Hi everyone, how would i verify if the pulumi login is executed by a certain users? Does pulumi set enviroment variables which i can check on in my CLI program?

Is there a way to retrieve the raw “outputs” of the NewStackReference(), so I can deserialize it into JSON?

Is there a configuration or pending roadmap item to improve the spammy pulumi comments on pull requests when using the github app<>pulumi.com integration? Come up in a retro that it's very noisy. Would be better if pulumi was only to update an existing comment it had created.

I’m using Pulumi Automation API (written in Golang) to provision my EKS and its Managed Nodegroups, but the EC2s that it creates are not named. Is there a way to do this from within the eks.NewNodeGroup() function, or do I have to use the autoscaling package, or perhaps aws-sdk-go, to set the tag/name, in a separate step?

hi i have a question about pulumi.yaml files, as there are multiple i kinda see the intention pulumi.dev.yaml for dev env pulumi.prod.yaml for prod env but what is the prupose of pulumi.yaml? Contents of pulumi.yaml (auto generated)

name: modules

runtime: nodejs

description: A minimal AWS TypeScript Pulumi program

vs pulumi.dev.yaml

config:

aws:region: eu-west-1

Hello. I have an automation app that some times ends up in a weird state and wonder if anyone might know what happens? If our automation project fails once to update a stack all the updates to the same stack after that will end with

"One or more errors occurred"

Even though everything has succeeded. If I restart the application it works just fine and the message disappear, which I find pretty strange.

Edit to keep the channel clean: panic when trying to show diff for a helm chart resource https://github.com/pulumi/pulumi/issues/9502

Is there a way to fetch the existing

host

Docker network using the Docker Pulumi api? The current api requires the id of the resource, which we don't know at this point. However, in a Docker Desktop configurations you have the local host network by default.

I have a number of existing Projects, most with multiple Stacks, that I would like to setup on the S3 state backend. So far, each project just has a

Pulumi.yaml

in it that controls all of the settings, and Stack specific config is determined by

pulumi.getStack()

in the code. If I wanted to make it so that in all cases, the state file would be written in S3 like:

<s3://some-bucket/${name-of-project}/${stack-name}>

, what is the easiest way to enforce that? Do I need a

Pulumi.<stack>.yaml

for each stack in each project? Or is there a centralized way I could do this in the code somehow, or in the single

Pulumi.yaml

file for each project? And would I run into any issues if multiple different projects use the same stack names, such as

dev

,

staging

, and

prod

?

Is it not possible to call

pulumi.export

from within an

Output.apply

lambda function? I'd like to conditionally export something if an Output has a particular value, but it doesn't appear to be working 😕

Is there a harm in upgrading typescript version in a pulumi project ? I see that the

tsc

version that comes with pulumi is

Version 3.7.5

and I want to upgrade the typescript version to

4.5.5

hey lovely community folks! I'm excited to announce the community slack is now publicly searchable! See the announcement post here: https://www.pulumi.com/blog/announcing-community-slack-archive/ You can see all the logs from the beginning of last week at https://archive.pulumi.com Happy searching!

Ok, it's official - I'm stuck on the azure provider (again). I want to simply make use of whatever account I'm logged into the az cli with. In my case this is an admin account, and I expect to be able to do anything with it within the Azure tenant. The only azure-native configuration I have in my pulumi stack configuration is for the location. When I run pulumi up, I get this: Diagnostics: pulumi😛ulumi:Stack (soxes-infra-bootstrapper): error: Running program 'G:\src\src_x25_exploration\global\bootstrapping\bin\Debug\netcoreapp3.1\bootstrapping.dll' failed with an unhandled exception: System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. at object RuntimeTypeHandle.CreateInstance(RuntimeType type, bool publicOnly, bool wrapExceptions, ref bool canBeCached, ref RuntimeMethodHandleInternal ctor, ref bool h asNoDefaultCtor) at object RuntimeType.CreateInstanceDefaultCtorSlow(bool publicOnly, bool wrapExceptions, bool fillCache) at object RuntimeType.CreateInstanceDefaultCtor(bool publicOnly, bool skipCheckThis, bool fillCache, bool wrapExceptions) at T Activator.CreateInstance<T>() at Task<int> Pulumi.Deployment+Runner.Pulumi.IRunner.RunAsync<TStack>(IServiceProvider serviceProvider)+() => { } at Task<int> Pulumi.Deployment+Runner.RunAsync<TStack>(Func<TStack> stackFactory) ---> Grpc.Core.RpcException: Status(StatusCode="Unknown", Detail="invocation of azure-n ative:authorization:getClientConfig returned an error: getting authenticated object ID: Error parsing json result from the Azure CLI: Error retrieving running Azure CLI: WARNIN G: The underlying Active Directory Graph API will be replaced by Microsoft Graph API in Azure CLI 2.37.0. Please carefully review all breaking changes introduced during this mi gration: https://docs.microsoft.com/cli/azure/microsoft-graph-migration") at async Task<InvokeResponse> Pulumi.GrpcMonitor.InvokeAsync(ResourceInvokeRequest request) at async Task<SerializationResult> Pulumi.Deployment.InvokeRawAsync(string token, SerializationResult argsSerializationResult, InvokeOptions options) x 2 at async Task<T> Pulumi.Deployment.InvokeAsync<T>(string token, InvokeArgs args, InvokeOptions options, bool convertResult) at async Task<string> ComponentLibrary.Util.GetSubscriptionScopeIdAsync() in G😕src/src_x25_exploration/ComponentLibrary/Util.cs:line 13 at string ComponentLibrary.Util.get_SubscriptionId() in G😕src/src_x25_exploration/ComponentLibrary/Util.cs:line 8 at new BootstrappingStack() in G😕src/src_x25_exploration/global/bootstrapping/BootstrappingStack.cs:line 31 --- End of inner exception stack trace --- Any pointers?

From past experience this is the auth failing, but my az account show works - and shows the subscription I want to deploy to.

Hello there, Just noticed that with Pulumi v3.31, and using our own FileBackend (Azure Storage account Container), after a destroy, there is a json.bak that is still persisted. Is this is a feature, or a bug? 😄

Hey folks, is it possible to

pulumi import

a resource from custom provider?

Hi! I have a problem with pulumi hanging when "completing deletion from previous update". It seem to timeout after 15 minutes, saying "Error deleting security group: DependencyViolation: resource sg-01da0d120430f7580 has a dependent object" pulumi cancel fails with "Conflict: The Update has already completed" Doing export | import does not help, e.g what https://www.pulumi.com/docs/troubleshooting/#interrupted-update-recovery suggests. Any suggestions?

Hi everyone

we have some issue with connection in pulumi?

someone have the same problem?

i use pulumi cloud

but when i try to login in cli i dont receive any error, but my connection failed

Hi folks, I'm new to pulumi and wondering how to implement it on my team (using python), I appreciated the "Organizational Patterns - A Single Infra Repo" blog post but got some doubts: • Where should the

Pulumi.yaml

belong? • Every project directory (github, datadog...) requires a

pulumi new

? Otherwise, where I'm supposed to run the

new

and

up

commands?

I'm using the pulumi-cli docker image for deployments. When I run it from my Octopus deployment it tells me that the docker daemon isn't started...any ideas as to why docker doesn't start?

I'm trying to create an EKS cluster with an oidcProvider so I can use the efs-csi driver and have PVCs which work regardless of which AZ the pod which needs them is launched in. There is a helm chart for the driver (which also launches the pods which do the EFS attaching etc.) The instructions for that say we need to follow the instructions here https://docs.aws.amazon.com/eks/latest/userguide/enable-iam-roles-for-service-accounts.html to create the oidc Provider for the cluster. Now those instructions would be a step outside of the flow of the IaC so I would ideally like to write them in pulumi. What they say to do is to look up the cluster.identity.oidc.issuer in the output from

aws eks describe-cluster

command and then use that to create an oidc Provider in AWS with the right url. So given https://www.pulumi.com/registry/packages/aws/api-docs/iam/openidconnectprovider/ I assumed I would be able to get the oidc.issuer url from the stack object created by the eks.cluster call and pass that to the new aws.iam.OpenIdConnectProvider() and do what the aws docs suggest from Pulumi. However cluster.core.oidcProvider.url and cluster.core.oidcProvider.arn stay empty even when the cluster has been created. Perhaps I need to add https://www.pulumi.com/registry/packages/aws/api-docs/eks/identityproviderconfig/ but that also requires the url which the

aws eks describe-cluster

provides, and then I'm back to square one trying to work out how to replicate that in pulumi.

Excited to see what you all have been cooking for tomorrows event 😛artypus:

👋 Hi everyone!

I'm working on an AWS EKS cluster am trying to upgrade a helm chart and it's causing me to get a "resource already exists" error since the previous helm chart already had this resource. I'm trying to do a

pulumi import

on the resource so that my current state stops trying to re-apply the CRD but I noticed that there's 0 documentation or examples on how to import a CRD: https://www.pulumi.com/registry/packages/kubernetes/api-docs/apiextensions/customresource/ Are there any examples anywhere for what the format is for doing an import for a CRD that's part of a helm chart? How do I ID it? What's the format for specifying things like the

kind

,

apiVersion

,

namespace

, etc?

When using python, is it possible to have more than one

__main__.py

for one project? eg.:

pulumi up file.py

?