Hi all, I am trying to create a lambda within a vpc but it seems like the vpc configuration is not applied. The lambda was already created once by pulumi and the only change I did was to add

vpcConfig: {
      subnetIds: lambdaVpcConfig.apply(lvc => lvc.lambdaVpcPrivateSubnetIds),
      securityGroupIds: [
        lambdaVpcConfig.apply(lvc => lvc.lambdaSecurityGroupId),
      ],
    },

Which

lambdaVpcConfig

is an output from a stack ref. When I run

pulumi up

, the changes appear in the diff but when it actually applies, nothing changes in regards to the vpc of the lambda (it's still on no vpc). Any idea what might be wrong ?

i am getting error pulumi new https://github.com/pulumi/apps/eks where is the updated script to deploy kubernetes to AWS and run it with pulumi up

Is it possible to have different backends per stack?. Lets say we store our state in S3 but want to keep dev/prd in different buckets. Can we add :

backend:
  url: <s3://xxxx>

To each stack settings file?.

Hello everyone, my current DEV stack resources is all in AWS region ap-northeast-1, and adpoting by pulumi import cli But I found that, a single resource, the AWS ACM was exist with different REGION in us-east-1, looks like is reference by AWS cloudfront does pulumi stack support multipie region, my current stack config as below

# Pulumi.dev.yaml
config:
  aws:region: ap-northeast-1

How can I import the AWS ACM from us-east-1 ?

General question around the storage of secrets - I see secure values in config encoded as: v1:&lt;something&gt;:<something more>, and I'd like to decode one of these myself using the same azure key vault key to do so - what would be the process here? (this is for unit testing). My ideal situation would be that I can feed this string into azure key vault and decrypt; but I don't know the encryption settings - which algo, and do I need to split this string up and/or base64 decode it?

How do I install a previous version of pulumi on a mac. I did a brew upgrade to 3.38.0. It is not working correctly

Hey girls/guys, sorry for the stupid question but I have trouble to understand what Pulumi documentation means by the ID of a resource and thus how to get an existing AWS resource (say, a AWS DataSource, or a DynamoDB table, whatever) with Pulumi (in my case in Python). Pulumi documentation (https://www.pulumi.com/docs/intro/concepts/resources/get/) says the getter function should be provided the name of the resource (got that), but also the ID. What is the ID of the resource? I tried with the AWS ARN of the resource, but got a Pulumi error. Might be a stupid question but I’m stuck on this one for an hour!

Hey y'all, I'm working on creating a Component Provider so that we can provide some opinionated wrappers to things such as S3 buckets, etc. I see that I have to create a

schema.json

. There was a note on a page somewhere (that I can no longer find) that mentions you can autogenerate this file. With what will end up being ~100 components that we'll end up creating, it feels like this is very error-prone / toil to manage this file by hand. Is it possible to autogenerate this file? Are there any examples?

Seems creating access tokens for my team is gone. Any reason why that would happen? Currently in trial period, but has signed up for a team.

When unit testing, is there a way to not fake out some providers? In particular, I don't want to have to write a replacement for

RandomString.result

.

aContext.log().error("fatal error");

it is existing the programs.. is that way it supposed to work, as logging an error means, log with error color etc.. not to exist the jvm itself Is this a known issue with pulumi API design

Hi guys, digged a bit into the

@pulumi/awsx

code because we're deploying Fargate and need some extra policies configured. Can anybody confirm if the comments here are right and you do in fact need both Lambda and ECS full access for this setup to work?

error: exec plugin: invalid apiVersion "client.authentication.k8s.io/v1alpha1" error: Running program [PID: 14944](unknown) failed with an unhandled exception: io.grpc.StatusRuntimeException: UNAVAILABLE: error reading from server: read tcp 127.0.0.1:58449-&gt;127.0.0.1:58448: use of closed network connection at io.grpc.Status.asRuntimeException(Status.java:535) at io.grpc.stub.ClientCalls$UnaryStreamToFuture.onClose(ClientCalls.java:533) at io.grpc.internal.ClientCallImpl.closeObserver(ClientCallImpl.java:553) at io.grpc.internal.ClientCallImpl.access$300(ClientCallImpl.java:68) at io.grpc.internal.ClientCallImpl$ClientStreamListenerImpl$1StreamClosed.runInternal(ClientCallImpl.java:739) at io.grpc.internal.ClientCallImpl$ClientStreamListenerImpl$1StreamClosed.runInContext(ClientCallImpl.java:718) at io.grpc.internal.ContextRunnable.run(ContextRunnable.java:37) at io.grpc.internal.SerializingExecutor.run(SerializingExecutor.java:123) at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136) at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635) at java.base/java.lang.Thread.run(Thread.java:833) see this error for this java IaC code

private static void stack(final Context aContext) {
final var cluster = new Cluster("eks-cluster");
aContext.export("kubeconfig", cluster.kubeconfig());
   }

any clues why this error, however eks did start when seen from aws console

I'm a complete Pulumi nube from a Terraform background, from what I can tell Pulumi does not support the concept of workspaces, what do folks do that want this type of behaviour when using Pulumi ?

How do you go about referencing stacks when using the s3 backend?

Hi everyone! I want to use Azure or AWS as a backend. I have multiple projects and need to share outputs between these projects. 1. Am I right that output can be shared only if I do not use separate

pulumi login

for each project?

2. For example, if I have 100 uniq stacks per multiple projects, I can accidentally destroy/modify wrong project/stack. Is there any access control/RBAC in place that I can use per project? (I use Azure or AWS as a backend)

Somebody knows if secret configurations are in the roadmap for pulumi policies (crossguard)?

I believe there is a typo with the description of the field here : https://www.pulumi.com/registry/packages/aws/api-docs/dynamodb/table/#tablepointintimerecovery. Thast should not be TTL but PITR

Sorry if this is a silly question. But can i use Pulumi to provision Hasura Cloud?

whats the best/preferred way to deploy to multi region?

Hi

Can someone help me? I'm getting this error when running this code

const d = lib.Network.get("default", "f5cd7f9e-5fb9-44b1-9d97-98019db8db9b");

I have (inadvisedly) copied ~ from one WSL distro to another. All my code bases are now duplicated. Some Pulumi stuff isn't working in the new distro; I'm guessing I need to reinstall something, run

chmod +x

somewhere, or something like that. The current symptom is: when I run

pulumi destroy

, it shows all the actions (deletes) it'll perform, but it never shows the y/n menu - it just hangs. Does anyone know any likely causes of this?

Hi there - Using the automation API, is there any way to know my execution context(up, preview, destroy) within my Program? I am trying to limit when an Output.apply() is executed so that is will only be executed on

up

executions.

I need Pulumi to run with Typescript >= 4.1.0... how can I do this?

specifically, this is because during my script I import some types from graphql, which now requires it