I exported a pulumi stack, made some hand edits and tried to import it back, but getting following error

error: could not deserialize deployment: unexpected end of JSON input

Any help/docs would be appreciated. I can confirm that the file is valid JSON

I need your help. How to avoid storing encrypted secrets in pulumi state file? Example: in order to create Azure PostgreSQL server I need to set admin password. In this case it will be stored in state file like this:

"type": "azure-native:dbforpostgresql/v20221201:Server",
                    "inputs": {
                        "administratorLogin": "admin",
                        "administratorLoginPassword": {
                            "4dabf18193072939515e22adb298388d": "1b47061264138c...",
                            "ciphertext": "v1:some_ecryption_here"
                        },...

Can it be set as vault path in state file? Or do you know another solution?

Hi Guys. We have migrated our C# Pulumi Stack code from classic Azure to Azure-Native. Before executing '_pulumi up_' we have deleted classic resource from the stack (pulumi state delete) than imported existing resource to stack using 'pulumi import'. When running '_pulumi up_' Pulumi asks to unprotect Storage resource and than recreates it. In a consequence of recreation data in Azure Storage are being lost. Is there a way to migrate without data loss (we cannot lost data in production)?

Is there a way I can ignore an entire resource using pulumi.IgnoreChanges instead of ignoring fields ? I am using golang

Hello, is there a pulumi package to support Apache Cloudstack and VMWARE Tanzu (i saw Vspehere in the docs but not Cloud)?

I'm struggling with create and destroy order for my stack... will move to a more specific channel

I have a project with 2 stacks. I’m exporting a rather large output from stack “B” and accessing it in Stack “A” to create some dependency. Is there anyway I can “hide” it so that it doesn’t clutter the output everytime I

pulumi up

?

I'm getting really weird timeouts, slow downloads of plugins, other strange errors - is pulumi backend API having issues? It's definitely not my computer. Other files download fine. Same issues from multiple geographical locations, colleagues with different operating systems, etc. Happening both locally and in CI/CD

HI , there, 【Urgent online issue seeking assistance】, When I modified the parameters of AWS RDS and set blueGreenUpdate=True, I don’t know why it’s so slow when I run

pulumi up

on the prod. what can I do? ctrl +C or Wait ?

Hi Pulumi Team, Is there any property to disable or enable

Allow AWS CodeBuild to modify this service role so it can be used with this build project

in *aws.codebuild.Project (https://www.pulumi.com/registry/packages/aws/api-docs/codebuild/project/)*? In some use cases, I'd not prefer CodeBuild to modify the service role. Thanks.

Hi there! I'm trying to setup an ssl-certificate for a custom domain, following this guide. Only difference: I use an existing zone (getting it via the zone ID). The whole stack is in eu-west-1, so I created a dedicated provider for us-east-1 (same situation as in the guide). I provide an AWS profile with full admin access and everything else worked fine so far. But as soon as I try to create the cert, Pulumi fails with this message:

Diagnostics:
  aws:acm:Certificate (ssl-cert):
    error: unable to validate AWS credentials.
    Details: no valid credential sources for Pulumi AWS Classic found.

    Please see <https://www.pulumi.com/registry/packages/aws/installation-configuration/>
    for more information about providing credentials.

    Error: failed to refresh cached credentials, no EC2 IMDS role found, operation error ec2imds: GetMetadata, request send failed, Get "<http://169.254.169.254/latest/meta-data/iam/security-credentials/>": dial tcp 169.254.169.254:80: i/o timeout

    Make sure you have set your AWS region, e.g. `pulumi config set aws:region us-west-2`.

Any ideas what could be the issue here?

Anyone a idea? 😄

Bumping for visibility 🙂

when using the object store backend is not possible to use the same (for example) s3 bucket to manage different projects with the same stack name? I am getting errors cause the stacks, even if in different projects, are called the same to visualize the issue: • 1 s3 bucket root-folder | |___network | |__ Pulumi.yaml | |__ Pulumi.dev.yaml | |__ main.py | |___computing |__ Pulumi.yaml |__ Pulumi.dev.yaml |__ main.py

What channel is most appropriate to post a question about Pulumi's GitHub Actions (pulumi/actions@v4)?

Where can I direct questions about access to a specific Pulumi stack? Our stack was managed by someone who is no longer with our company and I need to 1) learn pulumi and 2) gain control of our stack

Hello all, How does the Pulumi Operator integrate with a GitOps style CD like ArgoCD? We want to refrain from rendering YAML through the provider and have ArgoCD detect the same changes as the Pulumi Operator. Are there any docs and/or tips on getting ArgoCD integrated with the Pulumi K8s Operator?

I was looking for some inspiration in the integration tests examples, but it looks like many of the Azure ones are skipped? any reason for that? Do you have another, more complete set that includes container apps + dapr? maybe something that you run yourself as part of CI/CD? https://github.com/pulumi/examples/blob/05ae8e1803d7f44cecac69589175e416e421cdfe/misc/test/examples_test.go#L709

Hello, I'm trying to use the github action for previews. I would like to have it run as an equivalent to

pulumi preview --refresh

where any changes caused by the refresh become part of the preview. The only option I found so far is the

refresh: true

option, which commits the changes to stack state before running the preview. The thing is, I don't want my pull requests to change the state of the stack, I just want to be notified of the drift. Is there any option to do this?

Hello, I'm trying to run the one of the predefine template and after several tries and attempts, I writing here my problem statement Problem statement: Creating S3 Bucket, it is taking too much time I tried deleting the stack and staring from new several times, but it didn't work Is there any limit on the number of resources which I can create using Pulumi? Please let me know if I'm missing anything here

I am using colima instead of docker destop, The following error i am getting while running the

pulumi up

Previewing update (dev)

View Live: <https://app.pulumi.com/shiviraj/my-first-app/dev/previews/6e20735f-68dd-4c92-80c8-dacbe0320959>

     Type                         Name              Plan     Info
     pulumi:pulumi:Stack          my-first-app-dev
     └─ docker:index:RemoteImage  backend-image              1 error


Diagnostics:
  docker:index:RemoteImage (backend-image):
    error: 1 error occurred:
    	* Error pinging Docker server: Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running?

While running

docker context ls

, I am getting the following output

NAME       DESCRIPTION                               DOCKER ENDPOINT                                   KUBERNETES ENDPOINT   ORCHESTRATOR
colima *   colima                                    unix:///Users/shivi/.colima/default/docker.sock
default    Current DOCKER_HOST based configuration   unix:///var/run/docker.sock                                             swarm

What are the possible solutions to fix this issue? Thanks in advance

Hello, we use the pulumi-eks module with several ManagedNodeGroup (https://www.pulumi.com/registry/packages/eks/api-docs/managednodegroup/). But this managedNodeGroups are created and updated one after another. If we use the EKS terraform module, all the managedNodeGroups are updated simultaneously. Does someone know how to achieve the same with the pulumi eks module ?

Something is up with the nodejs docker containers, the last regular tag is 3.54.0 while there are some specific tags of 3.55.0 which i believe is the latest version. Feels like the publishing CI run failed half way through? https://hub.docker.com/r/pulumi/pulumi-nodejs/tags

Is there a way to prevent Pulumi from printing dots to show progress when no TTY is available? It is a very annoying behaviour in a CI/CD pipeline (one can just assume that as long as the process doesn't exit, Pulumi is doing stuff)

Hi, I would like to create an RDS cluster from a snapshot, but am receiving an error from Pulumi:

* creating RDS Cluster (restore from snapshot) (temp-cluster): InvalidDBInstanceState: The server state is not yet available

. My implementation to create the cluster is:

const rdsCluster = new rds.Cluster('db-cluster', {
      clusterIdentifier: `temp-cluster`,
      engine: EngineType.AuroraPostgresql,
      engineMode: EngineMode.Provisioned,
      masterUsername: 'postgres',
      masterPassword: 'postgres',
      databaseName: 'postgres',
      snapshotIdentifier: <clusterSnapshotIdentifier>,
      vpcSecurityGroupIds: [vpcSecurityGroup.id],
    });

Am I missing something necessary? Any help is appreciated!

I'm wanting to generate a docker container style name like "sad_panda" or "amazing_aardvark", use that to name a resource, and store it in state. I've used

@pulumi/random

to generate things and store them in state. However, I don't see any sort of generic construct to do this. Does this need to be a custom provider?

Is there some way to squelch the docker

warning

image output, like this? It doesn’t seem to be particularly useful to have displayed every time.

docker:image:Image (recorder):
    warning: #1 [internal] load build definition from Dockerfile
    #1 sha256:1e567552e9b6c83c2a4d3ff1b9cd8a246ceff98573d0b65e83f21082937e0fd1
    #1 transferring dockerfile: 37B done
    #1 DONE 0.0s

during the pulumi import, we do encounter

secret already exists

hence, we deleted the secret manually (and purged) then add

ignoreChanges

on secret's properties.value. this way, we were able to import successfully to pulumi. However, after removing the

ignoreChanges

Pulumi is not triggering a creation for the secret. Anyone here who encountered the same? Any clue what is happening?

Is it possible to not add local previews from developers to the “Activity” tab for a stack? It makes perfect sense wanting to check your changes before making a PR, but less tracking it every time someone does (in my opinion it makes it harder to get to the important information).

how to call an callback api after 'pulumi up' posting the result