Hello folks. I'm trying to rename a project as I move it into another repository and expand it. I created a new destination project and wondered if I could use

pulumi config cp

to move secrets and config entries from the old stack.

Hi Folks I am trying to setup datafactory using azure-native pulumi, but when i try to configure a private endpoint i am not able to find any option to set up the virtual network that i want, any idea how to accomplish this?

Hey Team How can we enable IP forwarding for GCE ? and assign network interface card = gVNIC to GCE through pulumi ??

hi everyone, does anyone here use the managed Pulumi service? We'd like to know what does the managed service have to offer to decide if we should subscribe on it, please reply in thread if you can share more with me, thanks!

Hi, this might be an easy question: How do I get the pulumi “organization”? I need to refer to it in stack references. The documentation sets it via a config value: https://www.pulumi.com/learn/building-with-pulumi/stack-references/, however I thought there might be an easier way, as it should be available dynamically.

Can I set the AWS ECS account settings using pulumi? Specifically I want to enable Dual-stack VPC IPv6:

dualStackIPv6

I can set this using the aws cli, but I’ve a multi-account setup configured with pulumi and would need to set that for every account.

Are there any plans for higher-level interfaces in Pulumi, or do these already exist as 3rd party packages somewhere ? Coming from CDK v2 to Pulumi is a huge step backwards when supporting only AWS.

Enabling GVNIC for GCE VM creation. How to resolve this issue?

Hey everyone, are there any examples of running fargate in private subnet with a load balancer in front?

Hi, is there a way / standard to edit the

aws-auth

configmap (or any configmap for that matter) after the cluster has been created ? In my case, I have the eks cluster created with some

roleMappings

but some workloads that get deployed might want to create a specific least-privileged user. I'd need to edit the existing

ConfigMap

for

aws-auth

after cluster creation but I can't figure a way to do it. Any help is appreciated 🙌

Is there anyway to undo an import? (python) I've imported a resource using CLI, saw it's code but decided not to bring the code to the

__main__.py

file, even though the imported code isn't at main file, the CLI keeps prompting

Preview failed: unable to delete resource...

Hey team! How to schedule a VM instance (GCP-GCE) to start and stop thru pulumi ?

Is there a shortcut to refresh a stack and remove all pending operations? I currently do refresh, export, edit the stack manually and then import it again.

What's the way to provide a container with a file? A certificate in this case?

Can the certificate be a config secret and mounted as a volume or something?

If I have a stack created with inline program, can I run pulumi CLI to import some resource into it? I’m having issues because inline program does not create .yaml file.

👋 Hi everyone! I'm new here

Hello 🙂 I have a question about masking secrets in the pulumi preview output : We create an AWS secret and I don't want the "secret_string" value to be shown in the pulumi preview output. How can I do that ? Python pulumi code :

secret_version = aws.secretsmanager.SecretVersion(f"aws_secretversion_{secret_name}", secret_id=secret.id, secret_string=json.dumps(secret_value))

Pulumi preview output :

[urn=urn:pulumi:dev::snowflake::aws:secretsmanager/secretVersion:SecretVersion::aws_secretversion_snowflake/user/dev_usr_finops_api]
         [provider=urn:pulumi:dev::snowflake::pulumi:providers:aws::default_4_38_1::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
         secretId    : output<string>
         secretString: (json) {
             password         : "nDXw\">)ElJK=D+4$IvyJoBrbXR.LNF"
             username         : "TEST"
         }

Feel like this has come up before but why might I be seeing

error: It looks like the Pulumi SDK has not been installed. Have you run npm install or yarn install?

after updating the pulumi version and updating my checkout on another machine - upgrade was fine on ci and the machine i did the bump on but now ive switched and getting this. additional context: using nix to manage pulumi-bin install

Q: Does anyone version their Pulumi config? I have a breaking change I’d like to make and want to use it for new stacks, but not necessarily existing ones. Really what I want is the ability to branch my config… Example reason for a breaking change: switching providers, which would replace all resources in the stack. One option I considered is adding a

version

parameter to my config and splitting my Pulumi code into

src/v1

and

src/v2

. This would involve a lot of duplication. Any thoughts on a more elegant solution?

is there a way to manage the policy from the pulumi UI?

besides admin and member, does Pulumi service offer something more granular in terms of access control?

i have a micro stack setup with inter stack dependencies - how do i make sure that i deploy the dependencies before i try to deploy those who depend on it? i saw i the docs something about cascading updates but i'm not sure how to do that. any help on this will be much appreciated!

Hi all, I'm currently writing a CrossGuard policy and was wondering if it's possible to check if all API Gateways have a Web ACL Association? The

WebAclAssociation

resource requires ARNs which can't be manually set from both the APIGW and Web ACL. Not sure the best way to go about this (working in TypeScript) or if it's possible. I'd be wanting to test the policy with

assertNoStackViolations

pulumi is awesome but as my project is growing each update becomes slower and slower how can I profile the performance to understand what’s slowing things down?

Looking at this overview at (https://www.pulumi.com/docs/guides/pulumi-packages/). It looks like an Native Pulumi Provider Package can be written in Typescript and then generated to all other languages. However the boilerplate repo, does only include the Provider written in Go. Can I write the Provider in Typescript, or is this limited to Go?

I’m looking to use pulumi as part of my CI to spin up instances and test code as part of the pipeline, I think this would require “dynamic” stacks (per different PRs, etc.) does that make sense? I couldn’t find documentation on this subject

hey folks, a colleague us running

pulumi up

for the first time. They've logged in the CLI, set a stack (an existing one I've deployed to before) and they also put our machine user IAM deployer keys in

~/.aws/credentials

.

Hi . I am trying to get Pulumi to talk to my openstack cloud using yaml (On a corporate windows laptop ). How can I do this. I just tend to get the message auth_url or cloud must exist

I don't have any sort of secrets in my application, how can I get Pulumi to recognize this and not ask developers for a passphrase without me requiring all the developers to set environment variables ?