pulumi-community #general

orange-tailor-85423

10/23/2018, 8:16 PM

since it doesn't appear that a GCS bucket is supportd

glamorous-printer-66548

10/24/2018, 2:21 AM

is there some (semi-)official docs of the app.pulumi.com API? I’m building a CLI tool to ease batch operations on multiple pulumi projects / stacks to create ephemeral environments etc. and I need to get a list of all stacks in the organization.

best-tent-29186

10/24/2018, 3:51 AM

Just wondering if anyone has done much around testing (unit and integration) their infra and pulumi code. (I have used

test-kitchen

in the past as part of my Dev workflow, however this requires a spun up environment) What tools have you used? Any recommendations or warnings on how/what to test?

👍 1

acoustic-candle-40090

10/24/2018, 8:20 AM

@best-tent-29186 had a look at Localstack as a way to "mock" AWS?

acoustic-candle-40090

10/24/2018, 8:21 AM

Also I have a question myself if possible. Is there a way to pass an credentials profile name on the cli instead of setting AWS_PROFILE environment var?

acoustic-candle-40090

10/24/2018, 8:33 AM

NVM just found it

acoustic-candle-40090

10/24/2018, 8:51 AM

Just found Pulumi today and have a gazillion questions. Is this the best place to ask them all?

👍 1

sparse-insurance-40223

10/24/2018, 11:37 AM

sure, most of the clever folk are on US time tho

acoustic-candle-40090

10/24/2018, 11:39 AM

Guess I'll have to be a clever folk so thats less true 😛

eager-area-86739

10/24/2018, 2:26 PM

Hi, There is any way to trigger a deployment of

ApiGateway

ad-hoc? My scenario: 1. Created the ApiGateway using Swagger Specs, backed by a lambda 2. Deploy 3. Update the stack adding a

ApiKey

and

UsagePlan

, and updating the Swagger Spec to secure the API 4. Deploy 5. The ApiGateway acknowledge that

ApiKey

is there, but once we go to the Deployment in the AWS console, the

ApiKey

is not deployed 6. In the AWS Console, force the deploy of the

ApiGateway

7. The

ApiKey

is deployed and used by the API

eager-area-86739

10/24/2018, 2:28 PM

Any ideas?

quick-action-34599

10/24/2018, 2:47 PM

Seems like pulumi is not waiting for my aws LoadBalancer to be full provisioned before creating rules on it. Is there a way to manually wait before continuing or is this a bug that needs addressing?

busy-umbrella-36067

10/24/2018, 3:58 PM

do previews lock the stack? e.g. can multiple people preview different changes on a single stack at the same time

brave-angle-33257

10/24/2018, 3:58 PM

are there any examples for scripting retrieval of PULUMI_ACCESS_TOKEN? working on automating our deploy pipeline:

You can script by using PULUMI_ACCESS_TOKEN environment variable.

helpful-church-16524

10/24/2018, 4:10 PM

Laura - I've got a few who use it... it's not without its shortcomings though.

orange-tailor-85423

10/24/2018, 4:10 PM

I have a simple loop that creates individual namespaces for our devs and it would be great to apply an RBAC template for each of them as part of that process i.e. 1 to 1 dev to namespace RBAC config

quick-action-34599

10/24/2018, 4:21 PM

In AWS, for some reason my service discovery endpoints are not

<service name>.<namespace>

and instead are

<service discovery service name>-<suffix>.<namespace>

. Any idea why?

quick-action-34599

10/24/2018, 4:22 PM

i.e. instead of

nginx.cluster

it's

service-discovery-fd53cee.cluster

thankful-florist-63703

10/24/2018, 4:45 PM

Yep, debugged the whole result, and it looks good.

hundreds-musician-51496

10/24/2018, 4:54 PM

Does anyone have an example of creating a Route53 record aliased to a loadbalancer?

hundreds-musician-51496

10/24/2018, 5:44 PM

Secret management seems weak. I don't like storing them on pulumi.com, as I don't control the encryption key. Also how do I keep devs from seeing prod secrets?

boundless-monkey-50243

10/24/2018, 5:53 PM

Without additional tooling, you don't. I've had conversations about this with the Pulumi folks and I know they're working on some stuff there. What we do is we use S3 to sync our stacks (which are otherwise stored locally, the sync is before/after every run) and have them run through our CI system to deploy to an environment.

👍 1

quick-action-34599

10/24/2018, 6:17 PM

I seem to constantly get

Creation of service was not idempotent

errors when doing an operation that replaces an ECS service

quick-action-34599

10/24/2018, 6:17 PM

I have to manually go into the UI, delete the service(s), refresh pulumi, and rerun

pulumi up

quick-action-34599

10/24/2018, 6:41 PM

ugh. AWS service discovery is just terrible.

quick-action-34599

10/24/2018, 6:42 PM

I guess manual consul is the way to go

acoustic-candle-40090

10/24/2018, 6:46 PM

Does Pulumi work with or provide access to aws secrets manager in any way?

white-balloon-205

10/24/2018, 6:50 PM

@quick-action-34599 I’ve been looking a bit at service discovery + ECS this morning, and indeed there seem to be a lot of rough edges here. I’ll drop a note back here if I get something working as a reference.

quick-action-34599

10/24/2018, 6:50 PM

@white-balloon-205 word, gracias

tall-monitor-77779

10/24/2018, 6:51 PM

@white-balloon-205 might be worth speaking to @lemon-spoon-91807 on this I’ve also been playing around today