this is driving me crazy

Hi folks, I have a

gcp.secretmanager.Secret

, and I need the

.secret_id

field. I have read that it must be done either by using

apply

or

lifting

. So:

existing_secret = gcp.secretmanager.Secret.get(
    secret_basic.name.apply(lambda name: name),
    secret_basic.secret_id.apply(lambda id: id))

But I keep on having:

TypeError: Expected resource name to be a string

What am I doing wrong ?

I want to access environment variables from my config as follows:

const config = new pulumi.Config("environment");

const var1 = config.require("VAR_NAME");
const var2 = config.require("ANOTHER_VAR_NAME");


// This works

config:
  environment:VAR_NAME: "my value"
  environment:ANOTHER_VAR_NAME: "another value"

----------------------
// This does not work

config:
  environment:
    VAR_NAME: "my value"
    ANOTHER_VAR_NAME: "another value"

It feels redundant to list the

environment:

prefix on every line. Am I missing something obvious about YAML? Why doesn't this work?

hi, question anyone knows how to get stack information in go using pulumi

i’m new into this

hi, is it possible to control the number of characters for auto naming of resource physical name ?

hi all, just enabling point in time recovery in a dynamodb table and noticed that the typescript documentation seems incorrect, am i wrong?

👋 Is there a documentation that lists all the modules for Azure, as mentioned in this doc (https://www.pulumi.com/docs/guides/adopting/import/) for the

import

command?

hi everyone is, there a way to ignore warnings on running pulumi commands like pulumi up and pulumi preview?

Hi, I just recreated my deploiement worker and now deploiement failed with following issue after docker images been created :

pulumi_docker.docker.ResourceError: No digest available for image xxx:yy

Any idea why ? before update i had 0 issue. I use python

I am trying to implement Crossguard here, my use case is to block any resource deletion or IAM rules changes. Is there a way to allow human review on the Pulumi plan result and decide approve or reject? From the examples given in the website, it seems that the only way to get rid of the error is to remove the code changes completely

Is there a Pulumi certification?

Suppose if I don't subscribe to Pulumi Business Critical plan, does it mean the policy check will be done locally for which the

--policy-pack <path-to-policy-pack-directory>

has to be supplied in the pulumi up command? In this case, seems like anyone can just alter the policies in the directory and then get their changes applied? Secondly, it seems that the Github Actions for Pulumi doesn't support policy-pack option yet, which means the policy won't be able to be enforced if the workflow is executed via Github Actions?

Hey There is a tf2pulumi for converting terraform code to pulumi, not sure how should i convert terraform code that is based on custom modules instead of standard resource declarations? do i need to convert each module manually

I’m curious about continuous delivery and how to deploy / apply infrastructure changes safely and effectively. Let’s consider a Pulumi project that creates infrastructure for an application. It will be deployed to 20+ environments (qa, staging, training, production). Option 1 Deploy this Pulumi project in the same deployment process / pipeline as the application. This connects the Pulumi program version with the application version and environment. Currently we use CircleCI to deploy the application and can put manual approval steps in so the infrastructure changes can be reviewed before deploying the infrastructure changes. However, the preview of the infrastructure changes is hidden inside CircleCI logs or we have to navigate to the Pulumi web UI to see the changes. Neither is convenient. How can we make the infrastructure changes more visible during the deploy process? I’m open to changing tools, process, etc. Option 2 Deploy using a git branch per Pulumi stack. The preview of the infrastructure changes can be added to the GitHub pull request with the Pulumi GitHub App. In this approach, it feels like the Pulumi program might change from one git branch to another: might be convenient to add a custom infrastructure change to “just this one” stack / environment. Or people forget which git branch they are on. In this case, what options are available to reduce Pulumi program drift between git branches / stacks / environments?

hi there! has anyone noticed that the github ActionsSecret provider doesn't update the value in GitHub, it only creates?

Is this something Pulumi could improve upon? https://www.bejarano.io/terraform-stateless/

Anyone know any tricks to get Pulumi to not eat the comments in my yml config? Whenever we have to run anything locally we have to be careful not to commit the changes it makes to the config, lest we lose a bit of our documentation

Anyone knows how to unsecret values of stack.outputs()? It seems pulumi.unsecret is used for config values. Thanks:)

Hi, I'm trying to keep a List of a CustomResource descendent in a class to be used after to set DependsOn for other objects creation I need to pass the name of the ressource as a Output<string> and return the object from the list corresponding. I'm stuck because I always get null. Or if I use apply I get an Output<ProtectionContainer> which cannot be used for the DependsOn Any help welcomed :) Thank you

public class Sample : ComponentResource
{
	private List<Pulumi.AzureNative.RecoveryServices.ProtectionContainer> protectionContainers;
	
	public Sample(ResourceName resourceName, ComponentResourceOptions? options = null) : base(resourceName.Type, resourceName.Name, options)
	{
		this.protectionContainers = new List<Pulumi.AzureNative.RecoveryServices.ProtectionContainer>();        
	}
	
	public Create(Output<string> name)
	{
		
        var protectionContainer = new RecoveryServices.ProtectionContainer("fooName", new RecoveryServices.ProtectionContainerArgs
        {            
            ContainerName = name,
            FabricName = "Azure",
            Properties = new Pulumi.AzureNative.RecoveryServices.Inputs.AzureWorkloadContainerArgs
            {
                [...]
            },
            ResourceGroupName = this.args.ResourceGroup,
            VaultName = this.recoveryServicesVault.Name.Apply(t => t)
        }
		this.protectionContainers.Add(protectionContainer);
	}
	
	public WithBackupFileShare(Output<string> protectedcontainername)
	{
		var protectionContainer = GetProtectionContainer(protectionContainerName); //always gets null
		var _ = new RecoveryServices.ProtectedItem(args.Name, new RecoveryServices.ProtectedItemArgs
        {
            ContainerName = protectionContainerName,
            [...]
        }, 
        new CustomResourceOptions { DependsOn = {
			protectionContainer  //need a Resource descendent here thus why I need a RecoveryServices.ProtectionContainer
			}, Parent = protectionContainer });
	}
	
	public RecoveryServices.ProtectionContainer? GetProtectionContainer(Output<string> containerName)
    {
		//how to get back the RecoveryServices.ProtectionContainer from this.protectionContainers?
		//when using a for each I have to use item.Name.Apply to compare the name and this returns an Output<> not a RecoveryServices.ProtectionContainer
		//i tried to set a local variable from within the apply but it does not work. the variable stays as null
		RecoveryServices.ProtectionContainer? protectionContainer = null;
		foreach (var item in this.protectionContainers)
        {
			var test = Output.Tuple<string,string,RecoveryServices.ProtectionContainer>(item.Name, containerName,item).Apply(t =>
             {             
                if (t.Item1 == t.Item2) {
                    protectionContainer = t.Item3; //does not work protectionContainer stays null
                    return t.Item3; //
                    }
                else{
                    return null;
                }
            });
			protectionContainer = test; //does not work because var is of type Output<RecoveryServices.ProtectionContainer>
		}
		return protectionContainer; //returns null
	}
}

Hi All. I have a few encrypted Key value secrets in my stack config. I am still new to pulumi (and focus on the

YAML

interface) - I plan to configure some variables, in my

main.yaml

file, to consume these Key values then reference later by other resources definitions. Question: Will the transient variable ingest the encrypted value or will the call decrypt the value first?

Hi all!

We are planning to use Pulumi, and have some questions regarding deployments to China (on the local Azure version hosted by 21vianet. So the question is if there is a guidance on how to deploy resources to China with Pulumi (our company is located in Europe). • Has anyone experience with deployments to China? • Is it better to run the agent Europe and send the requests to the cloud provider through the Chinese firewall? • Is it supported to run the agent in China (but it will need access to the Pulumi Service, this time originating from within China to Pulumi)? • Is it possible to use Pulumi locally within China without any access to the Pulumi Service (given that we would host the state files ourselves)? Thanks!

Hi everybody. Does anyone know if it’s possible to work with Pulumi Secrets in the “GitOps” way? Ideal scenario for us would be: 1. Encrypt data beforehand using any of supported providers. 2. Put the encrypted value to the

Pulumi.<stack>.yaml

With regular config values (unencrypted) this works well. Motivation: remove a requirement to set up Pulumi tool locally just for secrets management and rely on Git/CD workflow. I’ve tried to encrypt data with Google KMS, but it gives me a binary output. So I can’t put this output to

Pulumi.<stack>.yaml

Hello everybody We are developing a custom dynamic provider for database management (we want to create groups, grant permissions to them and etc). We did development in python (we’ve created dynamic resource providers, each for each type) and now we are facing an issue that we can not limit number of connection to DB. We have 2 questions: 1. Do we understand correctly that for each instance of resource isolated env. with Dynamic Resource provider is created and that’s why we can not use locks? 2. Is it any way (as we understand -p 1 controls only create process, but read and other operations will not be limited) to limit parallel usage of all operations?

Hi everyone! Is it possible to used Pulumi to create PostgreSQL “publication”?

Is there a shareable dynamic resource provider? The article here (https://www.pulumi.com/docs/intro/concepts/resources/dynamic-providers/) mentions a third kind of a shareable resource provider, but I can't find information on how to build one. "The third type of resource provider is shareable."

Hi all ! I have a Pulumi stack which integrates with another service (ArgoCD) and creates some additional resources based on the resources deployed in the Pulumi stack. (Load Balancers and Security Groups). Is there a way for me to track the Pulumi CLI command during the course of my program and delete those additional resources?

Hello everyone! I was wondering if there's a way to lookup an ARN / URN in a list of stacks? Would be really lovely if there'd be a way to do it through the pulumi console also! 🙂