https://pulumi.com logo
Docs
Join the conversationJoin Slack
Channels
announcements
automation-api
aws
azure
blog-posts
built-with-pulumi
cloudengineering
cloudengineering-support
content-share
contribex
contribute
docs
dotnet
finops
general
getting-started
gitlab
golang
google-cloud
hackathon-03-19-2020
hacktoberfest
install
java
jobs
kubernetes
learn-pulumi-events
linen
localstack
multi-language-hackathon
office-hours
oracle-cloud-infrastructure
plugin-framework
pulumi-cdk
pulumi-crosscode
pulumi-deployments
pulumi-kubernetes-operator
pulumi-service
pulumiverse
python
registry
status
testingtesting123
testingtesting321
typescript
welcome
workshops
yaml
Powered by Linen
general
  • m

    melodic-car-16900

    10/02/2022, 6:55 PM
    I figure I can include it in one stack, export it as an output and then use a stack reference in the 2nd project... but idk, feels like there might be a better option
    e
    • 2
    • 7
  • l

    lively-winter-28362

    10/02/2022, 11:59 PM
    Hey guys! I’m having an issue where running
    pulumi up
    will protect everything without me asking it to protect them. Any ideas at steps I can take to fix this?
    l
    a
    • 3
    • 5
  • k

    kind-jelly-61624

    10/03/2022, 12:56 AM
    crossposting for vis
  • d

    dry-dentist-95091

    10/03/2022, 8:32 AM
    Hello everyone, i have been integrating pulumi for integrating with api gateway but I ran into some issue.
    ids:list[pulumi.output.Output] =[] #contains ids of the resources to be deployed
    deployment = apigateway.Deployment("test_deployment",
            rest_api=restapi.id,
            triggers={
                "redeployment":pulumi.Output.all(ids)
                .apply(lambda exampleResourceId: json.dumps([exampleResourceId]))
                .apply(lambda to_json: hashlib.sha1(to_json.encode()).hexdigest()),      
            }
        )
    as pulumi.Output.all function accepts the pulumi.output.Output not list[pulumi.output.Output], I am getting error. How should I pass the above ids into pulumi.Output.all function so that all the ids in the list can passed? (a list can contain any number of elements)
    e
    • 2
    • 14
  • c

    chilly-analyst-14900

    10/03/2022, 11:52 AM
    Cleanup: Is there any helpers for cleaning up dev/test-ish stacks? I see I can use tags on stacks, but no way of using a filter on
    destroy
    or
    rm
    . I could ofc do it myself using
    pulumi stack ls --tag isDevTempEnv true
    and then destroy them one by one in a loop.
    e
    • 2
    • 1
  • b

    brash-restaurant-84207

    10/03/2022, 12:33 PM
    hi... I would like to create an IAM role that a) Allows AssumeRole, b) Has several Customer managed policies attached, c) Has several AWS managed policies attached. What would the python pulumi format of such a role be?
    s
    • 2
    • 7
  • d

    damp-rain-39201

    10/03/2022, 4:35 PM
    Hi, I published SDK npm into private GitHub packages. when I am using it in dependencies pulumi is not able to perform IaC operations. may be the binaries not coming into the SDK folder.
    Updating (dev)
    View Live: <https://app.pulumi.com/Atmakur/s3-service/dev/updates/2>
    Type                 Name            Status
    pulumi:pulumi:Stack  s3-service-dev
    Resources:
    1 unchanged
    Duration: 1s
    s
    • 2
    • 3
  • s

    stale-orange-47562

    10/03/2022, 6:09 PM
    Hi guys, does somebody know how to skip a pulumi policy when the resources are destroyed using, currently, we have some issues with some resources that we will destroy in the stack, the policies still validating those resources
    b
    • 2
    • 8
  • w

    wet-sunset-4939

    10/04/2022, 1:10 AM
    Hi All, Please help. When upgrading pulumi/azure from 4 to 5 I got below error. Please share if any solution for this?
    panic: interface conversion: interface {} is nil, not []interface {}
        goroutine 242 [running]:
        <http://github.com/hashicorp/terraform-provider-azurerm/internal/services/containers/migration.KubernetesClusterV1ToV2.UpgradeFunc.func1({0x6eee980|github.com/hashicorp/terraform-provider-azurerm/internal/services/containers/migration.KubernetesClusterV1ToV2.UpgradeFunc.func1({0x6eee980>?, 0xc0028888c8?}, 0x5c70b80?, {0xc0029ccfc0?, 0x6eee980?})
            /home/runner/go/pkg/mod/github.com/pulumi/terraform-provider-azurerm@v1.41.1-0.20220923214953-9abea3c6f19c/internal/services/containers/migration/kubernetes_cluster.go:1231 +0x2fe
        <http://github.com/hashicorp/terraform-provider-azurerm/internal/tf/pluginsdk.StateUpgrades.func1({0x6eeb650|github.com/hashicorp/terraform-provider-azurerm/internal/tf/pluginsdk.StateUpgrades.func1({0x6eeb650>, 0xc000138028}, 0x2?, {0x5c19d60, 0xc000e4ae00})
    e
    • 2
    • 1
  • e

    elegant-action-99227

    10/04/2022, 5:41 AM
    Hi! I have a plan deploy many service on on-premise kubernetes. So, maybe need many stacks. Most are in-house services. Not public. I read team plan has unlimited stacks. How many can create stacks in Individual plan?
    e
    • 2
    • 2
  • g

    gorgeous-accountant-60580

    10/04/2022, 8:01 AM
    I’m trying to find out where plugins are downloaded from, but I haven’t had any luck yet. How can I construct the URL for a plugin, so that I can download it without using the CLI?
    e
    • 2
    • 5
  • d

    damp-honey-93158

    10/04/2022, 1:38 PM
    goooood afternoon! We are recently experiencing a bunch of errors that look like the following - and we're all a wee bit stumped; anyone had experience with these and knows what is going on? Diagnostics: kubernetes:helm.sh/v3:Release (credtest-cert-manager): error: rendered manifests contain a resource that already exists. Unable to continue with install: could not get information about the resource ClusterRole "credtest-cert-manager-c155c92a-controller-cer tificates" in namespace "": Get "https://azurenp-4ed01735.hcp.switzerlandnorth.azmk8s.io:443/apis/rbac.authorization.k8s.io/v1/clusterroles/credtest-cert-manager-c155c92a-controller-certificates ": remote error: tls: bad record MAC
  • b

    billions-journalist-44569

    10/04/2022, 1:50 PM
    Hi, is there a way to do a
    pulumi state delete <urn>
    programmatically in Python or via REST API?
  • s

    sparse-gold-10561

    10/04/2022, 2:09 PM
    When building a dynamic provider, is there a way to ignore updates to the provider?
    [diff: ~__provider]
    it seems to try to update the resource even though the its only the provider version that has changed. I notice on the official providers, these type of diffs get ignored.
    👀 1
  • f

    fast-river-57630

    10/04/2022, 2:53 PM
    I'm trying to replace a reference with a stub: essentially an aws VPC object with a mostly empty ComponentResource. https://gist.github.com/sheenobu/a58297508055a3e4c83aee1b5f38432e I'm getting
    ... (...-vpc):
        error: expected '::' in provider reference ''
    Maybe you can't replace a resource from the AWS provider for one from a different provider? or is my aliases: wrong?
    ✅ 1
    b
    • 2
    • 8
  • m

    millions-guitar-3468

    10/04/2022, 4:38 PM
    Hi guys, I am new to pulumi, is there any starter to start a infra with s3, cloudfront, eks, loadBalancer?
    s
    • 2
    • 3
  • l

    limited-salesmen-97945

    10/04/2022, 6:39 PM
    Hi guys, I am trying to import a GCP budget alert in pulumi, and I notice the doc mentions setting
    user_project_override
    to true in the provider config. Does anyone have an example? Link to doc: https://www.pulumi.com/registry/packages/gcp/api-docs/billing/budget/
  • s

    some-pizza-35589

    10/04/2022, 7:09 PM
    Good afternoon. We are new to Pulumi and on a teams account. We need to generate an access token for the organization and the admin is on vacation, how can we get another user granted that access?
    b
    • 2
    • 12
  • m

    magnificent-glass-81378

    10/04/2022, 7:44 PM
    Hi all, I'm looking for some advice on Pulumi project/stack design from those more experienced with it than I. I'm trying to figure out how tightly-coupled different stacks that reference each other via outputs and stack references are. As far as I understand, such references would create a tight dependency between the stack that produces a value and the stack that consumes the value. If the output value changed on the producing side (perhaps it was a computed value or something), then that would immediately invalidate the consuming side's value such that the next time that consuming stack is deployed (
    pulumi up
    ) it will use the new value, correct? If that's true, then is there some way to take advantage of outputs and stack references that still allows for a looser coupling? My goal is to strongly limit the blast radius of stack changes. I'd like to be that if we change one stack, that those changes don't automatically ripple to many others. What's the best practice here?
  • c

    creamy-byte-37608

    10/04/2022, 8:08 PM
    Is there a specific channel for reporting broken APIs?
    s
    • 2
    • 5
  • a

    average-tiger-58107

    10/04/2022, 9:13 PM
    Is there any way to interpolate pulumi Outputs into a JSON stringified IAM policy w/o wrapping the entire resource creation in an
    apply
    ? Example:
    const scsExecPolicy = pulumi
      .all([commonClusterExecKey.arn, commonClusterEcsExecLogGroup.arn])
      .apply(([commonClusterExecKeyARN, commonClusterEcsExecLogGroupArn]) => {
        return new aws.iam.Policy("scs-exec-policy", {
          name: "cfx-policy-scs-exec",
          policy: JSON.stringify({
            Version: "2012-10-17",
            Statement: [
              {
                Action: [
                  "ssmmessages:CreateControlChannel",
                  "ssmmessages:CreateDataChannel",
                  "ssmmessages:OpenControlChannel",
                  "ssmmessages:OpenDataChannel",
                ],
                Effect: "Allow",
                Resource: "*",
              },
              {
                Action: ["logs:DescribeLogGroups"],
                Effect: "Allow",
                Resource: "*",
              },
              {
                Action: [
                  "logs:CreateLogStream",
                  "logs:DescribeLogStreams",
                  "logs:PutLogEvents",
                ],
                Effect: "Allow",
                Resource: `${commonClusterEcsExecLogGroupArn}:*`,
              },
              {
                Effect: "Allow",
                Action: ["kms:Decrypt"],
                Resource: commonClusterExecKeyARN,
              },
            ],
          }),
        });
      });
    m
    b
    • 3
    • 19
  • d

    damp-rain-39201

    10/04/2022, 11:23 PM
    Is there any way to Enable enhanced networking with the Elastic Network Adapter (ENA) on Linux instances by pulumi. I searched for the resources but no luck
    h
    • 2
    • 2
  • f

    fierce-xylophone-92490

    10/05/2022, 1:35 AM
    Mono-stack vs multi-stack question: I'm thinking of generating all of my company's GitHub repos using Pulumi. Permissions, Organizations, build variables, branch settings, PR templates, etc. would all be managed with Pulumi. Would it make the most sense to have all repos in a single Pulumi stack? Or to have each repo in its own stack? It'll be about 70 repos in the next few months and +3/week from then on.
    f
    g
    +4
    • 7
    • 11
  • b

    brash-television-56562

    10/05/2022, 2:29 PM
    Hello all, looked at Pulumi for some time now. Looking at it from remote runner perspective and new language adoption. Did you ever consider leveraging WebAssembly (WASM) with or without System interface (WASI)? For example to sandbox an executed code and to expand quickly to all languages that compile to WASM. Got an inspiration from Kubewarden (policy as code) and Envoy proxy (wasm filters)
    e
    • 2
    • 1
  • f

    faint-balloon-33174

    10/05/2022, 2:47 PM
    Is there a way to move existing infrastructure into component resources without deleting/recreating anything?
    f
    • 2
    • 2
  • l

    lively-needle-84406

    10/05/2022, 3:02 PM
    Hey all, I am having issues creating a namespace and referencing that namespace name while using the kubernetes.core.v1.Namespace (kubernetes provider). The namespace name I want is
    istio-system
    , but a randomly generated string gets appended to the name. Is there a way to specify a specific name for a namespace when using
    new kubernetes.core.v1.Namespace
    ?
    const istioNamespaceName = "istio-system"
    
    const istioNamespace = new k8s.core.v1.Namespace(istioNamespaceName);
    
    const istioVersion = "1.15.0";
    
    const istioBase = new k8s.helm.v3.Chart("istio-base", {
        chart: "base",
        version: istioVersion,
        namespace: istioNamespaceName,
        fetchOpts: {
            repo: "<https://istio-release.storage.googleapis.com/charts>",
        },
    }, {
        dependsOn: istioNamespace
    });
    b
    s
    • 3
    • 5
  • m

    microscopic-piano-27908

    10/05/2022, 5:57 PM
    👋 I’m trying to deploy an update to a Slack App I made. If I run
    pulumi up
    I get:
    error modifying Lambda Function (lambda-name) Code: RequestEntityTooLargeException: status code: 413
    If I run
    pulumi up
    again, it looks like the changes go through:
    Type                    Name                                      Status      Info
         pulumi:pulumi:Stack     lambda-name                                
     ~   ├─ aws:lambda:Function  lambda-slash-commands  updated     [diff: ~code]
     ~   └─ aws:lambda:Function  lambda-cron            updated     [diff: ~code]
    
    Resources:
        ~ 2 updated
        17 unchanged
    If I then go and look for the changes in the Slack App, they’re not there. Side Note - I know I need to address the
    RequestEntityTooLargeException
    . I tried adding webpack to reduce the build size but that resulted in an error where Webpack doesn’t know what to do with
    @pulumi/aws
    and that dead-ended me there. Any thoughts on why the updates appear to successfully go through but don’t?
  • i

    icy-boots-7501

    10/05/2022, 7:34 PM
    Hey everyone, I've been running into an issue when deploying my stacks recently. I have several projects that use Azure-Native, and recently if I run a
    pulumi refresh
    and then try to run
    pulumi up
    I have been getting this error. Running
    pulumi destroy
    first allows me to successfully use
    pulumi up
    but it is annoying to have to do this, especially with certain resources that take a long time to remove and deploy. This also doesn't seem to happen if I don't run the
    refresh
    before running the up command. Can anyone provide insight into what this error is and/or what might be causing it? I am using Pulumi 3.40.1. We are deploying resources to azure using the Azure-Native and pulumi standard packages. Let me know what other information I can provide in order to diagnose this issue. Thanks in advance.
    b
    • 2
    • 1
  • w

    witty-barista-69390

    10/05/2022, 10:31 PM
    Hello Pulumi masters, I am wondering if anyone of you have a recommendation on how to use a single API Gateway across multiple repos so I can keep the same base domain. I want to be able to add routes to an existing Gateway vs recreate the gateway.
    l
    • 2
    • 3
  • a

    adamant-portugal-44732

    10/06/2022, 6:03 AM
    Hi i ran into a problem all of a sudden and tried refreshing and and getting same result. It was working fine in previews pulumi up but all of a sudden i was getting this error when ran pulumi up or pulumi refresh or pulumi destroy. Btw i can access my cluster from same bash with kubectl get pods. i did not deleted cluster.
    • 1
    • 1
Powered by Linen
Title
a

adamant-portugal-44732

10/06/2022, 6:03 AM
Hi i ran into a problem all of a sudden and tried refreshing and and getting same result. It was working fine in previews pulumi up but all of a sudden i was getting this error when ran pulumi up or pulumi refresh or pulumi destroy. Btw i can access my cluster from same bash with kubectl get pods. i did not deleted cluster.
when i turned on a vpn in my pc it's working fine now!! weird behavior!
View count: 1