

    broad-helmet-79436

    05/02/2022, 12:50 PM
    Edit to keep the channel clean: panic when trying to show diff for a helm chart resource https://github.com/pulumi/pulumi/issues/9502
    e
    3 replies · 2 participants
  • c

    clever-glass-42863

    05/02/2022, 5:52 PM
    Is there a way to fetch the existing
    host
    Docker network using the Docker Pulumi api? The current api requires the id of the resource, which we don't know at this point. However, in a Docker Desktop configurations you have the local host network by default.
  • r

    rapid-raincoat-36492

    05/02/2022, 6:01 PM
    I have a number of existing Projects, most with multiple Stacks, that I would like to setup on the S3 state backend. So far, each project just has a
    Pulumi.yaml
    in it that controls all of the settings, and Stack specific config is determined by
    pulumi.getStack()
    in the code. If I wanted to make it so that in all cases, the state file would be written in S3 like:
    <s3://some-bucket/${name-of-project}/${stack-name}>
    , what is the easiest way to enforce that? Do I need a
    Pulumi.<stack>.yaml
    for each stack in each project? Or is there a centralized way I could do this in the code somehow, or in the single
    Pulumi.yaml
    file for each project? And would I run into any issues if multiple different projects use the same stack names, such as
    dev
    ,
    staging
    , and
    prod
    ?
    p
    1 reply · 2 participants
  • f

    full-artist-27215

    05/02/2022, 6:24 PM
    Is it not possible to call
    pulumi.export
    from within an
    Output.apply
    lambda function? I'd like to conditionally export something if an Output has a particular value, but it doesn't appear to be working 😕
    e
    6 replies · 2 participants
  • a

    alert-monkey-12753

    05/02/2022, 7:23 PM
    Is there a harm in upgrading typescript version in a pulumi project ? I see that the
    tsc
    version that comes with pulumi is
    Version 3.7.5
    and I want to upgrade the typescript version to
    4.5.5
    m
    p
    +1
    8 replies · 4 participants
  • b

    billowy-army-68599

    05/02/2022, 9:41 PM
    hey lovely community folks! I'm excited to announce the community slack is now publicly searchable! See the announcement post here: https://www.pulumi.com/blog/announcing-community-slack-archive/ You can see all the logs from the beginning of last week at https://archive.pulumi.com Happy searching!
    👍 5
  • d

    damp-honey-93158

    05/03/2022, 12:12 PM
    Ok, it's official - I'm stuck on the azure provider (again). I want to simply make use of whatever account I'm logged into the az cli with. In my case this is an admin account, and I expect to be able to do anything with it within the Azure tenant. The only azure-native configuration I have in my pulumi stack configuration is for the location. When I run pulumi up, I get this: Diagnostics: pulumi😛ulumi:Stack (soxes-infra-bootstrapper): error: Running program 'G:\src\src_x25_exploration\global\bootstrapping\bin\Debug\netcoreapp3.1\bootstrapping.dll' failed with an unhandled exception: System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. at object RuntimeTypeHandle.CreateInstance(RuntimeType type, bool publicOnly, bool wrapExceptions, ref bool canBeCached, ref RuntimeMethodHandleInternal ctor, ref bool h asNoDefaultCtor) at object RuntimeType.CreateInstanceDefaultCtorSlow(bool publicOnly, bool wrapExceptions, bool fillCache) at object RuntimeType.CreateInstanceDefaultCtor(bool publicOnly, bool skipCheckThis, bool fillCache, bool wrapExceptions) at T Activator.CreateInstance<T>() at Task<int> Pulumi.Deployment+Runner.Pulumi.IRunner.RunAsync<TStack>(IServiceProvider serviceProvider)+() => { } at Task<int> Pulumi.Deployment+Runner.RunAsync<TStack>(Func<TStack> stackFactory) ---> Grpc.Core.RpcException: Status(StatusCode="Unknown", Detail="invocation of azure-n ative:authorization:getClientConfig returned an error: getting authenticated object ID: Error parsing json result from the Azure CLI: Error retrieving running Azure CLI: WARNIN G: The underlying Active Directory Graph API will be replaced by Microsoft Graph API in Azure CLI 2.37.0. Please carefully review all breaking changes introduced during this mi gration: https://docs.microsoft.com/cli/azure/microsoft-graph-migration") at async Task<InvokeResponse> Pulumi.GrpcMonitor.InvokeAsync(ResourceInvokeRequest request) at async Task<SerializationResult> Pulumi.Deployment.InvokeRawAsync(string token, SerializationResult argsSerializationResult, InvokeOptions options) x 2 at async Task<T> Pulumi.Deployment.InvokeAsync<T>(string token, InvokeArgs args, InvokeOptions options, bool convertResult) at async Task<string> ComponentLibrary.Util.GetSubscriptionScopeIdAsync() in G😕src/src_x25_exploration/ComponentLibrary/Util.cs:line 13 at string ComponentLibrary.Util.get_SubscriptionId() in G😕src/src_x25_exploration/ComponentLibrary/Util.cs:line 8 at new BootstrappingStack() in G😕src/src_x25_exploration/global/bootstrapping/BootstrappingStack.cs:line 31 --- End of inner exception stack trace --- Any pointers?
    e
    16 replies · 2 participants
  • d

    damp-honey-93158

    05/03/2022, 12:13 PM
    From past experience this is the auth failing, but my az account show works - and shows the subscription I want to deploy to.
  • a

    able-thailand-87943

    05/03/2022, 12:35 PM
    Hello there, Just noticed that with Pulumi v3.31, and using our own FileBackend (Azure Storage account Container), after a destroy, there is a json.bak that is still persisted. Is this is a feature, or a bug? 😄
    e
    7 replies · 2 participants
  • b

    bulky-agent-73210

    05/03/2022, 12:51 PM
    Hey folks, is it possible to
    pulumi import
    a resource from custom provider?
    e
    3 replies · 2 participants
  • b

    busy-crayon-89086

    05/03/2022, 1:23 PM
    Hi! I have a problem with pulumi hanging when "completing deletion from previous update". It seem to timeout after 15 minutes, saying "Error deleting security group: DependencyViolation: resource sg-01da0d120430f7580 has a dependent object" pulumi cancel fails with "Conflict: The Update has already completed" Doing export | import does not help, e.g what https://www.pulumi.com/docs/troubleshooting/#interrupted-update-recovery suggests. Any suggestions?
    e
    5 replies · 2 participants
  • h

    high-judge-8768

    05/03/2022, 2:42 PM
    Hi everyone
  • h

    high-judge-8768

    05/03/2022, 2:42 PM
    we have some issue with connection in pulumi?
  • h

    high-judge-8768

    05/03/2022, 2:42 PM
    someone have the same problem?
  • h

    high-judge-8768

    05/03/2022, 2:43 PM
    i use pulumi cloud
  • h

    high-judge-8768

    05/03/2022, 2:44 PM
    but when i try to login in cli i dont receive any error, but my connection failed
    b
    3 replies · 2 participants
  • s

    straight-crayon-4578

    05/03/2022, 3:13 PM
    Hi folks, I'm new to pulumi and wondering how to implement it on my team (using python), I appreciated the "Organizational Patterns - A Single Infra Repo" blog post but got some doubts: • Where should the
    Pulumi.yaml
    belong? • Every project directory (github, datadog...) requires a
    pulumi new
    ? Otherwise, where I'm supposed to run the
    new
    and
    up
    commands?
    a
    3 replies · 2 participants
  • q

    quick-airport-30353

    05/03/2022, 3:19 PM
    I'm using the pulumi-cli docker image for deployments. When I run it from my Octopus deployment it tells me that the docker daemon isn't started...any ideas as to why docker doesn't start?
    b
    3 replies · 2 participants
  • p

    polite-napkin-90098

    05/03/2022, 4:35 PM
    I'm trying to create an EKS cluster with an oidcProvider so I can use the efs-csi driver and have PVCs which work regardless of which AZ the pod which needs them is launched in. There is a helm chart for the driver (which also launches the pods which do the EFS attaching etc.) The instructions for that say we need to follow the instructions here https://docs.aws.amazon.com/eks/latest/userguide/enable-iam-roles-for-service-accounts.html to create the oidc Provider for the cluster. Now those instructions would be a step outside of the flow of the IaC so I would ideally like to write them in pulumi. What they say to do is to look up the cluster.identity.oidc.issuer in the output from
    aws eks describe-cluster
    command and then use that to create an oidc Provider in AWS with the right url. So given https://www.pulumi.com/registry/packages/aws/api-docs/iam/openidconnectprovider/ I assumed I would be able to get the oidc.issuer url from the stack object created by the eks.cluster call and pass that to the new aws.iam.OpenIdConnectProvider() and do what the aws docs suggest from Pulumi. However cluster.core.oidcProvider.url and cluster.core.oidcProvider.arn stay empty even when the cluster has been created. Perhaps I need to add https://www.pulumi.com/registry/packages/aws/api-docs/eks/identityproviderconfig/ but that also requires the url which the
    aws eks describe-cluster
    provides, and then I'm back to square one trying to work out how to replicate that in pulumi.
    b
    5 replies · 2 participants
  • c

    chilly-magazine-6129

    05/03/2022, 4:54 PM
    Excited to see what you all have been cooking for tomorrows event 😛artypus:
  • l

    lemon-photographer-61155

    05/03/2022, 4:54 PM
    👋 Hi everyone!
  • s

    some-dream-10395

    05/03/2022, 7:18 PM
    I'm working on an AWS EKS cluster am trying to upgrade a helm chart and it's causing me to get a "resource already exists" error since the previous helm chart already had this resource. I'm trying to do a
    pulumi import
    on the resource so that my current state stops trying to re-apply the CRD but I noticed that there's 0 documentation or examples on how to import a CRD: https://www.pulumi.com/registry/packages/kubernetes/api-docs/apiextensions/customresource/ Are there any examples anywhere for what the format is for doing an import for a CRD that's part of a helm chart? How do I ID it? What's the format for specifying things like the
    kind
    ,
    apiVersion
    ,
    namespace
    , etc?
  • s

    straight-crayon-4578

    05/03/2022, 8:00 PM
    When using python, is it possible to have more than one
    __main__.py
    for one project? eg.:
    pulumi up file.py
    ?
    b
    9 replies · 2 participants
  • f

    full-dress-10026

    05/03/2022, 9:01 PM
    Hi. I have some code that stores API tokens in AWS SSM. During a pulumi update, I issue a call to SSM to get the secret value using
    aws.ssm.getParameter
    . The response is wrapped like so
    pulumi.output(resp).apply(r => r.value)
    . I am seeing a weird behavior. I have changed the value of my SSM parameter, and pulumi is still returning the old value. Even weirder is that the old value is only returned on the CI and not when I run on my local machine. Any pointers on what is going on?
    q
    5 replies · 2 participants
Powered by Linen
Title
f

full-dress-10026

05/03/2022, 9:01 PM
Hi. I have some code that stores API tokens in AWS SSM. During a pulumi update, I issue a call to SSM to get the secret value using
aws.ssm.getParameter
. The response is wrapped like so
pulumi.output(resp).apply(r => r.value)
. I am seeing a weird behavior. I have changed the value of my SSM parameter, and pulumi is still returning the old value. Even weirder is that the old value is only returned on the CI and not when I run on my local machine. Any pointers on what is going on?
Working this back a bit more by ssh'ing into CI, I see it's returning version 1 of the parameter when there is a version 2.
Why would pulumi return a parameter version that is not the latest?
Even after deleting the version 1 parameter, pulumi still returns the version 1 result 🤯 There must be some sort of caching coming into play...
q

quick-airport-30353

05/03/2022, 9:39 PM
dumb question, why not use pulumi set config --secret <Your secret value>?
f

full-dress-10026

05/03/2022, 9:45 PM
OH, I see. The aws.ssm.getParameter call is ignoring the aws:profile set in the pulumi yaml file! The call is going to the wrong account.
View count: 8