pulumi-community #general

bulky-agent-73210

05/31/2022, 11:11 AM

Hey all, is there any parameter I can set so that Pulumi saves stack data to a custom folder, instead of

.pulumi

? Using Pulumi inline programs, if that matters

rich-agency-75207

05/31/2022, 1:42 PM

Hi All. Could use some advice on secrets. I have configured my stack to use GCP KMS as the secret provider. I then proceeded to define a GCP service account and key and augmented the key resource with:

Copy code

options:
      additionalSecretOutputs:
        - privateKeyData

This ensured that the corresponding output is

[secret]

and the json key is, indeed, obfuscated; however, it has only been base64 encoded as opposed to encrypted using GCP's KMS service. Clearly I've missed a step in this process and/or have too high expectations wrt pulumi's encoding scheme if the secrets provider is changed. Please can someone clarify?

silly-smartphone-71988

05/31/2022, 2:48 PM

Hi, I need to add a delay (sleep) when a ressource is deleted by pulumi destroy because Azure native returns but it takes a couple more seconds before the resource is actually deleted on Azure side and it throws error when pulumi trys to delete the depended on ressource. Any way other than using pulumi command (local) to add a dirty wait(1000) ondelete of the ressource?

bitter-army-70832

05/31/2022, 4:53 PM

I all, I'm encountering this issue and I'm not able to get past it. Ive put my pulumi code behind an http route, and I'm trying to deploy a gcr.io image from [Project A] into [Project B]. I've tried everything. Creating service accounts, assigning roles (including max roles didn't work for me) This is my code: https://gist.github.com/georgeportillo/982c7e2a5f56d6ad0b14babe7308b367 Any guidance to solve the issue in the screenshot in a programatic way would be helpful

refined-evening-26861

05/31/2022, 6:41 PM

Hi Guys, I'm new to Pulumi, trying to understand how pricing works. Am I right the cost per resource is about 0.5 USD per resource per month? 730 hours per month * $0.00075 = 0.5475 USD

refined-evening-26861

05/31/2022, 7:38 PM

Another question, Azure Application Insight allows to create an Alerts, from the Azure point of view, every alert is a separate resource, does Pulumi count them as resources as well and so does billing per Application Insight Alert or it does billing per Application Insights resource (so no matter how many alerts do you have it's just single resource)?

most-jordan-25674

05/31/2022, 8:52 PM

I’ve been creating some of my Pulumi scripts in different repos, and I want to consolidate some of them now. Is there a best practice for transferring ownership of the resources created with Pulumi to a different script? Or can I just copy the files / function calls and it will just work?

helpful-easter-62786

05/31/2022, 10:02 PM

👋 Does anyone have a working example that creates a Hashicorp Vault cluster in AWS?

salmon-printer-16080

06/01/2022, 1:55 AM

Hi Pulumi people 👋 I am trying to create an

App Service Managed Certificate

as part of a deployment of an App Service to Azure. I cannot see where I can do that within the following API's in Pulumi, can someone point me in the right direction? I have looked into the following providers / APIs - maybe I have missed something: • https://www.pulumi.com/registry/packages/azure-native/api-docs/web/webapphostnamebinding/ • https://www.pulumi.com/registry/packages/azure/api-docs/appservice/managedcertificate/ • https://www.pulumi.com/registry/packages/azure/api-docs/appservice/customhostnamebinding/ • https://www.pulumi.com/registry/packages/azure/api-docs/appservice/certificate/ • https://www.pulumi.com/registry/packages/azure/api-docs/appservice/certificatebinding/

bulky-agent-73210

06/01/2022, 8:56 AM

Is there a way for me to create and retrieve AWS SES SMTP credentials, in Golang?

orange-crowd-9665

06/01/2022, 9:32 AM

Hello! On GCP, I'm creating PubSub Schemas (w/ gRPC), and then after PubSub topics with those schemas (w/ ResourceOptions depends_on parameter). A problem arises when I update my .proto files. I don't know the inners of Pulumi, but everytime I update a schema, the PubSub topics that rely on it will result in a "Deleted Schema" state. What are the best practices to update PubSub schemas?

adamant-father-26302

06/01/2022, 10:06 AM

is there some pulumi helper function in golang to reference file relative to something, not relative to the entrypoint main.go ?

rich-agency-75207

06/01/2022, 10:36 AM

Hi All. Wondering if someone can advise on a current pulumi issue of mine:

rich-agency-75207

06/01/2022, 10:36 AM

Provider:

google-native

Address

- https://www.pulumi.com/registry/packages/google-native/api-docs/compute/v1/address/

rich-agency-75207

06/01/2022, 10:37 AM

Defined an

INTENRAL

IP resource. Purpose:

VPC-PEERING

rich-agency-75207

06/01/2022, 10:37 AM

According to docs;

subnetwork

should only be used for

GCE_ENDPOINT

and

DNS_RESOLVER

rich-agency-75207

06/01/2022, 10:38 AM

Copy code

The URL of the subnetwork in which to reserve the address. If an IP address is specified, it must be within the subnetwork's IP range. This field can only be used with INTERNAL type with a GCE_ENDPOINT or DNS_RESOLVER purpose.

rich-agency-75207

06/01/2022, 10:38 AM

I therefore omitted this from the resource definition.

rich-agency-75207

06/01/2022, 10:38 AM

However getting:

Copy code

error: error sending request: googleapi: Error 400: Invalid value for field 'resource.subnetwork': ''. No default subnetwork was found for an address with type INTERNAL.

rich-agency-75207

06/01/2022, 10:38 AM

When I add this; I get (as expected):

Copy code

error: error sending request: googleapi: Error 400: Invalid value for field 'resource.purpose': 'VPC_PEERING'. The type/purpose values are invalid for subnetwork address.

rich-agency-75207

06/01/2022, 10:39 AM

I have an identical resource defined via TF and can confirm that I don't use

subnetwork

rich-agency-75207

06/01/2022, 10:39 AM

I can't convert it from TF to pulumi tho (before anyone asks 😉 )

rich-agency-75207

06/01/2022, 10:40 AM

Should I use legacy GCP instead?

rich-agency-75207

06/01/2022, 10:48 AM

In case relevant: My subnetwork's purpose is set to

PRIVATE_RFC_1918

cold-midnight-33684

06/01/2022, 12:03 PM

hey everybody. how do I import a complete AWS Route53 hosted zone, with all of the records in it?

rich-tiger-43483

06/01/2022, 1:04 PM

Hi there, I submitted a new version of my community provider but do not see that reflected on the registry. Do I manually need to update that?

alert-zebra-27114

06/01/2022, 1:48 PM

Does anybody have a working example of setting up OpenSearch with SAML support ? (Looking at https://docs.aws.amazon.com/opensearch-service/latest/developerguide/saml.html it looks awfully complicated 😞 )

narrow-translator-93508

06/01/2022, 2:31 PM

Hi everybody 👋 I have an issue with the

Kubernetes Operator

and

GCP KMS

, because of a custom

backend

(first), and custom

secrets

provider (second), I have the below error in the logs.

Copy code

Permission 'cloudkms.cryptoKeyVersions.useToDecrypt' denied on resource 'projects/XXX/locations/europe-west6/keyRings/secrets/cryptoKeys/pulumi'

Anyone else faced the same issue?

adamant-father-26302

06/01/2022, 2:32 PM

I'm trying to use the newly released awsx for golang (

go get <http://github.com/pulumi/pulumi-awsx/sdk|github.com/pulumi/pulumi-awsx/sdk>

), but getting below error when using it in code

Copy code

error: no resource plugin 'pulumi-resource-awsx' found in the workspace at version v1.0.0-testplsignore.0 or on your $PATH, install the plugin using `pulumi plugin install resource awsx v1.0.0-testplsignore.0`

any solutions to that? (tried

pulumi plugin install resource awsx v1.0.0-beta.7

but did not help)

famous-needle-81667

06/01/2022, 2:57 PM

Hello everyone, trying to port some changes from Terraform to Pulumi and run into an issue: This is EC2 instance spec in terraform. I have a templated bash script into which I inject loadbalancer DNS name.

Copy code

user_data                   = base64encode(
    templatefile("../templates/bash_script.sh.tftpl", {
        internal_lb_dns_name = aws_lb.aws-internal-load-balancer.dns_name
      }
    )
  )

How to achieve similar results with pulumi? If it was not a templated file it would be easy, namely:

Copy code

UserData:            pulumi.StringPtr(base64.StdEncoding.EncodeToString(bashScriptContent))

However, I need to inject some variables into that script that will be known once some resources got created. Any help would be appreciated, this is a part of my Master's Degree thesis and it would be a shame that this cannot be solved in Pulumi 😄 //EDIT, I'm writing in Golang