Hey guys! How can I use a specific plugin resource version? I have this plugin in my ~/.pulumi/plugins repo:

xyz         resource  0.0.40        26 MB   50 minutes ago  36 seconds ago

But when I do pulumi up I get these messages:

warning: resource plugin xyz is expected to have version >=0.0.19, but has 0.0.1; the wrong version may be on your path, or this may be a bug in the plugin
    warning: resource plugin xyz is expected to have version >=0.0.40, but has 0.0.1; the wrong version may be on your path, or this may be a bug in the plugin

Why does it expect 0.0.19? And how can I make it point to the version I have locally?

I’m thinking about give visibility to developers to able update Pulumi secret, but I don’t want developer install Pulumi directly on each laptop, so instead of do something like

pulumi config set --secret secretMessage "it's a secret to everybody"

then I want dev push secret string to our github repo like

v1:6N+U5QAQu244Jqp1:1G

, is possible to generate secret without install

pulumi

?

Hey peeps, quick question on exporting resource. I am trying to export CustomResource from one stack to another for the purpose of using its data in the construction of another CustomResource. So; Stack1 has Res1, I would like to export it, but it remains managed in stack 1 Stack2, import Res1 as it is needed to construct Res2 I know i can export/import string, but what i would like is for Res1 to be a "Res1" in Stack2, not a json payload of metadata to keep the code dealing with resource object in a ubiquitous fashion. is there an easy way to that. I find my self having some issue reconstructing the object. Thanks!

in github in a PR, when you run preview, the pulumi bot comments resource changes, and when you push more commits it comments the new resource changes and minimizes its previous comment about that stack. but when the new pushed commit results in no resource changes, it doesn't comment and does not minimize its previous comments. So when looking at the comments it looks like the resources will be changed when it wont 🤔 Is there a setting for this behaviour, or is it a "bug"?

Hi! Excuse me, what is a pulumi type?

#typescript #azure Hello, I am attempting to modify a Kubernetes Configuration by rendering a custom YAML. Looking over this documentation: https://www.pulumi.com/docs/guides/adopting/from_kubernetes/ the area that talks about

Rendering Kubernetes YAML

should have my answer, however that does't let wright my own YAML, which is what I need. This is what my YAML looks like:

apiVersion: "<http://aadpodidentity.k8s.io/v1|aadpodidentity.k8s.io/v1>"

kind: AzureIdentityBinding metadata: name: aad-pod-identity spec: azureIdentity: "azure-identity" selector: "aad-pod-identity"

Are there any maintainers of https://github.com/pulumi/pulumi-terraform-bridge around?

hey all; having a bit of a crisis lol any help would be super appreciated ~<3 I ended up accidentally deleting both dev and prod aws load balancers while testing listeners. been doing RCA and getting more and more confused. it can’t be the CLI (I think) because the prod stack hasn’t been touched in a week and it’s extremely unlikely that I changed pulumi stacks via CLI (feels like it’d be too much friction) but, the CloudTrail log says this damning thing:

"eventType": "AwsApiCall",

my question is: is there a programmatic way I could have done an action that is stack-agnostic that deleted multiple resources? tysm!!

Hello! I am trying to capture the clientId from the ManagedCluster Output. I was able to do it so by writing this:

const clientId = managedCluster.identityProfile.apply(profileIds => profileIds?.kubeletIdentity.clientId);

However, the clientId is

Undefined

at all time. I am ABLE to see the

identityProfile

property being filled out in the Pulumi interface under Resource. How can I ensure I am calling the clientId when it's available?

hey Pulumists, please advise on how to add a deliberate delay before a resource is created; it’s being created too early and it triggers other things which will fail because other resources take more time to fully provision and become available (after Pulumi reports them as done)

hi, can I use pulumi as a replacement of ansible?

any idea related to this?

Hi, I'm getting a weird issue when running pulumi up, the same build succeeded last week and suddenly started giving this error. I am not using AspNetCore in my project at all. Any ideas?

You must install or update .NET to run this application.
    Architecture: x64
    Framework: '<http://Microsoft.AspNetCore.App|Microsoft.AspNetCore.App>', version '5.0.0' (x64)
    .NET location: C:\Program Files\dotnet\
    The following frameworks were found:
      3.1.4 at [C:\Program Files\dotnet\shared\<http://Microsoft.AspNetCore.App|Microsoft.AspNetCore.App>]
      3.1.6 at [C:\Program Files\dotnet\shared\<http://Microsoft.AspNetCore.App|Microsoft.AspNetCore.App>]
      3.1.20 at [C:\Program Files\dotnet\shared\<http://Microsoft.AspNetCore.App|Microsoft.AspNetCore.App>]
      3.1.32 at [C:\Program Files\dotnet\shared\<http://Microsoft.AspNetCore.App|Microsoft.AspNetCore.App>]
      6.0.5 at [C:\Program Files\dotnet\shared\<http://Microsoft.AspNetCore.App|Microsoft.AspNetCore.App>]
      6.0.13 at [C:\Program Files\dotnet\shared\<http://Microsoft.AspNetCore.App|Microsoft.AspNetCore.App>]
    Learn about framework resolution:
    <https://aka.ms/dotnet/app-launch-failed>
    To install missing framework, download:
    <https://aka.ms/dotnet-core-applaunch?framework=Microsoft.AspNetCore.App&framework_version=5.0.0&arch=x64&rid=win10-x64>

    error: an unhandled error occurred: Program exited with non-zero exit code: 2147516566

Getting this on one of my stacks when I do pulumi up and i'm not realy sure where its coming from?

Seems to have started after updating the pulumi version

Hihi I could use some help figuring out how to get the Github Pulumi App to post the results of previews on my PR from Buildkite. I saw that there was a previous thread back in 2019: https://pulumi-community.slack.com/archives/C84L4E3N1/p1553911159097500 And looking at detect.go in Pulumi, it appears Buildkite support has been added. However I'm getting comments from previews run on Buildkite. Sidenote, not sure if this is helpful, I'm currently working on transition from CircleCI so I'm running previews on both CI systems.

Wondering if anyone has come across a Pulumi Nautobot provider/integration? (or a terraform one which could be ported) If not, what would be the appetite for something like this?

Hi, I have a question about the intended workflow for Pulumi with GKE clusters - because of the auth deprecation in 1.26, I'm now getting these errors on

pulumi up/preview

in a CI environment which was using the old auth mechanism.

error: failed to initialize discovery client: The gcp auth plugin has been removed.
    Please use the "gke-gcloud-auth-plugin" kubectl/client-go credential plugin instead.
    See <https://cloud.google.com/blog/products/containers-kubernetes/kubectl-auth-changes-in-gke> for further details

The fix for this seems to be to add a

gcloud container clusters get-credentials CLUSTER_NAME

step before running

pulumi up

. Up until now we'd been allowing Pulumi to generate a random suffix on all Kubernetes resources including the cluster name (and CI didn't need to know what the cluster name is), but it seems like now we will need to explicitly reference a cluster name in CI to authenticate. This seems fine once a cluster has already been created, but for newly created clusters it seems like we'd need to bring the cluster up once manually, get the name that Pulumi generates, and then update CI to reference the correct cluster name. Does that sound like the intended workflow, or is there another way to manage authentication for clusters with randomly generated names?

We have been struggling to use crd2pulumi for fluxv2 CRDs. Anyone happen to get these to work?

Ok I feel dumb about this but I'm trying to implement RBAC on my AKS stack, whenever I do Pulumi up I'm getting a prompt like this that hangs everything up when it tries to deploy my namespace: pulumipulumiStack (aks-private): To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code X123456 to authenticate. Why is it trying to do browser authentication? When I turn Azure AD RBAC off I have no issue. This seems to occur with both Azure RBAC and Kubernetes RBAC with Azure AD Authentication.

Hi all, I'm trying to correlate an error in Pulumi with AWS CloudTrail logs. The error doesn't show up under the username it should, so I'm trying to find something by time. Is there a way to get timestamps into the Pulumi console output?

Hi Team, I understand we can import single / multiple resources by specifying each resource id. I would like to know if there is any simple and singe import command to import all the resources that is present in Azure resource group without mentioned each of resource id

Hi, I'm trying to deploy a helm chart that I created myself and pushed to ACR using pulumi. When I test locally it worked fine, however when I tried to do this from my build-environment I get the following error.

error: failed to pull chart: failed to authorize: failed to fetch anonymous token: unexpected status: 401 Unauthorized

The weird thing is that it works if I do a

docker login

to my repository locally and when I logout it doesn't, so it is probably something with regards to the embedded helm CLI that requires authentication and falls back to the environment if it doesn't exist, but I cannot seem to set this correctly. I've tried to use the following https://www.pulumi.com/registry/packages/kubernetes/api-docs/helm/v3/release/#repositoryopts to set a docker username and password, but that didn't seem to work. Relevant config so far looks like this

Chart = oci://<ContainerRegistry>/<Chart>,
            RepositoryOpts = new RepositoryOptsArgs()
            {
                Username = <DockerUsername>,
                Password = <DockerPassword>,
            },
            Version = <HelmVersion>

Hi all, I have a question and am in a bit of a import pickle. I have three Azure App Services created/functioning. I have done the import of the App services as well as used Pulumi Secret Manager to export all secrets to yaml file. I'm using these for existing secrets and app service: const config = new pulumi.Config(); const appService = new azure.appservice.AppService Unfortunately every time I run pulumi preview --diff to see what the index.ts is needing for existing resources, I get all sorts of attributes it wants to delete/add including wanting to re-add all secrets. I can give more details but hoping for any type of help for best practice here when diffs seem to keep on coming

I have a resource which has dependencies and

deleteBeforeReplace

, if that resource needs to replaced the dependencies must also be deleted (because they depend on the parent resource, and the parent resource can't be deleted while they exist) -- this isn't what happens though and the resource can't be deleted, and thus can't be replaced

Hi all, I'm new to pulumi. Can someone please point me to any examples of managing pulumi micro stacks using c#. Thanks

Hi all, I just got to know about Pulumi a few days back. Does anyone know of any open-source multi-tenant PaaS (similar to Heroku) built with Pulumi? If not, is it possible to build one using Pulumi? Thanks!

Hello team, I'm trying to spin up an AWS ECS cluster on EC2 infra using Pulumi example https://github.com/pulumi/examples/tree/master/aws-py-ecs-instances-autoapi But for some reason it fails when creating the

ecs_instance_profile

resource due to

ResourceNotReady: exceeded wait attempts

Then i run update again and its being created normally I tried using

custom_timeouts=pulumi.CustomTimeouts(create='5m')

but it doesn't seem to effect anything, any suggestions on what i'm missing here?