pulumi-community #general

icy-jordan-58549

06/08/2022, 11:29 AM

can somebody from enterprise support help me, I am getting this message

Copy code

Per our records, you are not a named contact for your organization. We will respond to your ticket as soon as possible, but it will not be tracked per the response time SLO in your organization's support plan.

which is wrong 🙂 and I was always be a main point of contact for our org

sticky-airline-40485

06/08/2022, 1:47 PM

Hi everyone, I set my

aws:profile

and now I keep getting

unable to validate AWS AccessKeyID and/or SecretAccessKey

. I unset the

aws:profile

but I still keep getting this error. Everything was working fine before I did this and now I'm stuck 😞. Can anyone help me understand why issue won't go away?

mysterious-beard-98670

06/08/2022, 2:19 PM

using the s3 provider is taking an incredibly long time for simple stack operations such as

pulumi stack ls

time

output:

Copy code

pulumi stack ls  1.57s user 0.41s system 1% cpu 1:39.90 total

there are ~20 stacks in the bucket, which I can't imagine should take this ls command over a minute to find im running pulumi v3.33.2 is there anything i can do to supply more information on this / is this a known issue with an existing workaround?

many-dress-54535

06/08/2022, 3:00 PM

Hi All, I am having an issue with creating a pulumi_azure_native.sql.server (python) and having this error

status code 400, {"error":{"code":"InvalidApiVersionParameter","message":"The api-version '2020-11-01-preview' is invalid. The supported versions are "..<other api versions>.."

do I need to specify the version explicitly for that to work?

many-secretary-62073

06/08/2022, 7:45 PM

I'm stuck with a "Duplicate resource URN" error, even when the resource URN is new and unique. I can change the resource name randomly and cannot escape the error. How can I reset whatever is causing this?

kind-jelly-61624

06/08/2022, 10:56 PM

cross-posting for vis

👀 1

broad-translator-40115

06/09/2022, 6:37 AM

Hi, everyone 👋 We're using Pulumi to set up a new project (and we absolutely love it). Though, we hit an issue that's giving us a bit of gray hair (something that was easily achieved using the Serverless framework). We have a lambda that is very read-extensive, thus, "caching" some data in-memory between invocations is what we're trying to achieve. Simplified example:

Copy code

let cachedValue = '';

exports.handler = async () => {
  if (cachedValue) {
    return cachedValue;
  }

  const newValue = await getSomeNewValue();
  cachedValue = newValue;
  return newValue;
}

But this doesn't seem to work with Pulumi 😬 We have a callback defined like:

Copy code

let cachedValue = '';

export const handler: aws.lambda.Callback<Event, unknown> = async (event, context, callback) => {
  // ...
}

And we're using it as an AppSync resolver:

Copy code

const cbFunction = new aws.lambda.CallbackFunction('cb', {
  runtime: 'nodejs14.x',
  callback: handler,
}

const dataSource = new aws.appsync.DataSource('some-data-source', {
  ...
  lambdaConfig: {
    functionArn: cbFunction.arn,
  },
});

But we cannot make this mechanism work. The

cachedValue

is refreshed on each invocation. I know Pulumi does function serialization, which is a concept I'm still trying to wrap my head around. Any quick tips on how to access the execution environment in a lambda like this? (Also, yes, I'm aware it's not a reliable way to do caching, lambdas are supposed to be stateless, data is not safe, etc etc). We do have a use case for this, though. Any help would be appreciated 😁

crooked-cat-6983

06/09/2022, 12:29 PM

Hey guys, I'm using pulumi to create AWS resources, in this scenario I'm trying to create a role and policy and keep getting this error:

Copy code

aws:iam:Policy (cloud-discovery):
    error: unable to validate AWS AccessKeyID and/or SecretAccessKey - see <https://pulumi.io/install/aws.html> for details on configuration

Exited with code exit status 255

I am able to use these credentials to create resources manually so I don't really understand what's the issue with creating them with pulumi. I'm also not able to find any info on this error online. my code:

Copy code

const podRolePolicy = new aws.iam.Policy(appName, {
	name: appName,
	policy: {
		Version: '2012-10-17',
		Statement: [
			{
				Effect: 'Allow',
				Action: 'sts:AssumeRole',
				Resource: '*', 
			},
			{
				Effect: 'Allow',
				Resource: '*',
				Action: 'secretsmanager:GetSecretValue',
				Condition: {
					StringEquals: {
						'aws:ResourceTag/APPLICATION': 'APP',
					},
				},
			},
		],
	},
})

If some can supply some info on this error it would be very much appriciated.

quick-wolf-8403

06/09/2022, 12:47 PM

I've got my stack into a state I can't seem to recover from by deleting a service manually. Pulumi wants to remove an IamPolicy for the missing service. Refresh completes but does not resolve the problem. Destroy or Up error out trying to delete the IamPolicy for the missing service--that fails, saying the service doesn't exist.

jolly-church-88521

06/09/2022, 2:25 PM

When my project has multiple VPC’s, shall I use stack per VPC or it’s better to create all VPC’s in one stack?

narrow-translator-93508

06/09/2022, 4:40 PM

Hello guys, I have an issue with the

Pulumi K8S operator

, especially this error message

No permalink found

, I'm using a GCS backend FYI

narrow-translator-93508

06/09/2022, 4:40 PM

Copy code

{
    "level": "error",
    "ts": "2022-06-09T16:33:51.377Z",
    "logger": "controller_stack",
    "msg": "No permalink found.",
    "Request.Namespace": "default",
    "Request.Name": "hello-stack-6c5ede73",
    "Namespace": "default",
    "error": "failed to get permalink",
    "errorVerbose": "failed to get permalink\<http://ngithub.com/pulumi/pulumi/sdk/v3/go/auto.init\n\t/home/runner/go/pkg/mod/github.com/pulumi/pulumi/sdk/v3@v3.30.0/go/auto/stack.go:694\nruntime.doInit\n\t/opt/hostedtoolcache/go/1.17.8/x64/src/runtime/proc.go:6498\nruntime.doInit\n\t/opt/hostedtoolcache/go/1.17.8/x64/src/runtime/proc.go:6475\nruntime.doInit\n\t/opt/hostedtoolcache/go/1.17.8/x64/src/runtime/proc.go:6475\nruntime.doInit\n\t/opt/hostedtoolcache/go/1.17.8/x64/src/runtime/proc.go:6475\nruntime.doInit\n\t/opt/hostedtoolcache/go/1.17.8/x64/src/runtime/proc.go:6475\nruntime.main\n\t/opt/hostedtoolcache/go/1.17.8/x64/src/runtime/proc.go:238\nruntime.goexit\n\t/opt/hostedtoolcache/go/1.17.8/x64/src/runtime/asm_amd64.s:1581|ngithub.com/pulumi/pulumi/sdk/v3/go/auto.init\n\t/home/runner/go/pkg/mod/github.com/pulumi/pulumi/sdk/v3@v3.30.0/go/auto/stack.go:694\nruntime.doInit\n\t/opt/hostedtoolcache/go/1.17.8/x64/src/runtime/proc.go:6498\nruntime.doInit\n\t/opt/hostedtoolcache/go/1.17.8/x64/src/runtime/proc.go:6475\nruntime.doInit\n\t/opt/hostedtoolcache/go/1.17.8/x64/src/runtime/proc.go:6475\nruntime.doInit\n\t/opt/hostedtoolcache/go/1.17.8/x64/src/runtime/proc.go:6475\nruntime.doInit\n\t/opt/hostedtoolcache/go/1.17.8/x64/src/runtime/proc.go:6475\nruntime.main\n\t/opt/hostedtoolcache/go/1.17.8/x64/src/runtime/proc.go:238\nruntime.goexit\n\t/opt/hostedtoolcache/go/1.17.8/x64/src/runtime/asm_amd64.s:1581>",
    "stacktrace": "<http://github.com/pulumi/pulumi-kubernetes-operator/pkg/controller/stack.(*ReconcileStack).Reconcile\n\t/home/runner/work/pulumi-kubernetes-operator/pulumi-kubernetes-operator/pkg/controller/stack/stack_controller.go:319\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.9.0/pkg/internal/controller/controller.go:298\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.9.0/pkg/internal/controller/controller.go:253\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.9.0/pkg/internal/controller/controller.go:214|github.com/pulumi/pulumi-kubernetes-operator/pkg/controller/stack.(*ReconcileStack).Reconcile\n\t/home/runner/work/pulumi-kubernetes-operator/pulumi-kubernetes-operator/pkg/controller/stack/stack_controller.go:319\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.9.0/pkg/internal/controller/controller.go:298\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.9.0/pkg/internal/controller/controller.go:253\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.9.0/pkg/internal/controller/controller.go:214>"
}

flaky-area-92692

06/09/2022, 5:49 PM

Anybody knows who to talk to to bump the priority of an issue? 🙂 https://github.com/pulumi/pulumi-google-native/issues/203 this one is really impeding us and no news since the 12th of Jan….

swift-battery-95026

06/09/2022, 6:12 PM

Hi! Trying to write a dynamic provider in Typescript in a Rush monorepo (using PNPM as the package manager), hitting

Cannot find module '.pnpm/...'

errors. Seems like this isn't documented but is a known issue (found here in Pulumi Slack and here in PNPM Discord). Anyone have any experience here / workarounds? Or can I just not use anything involving function serialization in my monorepo?

billowy-oxygen-65892

06/09/2022, 10:28 PM

Hello, i am trying to create a new project using pulumi but for some reason it is not picking up my aws credentials. When deploying an existing project it reads creds fine. Any ideas?

billowy-oxygen-65892

06/09/2022, 10:28 PM

error: unable to validate AWS AccessKeyID and/or SecretAccessKey

blue-tailor-71836

06/10/2022, 3:50 AM

Hi, we are extracting the provider information using the stackReference, but when i disabled the default provider, StackReference also required the provider information to pass on. What is the reason to pass the provider itself in stackReference and what would be the way to pass the provider information into StackReference itself?

Copy code

// create provider
const gkeStack = new pulumi.StackReference(`{stack-name}/${pulumi.getStack()}`);
const provider = new k8s.Provider("k8s", { kubeconfig: gkeStack.getOutput("kubeconfig"), namespace: "{namespace}" });

Default provider for 'pulumi:pulumi:StackReference' disabled. 'pulumi:pulumi:StackReference' must use an explicit provider

brief-carpenter-29515

06/10/2022, 7:23 AM

👋 Hi everyone! I try to make a database in gcp, but I always have a timeout and then I always have a stale state. I can't understand what I'm supposed to do, Am I missing something?

Copy code

error: post-step event returned an error: failed to save snapshot: renewing lease: [403] The provided update token has expired.

all the troubleshooting tells me to do is delete the resource and presumably try again.... But the database call takes too long and the token expires?

bulky-agent-73210

06/10/2022, 7:27 AM

Hi, I’m using the inline Golang SDK. When running stack.Up(…), is there a way to detect if there were any changes in the resources after command is finished?

dry-salesmen-32588

06/10/2022, 10:54 AM

Hi, using pulumi (and .net) and resource resolves has been quite a pain for us, - currently we are now seeing issues in code that hasn't been changed in ~ 1½ years, but all of a sudden some resources are not resolved properly, even within output.all output.tuple. we've even attempted to provoke it by slowing down the code with random sleeps, console outputs etc. and does indeed seem to work. so theres some sort of "race-condition" regarding resource resolving thats not working correctly. would love some feedback on the issue.

little-apartment-30401

06/10/2022, 11:01 AM

“i wonder where the name pulumi came from” is not a question i should have asked dall-e, sorry.

narrow-translator-93508

06/10/2022, 5:33 PM

Hi, is there an example out there of combined usage of

Github Actions

[CI] +

Pulumi Operator

[CD]? How do I tell the

pulumi k8s operator

which revision to pull from

docker registry

billions-hospital-77217

06/10/2022, 7:15 PM

Did the aws-csharp code generation change? The documentation doesn't say anything about this, but I'm getting a totally different project now. I'm no longer getting any MyStack.cs file, and the Program.cs file is:

Copy code

using Pulumi;
using Pulumi.Aws.S3;
using System.Collections.Generic;

await Deployment.RunAsync(() =>
{
   // Create an AWS resource (S3 Bucket)
   var bucket = new Bucket("my-bucket");
   
   // Export the name of the bucket
   return new Dictionary<string, object?>
   {
      ["bucketName"] = bucket.Id
   };
});

Where before it was:

Copy code

using System.Threading.Tasks;
using Pulumi;

class Program
{
    static Task<int> Main() => Deployment.RunAsync<MyStack>();
}

proud-cricket-86351

06/10/2022, 7:25 PM

Is there a reason why pulumi didn’t promote itself at Platform Con? since Pulumi can be used for an internal developer platform through the automation API?

blue-leather-96987

06/10/2022, 8:27 PM

Just curious, I noticed that the "native" plugins for AWS and GCP are missing an "Import" section. Does that mean we can't import existing resources into the native libraries and we should be using the classic instead?

breezy-laptop-42679

06/11/2022, 2:40 PM

Can anyone please share a sample reusing github workflow file for pulumi preview?

agreeable-notebook-99278

06/12/2022, 1:00 AM

Hi all — Is it possible to simplify this or do I have to always list all properties on

staticSite

to get to them? I.e. first I tried

.all([staticSite]).apply([{id, name, defaultHostname}])

-> error

example_ts.ts

able-dentist-35553

06/13/2022, 4:04 AM

where is the best place to ask about support?

famous-leather-72830

06/13/2022, 10:01 AM

Hey everyone. Is it currently possible to properly rehydrate resources via

StackReference

? I am following the micro-service methodology, and keeping my eks cluster (created with

@pulumi/eks

in a separate project from the apps that will run on it. My goal is to make each project create their own AWS Managed Node Group, however it requires to provide a direct

eks.Cluster

object, and upon viewing the logic of creation,

aws.eks.Cluster.get

doesn't provide sufficient properties. Any help would be appreciated, as it's a massive blocker for me.

gentle-camera-53119

06/13/2022, 1:43 PM

Hi Team, I am trying to create Azure Service principles in C# but I am getting this error

error CS0234: The type or namespace name 'AzureAD' does not exist in the namespace 'Pulumi' (are you missing an assembly reference?) [/Users/XXXXX/XXX/pulumi/cazure/cazure.csproj