pulumi-community #general

dazzling-scientist-80826

11/25/2018, 5:55 PM

I've found myself wishing that I could use Pulumi to do schema management for my database. I noticed that terraform has a Postgresql provider, but it doesn't support schema resources at the level of tables, indexes, views, etc. I'd be curious if anybody had given much thought to this.

dazzling-scientist-80826

11/25/2018, 6:13 PM

I really like the idea because, "at scale", database migrations tend to get bifurcated in to two parts: 1) schema growth, deprecation, and pruning and 2) live data migrations. The former seems like a really good fit for Pulumi. The one part that seems tricky is that there may need to be a more fine-grained notion of "protect: true". That is, updating a table resource that adds columns should be safe, but removing columns should require they go through a deprecation phase.

eager-area-86739

11/25/2018, 6:52 PM

Hi, After resolving the previous problem, I'm running into another (perhaps my knowledge of Javascript is not up to pair). I have a stack that reads a resource that was already created, such as:

Copy code

const theQueue = aws.sqs.getQueue({
        name: "the-queue"
    });
exports.QueueArn = theQueue.arn.apply(arn => arn);

However, the const

theQueue

is empty. What I'm doing wrong? Thanks

gorgeous-egg-16927

11/26/2018, 4:10 PM

@dry-pilot-73614 Thanks for getting the kubespy formula added to homebrew! I just sent a link to the email on your GH profile for a free Pulumi t-shirt. 🙂

🎉 2

straight-guitar-55156

11/27/2018, 12:00 AM

I am absolutely new to Pulumi, and wish to know if anybody has used it for security updates/patch managment. Googl-ing didn't help much. Most of the blogs/posts are related to bootstrapping.

busy-umbrella-36067

11/27/2018, 12:12 AM

@straight-guitar-55156 what are you trying to accomplish?

full-dress-10026

11/27/2018, 12:55 AM

How would I set the

ulimits

key in a

cloudAws.Service

? https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#container_definition_limits

full-dress-10026

11/27/2018, 12:57 AM

I see the property here: https://pulumi.io/reference/pkg/nodejs/@pulumi/aws/ecs/#property-ulimits but don't see it here https://pulumi.io/reference/pkg/nodejs/@pulumi/cloud-aws/index.html#Service.

high-morning-17948

11/27/2018, 3:53 AM

Is there any docmentation to make pulumi deploy on localstack by using awslocal or by using a proxy to reroute the aws endpoints to localstack?

busy-umbrella-36067

11/27/2018, 4:45 AM

Are there any good established patterns for testing IaC created with pulumi?

busy-umbrella-36067

11/27/2018, 4:46 AM

I'm gonna start playing with https://github.com/gruntwork-io/terratest tomorrow. But I I think others would be more comfortable with a JS sdk.

faint-application-2746

11/27/2018, 5:07 AM

Trying to wrap my head around https://aws.amazon.com/blogs/aws/firecracker-lightweight-virtualization-for-serverless-computing/

faint-application-2746

11/27/2018, 5:12 AM

https://firecracker-microvm.github.io/

faint-application-2746

11/27/2018, 5:13 AM

Firecracker was built by developers at Amazon Web Services to enable services such as AWS Lambda and AWS Fargate

faint-application-2746

11/27/2018, 5:13 AM

This means Pulumi will have no issue using it too, great 🙂

bulky-policeman-29913

11/27/2018, 12:17 PM

Anyone know of a good resource that explains the state options offered by Pulumi? Is there a way to do state management with something like S3/Blob storage like Terraform does or are you restricted to using the Pulumi offerings?

cold-coat-35200

11/27/2018, 12:56 PM

hi, is it possible to get the default provider in the root index.ts file? I want to create a vpc peering connection between 2 different region and I don't want to recreate the default provider if not necessary, in terraform it's possible with

Copy code

providers = {
    aws.eu_central_1 = "aws"
    aws.eu_west_1    = "aws.eu-west-1"
  }

where "aws" means the default aws provider

full-dress-10026

11/27/2018, 8:30 PM

Is there a way to get the current AWS account ID for a stack?

white-balloon-205

11/27/2018, 8:34 PM

Copy code

export let accountDetails = aws.getCallerIdentity();

👍 1

full-dress-10026

11/27/2018, 8:40 PM

I have an almost exact copy of this example [1] in my code, only the argument

lambdaArn

swaggerSpec

is a type

Output

. What is the correct way to write a function like

swaggerSpec

to operate on `Output`s? [1] https://github.com/pulumi/examples/blob/6852169b91da1d9de6912656fead3a355d6c57a3/aws-ts-serverless-raw/index.ts#L73-L82

full-dress-10026

11/27/2018, 8:45 PM

If my stack name is

MyOrg/example-dev

, does

pulumi.getStack()

return

example-dev

MyOrg/example-dev

full-dress-10026

11/27/2018, 8:56 PM

I am trying to create a

Network

from an existing VPC with this code:

Copy code

const network = infra.Network.fromVpc("network", {
    vpcId: datomicVpcId,
    subnetIds: datomicSubnets,
    publicSubnetIds: datomicSubnets,
    securityGroupIds: [appSecurityGroupId],
    usePrivateSubnets: false
});

subnetIds

and

publicSubnetIds

are marked as

Type 'Output<any[]>' is not assignable to type 'Input<Input<string>>[]'

datomicSubnets

is defined as:

Copy code

export let datomicSubnets = datomicStorageStack.outputs.apply(o => [o["Subnet0"], o["Subnet1"], o["Subnet2"]]);

Is there a way to make this work?

full-dress-10026

11/27/2018, 9:57 PM

I have two Pulumi resources, call them

pA

and

pB

, that need to be deployed. Before

pB

can be deployed, I have some custom CLI stuff that needs to be run that depends on

pA

outputs. Is it possible to do this with Pulumi?

full-dress-10026

11/27/2018, 10:29 PM

Out of curiosity, can Pulumi provision a k8s cluster and deploy services to said cluster?

full-dress-10026

11/27/2018, 11:16 PM

Can you use

apply

across multiple outputs?

busy-umbrella-36067

11/27/2018, 11:19 PM

failed to verify snapshot: child resource urn:pulumi:cointainers-dev::XXC-0151 refers to missing parent XXX

busy-umbrella-36067

11/27/2018, 11:20 PM

I keep getting this after a failed pulumi update that uses nested Pulumi components. The update will fail to create resources and deletes the parent resource without deleting the dependencies. This then causes subsequent update attempts to fail with that error

busy-umbrella-36067

11/27/2018, 11:24 PM

also, is there a benefit for failing pulumi refreshes if a service is broken? Example:

Copy code

Diagnostics:
  kubernetes:core:Service (XXXXX-XXX-0151):
    error: Preview failed: 2 errors occurred:

    * Resource XXXXX-XXX-0151' was created but failed to initialize
    * Service does not target any Pods. Application Pods may failed to become alive, or field '.spec.selector' may not match labels on any Pods

error: an error occurred while advancing the preview

If I’m trying to update the state of my infrastructure to detect some drift and fix it, this would be a blocker

full-dress-10026

11/27/2018, 11:45 PM

Is it possible to attach multiple IAM policies to an IAM role at once?

full-dress-10026

11/28/2018, 12:11 AM

Can I have two projects with different names have a stack with the same name? e.g. project A has stack name

prod

and project B has stack name

prod