do you know if the videos from PulumiUP will be shared somewhere and where?

Hi Pulumi Community, We're building a Scala SDK for Pulumi (codename: Besom) at VirtusLab, the company behind Scala 3, and it's getting into shape quickly. Our main goals are to a) make Pulumi accessible for all Scala developers via tight integration with core language tooling and b) make things as type-safe and pleasant to use as possible. Here's a sneak peek via Asciinema at how it looks like at the moment: https://asciinema.org/a/591747 We are currently working on getting provider libraries built and published and also, using awesome metaprogramming facilities of Scala 3, on Pulumi Magic Lambda support. We have a prototype of native AWS lambdas with an AWS SDK support running in sub-15ms execution times and are currently working on integrating this into Besom to bring a new dimension to serverless development via Pulumi. Our estimate for first beta availability (and also open access to the source repository) is around the end of June and start of July. There's obviously still a lot of work to do to polish the user experience and make it even more type-safe, ergonomic and easy to use. Our implementation makes it possible to support purely functional programming stacks that are quite popular in Scala (Cats-Effect, ZIO) but we have plans to support eager evaluation semantics too (so, basically the usual execution semantics of Pulumi). I have announced this before on Lambda Days 2023 conference and yesterday in chat on Pulumi UP but this is the first time it's being mentioned here on Slack :) It's probably the first community-driven SDK* and we've gathered some insight while building it. We like to share and give back to the community that is supporting this majestic infra-as-code tool so if you are interested in learning about how we built this (there's no runtime reflection in our code, Scala can be used as a compile-time reflected language only and that's exactly what we do!), give me a shout here or via email - lbialy@virtuslab.com. We can help you understand the basics of our architecture and maybe that will lead to some spin-offs like Pulumi-rust? P.S.: My friend from VirtusLab, @steep-minister-28895 asked me to mention that Besom is probably the first top-to-bottom community-driven SDK for Pulumi as his team built Pulumi-Kotlin before us (https://github.com/VirtuslabRnD/pulumi-kotlin) 😉

With cli 3.72.0, I got "Signature fields not well formed" error message trying to login to azure blob storage main container

pulumi login <azblob://main>

, I have sas token stored in $env:AZURE_STORAGE_SAS_TOKEN. But it works fine with cli 3.25. I would really appreciate if someone can point me to the right direction

Hello! I was wondering if there was an easy way to wait for a newly created

aws.ec2.Instance

to be in a running state before attempting to do a

command.remote.Command

on that host.

Good morning all, We have a major issue on our hands and need some help

We have been deploying stacks to azure for many months. Starting yesterday around noon CST we are no longer able to change our secret provider to the same azure keyvault key

/home/vsts/work/_temp/5b92ef8e-7223-4b8e-be15-46265b561c71/pulumi/pulumi login <azblob://pulumi>

Logged in to fv-az708-326 as vsts (azblob://pulumi) /home/vsts/work/_temp/5b92ef8e-7223-4b8e-be15-46265b561c71/pulumi/pulumi stack select <stack name redacted> -c /home/vsts/work/_temp/5b92ef8e-7223-4b8e-be15-46265b561c71/pulumi/pulumi stack change-secrets-provider azurekeyvault://<vault name redacted>.vault.azure.net/keys/pulumi-stack-key --logtostderr --logflow -v 11 W0616 120445.614412 1698 log.go:98] log level 11 will print sensitive information such as api tokens and request headers Migrating old configuration and state to new secrets provider I0616 120446.949600 1698 log.go:80] defaultSink::Error(error: could not deserialize deployment: constructing secrets manager of type "cloud": secrets (code=InvalidArgument): POST https://<vault name redacted>.vault.azure.net/keys/pulumi-stack-key/decrypt -------------------------------------------------------------------------------- RESPONSE 400: 400 Bad Request ERROR CODE: BadParameter -------------------------------------------------------------------------------- { "error": { "code": "BadParameter", "message": "The parameter is incorrect.\r\n" } } -------------------------------------------------------------------------------- ) error: could not deserialize deployment: constructing secrets manager of type "cloud": secrets (code=InvalidArgument): POST https://<vault name redacted>.vault.azure.net/keys/pulumi-stack-key/decrypt -------------------------------------------------------------------------------- RESPONSE 400: 400 Bad Request ERROR CODE: BadParameter -------------------------------------------------------------------------------- { "error": { "code": "BadParameter", "message": "The parameter is incorrect.\r\n" } } --------------------------------------------------------------------------------

We are storing our stacks in Azure blob storage.

The keyvault key has not changed. The blob storage has not changed.

@stocky-daybreak-33430 this is due to an issue with an upstream library, we are cutting a release to fix

We are able to create and up new stacks. Using the exact same storage account and keyvault key

downgrade the pulumi cli or wait for the fix https://github.com/pulumi/pulumi/pull/13184

I have a new use case to add a React wfe to Pulumi. Anyone built anything like this yet?

for a typescript project, if you execute resources by calling a an async function() within index.ts - how are resources exported to be used for stack reference? for example: index.ts

const main = async (): Promise<void> => {
    const coreVpc = vpc.createVpc(...);
}

main();

should I just return the coreVpc var within the async function? does pulumi resolve the output in this case?

const main = async (): Promise<{ coreVpc: Vpc }> => {
    const coreVpc = vpc.createVpc(...);

    return { coreVpc };
}

main();

I would like to get a Pulumi secret value from my config and use it as a string in my code. Is that at all possible? I've been banging my head trying to figure out how to do this for hours.

apply

does not seem to convert

Output[str]

despite documentation and everyone on the internet saying this is the way to accomplish this... I'm working in Python, Btw.

Hello Im new here!

Should

awsx.ec2.Vpc.fromExistingIds(...)

show up as a 'create' in the plan? is this just a logging misnomer?

I stumbled by this website

when will the 'refer your friends' option will be back up? Im just curious and I know the problems your'e facing.

anyone there?

I'm trying to utilize a vpc stack reference

const vpc = awsx.ec2.Vpc.fromExistingIds(`vpc-${environment}-${regionAlias}`, {
        vpcId,
        privateSubnetIds,
        publicSubnetIds,
    });

For some reason the subnets that it returns have the wrong subnet name I'm seeing • vpc-dev-use1-private-0 • vpc-dev-use1-private-2 • vpc-dev-use1-private-1 • vpc-dev-use1-private-3 • vpc-dev-use1-public-1 • vpc-dev-use1-public-0 instead of • vpc-dev-use1-data-private-0 • vpc-dev-use1-data-private-1 • vpc-dev-use1-app-private-0 • vpc-dev-use1-app-private-1 • vpc-dev-use1-edge-private-0 • vpc-dev-use1-edge-private-1 The VPC is created in another stack like so:

return new awsx.ec2.Vpc(vpcName, {
    ... redacted for brevity ...

    // Allocate three subnets per AZ: public (edge), private (app), private (data):
    subnets: [
        { type: 'public', name: 'edge', cidrMask: 24 }, // 256 IPs with CIDR mask of /24
        { type: 'private', name: 'app', cidrMask: 24 }, // 256 IPs with CIDR mask of /24
        { type: 'private', name: 'data', cidrMask: 24 }, // 256 IPs with CIDR mask of /24
    ]
});

What am I doing wrong?

Just wanted to share some thoughts on working with Kubernetes CRDs in Pulumi, especially with Typescript. Currently, it's challenging to maintain type-safe coding with CRDs due to certain issues. The crd2pulumi CLI, while initially promising, has been somewhat inconsistent. For instance, I encountered issues when using it with the Pulumi Operator CRD. There's also a complexity around code generation, particularly with a monolithic repo setup. The CLI tends to produce an opinionated project with its own package.json, tsconfig, etc. which aren't aligned with my linting or tsconfig rules. Managing separate repositories for each CRD isn't ideal either. My preference leans toward vendored packages that can be updated easily. An article I found here discusses a potential solution in community-maintained SDKs. But this seems to have its drawbacks too, particularly around longevity and consistency. This is evident from a repository like this which hasn't been updated in a year. Given these concerns, I've been using ConfigFile to apply the raw yaml for CRDs in Pulumi. But this means missing out on some of Pulumi's core benefits - type safety and code completion, especially when dealing with custom resources, which comprise a significant chunk of my work. I'm curious about others' experiences with Kubernetes in Pulumi and Typescript. Also, any insights on how Pulumi plans to address these CRD issues would be appreciated.

anyone got an idea about percona xtradb i need to know how to retrive existing data after db deployment got restarted

Hey guys, when i try to pull down my project to get started, it shows me this - error: [401] Unauthorized: No credentials provided or are invalid.

How do I solve this

is it possible to import an existing aws-loggroup into a new stack state so it won't be recreated or error out that it already exists? I want to import only the state not generate any code

what a strange error I got using `pulumi import`:

error: preview failed: failed to validate provider config: could not find latest version for provider cloudwatch: 404 HTTP error fetching plugin from <https://api.github.com/repos/pulumi/pulumi-cloudwatch/releases/latest>. If this is a private GitHub repository, try providing a token via the GITHUB_TOKEN environment variable. See: <https://github.com/settings/tokens>

Hello, we have started seeing an error today when running

pulumi up

. The error is

Error: cannot ignore changes to the following properties because one or more elements of the path are missing: "tags.tag_created_date"

We have added a

ResourceTransformation

in our

StackOptions

to ignore changes to the

tag_created_date

. We are using

pulumi-azure-native

and on vers

3.72.2

of the CLI. This has been working without any issue till today. We can fix it by deleting the tag in question from the resource, doing a

pulumi refresh

and then

pulumi up

. A very cumbersome workaround and would appreciate if anyone can help us diagnose the issue. Thanks

Hi all, new to pulumi. We've been having a mostly great experience with pulumi. On two occasions our stack has developed a persistent error for any

up/preview

.

Grpc.Core.RpcException: Status(StatusCode="Unknown", Detail="Invalid asset encountered when unmarshaling resource property")

• The stack trace and logs do not indicate any specific resource that is tripping it up • Rolling back source does not resolve • The only workaround we found was to destroy the entire stack, which will be problematic once we're dealing with a production stack • Stack trace in the thread.

Hey All, Sorry I have posted in the Go Channel but there isn’t a lot of activity there. So I thought. I would Rephrase my question and see if some one can answer more Generally 😉 … For context I am using Go. But I think my Question is more specific to Pulumi Types. When dealing with a Pulumi Type that is an “ArrayInput” object. Can we use native language concepts to “Append” or “Splice” These Arrays. A Specific Example. I am trying to Dynamically construct a collection of Load Balancer Backend Groups for Google Cloud with Pulumi in GO.

Backends: &compute.BackendServiceBackendArray{}

Is the Struct I would like to Populate. I could simply say

Backends: &compute.BackendServiceBackendArray{
				&compute.BackendServiceBackendArgs{
					Group: "/projects/xxxx/global/backendservice/yyyy",
				},
			},

However this is obviously not dynamic. It I wanted to build

BackendServiceBackendArray{}

in a loop; or If I wanted to Append

&compute.BackendServiceBackendArgs{}

into the Array. Is there a way to do this… for Example

backend := &compute.BackendServiceBackendArray{}
backends = append(backends, &compute.BackendServiceBackendArgs{Group: "xxxxxx"})

I am looking for the correct way to dynamically build out these InputArray Objects?