Hi all, I have a CloudFormation code provided by sumo-logic and I’m trying to use

cf2pulumi

to convert to Pulumi code but getting an error… not sure if because of the place holders... Will paste the CF code in the replies. source: https://help.sumologic.com/docs/send-data/hosted-collectors/amazon-aws/aws-kinesis-firehose-logs-source/

Why does pulumi have this concept of Output monad instead of just using promises in TS/JS... Promises have a well understood api, and provide syntactical sugar for asynchronous control-flow with the async and await keywords, also supports resolving multiple promises concurrently using Promise.all function. Why use something like the Output class instead of getting all this for free?

Is it possible to break up a large

__main__.py

definition into smaller, more manageable py files. For example, I'm specifying multiple AWS SES templates, where I'd like that IAC code to live in its own file. I looked through the docs, but it's not clear on how to achieve in a way similar to how terraform allows modules. A little bit like the example image...

Hi all, I’m troubleshooting a resource that keeps wanting to be deployed everytime I run up even though no changes are made

aws:kinesis:FirehoseDeliveryStream  unweb_fcp_etl_docs_lake  update      [diff: ~extendedS3Configuration]

So far I’ve run with

-v 20

but this did not produce any output, and I’ve also run through the steps at https://www.pulumi.com/docs/support/troubleshooting/ and cannot find anything relevant What is the typical way to troubleshoot this type of problem?

Long shot (or maybe a feat request) - but is there a way to pull the pulumi stack's resource list (or even better the resource graph) into the github repo's readme? I appreciate that in the pulumi console we have a dedicated readme, but I feel like it would be more useful to have a way to dynamically generate the list of resources defined in the stack on the place where devs are working most, in the code's actual repo readme.

i installed istio using pulumi helm chat using python. I am trying to convert Gateway and virtual service yaml file to python code using kube2pulumi but not able to do. Getting this error Error: unknown resource type 'kubernetes:networking.istio.io/v1alpha3:Gateway'

Is there a difference between doing

config set

on a key that a provider expects and one that you've made up yourself? I've have run

pulumi config set sendinblue:smtp <XXX> --secret

and it's not showing up in the config section of my stack whereas

hcloud:token

which was set in the same way is... I get this in my console when trying to do

cfg.requireSecret("sendinblue:smtp")

Diagnostics:
  pulumi:pulumi:Stack (infra-dev):
    error: Missing required configuration variable 'infra:sendinblue:smtp'
    	please set a value using the command `pulumi config set infra:sendinblue:smtp <value>`

Quick question on how to create pulumi stack for use with CLI when one is already deployed using other mechanism (Example automation API). I have a stack already deployed and can see that in the pulumi console and this was deployed using Q-cloud (automation API). i want to be able to export the properties using pulumi export for a k8 config map use case. i tried the few commands of creating the pulumi.yaml file and select stack and refresh BUT the select stack command gives an error suggesting no such stack

What is the correct way to use

pulumi.FileAsset

? Wanted to define an AWS policy in a

policy.json

and then reference that file the code below, but pulumi preview is throwing this error when trying that method

error: expected string or JSON map; got *resource.Asset

# Create a policy that allows the Lambda role to write to CloudWatch Logs
cloudwatch_policy = aws.iam.RolePolicy(
    resource_name='pulumi-lambda-test-policy',
    role=lambda_role.id,
    policy=pulumi.FileAsset('./policies/cloudwatch_policy.json')
)

Does anyone have the proper incantation for a

pulumi login

command using a DigitalOcean spaces s3 bucket?

Hi all, is there a way to add labels to gcp resources when they are created? busy going through the docs and coming up empty...

Hello! has anyone managed to get a Pulumi Preview to present nicely (ideally with colour) on Azure Pipelines?

hey Pulumi team, is there any update on releasing any of the features mentioned in the Exploring how to solve circular dependencies blog post?

Hi all, is there a way to use https://www.pulumi.com/docs/intro/concepts/resources/get/ with a resource that might not exist? I want to conditionally create a private endpoint on an internal load balancer thats created with Kubernetes, and due to the order of creation of resources, the first time the stack is created, the load balancer will not exist and I'd like it to just skip the part where it creates a private endpoint instead of failing.

Has anyone found a workaround for this? https://github.com/pulumi/pulumi-kubernetes/issues/807

is there an ongoing issue running pulumi in github actions? have been unable to run for a few hours now

error: could not load plugin for eks provider 'urn:pulumi:xxx::aws-eks::pulumi:providers:eks::default': Could not automatically download and install resource plugin 'pulumi-resource-eks', install the plugin using `pulumi plugin install resource eks`.
    Underlying error: 401 HTTP error fetching plugin from <https://api.github.com/repos/pulumi/pulumi-eks/releases/latest>

I have no idea if anyone uses this anymore, but since someone came along and created a package for this after I did and published it on the official registry (I was holding back doing that for reasons of “is it good enough?“). I recommend you move this his package instead of mine (I will keep this one updated when ever we need it internally as this is the one we will be continue using). Just a heads up if you are using https://github.com/scav/pulumi-flux now. And on an unrelated note, I find it kinda weird to not even get in touch with me before creating and publishing pretty much an identical package to mine.

Issues with Pulumi K8 provider related when used with automation api - I am getting this error when deploying a "deployment" using pulumi automation API. It seems like it is expecting the aws cli command. How can we use this with autoamtion api? Or is there another method (certs?). [background - i have an eks cluster already deployed using the automation api using iam roles etc.] Error--- + kubernetesapps/v1Deployment id3 creating failed error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: Get "https://xxxxxx.sk1.us-west-1.eks.amazonaws.com/openapi/v2?timeout=32s": getting credentials: exec: executable aws not found -------- This is the config part for users in kubeconfig users: - name: arnawseksus west 1XXXXXXXXXXXXXXX:cluster/eks-clu01a user: exec: apiVersion: client.authentication.k8s.io/v1beta1 args: - --region - us-west-1 - eks - get-token - --cluster-name - eks-clu01a command: aws

this is breaking my pipelines.. any way to get it to stop?

CommandError: code: 255
 stdout: Created stack '822de893-90b5-4671-9bde-10477ba88e6e'

 stderr: warning: A new version of Pulumi is available. To upgrade from version '3.39.3' to '3.46.0', run

A team member of mine is trying to rename a stack with

pulumi stack rename <newname>

and getting

[403] You do not have permission to perform this operation.

He is a Stack Admin and also created the stack in the first place. Is this expected? I do not see any other permissions available to give him.

Hello pulumi hive mind; I'm trying to export Audit Logs (JSON) via the API using an organization token. According to the docs, an organization token should have permission to perform that operation, but i'm getting

{"code":403,"message":"You do not have permission to perform this operation."}

The endpoint works when using a personal access token. Any ideas? 🙂 Also, the docs mention that the API is rate-limited, anyone know what that limit is?

We are getting spammed by Pulumi sales representatives cold emailing people at our company based on other peoples’ participation in this Slack channel.. This is not OK, and it is not building good will at our company towards this product.

Hi folks, I see a lot of docs around stack permissions, but is there a way to limit who can create a project within an org?

Is there a way to have pulumi wait during destroy operation? For instance, I want to wait for a chart to be completely removed before proceeding to delete node groups in an eks cluster.

Pulumi Automation API and Jenkins - are there any examples of a CD using jenkinsfile / plugins for interaction with Pulumi Automation API ? i see there is an example of using cli but cant seem to find one for api - if that's possible.

is there any way to remove the encryptionsalt: from being generated in a Pulumi config file?

does anyone know how to deploy two stacks of the same project in two diff aws accounts?

why reading output from other stacks is so slow? When I use

pulumi.StackReference

My backend used aws s3

Hi, classick examlple. I have some resources in Azure cloud that was deployed using Pulumi, but now I need to have these moved to another subscription and resources group. What is the best solution for this? a) move the resources manually in the Azure Portal and somehow refresh or update the stack afterwards to let it know the resources now have another new ID (and how to I do that, the pulumi refresh command does not do that) b) some magic pulumi command can move the resources on for me? c) any other suggestions Resources to move: Keyvault StorageAccount Azure function Azure App Service Plan Dependicy: App functions cannot by closed or delete and redeployed. It has to be these services that are already running.

Would be great if Pulumi could also provide arm based docker images... currently I can only see x86 versions in docker hub...