https://pulumi.com logo
Join the conversationJoin Slack
Channels
announcements
automation-api
aws
azure
blog-posts
built-with-pulumi
cloudengineering
cloudengineering-support
content-share
contribex
contribute
docs
dotnet
finops
general
getting-started
gitlab
golang
google-cloud
hackathon-03-19-2020
hacktoberfest
install
java
jobs
kubernetes
learn-pulumi-events
linen
localstack
multi-language-hackathon
office-hours
oracle-cloud-infrastructure
plugin-framework
pulumi-cdk
pulumi-crosscode
pulumi-deployments
pulumi-kubernetes-operator
pulumi-service
pulumiverse
python
registry
status
testingtesting123
testingtesting321
typescript
welcome
workshops
yaml
Powered by Linen
general
  • c

    curved-helicopter-46451

    08/05/2022, 7:58 PM
    Anybody know if there's a way to ignore changes to a provider? _*creating replacement* [diff: ~provider]_; I tried
    ignore_changes=['provider', 'opts', 'opts.provider', 'opts:provider', 'providers']
    , on the resource options, but I'm assuming it doesn't work on itself?
    s
    • 2
    • 2
  • m

    miniature-leather-70472

    08/05/2022, 9:50 PM
    Is there anyway to store additional data in the state file outside of creating a resource? To give more detail, I've got some plain C# code that calls a rest api as part of a Pulumi project ( there's no Pulumi resource for it) this works fine, but currently it gets called every time I run Pulumi up. Ideally I'd like to only run this on the first run the deployment, so if I could store the value in the state file and check for that existing this might deal with that.
    s
    • 2
    • 2
  • v

    victorious-dusk-75271

    08/05/2022, 11:43 PM
    how do you console.log stuff in typescript?
    s
    l
    • 3
    • 2
  • v

    victorious-dusk-75271

    08/06/2022, 3:00 AM
    aws:ec2:Vpc       rds-vpc-vpc                  deleting...  completing deletion from previous update
    How do i remove this task? that resource has dependency but its still trying to delete it
    v
    • 2
    • 3
  • a

    acoustic-apple-75209

    08/06/2022, 9:02 AM
    đź‘‹ Hi everyone!
  • b

    brave-pharmacist-67045

    08/06/2022, 10:54 AM
    Hey đź‘‹ my first from examples Pulumi deployment: https://shirts.whatnick.org/
    s
    • 2
    • 9
  • f

    future-dawn-71635

    08/06/2022, 7:11 PM
    Pulumi makes so much more sense than terraform ❤️ Thank you
    🥰 2
    👆 2
  • r

    rich-businessperson-35436

    08/07/2022, 12:37 PM
    Are there any --live-dangerously kind of options I can use during dev to skip remote checks and speed up planning?
    v
    b
    • 3
    • 5
  • b

    billowy-army-68599

    08/07/2022, 3:21 PM
    hey folks! with wellness week behind us, I’ll try catch up on the scroll-back - however please feel free to link to any unanswered queries in this thread and I’ll try get to them
    đź§Š 1
    đź’ś 1
    l
    • 2
    • 3
  • f

    flaky-arm-38472

    08/08/2022, 6:46 AM
    Is there any implication deleting the versioning provider that appears when I show my stack URNS?. Recently I noticed (without intentionally adding it) another aws provider urn with a version on it. So I got 2 providers now, like:
    ├─ pulumi:providers:aws                        default
        │     URN: urn:pulumi:test::my-project::pulumi:providers:aws::default
        └─ pulumi:providers:aws                        default_5_9_2
              URN: urn:pulumi:test::my-project::pulumi:providers:aws::default_5_9_2
    Is that added automatically whenever a resource needs another version of the provider?
    l
    • 2
    • 1
  • a

    ambitious-agent-35343

    08/08/2022, 8:34 AM
    Can we configure private repo's from Github with ArgoCD managed by Pulumi?
    argo_app1 = app.argoproj.v1alpha1.Application(
        app1_name,
        metadata=k8s.meta.v1.ObjectMetaArgs(name=app1_name, namespace=ns.metadata.name),
        spec=app.argoproj.v1alpha1.ApplicationSpecArgs(
            destination=app.argoproj.v1alpha1.ApplicationSpecDestinationArgs(
                namespace=app1_ns.metadata.name,
                server="<https://kubernetes.default.svc>"
            ),
            project="default",
            source=app.argoproj.v1alpha1.ApplicationSpecSourceArgs(
                path=app1_name,
                repo_url="<https://github.com/private/repo>",  # Private repo
                target_revision="HEAD",
            ),
            sync_policy=app.argoproj.v1alpha1.ApplicationSpecSyncPolicyArgs(
                automated={}
            )
        ),
        opts=pulumi.ResourceOptions(provider=provider, depends_on=[argo, app1_ns]),
    )
    m
    • 2
    • 7
  • m

    most-mouse-38002

    08/08/2022, 8:55 AM
    Using https://github.com/pulumi/pulumi-tf-provider-boilerplate to create my provider, it appears to me that it all just boils down to luck whether or not this pipeline actually runs. Publishing succeeds for one language, but fails for another.
    Run git update-index -q --refresh
    error: working tree is not clean, aborting!
    HEAD detached at v0.0.5
    Changes not staged for commit:
      (use "git add <file>..." to update what will be committed)
      (use "git restore <file>..." to discard changes in working directory)
    	modified:   sdk/python/pulumi_flux/README.md
  • n

    narrow-cricket-15525

    08/08/2022, 9:03 AM
    Hello good morning, Does anyone knows how it is possible to use azure mysql flex server with pulumi ? I just see it in azure classic but we use azure native because the docs of pulumi recommend to use azure native. Feels strange. greetings #azure
  • l

    lively-table-10226

    08/08/2022, 10:08 AM
    Hi! I have created dual region bucket with location as
    US-EAST1+US-WEST1
    , and i tried to reapply the code once again. Ideally it should not do anything. But it says location changed from
    US
    to
    US-EAST1+US-WEST1
    and trying to delete the bucket and recreate it. Can someone help me to resolve this.
    • 1
    • 1
  • b

    big-psychiatrist-43588

    08/08/2022, 11:21 AM
    Hello Everyone I created array with key value pair
    let testdata: { [key: string]: string } = {};
            testdata["namespace"] = "pulumi";
    assign it to configMap
    new k8s.core.v1.ConfigMap("testingConfigMap", {
                metadata: {
                    labels: appLabels,
                    name: "client-default",
                    namespace: this.namespace
                },
                data: { "default.conf": testdata.toString() }
            }, { provider: this.provider });
    when i access the configMap, I see the data is coming in the form of binary not as a plain text.
    kubectl describe cm -n thx client-default
    
    Name:         client-default
    Namespace:    pulumi
    Labels:       app=testingConfigMap
                  <http://app.kubernetes.io/managed-by=pulumi|app.kubernetes.io/managed-by=pulumi>
    
    Data
    ====
    default.conf:
    ----
    [object Object]
    
    BinaryData
    ====
    
    Events:  <none>
    Can someone guide me here?
  • m

    many-spring-73557

    08/08/2022, 5:00 PM
    How do I remove a resource from pulumi config without triggering a change in AWS? Basically I need to “untrack” a resource. We have an S3 BucketNotification in our pulumi. If I delete it and
    pulumi up
    , then pulumi will delete that value from AWS. But I need the notification value to stick around, and have pulumi forget it was ever managing it.
    b
    e
    • 3
    • 3
  • b

    big-potato-91793

    08/08/2022, 6:55 PM
    Does someone know what can cause this?
    pulumi:providers:aws aws.eu-west-1.kafka  
        pulumi:pulumi:Stack security-groups-prod running error: an unhandled error occurred: Program exited with non-zero exit code: -1
        pulumi:pulumi:Stack security-groups-prod **failed** 1 error
     
    Diagnostics:
      pulumi:pulumi:Stack (security-groups-prod):
        error: an unhandled error occurred: Program exited with non-zero exit code: -1
    I try multiple things. I remove my added changes and fix everything with the state to re-get that error again…
    e
    • 2
    • 3
  • s

    stocky-petabyte-29883

    08/09/2022, 8:50 AM
    Hey I am having issues with running pulumi remote command with environment variables, I tried a couple of things such as adding placeholder values in bashrc and setting AcceptEnv in another remote command that runs before the main one, still no joy What am I missing here?
    const setEnvVarsCommand = new remote.Command("set-env-vars", {connection,
                        create: pulumi.interpolate`echo "export MASTER_USER='"test"'\nexport MASTER_PASSWORD='test'\nexport DB_USERNAME='test'\nexport DB_PASSWORD='test'\nexport DB_NAME='test'\nexport DB_HOST='test'" >> ~/.bashrc && source ~/.bashrc && echo "AcceptEnv MASTER_USER MASTER_PASSWORD DB_USERNAME DB_PASSWORD DB_NAME DB_HOST" | sudo tee -a /etc/ssh/sshd_config && sudo service sshd restart`,
                        delete: `head -n -6 ~/.bashrc > tmp_file && mv tmp_file ~/.bashrc && head -n -1 ~/.bashrc > tmp_sshd && sudo mv tmp_sshd /etc/ssh/sshd_config`
                    }, { dependsOn: remoteFile });
    
     new remote.Command("mysql-setup-execute", {connection,
                        create: pulumi.interpolate`chmod 777 ./mysql-setup.sh; ./mysql-setup.sh`,
                        delete: "rm mysql-setup.sh",
                        environment: {
                            MASTER_USER: masterUsername,
                            MASTER_PASSWORD: masterPassword!,
                            DB_USERNAME: dbUsername,
                            DB_PASSWORD: dbUserPassword,
                            DB_NAME: dbName,
                            DB_HOST: dbHost
                        }
                    }, { dependsOn: setEnvVarsCommand });
    I am dumping all the env variables available in the mysql-setup.sh file and the environment variables have the place holder value test which I setup in the first remote command, I am not able to override it. I went with AcceptEnv as people recommended it in the issue https://github.com/pulumi/pulumi-command/issues/48 I am stuck here and need some help
  • w

    wet-fall-57893

    08/09/2022, 11:15 AM
    Is it possible to destroy resources by provider? e.g I have resources managed by k8s/aws in the same stack and I want to delete resources under aws only.
    e
    l
    • 3
    • 4
  • p

    purple-state-87112

    08/09/2022, 11:25 AM
    Good afternoon, please advise. I created a Data Lake storage account in Azure, all the settings were successfully configured through Pulumi, but I can’t find how to change the following parameters (“Container soft delete” and “soft delete”), maybe someone came across? I use Azure Classic provider
  • v

    victorious-dusk-75271

    08/09/2022, 10:41 PM
    how do you create validation for custom component?
    l
    • 2
    • 3
  • v

    victorious-dusk-75271

    08/09/2022, 10:42 PM
    typescript
  • r

    ripe-ram-38792

    08/10/2022, 2:29 AM
    Hi Team, Im really trying to figure out, if this is actually possible in pulumi. Any sort of help would be highly appreciated
    b
    • 2
    • 1
  • r

    ripe-ram-38792

    08/10/2022, 2:41 AM
    can it be possible that things which are possible in Microsoft ARM, but they are still missing or under development with PULUMI..
    f
    b
    n
    • 4
    • 5
  • d

    dry-motorcycle-32519

    08/10/2022, 7:56 AM
    Good morning, Can I Mix azure native and classic in one Stack?
    e
    • 2
    • 1
  • f

    fierce-ability-58936

    08/10/2022, 9:57 AM
    Should
    ignore_changes
    Resource option take effect when you do
    pulumi up --replace 'urn:xxx'
    ? My thinking is it shouldn't. Or this is by design?
    e
    • 2
    • 5
  • w

    wet-fall-57893

    08/10/2022, 11:37 AM
    is it possible to output preview in json format using pulumi automation api?
    r
    b
    • 3
    • 4
  • b

    big-psychiatrist-43588

    08/10/2022, 12:35 PM
    Is there anyway to manage keystores in pulumi with secrets
    b
    • 2
    • 3
  • f

    few-yacht-11623

    08/10/2022, 4:45 PM
    does anyone have a pattern for publishing pulumi code as a library to be invoked elsewhere? We have all of our Pulumi code in a single repo, and would like to use it to create stacks on-the-fly for temporary environments on Pull Requests in another repo. Thinking it would be nice to be able to
    npx pr-environment-stack --stack-name pr-env-####
    to be able to keep all the pulumi code in one place while calling it elsewhere
    b
    • 2
    • 2
  • b

    bored-vase-40478

    08/10/2022, 7:03 PM
    Hi guys, I’m having issues to publish pulumi policies (
    Crossguards
    ) using an organization token, i received the following error message after the
    pulumi policy publish <org>
    command execution:
    error: Publish policy pack failed: [403] You do not have permission to perform this operation.
    Any idea if an organization token can publish policies?
    b
    a
    • 3
    • 3
Powered by Linen
Title
b

bored-vase-40478

08/10/2022, 7:03 PM
Hi guys, I’m having issues to publish pulumi policies (
Crossguards
) using an organization token, i received the following error message after the
pulumi policy publish <org>
command execution:
error: Publish policy pack failed: [403] You do not have permission to perform this operation.
Any idea if an organization token can publish policies?
b

billowy-army-68599

08/10/2022, 7:30 PM
I’m checking for you, but this may be a bug.
a

acoustic-lock-52416

08/10/2022, 8:12 PM
Hi @bored-vase-40478! Thanks for calling this to our attention. The reason this does not work at present is that organization tokens are granted no org admin level privileges at this time, and publishing policy packs requires that you are an org administrator (links here for anyone else that comes across this Slack thread and is curious). This calls into question a clear use case for automation to have sufficient privileges to make changes to PaC, so we will evaluate if permissions changes need to be made to organization tokens to enable this. As this is a relatively new feature, we welcome the opportunity to make tweaks to it as the needs of our users become more clear, so once again thanks for your input on this!
âś… 1
b

bored-vase-40478

08/10/2022, 8:38 PM
thanks Pulumi team @acoustic-lock-52416 @billowy-army-68599! i will stay tune to any update about this topic. Also, as a feedback related to the crossguard feature, it would be nice if you can provide an easy way (thinking in automation processes cicd) to associate policy packs to policy groups and pulumi stacks to policy groups. I’m handling these scenarios with some config files that the cicd pipeline use to create the associations. as a proposal: - a
Pulumi.yaml
file could have a property option to associate a pulumi project with multiple policy groups. - a
PulumiPolicy.yaml
could have a parameter to associate that policy pack to multiple policy groups.
:thank-you: 1
👍 1
View count: 3