pulumi-community #general

prehistoric-printer-15534

06/25/2023, 2:35 PM

Hi 🙂 I'm looking to run

pulumi up

in a remote machine, based on a
pulumi preview
run that was manually approved. Is there a way to achieve this? Ideally, I imagine a

--etag

flag in the Pulumi CLI, that accepts some pre-existing diff checksum.

wide-island-42641

06/26/2023, 6:59 AM

👋 Hi everyone!

wide-island-42641

06/26/2023, 6:59 AM

I am trying to create on vm using pulumi and C# on azure portal and i am getting below error

wide-island-42641

06/26/2023, 6:59 AM

image.png

wide-island-42641

06/26/2023, 7:00 AM

an idea where to get this ssh key

wide-island-42641

06/26/2023, 7:00 AM

and why this is required

wide-island-42641

06/26/2023, 7:00 AM

i tried finding any help but no luck

adorable-analyst-27426

06/26/2023, 9:12 AM

getting error like so, anyone can help azure-nativenetworkRecordSet (app-cname-record): error: Preview failed: azure.BearerAuthorizer#WithAuthorization: Failed to refresh the Token for request to https://management.azure.com/subscriptions/xxxxxxxx/resourceGroups/domain-names/providers/Microsoft.Network/dnszones/product.co.uk/CNAME/devapi.mi?api-version=2018-05-01: StatusCode=401 -- Original Error: adal: Refresh request failed. Status Code = '401'. Response body: {"error":"invalid_client","error_description":"AADSTS7000215: Invalid client secret provided. Ensure the secret being sent in the request is the client secret value, not the client secret ID, for a secret added to app 'xxxxxxxxxxxxxxxxxxx'.\r\nTrace ID: 5c2bcfa-620d-478f-ba6b-dee9c0b22e00\r\nCorrelation ID: f4b6ef99-82c7-4046-a2c2-0bab66801da2\r\nTimestamp: 2023-06-26 085009Z","error_codes":[7000215],"timestamp":"2023-06-26 085009Z", "trace_id":"05c2bcfa-620d-478f-ba6b-dee9c0b22e00","correlation_id":"f4b6ef99-82c7-4046-a2c2-0bab66801da2","error_uri":"https://login.microsoftonline.com/error?code=7000215"} Endpoint https://login.microsoftonline.com/xxxxxxxxxx/oauth2/token?api-version=1.0

busy-queen-53310

06/26/2023, 3:02 PM

Hi everyone! I am trying to set a scale out limit on my consumption plan function app via pulumi. this is the code var functionApp = new FunctionApp(name, new FunctionAppArgs { ResourceGroupName = _settings.ResourceGroup, AppServicePlanId = appServicePlan.Id, Name = name, Version = _settings.Functions.ExtensionVersion, Identity = new FunctionAppIdentityArgs { Type = "SystemAssigned" }, StorageAccountName = _storageAccountName, StorageAccountAccessKey = _storageAccountKey, AppSettings = configurations, SiteConfig = new FunctionAppSiteConfigArgs { AlwaysOn = _settings.Functions.IsDedicatedPlan(), AppScaleLimit = maxScaleOutLimit, (set at 10 via release pipeline variable) DotnetFrameworkVersion = _settings.Functions.DotnetFrameworkVersion, } }); But when I deploy this the scale out limit is not being set or changed at all, it is still at the default (see screenshot). Am I missing another configuration?

adorable-analyst-27426

06/26/2023, 3:58 PM

how to set different subscription Id, client Id, secret and Tenant id from your current logged in const cnameRecord = new network.RecordSet( 'app-cname-record', { resourceGroupName: domainRgName, zoneName: dnsZoneName, recordType: 'CNAME', relativeRecordSetName: domainName, cnameRecord: { cname: httpFunction.defaultHostName }, ttl: 3600, }, { provider: aiProvider } );

flaky-holiday-20645

06/26/2023, 5:35 PM

Hi. I made some changes to the

vpcConfig

for lambda callback functions, but pulumi doesn’t detect those changes when doing a

pulumi up

, is there something special that needs to be done to get pulumi to identify this configuration change?

brief-car-60542

06/27/2023, 5:19 AM

I have this code.

Copy code

import { services } from './service';
import { clusters } from './cluster';
// get full cluster array output
export const clusterRegion: aws.ecs.Cluster[] = clusters[aws.Region.USWest2] as aws.ecs.Cluster[];
// get correct id
export const clusterRegionId = clusterRegion[0]?.id || '';
// get full service array output
export const Services: aws.ecs.Service[] = services[aws.Region.USWest2] as aws.ecs.Service[];
// !!!no value!!!
export const ServicesID = Services[0]?.id || '';

I try to check everything. Just dont understand what is the different?

wide-cat-87818

06/27/2023, 12:04 PM

Hi guys, some time ago we raised an issue regarding the diff in preview mode for dynamic resource providers. https://github.com/pulumi/pulumi/issues/12738 Is there somebody who can support with this? It is very annoying to not see the changes and it was working in older versions. Thanks a lot! 🙂

nice-application-79035

06/27/2023, 9:15 PM

Hello, I created the database account using https://www.pulumi.com/registry/packages/azure-native/api-docs/documentdb/databaseaccount/. Is it possible to insert documents/data into CosmosDb via pulumi? Thank you in advance!

brief-car-60542

06/27/2023, 9:25 PM

How do you wait for a resource to be returned when it is in a array?

rich-glass-69138

06/28/2023, 10:33 AM

Hello All…, I am looking for a collaboration for my gcp project to setup a pulumi deployment. Please reply to my thread. Thanks

creamy-ambulance-91738

06/28/2023, 3:24 PM

Hey team, just wondering why the pulumi cli describe format is a bit funky. When I run "pulumi up" I get the following (correct) hierarchy:

Copy code

Type                                 Name                                    Plan       
 +   pulumi:pulumi:Stack                  cloudflared-tunnels-sandbox             create     
 +   ├─ components:tunnels:Tunnel         gb-lon-li-cfdtunnel                     create     
 +   │  ├─ random:index:RandomId          gb-lon-li-cfdtunnel-argoSecret          create     
 +   │  └─ cloudflare:index:Tunnel        gb-lon-li-cfdtunnel-tunnel              create     
 +   ├─ components:tunnels:Tunnel         blease-test                             create     
 +   │  ├─ random:index:RandomId          blease-test-argoSecret                  create     
 +   │  └─ cloudflare:index:Tunnel        blease-test-tunnel                      create     
 +   ├─ components:tunnels:TunnelRoute    blease-test                             create     
 +   │  └─ cloudflare:index:TunnelRoute   blease-test-route-192.168.1.0/24        create     
 +   └─ components:tunnels:TunnelConfig   gb-lon-li-cfdtunnel                     create     
 +      └─ cloudflare:index:TunnelConfig  gb-lon-li-cfdtunnel-tunnel-config       create

However when I go to describe the stack the indentation/ordering is off. cloudflareindexTunnelConfig is under componentstunnelsTunnelRoute:

Copy code

+ pulumi:pulumi:Stack: (create)
    [urn=urn:pulumi:sandbox::cloudflared-tunnels::pulumi:pulumi:Stack::cloudflared-tunnels-sandbox]
    + components:tunnels:Tunnel: (create)
        [urn=urn:pulumi:sandbox::cloudflared-tunnels::components:tunnels:Tunnel::gb-lon-li-cfdtunnel]
    + components:tunnels:Tunnel: (create)
        [urn=urn:pulumi:sandbox::cloudflared-tunnels::components:tunnels:Tunnel::blease-test]
        + random:index/randomId:RandomId: (create)
            [urn=urn:pulumi:sandbox::cloudflared-tunnels::components:tunnels:Tunnel$random:index/randomId:RandomId::blease-test-argoSecret]
            [provider=urn:pulumi:sandbox::cloudflared-tunnels::pulumi:providers:random::default_4_13_2::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
            byteLength: 35
        + random:index/randomId:RandomId: (create)
            [urn=urn:pulumi:sandbox::cloudflared-tunnels::components:tunnels:Tunnel$random:index/randomId:RandomId::gb-lon-li-cfdtunnel-argoSecret]
            [provider=urn:pulumi:sandbox::cloudflared-tunnels::pulumi:providers:random::default_4_13_2::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
            byteLength: 35
        + cloudflare:index/tunnel:Tunnel: (create)
            [urn=urn:pulumi:sandbox::cloudflared-tunnels::components:tunnels:Tunnel$cloudflare:index/tunnel:Tunnel::gb-lon-li-cfdtunnel-tunnel]
            [provider=urn:pulumi:sandbox::cloudflared-tunnels::pulumi:providers:cloudflare::default_5_4_1::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
            accountId : "00991122"
            configSrc : "cloudflare"
            name      : "gb-lon-li-cfdtunnel"
            secret    : output<string>
        + cloudflare:index/tunnel:Tunnel: (create)
            [urn=urn:pulumi:sandbox::cloudflared-tunnels::components:tunnels:Tunnel$cloudflare:index/tunnel:Tunnel::blease-test-tunnel]
            [provider=urn:pulumi:sandbox::cloudflared-tunnels::pulumi:providers:cloudflare::default_5_4_1::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
            accountId : "00991122"
            configSrc : "cloudflare"
            name      : "blease-test"
            secret    : output<string>
    + components:tunnels:TunnelConfig: (create)
        [urn=urn:pulumi:sandbox::cloudflared-tunnels::components:tunnels:TunnelConfig::gb-lon-li-cfdtunnel]
        cloudflareAccountId: "00991122"
        cloudflareTunnelId : output<string>
        cloudflareZone     : "<http://foobar.com|foobar.com>"
        tunnelServices     : {
            my-app: "<http://myapp.com>"
        }
    + components:tunnels:TunnelRoute: (create)
        [urn=urn:pulumi:sandbox::cloudflared-tunnels::components:tunnels:TunnelRoute::blease-test]
        cloudflareAccountId: "00991122"
        cloudflareTunnelId : output<string>
        privateNetworks    : [
            [0]: "192.168.1.0/24"
        ]
        + cloudflare:index/tunnelRoute:TunnelRoute: (create)
            [urn=urn:pulumi:sandbox::cloudflared-tunnels::components:tunnels:TunnelRoute$cloudflare:index/tunnelRoute:TunnelRoute::blease-test-route-192.168.1.0/24]
            [provider=urn:pulumi:sandbox::cloudflared-tunnels::pulumi:providers:cloudflare::default_5_4_1::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
            accountId : "00991122"
            network   : "192.168.1.0/24"
            tunnelId  : output<string>
        + cloudflare:index/tunnelConfig:TunnelConfig: (create)
            [urn=urn:pulumi:sandbox::cloudflared-tunnels::components:tunnels:TunnelConfig$cloudflare:index/tunnelConfig:TunnelConfig::gb-lon-li-cfdtunnel-tunnel-config]
            [provider=urn:pulumi:sandbox::cloudflared-tunnels::pulumi:providers:cloudflare::default_5_4_1::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
            accountId : "00991122"
            config    : {
                ingressRules: [
                    [0]: {
                        hostname  : "<http://my-app.connect.com|my-app.connect.com>"
                        service   : "<http://myapp.com>"
                    }
                    [1]: {
                        service   : "http_status:404"
                    }
                ]
                warpRouting : {
                    enabled   : true
                }
            }
            tunnelId  : output<string>

colossal-vr-62639

06/28/2023, 4:31 PM

I'm looking at incorporating a set of Policies for our workloads on Azure and found https://kics.io/. Has anyone incorporated this into their Pulumi based systems? If so, would you mind sharing your experiences?

incalculable-garage-67131

06/29/2023, 4:32 PM

Running into an issue with

crd2pulumi -n

generation. This looks like its related to a Pulumi node dependency. The generated package.json is:

Copy code

{
  "name": "@pulumi/crds",
  "version": "",
  "scripts": {
    "build": "tsc",
    "install": "node scripts/install-pulumi-plugin.js resource crds "
  },
  "dependencies": {
    "@pulumi/pulumi": "^3.42.0"
  },
  "devDependencies": {
    "@types/node": "^14",
    "typescript": "^4.3.5"
  },
  "pulumi": {
    "resource": true,
    "name": "crds"
  }
}

npm install fails, the pulumi-crds are no longer located at the referenced link.

Copy code

> install
> node scripts/install-pulumi-plugin.js resource crds

error: 404 HTTP error fetching plugin from <https://api.github.com/repos/pulumi/pulumi-crds/releases/latest>. If this is a private GitHub repository, try providing a token via the GITHUB_TOKEN environment variable. See: <https://github.com/settings/tokens>

There was an error installing the resource provider plugin. You may try to manually installing the plugin by running `pulumi plugin install resource crds`

The npm audit / npm audit fix does not fix this:

Copy code

semver  <7.5.2
Severity: moderate
semver vulnerable to Regular Expression Denial of Service - <https://github.com/advisories/GHSA-c2qf-rxjj-qqgw>
fix available via `npm audit fix`
node_modules/make-dir/node_modules/semver
  make-dir  2.0.0 - 3.1.0
  Depends on vulnerable versions of semver
  node_modules/make-dir
    @mapbox/node-pre-gyp  >=1.0.1
    Depends on vulnerable versions of make-dir
    node_modules/@mapbox/node-pre-gyp
      grpc  1.24.8 - 1.24.11
      Depends on vulnerable versions of @mapbox/node-pre-gyp
      node_modules/grpc

--force

lowers the pulumi verion dependency.

Copy code

"dependencies": {
    "@pulumi/pulumi": "^0.14.3"
  },

We are enterprise customers and we use crd2pulumi. This is blocking our ability to maintain our deployments.

square-knife-25838

06/29/2023, 7:22 PM

Hello everyone! I just got hit with this bug: https://github.com/pulumi/pulumi/issues/6272 anyone knows of a workaround / fix? couldn't find any solution online so far, and that kind of breaks our setup 🫠

modern-eve-91943

06/30/2023, 2:20 PM

This message contains interactive elements.

quaint-book-39362

06/30/2023, 3:38 PM

hello, everyone. i’m trying to run a pulumi update on a pulumi program after 6 months and am getting a 500 error directly on the terminal. the project has 2 pulumi programs and the other runs fine. on the problematic one i can’t even get debug output. any idea how i might go about debugging this?

aloof-sugar-9157

06/30/2023, 5:31 PM

For my Pulumi team how do I enable the Actions drop down?

wooden-egg-90698

06/30/2023, 6:15 PM

Hi, do you guys know why would pulumi update every time the lambda api gateway permission?

broad-island-71889

06/30/2023, 6:34 PM

Is it possible to somehow schedule custom code execution on resource deletion?

microscopic-park-81177

07/01/2023, 2:47 PM

<http://aws.lb|aws.lb>

there's https://www.pulumi.com/registry/packages/aws/api-docs/alb/listener/ and https://www.pulumi.com/registry/packages/aws/api-docs/alb/listenerrule/. For OIDC auth to an LB, they both take an argument - aws.lb.ListenerDefaultActionAuthenticateOidcArgs and aws.lb.ListenerRuleActionAuthenticateOidcArgs. These appear to be identical on the AWS API backend. https://docs.aws.amazon.com/elasticloadbalancing/latest/APIReference/API_AuthenticateOidcActionConfig.html. But are they interchangeable in Pulumi? Can I use the ListenerRuleAction to initalize a Listener's default action? Seems like I should be able to

prehistoric-activity-61023

07/01/2023, 3:36 PM

Does pulumi support cloud cost optimization? 🤔 Apparently, that’s a thing in Terraform Cloud (~~but I guess it’s only supported for AWS~~). I got this question after my talk at the conference and that’s actually the first time I heard about such feature.

rapid-receptionist-28528

07/01/2023, 7:15 PM

Hi, I am trying to Provide an HTTP Method Integration for an API Gateway Integration. I used the code from the documentation https://www.pulumi.com/registry/packages/aws/api-docs/apigateway/integration/ but I’m getting the error:

Copy code

Error creating API Gateway Deployment: BadRequestException: No integration defined for method

Any Idea ?

billowy-engine-58246

07/02/2023, 5:03 AM

Hi all! We've recently gone to production with Pulumi in our organisation, and it has been a breeze! We used to have a complex Terraform setup, but Pulumi has completely transformed that (and also lowered our deployment times significantly), so all is well! I just have a question: let's say you have the following situation (all in one stack): • Base Layer • Multiple application layers • For each application layer do something else How we currently do it, is we loop through the application layer (we use python, so just a simple for x in y loop). Within the loop, everything is parallelised as much as possible (which is very nice), but it doesn't seem to parallelise the loop (so independent changes for each of the resources in the loop do not run in parallel. So currently if we need to make a change in every application layer (right now, for instance, we're bumping the version of each of the kubernetes cluster in the application layer) it takes a lot more time than it should. Is there a way to also have Pulumi parallelise the loops?

swift-truck-84096

07/03/2023, 5:58 AM

Hi Folks, I just started experimenting with Pulumi after working for sometime with Terraform. The fact that using code feels a lot more comfortable than doing HCL. For state, I use S3 which I was able to connect to using the pulumi login command. However, I was wondering if there is a codified way either using the pulumi.<stack>.yaml file or directly by creating a backend directly in the code similar to creating a provider in the code. I googled for solutions on the same and do see some examples of the backend being embedded in the yaml file but It no longer seems to work in the current 3.7 version which I am working on. The goal I am trying to achieve is to hit pulumi up without having to login every time and be able to commit the backend to the git repo for people to share. Wondering if this is possible?