pulumi-community #getting-started

red-truck-60031

05/02/2022, 9:31 AM

Hey! What's the best way to install pulumi on my docker image ? I have a pre-existing alpine image, and i want to download pulumi on it, not use a pulumi docker image. I tried the below but it says pulumi not found:

Copy code

# for installing pulumi
RUN curl -fsSL <https://get.pulumi.com> | sh

crooked-spring-277

05/02/2022, 9:38 PM

Copy code

RUN curl -fsSL <https://get.pulumi.com> | sh 

ENV PATH "$PATH:~/.pulumi/bin/"

RUN echo "export PATH=$PATH:~/.pulumi/bin/" >> ~/.bashrc && . ~/.bashrc

RUN cp -r ~/.pulumi/bin/* /usr/local/bin/

crooked-spring-277

05/02/2022, 9:38 PM

but different examples

gray-state-1017

05/04/2022, 1:29 PM

For charts is there a way to specify values in a yaml file and reference that?

quick-telephone-15244

05/04/2022, 1:58 PM

if during the execution of

pulumi up

there's a failure to create a resource, is there a flag I can use to have pulumi automatically begin a rollback/deletion of the resources it's created so far? or some other way to stop the command from continuing?

quick-telephone-15244

05/04/2022, 1:58 PM

i'm not sure what the implications are WRT state if i just `ctrl+c`'d my way out of it

millions-branch-13617

05/04/2022, 9:10 PM

I’m trying to get started with Pulumi but struggling to find any samples that go beyond the most simple implementation. I want to get a NestJS API connected to a GCP cloud function with Pulumi. In all the samples for the GCP cloud functions the request handling (and business logic) happens inside of the callback that Pulumi creates. I want to decouple my callback logic from Pulumi so I can run it locally as well. Does anyone have an example of this? I’m a beginner to backend development so sorry for the beginner question

icy-controller-6092

05/05/2022, 12:23 AM

Hi all, I keep hearing about this idea that you should not be doing application-level deployments in your IaC. Where can I read up more about this and understand the pros/cons? At the moment I have everything in my Pulumi files, including pointers to folders that contain Lambda code. Not sure if I this means I am doing something wrong?

jolly-sunset-53116

05/05/2022, 4:19 PM

Hello; just found my way here through the Pulumi Up.

👋🏼 1

👋 7

👋🏻 1

🎉 1

witty-vegetable-61961

05/05/2022, 9:53 PM

I noticed the command provider in Pulumi. Is this a good option for configuring virtual machines? I have some Powershell scripts I'd like to run, and can invoke via c#/this provider.

bland-nest-69035

05/06/2022, 4:43 PM

Hello everyone. Been playing around with Pulumi for a few months and decided to attend PulumiUP. Really enjoyed the sessions I was able to watch and decided to join the community.

👍 1

👋🏻 1

💜 2

👋 3

silly-scientist-20604

05/06/2022, 8:35 PM

Hi, Terraformer here new to Pulumi and have a question. First question: Where do I ask questions?

silly-scientist-20604

05/06/2022, 8:38 PM

First real question: what is the Pulumi equivalent for

terraform state show module.service.kubernetes_ingress.example_ingress

? I need to see details (Ex: arn) about a created/managed resource for investigation and troubleshooting purposes, without resorting to configuring outputs that will never be used.

silly-scientist-20604

05/06/2022, 8:43 PM

Oh, I think I see:

pulumi stack export |  jq

white-chef-55657

05/07/2022, 8:12 AM

hi folks! I’m struggling to understand this one.. I have this Datadog integration configured, with a CF stack deployed (is there a better way to deploy the datadog AWS stack?) which works completely fine the only issue is that every time I run

pulumi up

it updates the parameters of cf stack, when I check the details it says the

ddApiKey

has changed - but it didn’t.. it’s a secret so I can’t see its value in the details.

Copy code

~ parameters: {
          ~ DdApiKey: [secret] => [secret]
        }

any idea what’s going on? it’s just a waste of resources to redeploy the CF stack every time with virtually no change..

datadog.ts

👀 1

damp-truck-25843

05/09/2022, 1:32 PM

Hi there! I was looking through Pulumi APIs (java, mostly) and I’m struggling to find an alternative to TFs datasource techniques, can someone point me to a doc that I might be missing? We have a use case when apps running in a particular cloud region must have an access to cloud services through internal network (call it “Service Gateway”. In TF, we use special datasource that can give an IP address (for all regional services, or to a particular one).

brave-processor-54742

05/10/2022, 7:12 AM

Hello! 🤸‍♂️ I have an infrastructure folder in my organization github repo (containing main.py, requirements and yaml files). I cloned the repo and now I'd like to run pulumi up, from the infrastructure folder, but I get:

Copy code

❯ pulumi up
Please choose a stack, or create a new one:  [Use arrows to move, enter to select, type to filter]
> <create a new stack>

Do you know how to do to perform pulumi up using the existing stack? Thanks!!

microscopic-flower-5848

05/13/2022, 2:26 PM

Hey all, quick question on the new GCP database Alloy DB just launched at GCP IO 2022. Are we able to deploy and manage Alloy instances yet through Pulumi?

orange-wire-16250

05/13/2022, 5:57 PM

I'm a little confused about the overall solution/project structure (.net), and stacks. Following the micro stacks flow, I understand creating a project to handle various responsibilities (like infrastructure, serverless apps, etc).

orange-wire-16250

05/13/2022, 5:58 PM

But, do you put the yaml files for your environments in each project, or could you define a parent set of yml files at the root of the solution?

orange-wire-16250

05/13/2022, 5:59 PM

To me, I see yml files as defining configuration for your various environments. Seems like you would want some "global" configuration defined at the root level, with maybe some project specific configuration defined at the project level.

strong-intern-84363

05/13/2022, 11:13 PM

Hey lovely community ! Can someone help me to understand this ? Let’s imagine that I have a piece of code that creates a GCP service account, a custom role (both works fine) and a IAM Binding to assign this role to this service account (this one fails) Here is my IAM binding call

Copy code

sarolebinding = gcp.projects.IAMBinding(
            f"sa-role-binding-{self.projectName}-owner",
            role=self.role,
            project=self.project.name,
            members=[f"serviceAccount:{self.service_account.email}"],
        )
        return sarolebinding

This fails with the following error

Copy code

Request `Set IAM Binding for role "projects/app-burger-nonprod-wzj/roles/projectOwner" on "project \"app-burger-nonprod-wzj\""` returned error: Error applying IAM policy for project "app-burger-nonprod-wzj": Error setting IAM policy for project "app-burger-nonprod-wzj": googleapi: Error 400: Invalid service account (<pulumi.output.Output object at 0x7fbf29648640>)., badRequest

Looks like the service_account.email field is wrong. How can I refer to the email of the newly created service account and use it as the value of the members arguments ? Thanks for reading, have a nice day.

elegant-architect-38580

05/14/2022, 6:46 AM

Hey! I'm checking out if the typescript component package provider boilerplate to see if it will work for my use case of internally creating a reusable infrastructure component in my Organization. My issue is that I am not able to make the make commands

make install_provider

and

make generate

create nodejs sdk which defines the package in "@<my org>/<package name>". The package.json always builds the package name like this: "name": "@pulumi/xyz" Is this boilerplate and component package provider in general only for publishing packages to the public registry or is there something I'm missing?

future-window-78560

05/15/2022, 4:14 AM

Hey Team! How can we create a GCP project through pulumi with the same PROJECT_ID on GCP different accounts? It is really important for me to know this since the resources I am creating thru pulumi IAC are utilized in the CICD pipeline, therefore I really need to have fixed Project_ID to avoid any manual changes and smooth CICD deployment.

few-yacht-11623

05/15/2022, 2:19 PM

Hi everyone, I’m just getting started trying out Pulumi with some basic state. I have an S3 bucket and a EB Environment defined in a single

index.ts

file and I’m trying to refactor this into multiple files/directories. However, I’m getting inconsistent import behavior once I split these files into different directories.

pulumi preview

will sometime show 0 changes, sometimes it will try to delete my EB environment that’s a few layers of imports deep. I put log statements in my files and it looks like sometimes it doesn’t import the file it’s defined in. 1. Are there any articles/docs on refactoring pulumi programs I can read? 2. Do files need to have an export to be processed for pulumi state? My EB env is just declared as a

const

variable without exporting anything, and I’m wondering if that might be part of my issue. 3. Does pulumi cache my input program in any way?

sticky-answer-6826

05/16/2022, 9:52 PM

Hi, have a basic question: how do I add an item to a list in the config using the CLI? I tried

pulumi config set aws:allowedAccountIds [0000000]

but I get an error of “zsh: no matches found: [000000]”

pulumi config set aws:allowedAccountIds 000000

works but adds it as a value.

acceptable-shoe-64654

05/17/2022, 7:20 AM

Hi everyone, Do we have any work around to destroy the stack when the passphrase is lost?

boundless-queen-72669

05/17/2022, 12:54 PM

Hi Everyone , Is it possible to set config locally instead of pushing everything to api.pulumi.com/organisation-name ? for example , i would like to keep the below configuration very local , just keep it within my local vault server probably ? pulumi config set vsphere:user "blahblah123" pulumi config set vsphere:password "passpass --secret pulumi config set vsphere:vsphereServer "some.server.goat.com"

boundless-queen-72669

05/17/2022, 12:55 PM

if it is possible , then how to achieve it ?

fancy-eve-82724

05/17/2022, 1:07 PM

@boundless-queen-72669 you can 'login' to pulumi to store your stack state in various backends. You can store the state on your local machine if you want using

pulumi login file:///path/to/store

pulumi login --local

. I use Amazon S3. See https://www.pulumi.com/docs/reference/cli/pulumi_login/