I there a way to delete every entry in a stacks

state

? I'd rather not delete an entire stack as I have variables and secrets I wish to retain and not re-encrypt. Otherwise I have to go through every URN to do so.

Hi there. Rightly or wrongly, I'm currently using pulumi to deploy/configure infrastructure (a K8s cluster and the stuff outside of K8s) whilst using Flux to deploy the stuff inside the cluster. For some of the items deployed by flux, they have a secret that is encrypted via sops; one example of this is the object storage creds. What I'd ideally be able to do is have pulumi create and manage the object storage, generate the access/secret on the cloud service, generate the yaml for the Secret and written to a file in the repo, which would in turn be encrypted by sops and, once committed, would be applied by flux. Other "secret" values could of course come from secrets in the pulumi stack but would go through the same pipeline of steps. Is what I've described possible? Does it make sense or am I crazy? 😀

Hi folks, Q. I can see with the Default GCP Provider that there is an option for the provider to impersonate a service account. Looking at the GCP Native Provider, not seeing a way to do something similar. Is there a way for GCP Native provider to impersonate an SA ?

is there any other way to write outputs than exporting from index.ts?

in golang you can add outputs to context

Hello an easy one today : how can we change the entry point of index.ts and to choose another one ? didn't find a way in helps or docs

Hello pulumi : I have a question for Terraform Bridge Provider Boilerplate: Is there any time plan to support wrapping an existing Terraform provider which is developed by terraform-plugin-framework ?

Hi there. I faced with an issue related to kubernetes provider. I have ManagedCluster configured and deployed to Azure. This cluster is used for Provider creation:

var aksProvider = new K8s.Provider("k8s-provider-dev", new ProviderArgs
            {
                KubeConfig = kubeConfig,
                Cluster = kubernetesCluster.Name,
            });

which I use for creation of kubernetes dashboard:

var kubeDashboard = new ConfigFile("my-kubernetes-dashboard", new ConfigFileArgs
            {
                File = "<https://raw.githubusercontent.com/kubernetes/dashboard/v2.5.0/aio/deploy/recommended.yaml>"
            },
            new ComponentResourceOptions
            {
                Provider = aksProvider,
                DependsOn = aksProvider!
            });

It works fine when deployment of cluster happens for the first time but if I'm trying to change Virtual Machine size (which requires recreation of cluster) and deploy this update I get an error:

error: resource complete event returned an error: failed to verify snapshot: resource urn:pulumi:dev::MyProject::kubernetes:yaml:ConfigFile$kubernetes:core/v1:Namespace::kubernetes-dashboard refers to unknown provider urn:pulumi:dev::MyProject::pulumi:providers:kubernetes::k8s-provider-dev::650f67b5-a3be-423f-81be-5e8453bf9c4f
    error: update failed

Is there any workaround how to fix this issue or maybe I'm doing something wrong? Thank you!

Is pulumi switching to multiple public alpha releases a day or is this just a blip as you're changing your release pipeline? Looking at the Github release page, the first page is just alpha releases: https://github.com/pulumi/pulumi/releases, you have to go to the 2nd page to get an official release. This makes it harder to read through recent changes and makes using Github's hidden RSS feed for releases very noisy. I'd ask whether these should be marked as official releases instead of just being tagged. EDIT: No rush on answering this. It's late on a Friday and it is a holiday weekend in the US

Hi, I've decided to use Pulumi to set up my Snowflake resources and

pulumi-snowflake

seems to be great for this. My problem currently is that I'm not able to use different roles during execution. For example, I use SYSADMIN to create a database and I want to use SECURITYADMIN to create a new role. In the config file, I set up

snowflake:role

to SYSADMIN and I try to change to

os.environ["SNOWFLAKE_ROLE"] = "SECURITYADMIN"

but it doesn't seem to be picked up.

how do i add dependon functionality to ComponentResource so other can wait for the CR to be deployed

Does anyone one implemented something similar to cfn-signal to make sure ec2 user data was properly executed. I am planning to use ssm param store. User data will have last step where it creates param in ssm with status. One thing is not clear is how to do pulling on pulumi side. I can lock while loop, but wander if there is a better way to do the pooling

Hi Everyone, I am a new bee to Pulumi IaC service. I am actually trying to deploy a new VM on Azure platform using Pulumi Python. I would like to know how can an input can be accepted from keyboard into python program of Azure VM. Is there any example that i can refer. I would like to know the syntax of Pulumi python program used in deploying Azure VM. Please help. Thanks.

hi

How do I delete a subnet group which is used by a RDS instance? I got this error for `pulumi destroy`:

Destroying (staging):

Type                    Name                    Status                  Info

pulumi:pulumi:Stack     myapp-infra-staging  **failed**              1 error

-   └─ aws:rds:SubnetGroup  rds-subnet-group        **deleting failed**     1 error

Diagnostics:

aws:rds:SubnetGroup (rds-subnet-group):

error: deleting urn:pulumi:staging::myapp-infra::aws:rds/subnetGroup:SubnetGroup::rds-subnet-group: 1 error occurred:

* deleting RDS Subnet Group (rds-subnet-group-84e29cf): InvalidDBSubnetGroupStateFault: Cannot delete the subnet group 'rds-subnet-group-84e29cf' because at least one database instance: myapp-staging is still using it.

status code: 400, request id: 2d691633-f9eb-4bf9-969c-f4db4ac4ee89

pulumi:pulumi:Stack (myapp-infra-staging):

error: update failed

Hi, how do I use a Secret as a string? I am using Typescript. When I use

apply

, pulumi throws

Error: Secret outputs cannot be captured by a closure.

If I use

pulumi.interpolate

, the IDE complains that

Type 'Output<string>' is not assignable to type 'string | string[] | undefined'.

Hi, how do I convert `Output<string[]>`into `string[]`synchronously in Typescript? `apply()`is asynchronous and

get()

does not work, throws an error -

Error: Cannot call '.get' during update or preview.

for the route table association (docs) in the import section there are some missing words.

Import
is already associated, will result in an error (e.g., Resource.AlreadyAssociatedthe specified association for route table rtb-4176657279 conflicts with an existing association) unless you first import the original association. EC2 Route Table Associations can be imported using the associated resource ID and Route Table ID separated by a forward slash (/). For example with EC2 Subnets

Hello, is it safe to rename a git repo? what will be the impacts for a deployed Stack ? / for the Dashboard ?

Hello is there a way in which we can leverage Pulumi to create users in Google Workspace?

Does anyone know if there are any plans for a grafana cloud provider? I see there's terraform for it

Hey 👋 Is there any way I can concat 2 Promise<pulumi.Output<string>[]> into one? I need to set subnetIds to be private + public subnet id's in some RDS instance 🙏

Is pulumi website slow.. it is taking so much time to download kbs

I'm trying to create a

stage

in an API Gateway in AWS using

stage = aws.apigatewayv2.Stage("$default", api_id=checkout_api.id)

But I'm being presented with an error saying,

aws:apigatewayv2:Stage ($default):
    error: 1 error occurred:
        * creating API Gateway v2 stage: BadRequestException: Stage name only allows a-zA-Z0-9_

But I'm able to create it using the console. Any idea how to circumnavigate this?

Hello! I am having some performance problems when running pulumi updates. Previews are fast but the update are slow. During the update pulumi makes a lot of api calls to a checkpoint url like this

<https://api.pulumi.com/api/stacks/org/project/stack/update/**> update uuid **/checkpoint

each of which takes around 2 - 5 seconds, just now it took 7 minutes to update 1 resource in a (stack that reads 13 resources) anyone have any idea what might be wrong? It did not used to be this slow.

Afternoon all, bit of a newbie question. I'm following the guide to get Pulumi working with GitLabs CI/CD and I've copy/pasted the YAML for but its coming back as invalid " jobs only config should implement a script: or a trigger: keyword" I've run all various validation tools and googled around but dont seem to be able to identify the problem.

Hi Is anyone else having issues with the cloudlflare provider and

apiToken

as a secret. If I provide the token via the command line (

AWS_PROFILE=my_profile CLOUDFLARE_API_TOKEN=rEdAcTeD pulumi refresh

) all is ok however if I set with

AWS_PROFILE=my_profile pulumi config set cloudflare:apiToken --secret

and do a refresh it gives API errors

I have a usecase where I am creating a RDS DB with a randomized password. Issue here is that this Randomised password is different when I plan vs when I apply. During plan I create a plan.json which I use when applying. This gives error in pulumi because the randomized password value has changed. How can we solve this ?