Anyone having issues lately where arrow keys are causing an unexpected escape sequence : [‘\x1b’ ‘O’]? I’m on Mac w/ zsh, iterm. Only started happening last week

Hi - How do I attach an IAM

policyAttachment

to an EC2 instance? I have a policyAttacement as documented:

const test_attach = new aws.iam.RolePolicyAttachment("test-attach", {
    role: role.name,
    policyArn: policy.arn,
});

and an

aws.ec2.Instance

What is the correct way to attach them together?

Hi all, I have a k8s cluster build by AWS EKS, I was import exist K8S resource in namespace frontend (service, configmap.... etc) successful, but only failed when import Ingress, does I miss something ? my pulumi import command example as below

pulumi import kubernetes:networking/v1:Ingress my_portal frontend/my_portal

error message

error: Preview failed: resource 'frontend/my_portal' does not exist

and idea ?

Does Pulumi support promoting an RDS replica to primary?

Hey! I use a Golang CLI to deploy snowflake resources with Pulumi (inline program). I would like to scan my IaC code with a tool like kics.io but as I am using the inline program mode I don't have the

Pulumi.yaml

file which is the file kics.io scans. Can I generate a

Pulumi.yaml

from my code?

👋 Hi, as i'm doing migration from azure classic to azure native in python. What will be the deletion options for compute VM in azure native which is similar to _delete_data_disks_on_termination_ & _delete_os_disk_on_termination_ which is part of azure classic. Someone can help on this much appreciated.

Hi, I am having a problem regarding a pulumi up with helm charts: First up: Everything worked fine on friday when we last deployed. Problem: If I run the pulumi up in our pipeline our rabbitmq helm chart does not update with the following error:

development/rabbitmq violates plan: properties changed:

First it was that the erlang cookie changed, after a pulumi refresh its more:

error: resource urn:pulumi:Development::Cloud::kubernetes:<http://helm.sh/v3:Chart$kubernetes:apps/v1:StatefulSet::development/rabbitmq|helm.sh/v3:Chart$kubernetes:apps/v1:StatefulSet::development/rabbitmq> violates plan: properties changed: ~~spec[{map[podManagementPolicy:{OrderedReady} replicas:{1} selector:{map[matchLabels:{map[<http://app.kubernetes.io/instance:{rabbitmq}|app.kubernetes.io/instance:{rabbitmq}>

<http://app.kubernetes.io/name:{rabbitmq}]}]}|app.kubernetes.io/name:{rabbitmq}]}]}> serviceName:{rabbitmq-headless} template:{map[metadata:{map[annotations:{map[checksum/config:{105414d1c6b687cc6720aaa6aeabae8605b2c47f60956643a158b8795a9fee05} checksum/secret:{0c8c4dcfdfcceeb8d55ca3d08ee5fa2815b03c1505fa60a83406922bb2dd8428}]} labels:{map[<http://app.kubernetes.io/instance:{rabbitmq}|app.kubernetes.io/instance:{rabbitmq}>

<http://app.kubernetes.io/managed-by:{Helm}|app.kubernetes.io/managed-by:{Helm}>

<http://app.kubernetes.io/name:{rabbitmq}|app.kubernetes.io/name:{rabbitmq}> <http://helm.sh/chart:{rabbitmq-11.1.1}]|helm.sh/chart:{rabbitmq-11.1.1}]>}]} spec:{map[affinity:{map[nodeAffinity:{map[requiredDuringSchedulingIgnoredDuringExecution:{map[nodeSelectorTerms:{[{map[matchExpressions:{[{map[key:{performance} operator:{In} values:{[{slow}]}]}]}]}]}]}]}]} containers:{[{map[env:{[{map[name:{BITNAMI_DEBUG} value:{false}]} {map[name:{MY_POD_IP} valueFrom:{map[fieldRef:{map[fieldPath:{status.podIP}]}]}]} {map[name:{MY_POD_NAME} valueFrom:{map[fieldRef:{map[fieldPath:{metadata.name}]}]}]} {map[name:{MY_POD_NAMESPACE} valueFrom:{map[fieldRef:{map[fieldPath:{metadata.namespace}]}]}]} {map[name:{K8S_SERVICE_NAME} value:{rabbitmq-headless}]} {map[name:{K8S_ADDRESS_TYPE} value:{hostname}]} {map[name:{RABBITMQ_FORCE_BOOT} value:{no}]} {map[name:{RABBITMQ_NODE_NAME} value:{rabbit@$(MY_POD_NAME).$(K8S_SERVICE_NAME).$(MY_POD_NAMESPACE).svc.cluster.local}]} {map[name:{K8S_HOSTNAME_SUFFIX} value:{.$(K8S_SERVICE_NAME).$(MY_POD_NAMESPACE).svc.cluster.local}]} {map[name:{RABBITMQ_MNESIA_DIR} value:{/bitnami/rabbitmq/mnesia/$(RABBITMQ_NODE_NAME)}]} {map[name:{RABBITMQ_LDAP_ENABLE} value:{no}]} {map[name:{RABBITMQ_LOGS} value:{-}]} {map[name:{RABBITMQ_ULIMIT_NOFILES} value:{65536}]} {map[name:{RABBITMQ_USE_LONGNAME} value:{true}]} {map[name:{RABBITMQ_ERL_COOKIE} valueFrom:{map[secretKeyRef:{map[key:{rabbitmq-erlang-cookie} name:{rabbitmq}]}]}]} {map[name:{RABBITMQ_LOAD_DEFINITIONS} value:{no}]} {map[name:{RABBITMQ_DEFINITIONS_FILE} value:{/app/load_definition.json}]} {map[name:{RABBITMQ_SECURE_PASSWORD} value:{yes}]} {map[name:{RABBITMQ_USERNAME} value:{user}]} {map[name:{RABBITMQ_PASSWORD} valueFrom:{map[secretKeyRef:{map[key:{rabbitmq-password} name:{rabbitmq}]}]}]} {map[name:{RABBITMQ_PLUGINS} value:{rabbitmq_management, rabbitmq_peer_discovery_k8s, rabbitmq_delayed_message_exchange}]} {map[name:{RABBITMQ_COMMUNITY_PLUGINS} value:{<https://github.com/rabbitmq/rabbitmq-delayed-message-exchange/releases/download/3.11.1/rabbitmq_delayed_message_exchange-3.11.1.ez}]}]}> image:{<http://marketplace.azurecr.io/bitnami/rabbitmq:3.11.2-debian-11-r0|marketplace.azurecr.io/bitnami/rabbitmq:3.11.2-debian-11-r0>} imagePullPolicy:{IfNotPresent} lifecycle:{map[preStop:{map[exec:{map[command:{[{/bin/bash} {-ec} {if [[ -f /opt/bitnami/scripts/rabbitmq/nodeshutdown.sh ]]; then /opt/bitnami/scripts/rabbitmq/nodeshutdown.sh -t "120" -d "false" else rabbitmqctl stop_app fi }]}]}]}]} livenessProbe:{map[exec:{map[command:{[{/bin/bash} {-ec} {rabbitmq-diagnostics -q ping}]}]} failureThreshold:{6} initialDelaySeconds:{120} periodSeconds:{30} successThreshold:{1} timeoutSeconds:{20}]} name:{rabbitmq} ports:{[{map[containerPort:{5672} name:{amqp}]} {map[containerPort:{25672} name:{dist}]} {map[containerPort:{15672} name:{stats}]} {map[containerPort:{4369} name:{epmd}]}]} readinessProbe:{map[exec:{map[command:{[{/bin/bash} {-ec} {rabbitmq-diagnostics -q check_running && rabbitmq-diagnostics -q check_local_alarms}]}]} failureThreshold:{3} initialDelaySeconds:{10} periodSeconds:{30} successThreshold:{1} timeoutSeconds:{20}]} resources:{map[limits:{map[]} requests:{map[]}]} securityContext:{map[runAsNonRoot:{true} runAsUser:{1001}]} volumeMounts:{[{map[mountPath:{/bitnami/rabbitmq/conf} name:{configuration}]} {map[mountPath:{/bitnami/rabbitmq/mnesia} name:{data}]}]}]}]} securityContext:{map[fsGroup:{1001}]} serviceAccountName:{rabbitmq} terminationGracePeriodSeconds:{120} volumes:{[{map[name:{configuration} secret:{map[items:{[{map[key:{rabbitmq.conf} path:{rabbitmq.conf}]}]} secretName:{rabbitmq-config}]}]} {map[emptyDir:{map[]} name:{data}]}]}]}]} updateStrategy:{map[type:{RollingUpdate}]}]}!={map[podManagementPolicy:{OrderedReady} replicas:{1} selector:{map[matchLabels:{map[<http://app.kubernetes.io/instance:{rabbitmq}|app.kubernetes.io/instance:{rabbitmq}>

<http://app.kubernetes.io/name:{rabbitmq}]}]}|app.kubernetes.io/name:{rabbitmq}]}]}> serviceName:{rabbitmq-headless} template:{map[metadata:{map[annotations:{map[checksum/config:{105414d1c6b687cc6720aaa6aeabae8605b2c47f60956643a158b8795a9fee05} checksum/secret:{bc2150c097b4a1af2d5acd584ff944c61404fe43403d0f1aeeff50fba12d4c42}]} labels:{map[<http://app.kubernetes.io/instance:{rabbitmq}|app.kubernetes.io/instance:{rabbitmq}>

<http://app.kubernetes.io/managed-by:{Helm}|app.kubernetes.io/managed-by:{Helm}>

<http://app.kubernetes.io/name:{rabbitmq}|app.kubernetes.io/name:{rabbitmq}> <http://helm.sh/chart:{rabbitmq-11.1.1}]|helm.sh/chart:{rabbitmq-11.1.1}]>}]} spec:{map[affinity:{map[nodeAffinity:{map[requiredDuringSchedulingIgnoredDuringExecution:{map[nodeSelectorTerms:{[{map[matchExpressions:{[{map[key:{performance} operator:{In} values:{[{slow}]}]}]}]}]}]}]}]} containers:{[{map[env:{[{map[name:{BITNAMI_DEBUG} value:{false}]} {map[name:{MY_POD_IP} valueFrom:{map[fieldRef:{map[fieldPath:{status.podIP}]}]}]} {map[name:{MY_POD_NAME} valueFrom:{map[fieldRef:{map[fieldPath:{metadata.name}]}]}]} {map[name:{MY_POD_NAMESPACE} valueFrom:{map[fieldRef:{map[fieldPath:{metadata.namespace}]}]}]} {map[name:{K8S_SERVICE_NAME} value:{rabbitmq-headless}]} {map[name:{K8S_ADDRESS_TYPE} value:{hostname}]} {map[name:{RABBITMQ_FORCE_BOOT} value:{no}]} {map[name:{RABBITMQ_NODE_NAME} value:{rabbit@$(MY_POD_NAME).$(K8S_SERVICE_NAME).$(MY_POD_NAMESPACE).svc.cluster.local}]} {map[name:{K8S_HOSTNAME_SUFFIX} value:{.$(K8S_SERVICE_NAME).$(MY_POD_NAMESPACE).svc.cluster.local}]} {map[name:{RABBITMQ_MNESIA_DIR} value:{/bitnami/rabbitmq/mnesia/$(RABBITMQ_NODE_NAME)}]} {map[name:{RABBITMQ_LDAP_ENABLE} value:{no}]} {map[name:{RABBITMQ_LOGS} value:{-}]} {map[name:{RABBITMQ_ULIMIT_NOFILES} value:{65536}]} {map[name:{RABBITMQ_USE_LONGNAME} value:{true}]} {map[name:{RABBITMQ_ERL_COOKIE} valueFrom:{map[secretKeyRef:{map[key:{rabbitmq-erlang-cookie} name:{rabbitmq}]}]}]} {map[name:{RABBITMQ_LOAD_DEFINITIONS} value:{no}]} {map[name:{RABBITMQ_DEFINITIONS_FILE} value:{/app/load_definition.json}]} {map[name:{RABBITMQ_SECURE_PASSWORD} value:{yes}]} {map[name:{RABBITMQ_USERNAME} value:{user}]} {map[name:{RABBITMQ_PASSWORD} valueFrom:{map[secretKeyRef:{map[key:{rabbitmq-password} name:{rabbitmq}]}]}]} {map[name:{RABBITMQ_PLUGINS} value:{rabbitmq_management, rabbitmq_peer_discovery_k8s, rabbitmq_delayed_message_exchange}]} {map[name:{RABBITMQ_COMMUNITY_PLUGINS} value:{<https://github.com/rabbitmq/rabbitmq-delayed-message-exchange/releases/download/3.11.1/rabbitmq_delayed_message_exchange-3.11.1.ez}]}]}> image:{<http://marketplace.azurecr.io/bitnami/rabbitmq:3.11.2-debian-11-r0|marketplace.azurecr.io/bitnami/rabbitmq:3.11.2-debian-11-r0>} imagePullPolicy:{IfNotPresent} lifecycle:{map[preStop:{map[exec:{map[command:{[{/bin/bash} {-ec} {if [[ -f /opt/bitnami/scripts/rabbitmq/nodeshutdown.sh ]]; then /opt/bitnami/scripts/rabbitmq/nodeshutdown.sh -t "120" -d "false" else rabbitmqctl stop_app fi }]}]}]}]} livenessProbe:{map[exec:{map[command:{[{/bin/bash} {-ec} {rabbitmq-diagnostics -q ping}]}]} failureThreshold:{6} initialDelaySeconds:{120} periodSeconds:{30} successThreshold:{1} timeoutSeconds:{20}]} name:{rabbitmq} ports:{[{map[containerPort:{5672} name:{amqp}]} {map[containerPort:{25672} name:{dist}]} {map[containerPort:{15672} name:{stats}]} {map[containerPort:{4369} name:{epmd}]}]} readinessProbe:{map[exec:{map[command:{[{/bin/bash} {-ec} {rabbitmq-diagnostics -q check_running && rabbitmq-diagnostics -q check_local_alarms}]}]} failureThreshold:{3} initialDelaySeconds:{10} periodSeconds:{30} successThreshold:{1} timeoutSeconds:{20}]} resources:{map[limits:{map[]} requests:{map[]}]} securityContext:{map[runAsNonRoot:{true} runAsUser:{1001}]} volumeMounts:{[{map[mountPath:{/bitnami/rabbitmq/conf} name:{configuration}]} {map[mountPath:{/bitnami/rabbitmq/mnesia} name:{data}]}]}]}]} securityContext:{map[fsGroup:{1001}]} serviceAccountName:{rabbitmq} terminationGracePeriodSeconds:{120} volumes:{[{map[name:{configuration} secret:{map[items:{[{map[key:{rabbitmq.conf} path:{rabbitmq.conf}]}]} secretName:{rabbitmq-config}]}]} {map[emptyDir:{map[]} name:{data}]}]}]}]} updateStrategy:{map[type:{RollingUpdate}]}]}]

If I run the pulumi up locally a rabbitmq pod is created and can be viewed in kubernetes, but the pod still has errors, even though it is marked as running:

Warning  Unhealthy  38s                kubelet            Readiness probe failed: Error:
RabbitMQ on node rabbit@rabbitmq-0.rabbitmq-headless.development.svc.cluster.local is not running or has not fully booted yet (check with is_booting)

Locally the redis pod is stuck in the pulumi up with:

Finding Pods to direct traffic to

Does anybody have any idea what could be wrong here?

Hi all! I'm in a situation where I need to rename a ton of stacks and I'm trying to do it via the automation API, but I'm failing. • Can't seem to find an outright "rename_stack" method via these objects/modules: ◦

LocalWorkspace

◦

Stack

◦

pulumi.automation

• I've tried

pulumi.automation.create_stack

and importing an export via

stack.new_stack

, but it errors out because it requires a

--force

flag due to the fact that the exported stack is still deployed.

pulumi.automation.errors.CommandError: 
 code: 255
 stdout: 
 stderr: warning: A new version of Pulumi is available. To upgrade from version '3.44.2' to '3.47.2', visit <https://pulumi.com/docs/reference/install/> for manual instructions and release notes.
error: 'stack-name-redactified' still has resources; removal rejected. Possible actions:
- Make sure that 'stack-name-redactified' is the stack that you want to destroy
- Run `pulumi destroy` to delete the resources, then run `pulumi stack rm`
- Run `pulumi stack rm --force` to override this error

Am I making this more complicated than necessary? Is there a way of passing the

--force

flag such that the methods will acknowledge it?

Hi all, Is it possible with Pulumi? I need to build with Python, zip files , attach a version and upload to S3. Need this for MWAA Environment set up that I’m doing with Pulumi.

Greetings, does the AWS package of Pulumi support custom routing with the Global Accelerator? It looks like custom routing was added in 2020, but I don't see reference to it in the documentation for Pulumi (unless I missed it)

Hello All, can you help me I am trying to create pem file from a private key using pulumi interpolate but I got error this is my code

// Create a Key to allow SSH connection
const sshKeyPrivate = new tls.PrivateKey("bastion", {
    algorithm: "RSA",
})

export const privateKey = sshKeyPrivate.privateKeyPem;

const privateKeyInterP = pulumi.interpolate `${privateKey}`;

fs.writeFileSync("key.pem", privateKeyInterP);

and this is the error on the key.pem

Calling [toString] on an [Output<T>] is not supported.

To get the value of an Output<T> as an Output<string> consider either:
1: o.apply(v => `prefix${v}suffix`)
2: pulumi.interpolate `prefix${v}suffix`

See <https://pulumi.io/help/outputs> for more details.
This function may throw in a future version of @pulumi/pulumi.

Hey all! Hope everyone is well 🙂

Hey guys, quick question: I have a resource defined in one stack (an AWS vpc) - I want to move it from this stack to another stack. Is there a way to do that without deleting the resource when I delete the code in the initial stack?

After Pulumi 3.47.2, all our Pulumi Kubernetes resources are throwing errors that they violate the plan. And after the first error, they increase on the second run.

resource urn:pulumi:dev::us-cluster-1::kubernetes:<http://helm.sh/v3:Release::kube-prometheus-stack|helm.sh/v3:Release::kube-prometheus-stack> violates plan: properties changed: ++name[{kube-prometheus-stack-63216a72}!={kube-prometheus-stack-73270e19}], ++resourceNames[{map[<http://Alertmanager.monitoring.coreos.com/monitoring.coreos.com/v1:{[{monitoring/kube-prometheus-stack-6321-alertmanager}]}|Alertmanager.monitoring.coreos.com/monitoring.coreos.com/v1:{[{monitoring/kube-prometheus-stack-6321-alertmanager}]}>

<http://ClusterRole.rbac.authorization.k8s.io/rbac.authorization.k8s.io/v1:{[{kube-prometheus-stack-6321-admission}|ClusterRole.rbac.authorization.k8s.io/rbac.authorization.k8s.io/v1:{[{kube-prometheus-stack-6321-admission}> {kube-prometheus-stack-6321-operator} {kube-prometheus-stack-6321-prometheus} {kube-prometheus-stack-63216a72-grafana-clusterrole} {kube-prometheus-stack-63216a72-kube-state-metrics}]} <http://ClusterRoleBinding.rbac.authorization.k8s.io/rbac.authorization.k8s.io/v1:{[{kube-prometheus-stack-6321-admission}|ClusterRoleBinding.rbac.authorization.k8s.io/rbac.authorization.k8s.io/v1:{[{kube-prometheus-stack-6321-admission}> {kube-prometheus-stack-6321-operator} {kube-prometheus-stack-6321-prometheus} {kube-prometheus-stack-63216a72-grafana-clusterrolebinding} {kube-prometheus-stack-63216a72-kube-state-metrics}]} ConfigMap/v1:{[{monitoring/kube-prometheus-stack-6321-alertmanager-overview} {monitoring/kube-prometheus-stack-6321-apiserver} {monitoring/kube-prometheus-stack-6321-cluster-total} {monitoring/kube-prometheus-stack-6321-controller-manager} {monitoring/kube-prometheus-stack-6321-etcd} {monitoring/kube-prometheus-stack-6321-grafana-datasource} {monitoring/kube-prometheus-stack-6321-grafana-overview} {monitoring/kube-prometheus-stack-6321-k8s-coredns} {monitoring/kube-prometheus-stack-6321-k8s-resources-cluster} {monitoring/kube-prometheus-stack-6321-k8s-resources-namespace} {monitoring/kube-prometheus-stack-6321-k8s-resources-node} {monitoring/kube-prometheus-stack-6321-k8s-resources-pod} {monitoring/kube-prometheus-stack-6321-k8s-resources-workload} {monitoring/kube-prometheus-stack-6321-k8s-resources-workloads-namespace} {monitoring/kube-prometheus-stack-6321-kubelet} {monitoring/kube-prometheus-stack-6321-namespace-by-pod} {monitoring/kube-prometheus-stack-6321-namespace-by-workload} {monitoring/kube-prometheus-stack-6321-node-cluster-rsrc-use} {monitoring/kube-prometheus-stack-6321-node-rsrc-use} {monitoring/kube-prometheus-stack-6321-nodes} {monitoring/kube-prometheus-stack-6321-nodes-darwin} {monitoring/kube-prometheus-stack-6321-persistentvolumesusage} {monitoring/kube-prometheus-stack-6321-pod-total} {monitoring/kube-prometheus-stack-6321-prometheus} {monitoring/kube-prometheus-stack-6321-proxy} {monitoring/kube-prometheus-stack-6321-scheduler} {monitoring/kube-prometheus-stack-6321-workload-total} {monitoring/kube-prometheus-stack-63216a72-grafana} {monitoring/kube-prometheus-stack-63216a72-grafana-config-dashboards} {monitoring/kube-prometheus-stack-63216a72-grafana-test}]} <http://CustomResourceDefinition.apiextensions.k8s.io/apiextensions.k8s.io/v1:{[{alertmanagerconfigs.monitoring.coreos.com}|CustomResourceDefinition.apiextensions.k8s.io/apiextensions.k8s.io/v1:{[{alertmanagerconfigs.monitoring.coreos.com}>

And they continue... They go over the Slack message limit. After reverting to 3.47.1, everything is fine again.

👋 Hi everyone!

I'm looking to get a rich diff between state and provider into a text file / json file. But when I run

pulumi refresh --diff [--json] > file

, it responds with the error message

error: --yes or --skip-preview must be passed in to proceed when running in non-interactive mode

Can anyone suggest a workaround to get the details into a file for easier viewing, without doing the actual refresh?

hey all quick question when im working with my team and we each do a pulumi deployment, why does the next user who deploys have to redeploy the entire stack and not only the diff?

another big question is, when i use api gateway (AWS) and deploy with a new resource. the entire api gateway goes down and says “unexpected token e error” and cannot invoke any lambda. it needs a second deployment to fix

Hey! I was looking the https://www.pulumi.com/registry/packages/azure-native/api-docs/sql/getmanageddatabase/ function and I am missing something like

getManagedDatabases

to list all databases from a given managed instance, something like the implemented function for Snowflake: https://www.pulumi.com/registry/packages/snowflake/api-docs/getdatabases/. Is there an easy way to gather all managed databases?

Hello, I've been wrangling with Pulumi for a while now trying to solve this problem, one of my components is outputting a map of resource IDs, these IDs are then used in another component to create associated resources. The issue is that I cannot figure out a way to loop over a pulumi.MapInput type or any other iterable type. I understand that I can unpack an output and work with its raw values inside an applyT, however it is not recommended to create resources inside it. I also attempted to work around this by essentially copying the raw map contents from inside applyT to an external map, with no success. Is there a way to do this? I found a few issues discussing this topic, but couldn't find any satisfying answers.

Hi everyone, is there any known issue with installing new version of pulumi on Windows, via chocolatey? This is what I'm getting (elevated terminal). Seems like there is an issue with the script. Same result with versions 3.42.0 and 3.45.0.

Hi Everyone, what will be the new implementation for network.NetworkInterfaceSecurityGroupAssociation & network.NetworkInterfaceApplicationSecurityGroupAssociation in azure-native python. Since i'm doing migration from azure-classic to azure-native in python. Someone can help on this much appreciated.

Does Pulumi have a security scanner such as tfsec? https://github.com/aquasecurity/tfsec

Hi! I've read https://www.pulumi.com/docs/guides/testing/integration/ but it only mentions Go. Is there a way to write integration tests in Python or TypeScript?

Anyone?

Trying out the new deployment service and want to leverage the TTL tag, but it doesn't seem to work. Are there any lower limits or anything to what I can set it to? I have set it to 3 minutes so I don't have to wait to long to see if the destroy operation kicks in.

@stocky-restaurant-98004 Couple of things: A. I created a console app that basically presents 2 folders : Classic & Native. Some resources are available in both but some are only available in classic or native i.e CosmosDB only exists in Classic (right?). You can't go on full native or full classic, its a mixture. Is that assumption correct? B. I have a basic CI/CD and it integrates Pulumi (Preview and Up). I have managed to deploy the desired state in dev environment. I need to take this further and next deploy to Test and QA. So, same resources but different names i.e dev-uk-orders-rg, test-uk-orders-rg. Do I control that via stacks? i.e ${stack-name} as a variable in my variables list so for dev environment we have dev-kyc-slack and for test we "tell" it to use the test-kyc-stack? The difference between dev-kyc-stack and test-kyc-stack is just name prefix (for now). Is that approach correct or is there a better way?

So I'm trying to set up a new Kubernetes install with Flux, but it seems that there's a problem with the generated yaml manifests? Or with the ConfigGroup type in the Go SDK?

Diagnostics:
  pulumi:pulumi:Stack (pulumi-kubernetes-pulumi-kubernetes):
    error: an unhandled error occurred: program exited with non-zero exit code: 2

    panic: fatal: An assertion has failed: {<nil> <nil> <nil> <nil> <nil> <nil> <nil> <nil> <nil> <nil> flux-system flux-system <nil> <nil> <nil> <nil>}: cannot assign v1.objectMetaPtrType to v1.ObjectMeta
    goroutine 42 [running]:
    <http://github.com/pulumi/pulumi/sdk/v3/go/common/util/contract.failfast(...)|github.com/pulumi/pulumi/sdk/v3/go/common/util/contract.failfast(...)>
    	<http://github.com/pulumi/pulumi/sdk/v3@v3.48.0/go/common/util/contract/failfast.go:23|github.com/pulumi/pulumi/sdk/v3@v3.48.0/go/common/util/contract/failfast.go:23>
    <http://github.com/pulumi/pulumi/sdk/v3/go/common/util/contract.Assertf|github.com/pulumi/pulumi/sdk/v3/go/common/util/contract.Assertf>(0x20?, {0x248475a?, 0x240c660?}, {0xc000c87068?, 0xc000c78b01?, 0x98?})
    	<http://github.com/pulumi/pulumi/sdk/v3@v3.48.0/go/common/util/contract/assert.go:33|github.com/pulumi/pulumi/sdk/v3@v3.48.0/go/common/util/contract/assert.go:33> +0xed
    <http://github.com/pulumi/pulumi/sdk/v3/go/pulumi.marshalInputImpl({0x1e67920|github.com/pulumi/pulumi/sdk/v3/go/pulumi.marshalInputImpl({0x1e67920>?, 0xc00046a200?}, {0x279c0a8?, 0x1b22fe0?}, 0x1, 0x58?)
    	<http://github.com/pulumi/pulumi/sdk/v3@v3.48.0/go/pulumi/rpc.go:391|github.com/pulumi/pulumi/sdk/v3@v3.48.0/go/pulumi/rpc.go:391> +0xa09
    <http://github.com/pulumi/pulumi/sdk/v3/go/pulumi.marshalInput(...)|github.com/pulumi/pulumi/sdk/v3/go/pulumi.marshalInput(...)>
    	<http://github.com/pulumi/pulumi/sdk/v3@v3.48.0/go/pulumi/rpc.go:214|github.com/pulumi/pulumi/sdk/v3@v3.48.0/go/pulumi/rpc.go:214>
    <http://github.com/pulumi/pulumi/sdk/v3/go/pulumi.marshalInputs.func1({0x198ccc5|github.com/pulumi/pulumi/sdk/v3/go/pulumi.marshalInputs.func1({0x198ccc5>, 0x8}, {0x1e67920?, 0xc00046a200?}, {0x279c0a8?, 0x1b22fe0?})
    	<http://github.com/pulumi/pulumi/sdk/v3@v3.48.0/go/pulumi/rpc.go:134|github.com/pulumi/pulumi/sdk/v3@v3.48.0/go/pulumi/rpc.go:134> +0x97
    <http://github.com/pulumi/pulumi/sdk/v3/go/pulumi.marshalInputs({0x272a400|github.com/pulumi/pulumi/sdk/v3/go/pulumi.marshalInputs({0x272a400>, 0xc00053eaf0})
    	<http://github.com/pulumi/pulumi/sdk/v3@v3.48.0/go/pulumi/rpc.go:184|github.com/pulumi/pulumi/sdk/v3@v3.48.0/go/pulumi/rpc.go:184> +0xa18
    <http://github.com/pulumi/pulumi/sdk/v3/go/pulumi.(*Context).prepareResourceInputs(0xc00019a580|github.com/pulumi/pulumi/sdk/v3/go/pulumi.(*Context).prepareResourceInputs(0xc00019a580>, {0x278fe68?, 0xc00046a300?}, {0x272a400, 0xc00053eaf0}, {0x2483e58?, 0x19?}, 0xc000246b40, 0xc00011c480, 0x0, ...)
    	<http://github.com/pulumi/pulumi/sdk/v3@v3.48.0/go/pulumi/context.go:1280|github.com/pulumi/pulumi/sdk/v3@v3.48.0/go/pulumi/context.go:1280> +0x1a5
    <http://github.com/pulumi/pulumi/sdk/v3/go/pulumi.(*Context).registerResource.func1()|github.com/pulumi/pulumi/sdk/v3/go/pulumi.(*Context).registerResource.func1()>
    	<http://github.com/pulumi/pulumi/sdk/v3@v3.48.0/go/pulumi/context.go:832|github.com/pulumi/pulumi/sdk/v3@v3.48.0/go/pulumi/context.go:832> +0x271
    created by <http://github.com/pulumi/pulumi/sdk/v3/go/pulumi.(*Context).registerResource|github.com/pulumi/pulumi/sdk/v3/go/pulumi.(*Context).registerResource>
    	<http://github.com/pulumi/pulumi/sdk/v3@v3.48.0/go/pulumi/context.go:819|github.com/pulumi/pulumi/sdk/v3@v3.48.0/go/pulumi/context.go:819> +0x845

Has anyone else encountered this/know how to fix it?