pulumi-community #general

gentle-diamond-70147

10/18/2018, 1:35 AM

the Pulumi showcase at GitHub Universe today was great!

🙌 5

gentle-diamond-70147

10/18/2018, 1:36 AM

Pulumi at GitHub Universe

glamorous-printer-66548

10/18/2018, 3:26 AM

just realized the github universe presentation implies some of you folks must be in San Francisco today 😄. Let me know if you are still around to talk about pulumi and Co.. I’m in the area.

glamorous-printer-66548

10/18/2018, 5:42 AM

is there somewhere a typescript example on what type signature to use as best practice for optional outputs? I.e. I have an output

url

that is only set und certain conditions. I.e. how about:

Copy code

public readonly url?: pulumi.Output<string>

bright-motherboard-93404

10/18/2018, 2:57 PM

Hi! I'm trying to recreate the dashboard from https://pulumi.io/aws/cloudwatch.html, but with the instance ids in the

metrics

field coming from my actual stack. The problem is that at the time the instance ids arrive at JSON.stringify(), they are still

Outputs

, and get serialized to something like

[object object]

or similar. This results in the metric definition being rejected by cloudwatch.

bright-motherboard-93404

10/18/2018, 2:59 PM

is there a way I can tell Pulumi that these particular instances must exist (and have values under instance.id.apply(x=>x)) before the dashboard definition is evaluated? Or is that not possible in the current execution model?

stocky-spoon-28903

10/18/2018, 3:01 PM

Hi @bright-motherboard-93404! This can be a little confusing, but it’s the same as for IAM policies - you need to use

apply

to defer calculation of the payload until the output is available.

stocky-spoon-28903

10/18/2018, 3:01 PM

One second, I’ll find an example:

stocky-spoon-28903

10/18/2018, 3:04 PM

Copy code

const policyDoc = pulumi.all([kmsKey.arn, keyBucket.arn])
            .apply(([kmsARN, bucketARN]) => {
                const policy: aws.iam.PolicyDocument = {
                    Version: "2012-10-17",
                    Statement: [
                        {
                            Sid: "AllowEncryptDecrypt",
                            Effect: "Allow",
                            Action: [
                                "kms:Encrypt",
                            ],
                            Resource: [
                                kmsARN,    // This is a reified string
                            ],
                        },

stocky-spoon-28903

10/18/2018, 3:04 PM

That example is truncated slightly for brevity, but should give the idea

bright-motherboard-93404

10/18/2018, 3:04 PM

oh,nice. I didn't know about pulumi.all

stocky-spoon-28903

10/18/2018, 3:05 PM

The second trick is that you likely don’t need to JSON.stringify anymore - let me just check

stocky-spoon-28903

10/18/2018, 3:06 PM

Oh, no, that typing hasn’t been applied yet. Several other things will now stringify for you (e.g. IAM policies).

💯 1

bright-motherboard-93404

10/18/2018, 3:08 PM

Great!Thanks for the help @stocky-spoon-28903. Pulumi just gets so much better with every release. I'm really enjoying the parallel destroy. Can't wait for more non-stringly-typed definitions 🙂

stocky-spoon-28903

10/18/2018, 3:08 PM

@bright-motherboard-93404 If you can post a bit of your code surrounding it I’ll give you a nicer example

stocky-spoon-28903

10/18/2018, 3:10 PM

I’ve opened https://github.com/pulumi/pulumi-aws/issues/353 to track this btw

adamant-restaurant-73893

10/18/2018, 3:27 PM

We want to thank @astonishing-appointment-61804 for this excellent post on connecting IOpipe and Pulumi - so you can develop your functions, deploy them with Pulumi and then monitor and observe with IOpipe https://read.iopipe.com/integrating-iopipe-into-your-pulumi-projects-ce8a1c9e5956

busy-umbrella-36067

10/18/2018, 4:22 PM

seeing this issue come up pulumi keeps attempting to recreate a service that can’t init (wrong labels in the selector). after fixing the label selector and preparing to update,

pulumi refresh

fails to complete:

Copy code

Diagnostics:
  kubernetes:core:Service: XXXXXXXXX
    error: Preview failed: 2 errors occurred:

    * Resource 'XXXXXXXXX' was created but failed to initialize
    * Service does not target any Pods. Application Pods may failed to become alive, or field '.spec.selector' may not match labels on any Pods

error: an error occurred while advancing the preview

the failed resource is never added to state, and the new resource with the fixed label can’t be created because there is a name collision with the “tainted” resource

stale-holiday-22431

10/18/2018, 5:39 PM

I’m having trouble using a Helm chart with Pulumi. The docs for the Prometheus Operator project say to do this:

Copy code

helm repo add coreos <https://s3-eu-west-1.amazonaws.com/coreos-charts/stable/>
helm install coreos/prometheus-operator --name prometheus-operator --namespace monitoring

So I’m trying this in Pulumi:

Copy code

const chart = new k8s.helm.v2.Chart('prometheus-operator', {
    repo: '<https://s3-eu-west-1.amazonaws.com/coreos-charts/stable>',
    version: '0.0.29',
    chart: 'prometheus-operator',
})

But Pulumi reports that Helm 404'd trying to find the chart.

stale-holiday-22431

10/18/2018, 5:51 PM

Hmmm, looks like I can just set ‘repo’ to ‘coreos’, and that’s already registered wherever Helm looks.

stale-holiday-22431

10/18/2018, 5:55 PM

How can I force two Helm charts to be applied in order instead of built in parallel?

sparse-insurance-40223

10/18/2018, 5:59 PM

you can add #1 as a dependency for #2

sparse-insurance-40223

10/18/2018, 6:00 PM

chart2 = new k8s.blah.char('name', { propz }, { dependsOn: [chart1] });

stale-holiday-22431

10/18/2018, 6:00 PM

Ah, perfect! Thanks.

creamy-potato-29402

10/18/2018, 6:23 PM

-.ts

creamy-potato-29402

10/18/2018, 6:23 PM

I guess you can’t post snippets into threads, but that’s the working p8s charts.

creamy-potato-29402

10/18/2018, 6:23 PM

It’s actually for AKS, though

creamy-potato-29402

10/18/2018, 6:24 PM

So some adjustments may be necessary. If you’re deploying to a kube provider that lets you take a look at etcd, controller manager, etc, then you can set those to true.

creamy-potato-29402

10/18/2018, 6:24 PM

We’ve been working with CoreOS to upstream the fixes required to get those charts to work.

stale-holiday-22431

10/18/2018, 6:25 PM

Excellent, thanks!