In the docs, it says that:

To create a target group manually, call

createTargetGroup

on the load balancer, or allocate a

NetworkTargetGroup

or

ApplicationTargetGroup

by hand. When doing so, the following additional options are available:

However, the ALB instance created from

awsx.lb.ApplicationLoadBalancer

does not have the

createTargetGroup

function. How should I manually create the target group for an ALB?

Sorry, I have another question. I want to have path-based routing for my ALB but it doesn’t seem like there is a clear way to do this when I’m using the

ApplicationLoadBalancer

from the

awsx.lb.ApplicationLoadBalancer

package. I could see that I can declare the

listeners

directly when I create a new instance of the

awsx.lb.ApplicationLoadBalancer

, but I can only define the

defaultActions

to forward to a target group. How do I add path rules forwarding to another target group in the listeners of my ALB?

This message was deleted.

I've created several networks in a base project (which contains the needed base structure). In another project I wanted to create the needed servers. Now I thought that I can export the network ID (pulumi.iD) in the base project and use it in the other one. But when I try to get the ID in the other project I can't create an IDOutput.

subnetId := stackRef.GetOutput(pulumi.String(name)).AsIDOutput()

It ends up with an:

panic: interface conversion: interface {} is string, not pulumi.ID

I've exported it this way:

ctx.Export(name, subnet.ID())

The exported ID is something like: 2545501-10.10.1.0/24 As such, it's truely a string. :)

Is there way to setup different security secrets for Pulumi up vs Pulumi Preview commands? Example: I want to enable everyone in the company to be able to see pulumi changes, but I dont want them all to be able to run pulumi up on their machine.

This message was deleted.

Any best practices for reducing resources under management? Our usage has grown significantly - which is great we love pulumi! - but our bill has also grown significantly - which is not as great! (as a side note: I don’t love the convoluted pricing. I wish somewhere would just tell me “$x per resource under management per month” instead of making me convert from credits to nanocents to hours to months to dollars.)

anyone else facing issues with the new version of pulumi/actions? it does not seem to allow passing optional parameters anymore in config-map

HI, I imported the azure Vm and code generated gives me these errors. These were fixed by commenting the respective properties but if its invalid why does it appear in output code of the import command. Any resolution ? 1. "osDis.managedDisk.id" is not allowed 2. Code="InvalidParameter" Message="The property 'requireGuestProvisionSignal' is not valid because the 'Microsoft.Compute/Agentless' feature is not enabled for this subscription." Target="requireGuestProvisionSignal"

I have a component that doesn’t correctly give each resource it creates a name that will be unique if more than one instance of the component is created in a stack. I’d like to write a unit test to confirm that all the names are unique, but avoid making the test enumerate each resource that’s expected to be created. Is it possible to write such an assertion? I’m looking around for some method that returns all resources that were declared, but I can’t find anything like that. Thoughts?

Hi all. I'm disallusioned with both Bicep (won't let me register apps) and Terraform (won't let me create Conditional Access to an app), and I am thinking of trying Pulumi. One of the problems I had with Terraform was that I couldn't find out the application_id until after created (obviously), but that the only way to specify

required_resource_access

is inside the application block, so no way to grant permission to the app I was creating. Looks like Pulumi has the same problem, does it?

Hey, I am trying to push my infra using GH using

pulumi/actions@v3

and I am getting

FATAL ERROR: Ineffective mark-compacts near heap limit Allocation failed - JavaScript heap out of memory

in pulumi cloud logs. any thoughts?

Hi Lee Do you have a few mins? I am using crosswalk for eks. As per https://www.pulumi.com/blog/crosswalk-for-aws-1-0/ if I set nodeAssociatePublicIpAddress as false for the cluster, the nodes will have private IPs, however this isn't working this way.

export const cluster = new eks.Cluster(`${stack}-eks-cluster`, {
    name: `${stack}-eks-cluster`,
    skipDefaultNodeGroup: true,
    version: eksConfig.version,
    createOidcProvider: true,
    privateSubnetIds: vpc.privateSubnetIds,
    publicSubnetIds: vpc.publicSubnetIds,
    deployDashboard: false,
    storageClasses: eksConfig.volumeType,
    vpcId: vpc.id,
    useDefaultVpcCni: true,
    instanceRoles: [role],
    nodeAssociatePublicIpAddress: false,
    kubernetesServiceIpAddressRange: eksConfig.kubernetesServiceIpAddressRange,
    tags: {
        Environment: stack,
    }
});

eksConfig.nodegroup.forEach((nodeGroupDetail, index) => {
    eks.createManagedNodeGroup(`${stack}-managed-ng-${index}`, {
        cluster: cluster,
        nodeGroupName: `${stack}-managed-ng-${index}`,
        capacityType: nodeGroupDetail.capacityType,
        instanceTypes: [nodeGroupDetail.type],
        scalingConfig: {
            desiredSize: nodeGroupDetail.desiredCapacity,
            minSize: nodeGroupDetail.minSize,
            maxSize: nodeGroupDetail.maxSize,
        },
        labels: Object.fromEntries(nodeGroupDetail.labels.map(({ key, value }) => [key, value])),
        nodeRole: role,
    }, cluster);
});

I am expecting the nodes in the node group to use the private subnets, however it aint working that way. Am I missing something here?

When I run code using the Pulumi Automation API in a Javascript Project using

"module": "es2020",

in

tsconfig.json

(along with

allowJs

and

checkJs

set to

true

), it fails with the following output in the bash terminal:

err?: Error: Command failed with exit code 255: pulumi up --yes --skip-preview --exec-kind auto.local --stack dev --non-interactive
Updating (dev)

…

pulumi:pulumi:Stack (loremipsum):
    error: Running program '/Users/loremipsum/stacks/server/' failed with an unhandled exception:
    Error [ERR_REQUIRE_ESM]: require() of ES Module /Users/loremipsum/stacks/server/index.js from /Users/loremipsum/node_modules/@pulumi/pulumi/cmd/run/run.js not supported.

…

code: 'ERR_REQUIRE_ESM'

I use es modules throughout the package, there is no

require()

I use. But the

run.js

from

@pulumi/pulumi

is using

require()

. How can I fix this?

I get the following error trying to build Pulumi v3.62.0 using go version go1.18.1 linux/amd64 (per CONTRIBUTING.md):

+ cd pkg
+ go install -ldflags '-X <http://github.com/pulumi/pulumi/pkg/v3/version.Version=0.1.0-alpha.1673497087+g4996550f|github.com/pulumi/pulumi/pkg/v3/version.Version=0.1.0-alpha.1673497087+g4996550f>' <http://github.com/pulumi/pulumi/pkg/v3/cmd/pulumi|github.com/pulumi/pulumi/pkg/v3/cmd/pulumi>
# <http://github.com/pulumi/pulumi/pkg/v3/backend/filestate|github.com/pulumi/pulumi/pkg/v3/backend/filestate>
backend/filestate/backend.go:121:24: undefined: atomic.Pointer
backend/filestate/backend.go:385:18: undefined: atomic.Int64
backend/filestate/backend.go:388:19: undefined: atomic.Int64

Has anyone run into this ?

Holler

do we have a mechanism to apply a provider over an entire group of resources, or do we have to specify for each resource each time?

(i almost feel like resources should support currying)

almost like injecting the provider

child resources... hrm

Is there anyone who can update the hcloud provider? They've got introduced arm as a new architecture. This is already in terraform but not here. As such It's very hard to deploy a new server.

Hi All, I have statement in rules waf like this. I just want to add oversize in xss match statement.

xssMatchStatement: {
                fieldToMatch: {
                    body: {
                        oversizeHandling: "CONTINUE",
                    },
                },
                textTransformations: [
                    {
                        priority: 0,
                        type: "URL_DECODE",
                    },
                    {
                        priority: 1,
                        type: "HTML_ENTITY_DECODE",
                    },
                ],
            },
        },

But when I run the pulumi, there was something error like ’ “error: awswafv2/ruleGroupRuleGroup resource ‘Managed-AllowCrossSiteScriptingBody’ has a problem: Invalid or unknown key. Examine values at ‘RuleGroup.Rules’.” Thank you in advance

Very often azure devops get this error:

error: an unhandled error occurred: Program exited with non-zero exit code: -1

when running

pulumi up --yes --diff --refresh --non-interactive --skip-preview --logflow

exiting early, running the pipeline again and it works...

hello, does anybody encountered this before? when doing a pulumi preview or up there's these bunch of

DEBUG

stdout showing. weird coz debug mode is not even enabled

Hi, assuming we've got two stack using different secrets providers. Is it possible to gain access to the non-secret values of one stack from another, without having access to the secrets provider?

Hi all Can anyone tell my why this isn't creating my registered AzureAD.Application associated with the tenant I create?

GetClientConfigResult current = await GetClientConfig.InvokeAsync();

		var aadProvider = new Provider(
			name: "AadB2cProvider",
			args: new ProviderArgs {
				TenantId = tenant.Id,
				MetadataHost = "<http://management.azure.com|management.azure.com>"
			});

		var appRegistration = new Application(
			name: Environment.Value.GloballyUniqueName,
			args: new ApplicationArgs {
				DisplayName = env.GloballyUniqueName,
				IdentifierUris = $"api://{env.GloballyUniqueName}.<http://azurewebsites.net|azurewebsites.net>",
				Owners = new[] {
					current.ObjectId,
				},
				SignInAudience = "AzureADMultipleOrgs",
				Api = new ApplicationApiArgs {
				 ...
				}
			},
			options: new Pulumi.CustomResourceOptions {
				Provider = aadProvider,
			});

Hi everyone, I am trying to use

awsx.ecr.Image

to publish an image to an ECR repo. This is no problem on AWS but I would also like to do it locally using Localstack. In this case I am experiencing the errors, that can be found here. Is there a simple workaround for this problem or maybe even a solution in sight that would resolve it completely?

Hello, Everyone can anyone please confirm whether pulumi work on concurrent provisioning of infrastructure. I am using golang sdk for pulumi, when I used to provision/modify/destroy resources with single thread everything works fine. But whenever I am using multiple go routine to provision resources it’s givving error some time giving fatal error.

or visit <https://pulumi.com/docs/reference/install/> for manual instructions and release notes.
error: read ".pulumi/Pulumi.yaml": blob (key ".pulumi/Pulumi.yaml") (code=Unknown): RequestError: send request failed
caused by: Get "https://<s3_bucket>/.pulumi/Pulumi.yaml": read tcp 192.168.1.45:56411->3.5.213.145:443: read: connection reset by peer
{"level":"error","@timestamp":"2023-04-13T19:52:16.998165+05:30","caller":"command/command.go:94","msg":"failed to apply this stack","error":"failed to run update: exit status 255\ncode: 255\nstdout: \nstderr: warning: A new version of Pulumi is available. To upgrade from version '3.59.1' to '3.63.0', run \n   $ brew update && brew upgrade pulumi\nor visit <https://pulumi.com/docs/reference/install/> for manual instructions and release notes.\nerror: read \".pulumi/Pulumi.yaml\": blob (key \".pulumi/Pulumi.yaml\") (code=Unknown): RequestError: send request failed\ncaused by: Get \"https://<s3_bucket>/.pulumi/Pulumi.yaml\": read tcp 192.168.1.45:56411->3.5.213.145:443: read: connection reset by peer\n\n"}
{"level":"error","@timestamp":"2023-04-13T19:52:16.998262+05:30","caller":"processor/infra_processor.go:221","msg":"failed to run apply"}
{"level":"error","@timestamp":"2023-04-13T19:52:16.998302+05:30","caller":"processor/infra_processor.go:199","msg":"error while modifying members in this slack channel: <slack_channel_name>, with err: failed to run update: exit status 255\ncode: 255\nstdout: \nstderr: warning: A new version of Pulumi is available. To upgrade from version '3.59.1' to '3.63.0', run \n   $ brew update && brew upgrade pulumi\nor visit <https://pulumi.com/docs/reference/install/> for manual instructions and release notes.\nerror: read \".pulumi/Pulumi.yaml\": blob (key \".pulumi/Pulumi.yaml\") (code=Unknown): RequestError: send request failed\ncaused by: Get \"https://<s3_bucket>/.pulumi/Pulumi.yaml\": read tcp 192.168.1.45:56411->3.5.213.145:443: read: connection reset by peer\n\n"}

though for each resources pulumi s3 bucket is different.

just tested the pulumi ai website. this is incredible. i love it!

Is it possible to change the linked repo of an existing project? I renamed a GitHub repo and the project at app.pulumi.com is linking to the old name (even after a

pulumi up

in a GitHub Action in the renamed repo).