astonishing-artist-72290
11/03/2022, 12:19 AMbillowy-laptop-50664
11/03/2022, 1:49 PMtall-crowd-93084
11/03/2022, 3:35 PMkind-country-41992
11/03/2022, 5:39 PMquaint-hydrogen-7228
11/04/2022, 2:18 PMsparse-intern-71089
11/04/2022, 4:41 PMtall-crowd-93084
11/05/2022, 5:01 PM.env
file alongside docker compose. I would like those passwords to be securely stored in the state, but I don't really want to have to run a bunch of pulumi config set --secret
commands, or generate those as a manual step. I'd also like to be able to look those values up when needed.
What's my best option/architectural pattern to do this in pulumi?astonishing-artist-72290
11/07/2022, 9:29 AMconst aws = require("@pulumi/aws");
const tagsPrivate: { [key: string]: string } = {
EKS_Cluster: eksOpts.name,
Type: 'private'
};
const privateSubnetIds = aws.ec2.getSubnetsOutput(tagsPrivate).apply(sn => sn.ids);
// this doesn't work, I'm getting "Private subnet IDs: Calling [toString] on an [Output<T>] is not supported."
<http://pulumi.log.info|pulumi.log.info>(`Private subnet IDs: ${privateSubnetIds}[0]`);
Thankslemon-intern-77136
11/08/2022, 8:09 PMthankful-stone-34269
11/09/2022, 7:35 PMacoustic-plumber-13001
11/09/2022, 7:42 PMPulumi.dev.yaml
and Pulumi.prod.yaml
Each of these files has a single aws:allowedAccountIds
account id. They also each set a single aws:profile
While on our dev
stack I ran pulumi up
and....Pulumi created some of the resources in AWS account #1 (dev) and others in AWS account #2 (prod)!
Honestly I'm absolutely astounded this is even remotely possible. It seems to me even with the allowedAccountIds
and aws:profile
config options set, pulumi sometimes, somehow just decides to use the [default]
credentials in ./aws/credentials Has anyone else experienced this? This is not the first time I've experienced strange AWS credential issues with Pulumi. This seems extremely, extremely bad.prehistoric-waitress-34998
11/11/2022, 9:33 AMfull-soccer-21780
11/11/2022, 1:02 PMhundreds-jackal-10148
11/13/2022, 5:51 PMhttps://youtu.be/CRmX3G9NKMUâ–¾
stocky-jordan-2462
11/14/2022, 1:07 PMsparse-state-54552
11/14/2022, 3:15 PMfrom pulumi_gcp import monitoring
class GCPUptimeCheck:
def __init__(self, hostname, projectid):
self.hostname = f"{hostname}.<http://verifybrand.com|verifybrand.com>"
self.projectid = projectid
def createUptimeCheck(self):
project_id = self.projectid
https = monitoring.UptimeCheckConfig(f"{self.hostname}-UptimeCheck",
display_name=self.hostname,
http_check=monitoring.UptimeCheckConfigHttpCheckArgs(
path="/home/heartbeat",
port=443,
use_ssl=True,
validate_ssl=True
),
monitored_resource=monitoring.UptimeCheckConfigMonitoredResourceArgs(
labels={
"host":self.hostname,
"projectId":project_id,
},
type="uptime_url",
),
timeout="10s",
project=self.projectid
)
return https
On each apply it says the reason to replace is because of the monitoredResource. Runnin a preview --json I have the following detailed reasons.
"detailedDiff": {
"monitoredResource.labels.projectId": {
"kind": "add-replace",
"inputDiff": false
},
"monitoredResource.labels.project_id": {
"kind": "delete-replace",
"inputDiff": false
}
}
But looking at the old state and new state it lists the same json output. I's like to not to replace the uptime checks to be able to keep historical data. Any help is appreciated.some-motherboard-44061
11/16/2022, 11:16 AMsparse-state-54552
11/17/2022, 2:01 PMDiagnostics:
gcp:monitoring:Dashboard (dashboard):
error: gcp:monitoring/dashboard:Dashboard resource 'dashboard' has a problem: "dashboard_json" contains an invalid JSON: invalid character 'a' after object key:value pair. Examine values at 'Dashboard.DashboardJson'.
I can get rid of the error by striping the escaped double quotes from the filter lines but it errors on an invalid entry for the metric type from GCP. Has anyone had luck creating dashboards in GCP recently? I tried the json directly with a json.dumps but it does not work as well.dry-potato-52542
11/17/2022, 6:33 PMbroad-house-79544
11/18/2022, 6:51 AMmost-mechanic-99378
11/18/2022, 12:00 PMlittle-winter-91004
11/18/2022, 12:50 PMquaint-hydrogen-7228
11/18/2022, 5:00 PMmost-mechanic-99378
11/21/2022, 9:41 AM--target
hallowed-printer-89159
11/21/2022, 4:30 PMpulumi config set-all --plaintext instancesConfig=[{zone: us-central1-a, quantity: 3}, {zone: us-central1-b, quantity: 1}]
and I got an error
Each key-value pair must be preceded by either the --secret
or the --plaintext
flag to denote whether
it should be encrypted:echoing-orange-22253
11/22/2022, 1:29 AMcurved-magazine-50014
11/23/2022, 8:50 PMhallowed-shampoo-53504
11/23/2022, 9:30 PMPreviewing update (dev)
View Live: <https://app.pulumi.com/JonSEng/ai-infra-test/dev/previews/2071fd20-eb30-47db-9c4c-08ef87af7701>
Type Name Plan Info
pulumi:pulumi:Stack ... 1 error; 29 messages
Diagnostics:
pulumi:pulumi:Stack (ai-infra-test-dev):
[info] welcome to sbt 1.7.1 (JetBrains s.r.o Java 1.8.0_152-release)
...
[error] /Users/.../ai/Job.scala:3:12: object pulumi is not a member of package com
[error] import com.pulumi.Pulumi
[error] (Compile / compileIncremental) Compilation failed
[error] Total time: 25 s, completed
error: an unhandled error occurred: '/opt/homebrew/anaconda3/envs/it-ds/bin/sbt /opt/homebrew/anaconda3/envs/it-ds/bin/sbt -batch run' exited with non-zero exit code:
The code seems to compile fine locally though via sbt
sbt:pulumi-test> test:compile
[warn] sbt 0.13 shell syntax is deprecated; use slash syntax instead: Test / compile
[info] compiling 1 Scala source to /Users/...
[success] Total time: 3 s, completed
Any ideas on how to get pulumi up
working with sbt
? Our existing project is in sbt
and scala
so ideally we can create a new sbt
subproject using pulumi to manage infra.
Thanks!rough-jordan-15935
11/24/2022, 6:19 AMechoing-dress-72742
11/24/2022, 1:40 PMechoing-dress-72742
11/24/2022, 1:40 PMbillowy-army-68599
11/24/2022, 3:17 PM