Are there any plans for higher-level interfaces in Pulumi, or do these already exist as 3rd party packages somewhere ? Coming from CDK v2 to Pulumi is a huge step backwards when supporting only AWS.

Enabling GVNIC for GCE VM creation. How to resolve this issue?

Hey everyone, are there any examples of running fargate in private subnet with a load balancer in front?

Hi, is there a way / standard to edit the

aws-auth

configmap (or any configmap for that matter) after the cluster has been created ? In my case, I have the eks cluster created with some

roleMappings

but some workloads that get deployed might want to create a specific least-privileged user. I'd need to edit the existing

ConfigMap

for

aws-auth

after cluster creation but I can't figure a way to do it. Any help is appreciated 🙌

Is there anyway to undo an import? (python) I've imported a resource using CLI, saw it's code but decided not to bring the code to the

__main__.py

file, even though the imported code isn't at main file, the CLI keeps prompting

Preview failed: unable to delete resource...

Hey team! How to schedule a VM instance (GCP-GCE) to start and stop thru pulumi ?

Is there a shortcut to refresh a stack and remove all pending operations? I currently do refresh, export, edit the stack manually and then import it again.

What's the way to provide a container with a file? A certificate in this case?

Can the certificate be a config secret and mounted as a volume or something?

If I have a stack created with inline program, can I run pulumi CLI to import some resource into it? I’m having issues because inline program does not create .yaml file.

👋 Hi everyone! I'm new here

Hello 🙂 I have a question about masking secrets in the pulumi preview output : We create an AWS secret and I don't want the "secret_string" value to be shown in the pulumi preview output. How can I do that ? Python pulumi code :

secret_version = aws.secretsmanager.SecretVersion(f"aws_secretversion_{secret_name}", secret_id=secret.id, secret_string=json.dumps(secret_value))

Pulumi preview output :

[urn=urn:pulumi:dev::snowflake::aws:secretsmanager/secretVersion:SecretVersion::aws_secretversion_snowflake/user/dev_usr_finops_api]
         [provider=urn:pulumi:dev::snowflake::pulumi:providers:aws::default_4_38_1::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
         secretId    : output<string>
         secretString: (json) {
             password         : "nDXw\">)ElJK=D+4$IvyJoBrbXR.LNF"
             username         : "TEST"
         }

Feel like this has come up before but why might I be seeing

error: It looks like the Pulumi SDK has not been installed. Have you run npm install or yarn install?

after updating the pulumi version and updating my checkout on another machine - upgrade was fine on ci and the machine i did the bump on but now ive switched and getting this. additional context: using nix to manage pulumi-bin install

Q: Does anyone version their Pulumi config? I have a breaking change I’d like to make and want to use it for new stacks, but not necessarily existing ones. Really what I want is the ability to branch my config… Example reason for a breaking change: switching providers, which would replace all resources in the stack. One option I considered is adding a

version

parameter to my config and splitting my Pulumi code into

src/v1

and

src/v2

. This would involve a lot of duplication. Any thoughts on a more elegant solution?

is there a way to manage the policy from the pulumi UI?

besides admin and member, does Pulumi service offer something more granular in terms of access control?

i have a micro stack setup with inter stack dependencies - how do i make sure that i deploy the dependencies before i try to deploy those who depend on it? i saw i the docs something about cascading updates but i'm not sure how to do that. any help on this will be much appreciated!

Hi all, I'm currently writing a CrossGuard policy and was wondering if it's possible to check if all API Gateways have a Web ACL Association? The

WebAclAssociation

resource requires ARNs which can't be manually set from both the APIGW and Web ACL. Not sure the best way to go about this (working in TypeScript) or if it's possible. I'd be wanting to test the policy with

assertNoStackViolations

pulumi is awesome but as my project is growing each update becomes slower and slower how can I profile the performance to understand what’s slowing things down?

Looking at this overview at (https://www.pulumi.com/docs/guides/pulumi-packages/). It looks like an Native Pulumi Provider Package can be written in Typescript and then generated to all other languages. However the boilerplate repo, does only include the Provider written in Go. Can I write the Provider in Typescript, or is this limited to Go?

I’m looking to use pulumi as part of my CI to spin up instances and test code as part of the pipeline, I think this would require “dynamic” stacks (per different PRs, etc.) does that make sense? I couldn’t find documentation on this subject

hey folks, a colleague us running

pulumi up

for the first time. They've logged in the CLI, set a stack (an existing one I've deployed to before) and they also put our machine user IAM deployer keys in

~/.aws/credentials

.

Hi . I am trying to get Pulumi to talk to my openstack cloud using yaml (On a corporate windows laptop ). How can I do this. I just tend to get the message auth_url or cloud must exist

I don't have any sort of secrets in my application, how can I get Pulumi to recognize this and not ask developers for a passphrase without me requiring all the developers to set environment variables ?

I'm looking through the Pulumi Registry and not finding any CI/CD providers. How do I go about provisioning CI/CD pipelines with Pulumi?

Is there any equivalent to Terraform templatefile in Pulumi, to render a local template file and replace placeholders with key-value pairs (that could be outputs)? Or is the standard pattern just to use native language utilities for this? I'm using Typescript

Hi everyone. Trying Pulumi out for the first time using Go and AWS. Having a weird issue when trying to update a stack containing

EKS

. No matter what changes I add (a new node group or simply adding a Helm chart) an

EKS cluster replace

is always included in the changes. Is there something obvious Im missing? Thank you!

Hi Guys, is it appropriate to ask pricing questions here?

The question is - we use Azure, and application insights a lot, in the application insights we have a lot of alerts, and from the azure terminology every alert is resource. So, will Pulumi count every alert as resource and so we will have to pay for it? As price for the alert itself per month will be much smaller than what we will have to pay Pulumi