I have a stack on DigitalOcean with three components: a domain, a bucket, and a droplet. I would like to destroy and rebuild the droplet, but leave the domain and bucket alone. What’s the best practices way of doing this? I’m hoping for something more elegant than “just manually delete the droplet then run pulumi up” 🙂

Hi there, I'm trying to add an identity to an existing

Virtual machine scale set

via pulumi, can someone direct me the pulumi function or example how to do this?

Hi there, Scanning pulumi with a security engine, I am facing some issues. In some of these files, it can recognize the signature of some tools in versions which contains security problems. What about that ? Something you are aware about ?

So I'm trying to set up a new Kubernetes install with Flux, but it seems that there's a problem with the generated yaml manifests? Or with the ConfigGroup type in the Go SDK?

Diagnostics:
  pulumi:pulumi:Stack (pulumi-kubernetes-pulumi-kubernetes):
    error: an unhandled error occurred: program exited with non-zero exit code: 2

    panic: fatal: An assertion has failed: {<nil> <nil> <nil> <nil> <nil> <nil> <nil> <nil> <nil> <nil> flux-system flux-system <nil> <nil> <nil> <nil>}: cannot assign v1.objectMetaPtrType to v1.ObjectMeta
    goroutine 42 [running]:

Source code: https://gist.github.com/hbjydev/ba680822b8652812b1c4d238ce5f14f6

URGENT: i accidentally deleted my individual account and didn't know it would delete my user as well. now our org doesn't have any admins, and they can't invite me back. please help!!

Is there a way (without a new component resource) to just wrap some resources and have them inherit resource options? I have a couple of sets of basically unrelated resources, but that happen to share a common dependency. I’d love to just do something like:

WithResourceOptions([dependencyResource, providers], func() {
  ResourceOne(ctx, name, ...)
  ResourceTwo(ctx, name, ...)
})

And have them all automatically get the dependency without having to type it 5 times, or move them around in the tree. Kind of like registering a stack transformation, but not globally.

Curious if any use the Console Api in leu of StackReference to get info about a resource to lookup an id or other info.

Hi folks , I have a quick question. As we are know, the speed of terraform plan is depend on the size of state file. It will be significant slow if the size of state file is large. Do we have same problem when using pulumi? Much appreciated!

expected runtime_environment to be one of [SQL-1_0 FLINK-1_6 FLINK-1_8 ZEPPELIN-FLINK-1_0 FLINK-1_11 FLINK-1_13 ZEPPELIN-FLINK-2_0], got FLINK-1_15.

Is there any way I can get around this locally? The remote API will accept the new value, it’s just local validation in Pulumi that is failing. e.g. maybe there is a flag I can use to turn off this local-only client-side validation?

Hello, when I run 'pulumi about' I get a warning saying: 'Failed to get information about the Pulumi program's dependencies: could not find either rootFolder/src/yarn.lock or rootFolder/src/package-lock.json'. package-lock.json is located under the rootFolder, but pulumi does not find it. In the file Pulumi.yaml I see this property: 'main: src/' but I don't seem to find information on this property anywhere on the internet. Is there a way to tell pulumi where to find the package-lock.json? BTW: everything is working fine. It's just a warning I'd like to get rid of. Thank you very much in advance!! 🙂

Is the schema outputted from

pulumi preview --json --non-interactive

documented anywhere? I just can’t find it.

Hi Everyone, what will be the new implementation for network.NetworkInterfaceSecurityGroupAssociation & network.NetworkInterfaceApplicationSecurityGroupAssociation in azure-native python. Since i'm doing migration from azure-classic to azure-native in python. Someone can suggest on, it will be really helpful.

Philosophical question. If I want to set up some initial configuration on a resource—say creating initial users and passwords via an API—is that something that can/should be done with Pulumi or with a different tool?

Looks like the docs at https://www.pulumi.com/registry/packages/aws/api-docs/wafv2/webacl/ are busted. It's not loading properly, not to mention the UI is different from the rest of the docs

Hi Pulumi Team - Is there a pulumi API that can list all the resources provisioned for AWS/GCP? Thx.

We have local managed stack. Something happened and now when we do

pulumi up

we are running into this error

could not query backend for stacks: unexpected end of JSON input

Anyone out there do dev on RV Starlink? All my internet usage is perfectly fine except for running

pulumi up

which will sometimes either take 20+ minutes or time out.

Is there a clever way to determine why Pulumi might want to replace an object when re-running

pulumi up

?

is there a way to know what credentials pulumi is using when running pulumi up? I ask because I am getting a 403 when trying to create a resource, but my CLI command works without issues, this is for GCP

Hi, I find it kinda odd that ec2 user data won’t accept a file asset. Am I missing something?

I know project level configuration was just released, however, it does seem to break your integration testing framework quite well. I can leverage project level configuration with the cli just fine, but within an integration test it fails to unmarshal the config key within the Pulumi.yaml.

Hello Community, We are running pulumi-kubernetes-operator in EKS nodegroup. We are noticing that the after sometime the stacks state changes to failed due to stacks state file gets locked, while investigating further we identified that the operator is leaving the Zombie(defunct) process behind e.g.

ec2-user 31942 14939  0 Nov30 ?        00:00:00 [pulumi-resource] <defunct>
ec2-user 31943 14939  0 Nov30 ?        00:00:00 [pulumi-resource] <defunct>
ec2-user 31944 14939  0 Nov30 ?        00:00:00 [pulumi-resource] <defunct>
ec2-user 31945 14939  0 Nov30 ?        00:00:00 [pulumi-language] <defunct>
ec2-user 31946 14939  0 Nov30 ?        00:00:00 [pulumi-resource] <defunct>
ec2-user 31947 14939  0 Nov30 ?        00:00:00 [pulumi-resource] <defunct>

the count of above process keeps on increasing and reaches the cgroups limit set at

/sys/fs/cgroup/pids/kubepods/pids.max

due to this there is shortage of resource in the node and the CNI(aws-node) keeps on restarting due to Livlinessprobe failure. What should we do in overcome this? Any help will be greatly appreciated, this is blocking our GA.

Hello Community, Has anyone managed to add AWS

OriginRequestPolicy

or a

CachePolicy

to a CloudFront Distribution

Hello, is anyone able to successfully manage aws wafv2 resources (classic|native) with Pulumi? I'm experiencing breaking issues with both providers.

What would be the proper way to write this without hackily discarding the

apply

return value in

recordsets.apply

?

const recordsets = privateEndpoint.customDnsConfigs.apply(x => {
  if (typeof x === 'undefined') {
      return [];
  }

  const result = [];
  for (const dnsConfig of x) {
      const name = dnsConfig.fqdn!.split('.')[0];
      const ipAddresses = dnsConfig.ipAddresses!.map(x => {
          return {ipv4Address: x};
      });

      result.push({
          name: name,
          ipAddresses: ipAddresses
      });
  }

  return result;
});

recordsets.apply(rs => {
  for (const x of rs) {
      new network.PrivateRecordSet(`resource-pe-dns-${name}`, {
          privateZoneName: zone.name,
          recordType: "A",
          relativeRecordSetName: x.name,
          resourceGroupName: resourceGroup,
          ttl: 300,
          aRecords: x.ipAddresses
      });
  }

  return true;
});

Hi! Is there a way to rename a project?

It appears the Fargate TS sample code (link) uses deprecated bindings. It uses

awsx.elasticloadbalancingv2.NetworkListener

, but this no longer exists. I think it moved from

awsx

to

aws

at some point, to

aws.elasticloadbalancingv2.Listener

. (Could someone verify / explain what falls under

awsx

vs

aws

?) And then I find out from the docs that now this is deprecated in favor of

aws.lb.Listener

, so I should really be using that? And to further the confusion, I learn that everything under

@pulumi/aws

is known as classic, and if I want to stay modern I should actually be using

@pulumi/aws-native

instead of any of the options above? Incredibly, although

elasticloadbalancingv2

got renamed to

lb

in classic, it's back to being called

elasticloadbalancingv2

in native!

Is there a set of default and defined policies that we can run against our deployment on a regular basis ? Right now i am trying to figure out compliance related issues with my existing pulumi stack, and going forward, I would like to encode those into pulumi polices or opa policies. Any recommendations on this use case.