pulumi-community #getting-started

Docs

Join the conversation Join Slack

getting-started

gentle-knife-93855

09/05/2022, 4:05 PM

Hi, is it safe to commit the Pulumi.stack.yaml file to git even if it contains secrets?

breezy-laptop-42679

09/06/2022, 7:58 AM

Has any used aws cloudtrail with aws ses notifications for sending any changes made to aws account Please let me know your thoughts and experience

big-spring-73541

09/06/2022, 9:02 AM

Hi! Does anyone know how to set minimum instance for cloudrun service

important-sugar-9877

09/06/2022, 5:22 PM

Hi, im trying to run a command.local.run() with an Output type parameter like this:

instances[0].instance_data['Sys-sync']['instance_ip'].apply(
    lambda instance_ip: command.local.run(
        command=f"echo {instance_ip} > out.txt"
    )
)

the type is Output, so Output.apply should work?

print(type(instances[0].instance_data['BFM-snow-sync']['instance_ip']))
<class 'pulumi.output.Output'>'

But im getting this error instead. Can anyone give me a hint on that?

Diagnostics:
  pulumi:pulumi:Stack (BFM-snow-sync-dev):
    error: Program failed with an unhandled exception:
    error: Traceback (most recent call last):
      File "/usr/local/bin/pulumi-language-python-exec", line 107, in <module>
        loop.run_until_complete(coro)
      File "/Users/username/.pyenv/versions/3.10.4/lib/python3.10/asyncio/base_events.py", line 646, in run_until_complete
        return future.result()
      File "/Users/username/cse-dev/git/BFM-snow-sync/.direnv/python-3.10.4/lib/python3.10/site-packages/pulumi/runtime/stack.py", line 126, in run_in_stack
        await run_pulumi_func(lambda: Stack(func))
      File "/Users/username/cse-dev/git/BFM-snow-sync/.direnv/python-3.10.4/lib/python3.10/site-packages/pulumi/runtime/stack.py", line 51, in run_pulumi_func
        await wait_for_rpcs()
      File "/Users/username/cse-dev/git/BFM-snow-sync/.direnv/python-3.10.4/lib/python3.10/site-packages/pulumi/runtime/stack.py", line 110, in wait_for_rpcs
        raise exception
      File "/Users/username/cse-dev/git/BFM-snow-sync/.direnv/python-3.10.4/lib/python3.10/site-packages/pulumi/output.py", line 194, in run
        transformed: Input[U] = func(value)
      File "/Users/username/cse-dev/git/BFM-snow-sync/./__main__.py", line 65, in <lambda>
        lambda instance_ip: command.local.run(
      File "/Users/username/cse-dev/git/BFM-snow-sync/.direnv/python-3.10.4/lib/python3.10/site-packages/pulumi_command/local/run.py", line 246, in run
        opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
    AttributeError: type object 'InvokeOptions' has no attribute 'merge'
    error: an unhandled error occurred: Program exited with non-zero exit code: 1

glamorous-whale-27111

09/06/2022, 11:58 PM

Hello! I'm trying to figure out if Pulumi is right for my org. The ability to declaratively specify and track my architecture in my chosen languages i intriguing, but one thing that seems to be missing is the ability to build vm images with a config so I can achieve immutable deployments. This is of course possible to do for docker images with dockerfiles, but it isn't possible with VM's (as far as I know). Is there a supplementary tool that people use for this purpose? I came across Hashicorp's "Packer”, which seems to be the kind of thing I'm looking for, but I'm curious if the community has particular tools that they have found work well with Pulumi. The specific features I need are • ability to produce vm images • ability to deterministically specify images via config • ideally, integration with OpenStack

polite-carpenter-13290

09/07/2022, 6:54 PM

Hi, I am using pulumi to deploy my dev k3s clusters on a single VM, and after cluster provisioning I am applying some k8s manifests to create namespaces, deploy dev helm charts and e.t.c. and it works perfectly but when I do

pulumi down

I have to wait until all k8s resources will be deleted however it’d be enough to just delete compute instance with k3s cluster. Is there any way to implement such logic with pulumi?

salmon-motherboard-78006

09/08/2022, 4:52 PM

Hi, I’m creating a bucket with Pulumi but can’t make the object access private only (for all future objects in the bucket)…

s3.Bucket(f"{stack}-data-lake",
                             bucket=f"{stack}-data-lake",
                             acl="private",
                             versioning=s3.BucketVersioningArgs(
                                 enabled=True,
                             ),
                             server_side_encryption_configuration=s3.BucketServerSideEncryptionConfigurationArgs(
                                 rule=s3.BucketServerSideEncryptionConfigurationRuleArgs(
                                     apply_server_side_encryption_by_default=s3.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefaultArgs(
                                         kms_master_key_id=s3_kms_key.arn,
                                         sse_algorithm="aws:kms",
                                     ),
                                 ),
                             ))

What am I missing?

✅ 1

lively-rain-14200

09/09/2022, 6:37 AM

Hello, I'm trying

pulumi

and having an issue with the doc: https://www.pulumi.com/docs/guides/crosswalk/aws/eks/#provisioning-a-new-eks-cluster Running the second code example present at that address (the example with

nginx

) crashes at the

deployment

object creations and returns:

File "/home/tolki/.cache/pypoetry/virtualenvs/locarise-rest-api-LW45l3EZ-py3.9/lib/python3.9/site-packages/pulumi/resource.py", line 922, in __init__
        raise ValueError(
    ValueError: Attempted to register resource kubernetes:apps/v1:Deployment with a provider for 'Calling __str__ on an Output[T] is not supported.
    
    To get the value of an Output[T] as an Output[str] consider:
    1. o.apply(lambda v: f"prefix{v}suffix")
    
    See <https://pulumi.io/help/outputs> for more details.
    This function may throw in a future version of Pulumi.'

Am I doing something wrong or is the doc wrong?

better-agent-38563

09/12/2022, 2:11 PM

How can I install the Pulumi executable to be accessible for all users on Windows Server? Trying to get things running in CI and that's a roadblock.

abundant-oxygen-203

09/12/2022, 8:14 PM

I'm getting this error when running pulumi up using the python quickstart tutorial. Any ideas as to the cause?

aws:s3:Bucket (my-bucket):
    error: 1 error occurred:
    	* error configuring Terraform AWS Provider: error validating provider credentials: error calling sts:GetCallerIdentity: operation error STS: GetCallerIdentity, exceeded maximum number of attempts, 9, https response error StatusCode: 0, RequestID: , request send failed, Post "<https://sts.af-south-1.amazonaws.com/>" dial tcp: lookup <http://sts.af-south-1.amazonaws.com|sts.af-south-1.amazonaws.com> on 192.168.0.1:53: no such host

brave-motorcycle-67487

09/12/2022, 11:02 PM

I created my first project with

pulumi new aws-python

. After looking at it, I realized I wanted to use the native python bindings for this, so I `rm -r`ed the directory and attempted to recreate it with

pulumi new aws-native-python

. This isn't letting me do so though because the old project still exists in pulumi.com's state. I'm not sure how to delete it though because there doesn't seem to be any way to do that from the web ui, and I don't have any of the configuration files that told the cli about the project and stack. (There are no resources in it - I never ran

pulumi up

- so it's just the project itself that I need to delete)

witty-vegetable-61961

09/13/2022, 1:51 PM

Hi guys, I am looking at this RabbitMQ example here: https://www.pulumi.com/registry/packages/rabbitmq/api-docs/queue/ But this line is not valid:

Permissions = new RabbitMQ.Inputs.PermissionsPermissionsArgs

brave-motorcycle-67487

09/13/2022, 4:33 PM

Another question! As I'm moving forward on this first pulumi program, I've reached a point where I'm creating an ECS cluster and I don't have it completely correct (that's fine, it's part of the process). But

pulumi up

appears to be waiting on the containers in a service coming up successfully - since something isn't configured correctly, that means it's just hanging forever. I can SIGINT it, but then I have orphaned resources in AWS that Pulumi isn't tracking and I have to delete them manually. What's the right way for me to deal with this situation?

curved-eye-56312

09/14/2022, 10:57 AM

Hi all! I have a small question regarding `Config()`class. In my

Pulumi.<stack_name>.yaml

file I want to declare the following object:

<stack_name>:blobContainers:
    1:
        name: container_name1
        accessLevel: Container
    2:
        name: container_name2
        accessLevel: Blob
    3:
        name: container_name3
        accessLevel: Container

I understand that to retrieve this object from my configuration file I need to use the following (using Typescript):

const containers = config.requireObject("blobContainers");

However, when I try to iterate over my object and access

name

for example, I am not able to due to the object's type. What is the correct way to iterate over this object?

salmon-motherboard-78006

09/14/2022, 8:36 PM

Hi, I have a few

pulumi,export

statements in stack A. Now, I have

pulumi.StackReference

in stack B to reference the export statements of stack A. Is it possible?

agreeable-whale-35898

09/17/2022, 1:17 PM

Hi, when invoking

pulumi up

, is there a way for it to print my `Pulumi.Aws.Ec2.Instance`'s

PublicIp

property? I couldn't find it in docs, or maybe I just misunderstand some concept (e.g. "Outputs", but I'm not sure how to have it printed each time I run

pulumi up

). I tried e.g. (in C#):

Output.All(server.PublicIp)

and similar things, but nothing gets printed upon

pulumi up

busy-kitchen-1186

09/18/2022, 8:07 AM

👋 Hello, team! I just stared an EKS cluster, following https://github.com/pulumi/pulumi-eks/blob/master/examples/managed-nodegroups/index.ts I would like to install a nginx ingress controller, is there an example? Do I need to use helm myself?

kind-napkin-54965

09/18/2022, 2:59 PM

Am stuck here. Am wondering how do I do

pulumi refresh

in the interactive mode, if I am using the automation api? I have

stack.refresh(on_output=print)

in my code. Do I need to adjust code somehow, or is interactive mode not available for automation api? Thanks!

crooked-river-11449

09/19/2022, 10:04 AM

Hello my name is Sacha from Cape Town South Africa and I am really enjoying using Pulumi. Its a brilliant tool! Whenever I run

pulumi up

I get

could not validate provider configuration

invalid or unknown key

. I am using Pulumi version 3.39 and I am deploying a YAML project to my

localstack

on AWS. Any advice would be much appreciated thank you.

crooked-river-11449

09/19/2022, 10:07 AM

config:
  aws:accessKey: "test"
  aws:secretKey: "test"
  aws:profile: "localstack"
  aws:region: "eu-central-1"
  aws:s3UsePathStyle: "true"
  aws:skipCredentialsValidation: "true"
  aws:skipRequestingAccountId: "true"

eager-pilot-22899

09/19/2022, 2:05 PM

Hello. I've been using Pulumi for a while now, and it's always been fine at creating github repos. Today I woke up and now I'm seeing this message when trying to create github repos. Anyone got any idea what's going on?

lemon-intern-77136

09/19/2022, 3:30 PM

Does anyone have experience using the proxmox (https://github.com/muhlba91/pulumi-proxmoxve) and cloudinit (https://github.com/pulumi/pulumi-cloudinit) packages together? I’m struggling to provision a new vm using these two and would love to chat with someone who has done it before.

adventurous-television-3865

09/20/2022, 4:50 PM

Hello! I’m new to Pulumi (and TS) and am struggling with something that I think should be fairly straight forward. Scenario: I have existing users and groups in an Azure AD. I would like to programmatically manage certain groups. I have a github admins group where the owners are the platform team, but the members should also include an additional user (Director of Development). I can’t for the life of me figure out how to concat two groups together in a way that TS likes for this object. Code to come in a moment.

sparse-intern-71089

09/21/2022, 4:01 PM

This message was deleted.

kind-napkin-54965

09/21/2022, 5:37 PM

In one of the channels of this slack recently I saw someone complained about github tokens not workering anymore. I got the same errorr with gitlab:

gitlab:index:Project (clientwebsite):
    error: 1 error occurred:
        * GET <https://gitlab.com/api/v4/user>: 401 {error: invalid_token}, {error_description: Token is expired. You can either do re-authorization or token refresh.}    error: 1 error occurred:
        * GET <https://gitlab.com/api/v4/user>: 401 {error: invalid_token}, {error_description: Token is expired. You can either do re-authorization or token refresh.}

I recreated the token - it did not help.... Maybe old token is still being used for some reason? How would I debug to get exact request that is being made to gitlab? Thanks!

sparse-intern-71089

09/23/2022, 10:53 AM

This message was deleted.

ambitious-daybreak-8631

09/26/2022, 8:09 AM

Hi, when creating a ecs cluster using pulumi, the name of the cluster is appended with a random string of numbers. Is there any way to avoid this?

🙌 1

microscopic-painting-1312

09/27/2022, 6:02 PM

what’s the easiest way to import resource names from pulumi into another script? I have a pulumi stack that defines a cluster, a fargate task, and a vpc. I need to import the names of those three resources into another program that will run the task

brash-restaurant-84207

09/28/2022, 9:00 AM

hi, I'm a complete pulumi noob. my initial goal is to create just a vpc using a specific aws profile from my aws credentials file. I have so far: - created a new directory - run 'pulumi new' , and chosen aws-python - taken the following code from the 'setting up a new vpc' part of the pulumi getting started section of their website: import pulumi import pulumi_awsx as awsx vpc = awsx.ec2.Vpc("custom") pulumi.export("vpcId", vpc.vpc_id) pulumi.export("publicSubnetIds", vpc.public_subnet_ids) pulumi.export("privateSubnetIds", vpc.private_subnet_ids) - replaced the default code in the '__main__.py' file with the above code - added the following line to Pulumi.<stackname>.yaml: aws😛rofile: dev-account When I try to run: 'pulumi up' I'm getting the error: ModuleNotFoundError: No module named 'pulumi_awsx' I then executed: 'pip install pulumi_awsx' This installed the module. When I tried to run 'pulumi up' again I experienced the same error What am I missing? (doing this on a windows machine btw)

kind-napkin-54965

09/30/2022, 12:04 PM

how do i delete and/or destroy stacks (projects?) of I use automation api to create them? I've been advise I should be able to use some commands via CLI if I pass the stack url, but

pulumi destroy --stack beautynew/gcp-pubsub-new/devnew

ir failing saying

error: could not get cloud url: could not load current project: expected an object

. Thanks!

Title

kind-napkin-54965

09/30/2022, 12:04 PM

how do i delete and/or destroy stacks (projects?) of I use automation api to create them? I've been advise I should be able to use some commands via CLI if I pass the stack url, but

pulumi destroy --stack beautynew/gcp-pubsub-new/devnew

ir failing saying

error: could not get cloud url: could not load current project: expected an object

. Thanks!

echoing-dinner-19531

09/30/2022, 1:15 PM

Oh yeh that’s probably a new bug. We don’t really need a project for destroy at the moment because we don’t actually run the program for it, so we added a trick to just return an empty project if we couldn’t find a Pulumi.yaml. But now the project loader validates that Pulumi.yaml has the expected shape, and empty is not valid. Probably an easy fix, if you roll back a couple of versions it should work for now and I’ll see about getting a fix in for this in time for the next release.

Also might be worth checking that you don’t have an empty Pulumi.yaml around. That would trigger this

Actually going and checking the code for this I think it can only be triggered by an empty Pulumi.yaml, our “empty project” is created post-validation.

kind-napkin-54965

10/01/2022, 6:01 PM

Thanks Fraser! I indeed had an empty Pulumi.yaml lying around. Now I am able to get the

pulumi destroy

as well as

pulumi stack rm

. Thanks a ton!!

View count: 4