Hi all I'm stuck on something that seems like it should be simple. I have a multiple ts file program and am creating a provider in one file (aws provider with different region to the default) now how do I get a reference to this provider without actually passing the reference around?

Hey everyone, I'm converting some infrastructure and would like to use this package: https://github.com/spion/pulumi-hetznerdns the link to the registry is a 404, and I've left an issue on the repo, but I wondered if there was a way to get up and running anyway?

You might want to look at the dependsOn option

Not sure if this would be the right channel, but... When you do the Pulumi challenges, you get awarded with some swag - this is great! Would it be possible to postpone deliveries and bundle multiple rewards in a single package? Since it is overseas delivery for Pulumi to my location, I understand that I will get some of the costs of the delivery, which is fine. However, I think the cost will be reduced if delivered in a single package instead after multiple challenges completed. I got the swag for the first challenge today, I like it 🙂 I do not mind a delay, if there is an option to bundle up multiple rewards.

This message was deleted.

Hey folks I have a question about secrets, and instantiating resources. Let's say I have a function that set up a new set of resources (hezner machine, firewall attachments, storage, dns records etc). Once the machine is set up, I will want to run an ansible playbook against it (as outlined here https://www.pulumi.com/blog/deploy-wordpress-aws-pulumi-ansible/) which in my case sets up a docker compose stack. I would like to generate several (<10) random strings for passwords and such that will go into the

.env

file alongside docker compose. I would like those passwords to be securely stored in the state, but I don't really want to have to run a bunch of

pulumi config set --secret

commands, or generate those as a manual step. I'd also like to be able to look those values up when needed. What's my best option/architectural pattern to do this in pulumi?

Hello, Can somebody please help with printing/accessing in debugger list of AWS subnets? I'm stuck (( Here is how I get list of the subnets, but I don't understand on how to print that list and how to access it's values in the debugger (I'm using vscode)

const aws = require("@pulumi/aws");

const tagsPrivate: { [key: string]: string } = {
  EKS_Cluster: eksOpts.name,
  Type: 'private'
};

const privateSubnetIds = aws.ec2.getSubnetsOutput(tagsPrivate).apply(sn =>  sn.ids);

// this doesn't work, I'm getting "Private subnet IDs: Calling [toString] on an [Output<T>] is not supported."
<http://pulumi.log.info|pulumi.log.info>(`Private subnet IDs: ${privateSubnetIds}[0]`);

Thanks

What is the best way to get a file from a server? Command doesn’t seem to be it (allows moving files to but not from vms). Any ideas?

Howdy folks. We're having trouble getting pulumi-python to work right. We keep getting module not found errors. We use several different ways to manage our python environments - conda, pyenv, poetry.

AWS credential insanity -- we have a

Pulumi.dev.yaml

and

Pulumi.prod.yaml

Each of these files has a single

aws:allowedAccountIds

account id. They also each set a single

aws:profile

While on our

dev

stack I ran

pulumi up

and....Pulumi created some of the resources in AWS account #1 (dev) and others in AWS account #2 (prod)! Honestly I'm absolutely astounded this is even remotely possible. It seems to me even with the

allowedAccountIds

and

aws:profile

config options set, pulumi sometimes, somehow just decides to use the

[default]

credentials in ./aws/credentials Has anyone else experienced this? This is not the first time I've experienced strange AWS credential issues with Pulumi. This seems extremely, extremely bad.

Hi folks, I’m trying to subscribe to Pulumi, but it won’t let me add the card details, the button is disabled even after filling in the details - I’ve disabled my ad blocker as there was a tonne of errors in the console, but now there’s just one error that shows as soon as you start adding a card number:

Do you guys have an office hours? We are trying to move from terraform to pulumi and have couple of questions mostly revolving around best practices and typescript production-grade pulumi examples (that deals with more varying resources and might need to organise the project into ts modules).

This video helps shed some light on the biggest question I have with Pulumi: how do infrastructure deployments relate to application/code deployments? The two scenarios (deploying infrastructure in the same or different lifecycle as application code) and scenario implementation options helps illuminates what is feasible, but I’m still left wondering what the different considerations pros/cons would be of each different scenario and implementation options. Is there any written guidance or other resources that would help further illuminate this?

Hi all, I am currently attempting to get the following sample to work, but as an inline program: https://www.pulumi.com/registry/packages/azure-native/how-to-guides/azure-cs-appservice/ All resources are spawned as expected, but the App Service "WEBSITE_RUN_FROM_PACKAGE" functionality does not seem to work. I can download the zip blob from the storage account manually from the Azure portal and it looks as expected (a compiled version of the dotnet project), but it doesn't download the zip via the URL generated from the SignedBlobReadUrl method. When I try to access the web app's URL, I receive the following message in plaintext "You do not have permission to view this directory or page.". Any pointers as to what might go wrong? Edit: To further add to this, when I make a SAS token manually via azure portal for the container which the blob is in, I can download the blob via that generated SAS signature. The SignedBlobReadUrl uses signature version 2015-04-05 whereas when I get a SAS token manually, it uses signature version 2021-06-08

Good morning. I am trying to create some GCP uptime checks with Pulumi but on every apply it wants to replace them despite despite no actual difference. I've split the code into a class in Python to be able to loop over it to create multiple instances. the code as follows.

from pulumi_gcp import monitoring

class GCPUptimeCheck:

    def __init__(self, hostname, projectid):
        self.hostname = f"{hostname}.<http://verifybrand.com|verifybrand.com>"
        self.projectid = projectid  

    def createUptimeCheck(self):
        project_id = self.projectid
        https = monitoring.UptimeCheckConfig(f"{self.hostname}-UptimeCheck",
            display_name=self.hostname,
            http_check=monitoring.UptimeCheckConfigHttpCheckArgs(
                path="/home/heartbeat",
                port=443,
                use_ssl=True,
                validate_ssl=True
            ),
            monitored_resource=monitoring.UptimeCheckConfigMonitoredResourceArgs(
                labels={
                    "host":self.hostname,
                    "projectId":project_id,
                },
                type="uptime_url",
            ),
                timeout="10s",
                project=self.projectid
        )
        return https

On each apply it says the reason to replace is because of the monitoredResource. Runnin a preview --json I have the following detailed reasons.

"detailedDiff": {
                "monitoredResource.labels.projectId": {
                    "kind": "add-replace",
                    "inputDiff": false
                },
                "monitoredResource.labels.project_id": {
                    "kind": "delete-replace",
                    "inputDiff": false
                }
            }

But looking at the old state and new state it lists the same json output. I's like to not to replace the uptime checks to be able to keep historical data. Any help is appreciated.

Hey there, I am new to Pulumi, and I will use to initially create snowflake resources. My questions are: what is the best way to organize my project? Is there a design pattern to create resources based on configuration files? How do I organize my stacks? Thank you in advance.

Good morning. I am trying to run through the GCP dashboard creation from https://www.pulumi.com/registry/packages/gcp/api-docs/monitoring/dashboard/ When trying the grid layout example I get the following error.

Diagnostics:
  gcp:monitoring:Dashboard (dashboard):
    error: gcp:monitoring/dashboard:Dashboard resource 'dashboard' has a problem: "dashboard_json" contains an invalid JSON: invalid character 'a' after object key:value pair. Examine values at 'Dashboard.DashboardJson'.

I can get rid of the error by striping the escaped double quotes from the filter lines but it errors on an invalid entry for the metric type from GCP. Has anyone had luck creating dashboards in GCP recently? I tried the json directly with a json.dumps but it does not work as well.

hey all, does anyone know how to property migrate resources if provider are changing? Let's say we have provider A that does XYZ, But there is alternative provider B that does XYZ asl well. From the pulumi stand point resources provisioned by those providers are different where in fact they are not. Any suggestions?

HI guys! I'm new to pulumi. Question is about choosing a language. I know YAML and python, however, I think I can't do all the things(like helm deploy etc) as there is no support yet(please let me know if I am wrong). So, thinking of learning JS/TS. Any suggestion/advice?

Hey, can I get the resource object if I know the URN?

Hello everyone. I would like to understand better about pulumi billing. What is "managing one resource"? Would it be the deploy operation or 24h/7 days in a production scenario?

Hello, Where can I read more about the Pulumi type tokens? The docs for Pulumi import have some examples, which one can make some educated guesses from, but it would be good if there is something documented about the format of the tokens.

Hey, is it possible to get URN for the resources that will be created, so currently not in stack/state? I just want to create some new resources with

--target

Hello, anyone can help me please, I am trying to set pulumi config with following command

pulumi config set-all --plaintext instancesConfig=[{zone: us-central1-a, quantity: 3}, {zone: us-central1-b, quantity: 1}]

and I got an error Each key-value pair must be preceded by either the

--secret

or the

--plaintext

flag to denote whether it should be encrypted:

👋 hey, I am using pulumi (TS) w/ AWS and was hoping to also use it to configure some datadog alerts/monitors etc. Are there any sample projects you might recommend on github or elsewhere?

Hi!

Hi everyone! I'm new to Pulumi and was trying to get it to work with sbt (I heard there is experimental support for it).

Previewing update (dev)

View Live: <https://app.pulumi.com/JonSEng/ai-infra-test/dev/previews/2071fd20-eb30-47db-9c4c-08ef87af7701>

     Type                 Name               Plan     Info
     pulumi:pulumi:Stack  ...           1 error; 29 messages


Diagnostics:
  pulumi:pulumi:Stack (ai-infra-test-dev):
    [info] welcome to sbt 1.7.1 (JetBrains s.r.o Java 1.8.0_152-release)
...
    [error] /Users/.../ai/Job.scala:3:12: object pulumi is not a member of package com
    [error] import com.pulumi.Pulumi
    [error] (Compile / compileIncremental) Compilation failed
    [error] Total time: 25 s, completed 

    error: an unhandled error occurred: '/opt/homebrew/anaconda3/envs/it-ds/bin/sbt /opt/homebrew/anaconda3/envs/it-ds/bin/sbt -batch run' exited with non-zero exit code:

The code seems to compile fine locally though via

sbt

sbt:pulumi-test> test:compile
[warn] sbt 0.13 shell syntax is deprecated; use slash syntax instead: Test / compile
[info] compiling 1 Scala source to /Users/...
[success] Total time: 3 s, completed

Any ideas on how to get

pulumi up

working with

sbt

? Our existing project is in

sbt

and

scala

so ideally we can create a new

sbt

subproject using pulumi to manage infra. Thanks!

hey all quick question when im working with my team and we each do a pulumi deployment, why does the next user who deploys have to redeploy the entire stack and not only the diff?

Can pulumi import all resources from a given resource group, or do you have to manually specify each resource to import?

How to import Application Insights using Cli, when Azure Application Insight are using classic and not workspace based mode?