Hello community , I am trying to test Pulumi in order to assess some functionality for IAS automation, I have the following simple use-case: Test pulumi-operator with Pulumi Service backend and try to deploy the pulumi-nginx example https://github.com/metral/pulumi-nginx , but I've got the following problem when applying the Stack , logs from the operator:

{
  "level": "error",
  "ts": "2023-01-18T11:54:20.674Z",
  "logger": "controller_stack",
  "msg": "Failed to update Stack",
  "Request.Namespace": "default",
  "Request.Name": "nginx-k8s-stack-1",
  "Stack.Name": "alinalex/nginx/dev",
  "error": "installing project dependencies: exit status 1",
  "stacktrace": "<http://github.com/pulumi/pulumi-kubernetes-operator/pkg/controller/stack.(*ReconcileStack).Reconcile\n\t/home/runner/work/pulumi-kubernetes-operator/pulumi-kubernetes-operator/pkg/controller/stack/stack_controller.go:459\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.9.0/pkg/internal/controller/controller.go:298\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.9.0/pkg/internal/controller/controller.go:253\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.9.0/pkg/internal/controller/controller.go:214|github.com/pulumi/pulumi-kubernetes-operator/pkg/controller/stack.(*ReconcileStack).Reconcile\n\t/home/runner/work/pulumi-kubernetes-operator/pulumi-kubernetes-operator/pkg/controller/stack/stack_controller.go:459\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.9.0/pkg/internal/controller/controller.go:298\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.9.0/pkg/internal/controller/controller.go:253\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.9.0/pkg/internal/controller/controller.go:214>"
}

Any clue about the error?

Hi 👋 I have a question about Pulumi organizations. Are organizations a good boundary between different clients who are on their own AWS accounts? Or let's say I have customerA with stage and prod environments in different AWS accounts, would making Pulumi organizations for these two accounts (customerAStage, customerAProd, customerBStage, customerBProd, etc.)

I am doing some testing on different types of deployments for Pulumi and for the moment I am testing the operator. I've tried multiple configuration but right now what I need is using ProgramObject. I have the following concerns regarding this approach: • How the providers are being injected, because we have only yaml and not a programming context? The Pulumi Yaml can be used in an airgapped env?

Hi Team, Am testing python automation api with AWS and getting below error

stderr: error: passphrase must be set with PULUMI_CONFIG_PASSPHRASE or PULUMI_CONFIG_PASSPHRASE_FILE environment variables

can someone pls help me where to set this

👋 Hello, team!

I am trying to add a folder inside a s3 bucket using pulumi and c#, do you guys have any example how to do it?

Guys, I did try today again and its working

Looks like just having the path on the Key property is doing the trick to create the folder

I also try to find anything in the aws cli for that but didn't find np related to only create a folder.

Hi Team, I am new to pulumi and trying to create ECS task definition on AWS. Along with this, I am also creating more resources like cluster, role, security group. In this task definition, I am passing few environment variables. In this env variables, I am passing Id/ARN of other resources. But pulumi is throwing error for fetching data of resources(cluster, secutiry group and role) and assigning this error as a value to these env variables. Below is screenshot of what is deploying on AWS.

Hi all, I'm getting started with provisioning resources with Pulumi and I'd like to use a templated cloud init for setting up tailscale on a GCP VM on startup. https://rossedman.io/blog/computers/scale-homelab-with-tailscale/ seems to have most of the information on how to do it with Terraform on DO, should I just be using the sprintf approach for the same in Pulumi?

Hi! I am new to pulumi, had a doubt related to it How to emit data to an existing topic and existing brokers in pulumi?

This message was deleted.

Another question, its possible to add more than one user and password in a RDS instance using Pulumi? I know that is possible using Terraform.

Hi all, has anyone successfully imported a ACM CertificateValidation resource from terraform to pulumi? I keep running into

* reading ACM Certificate (): InvalidParameter: 1 validation error(s) found. - minimum field size of 20, DescribeCertificateInput.CertificateArn.

Upon debugging I can see that the

certificateArn

value being passed in fulfills that minimum field size 🤔

Hello Community I need one rough estimation on pricing Servers count : aprox 300 on aws Users : 10 We would like to know the aprox license cost for above requirements ( if we go with app.pulumi.com for storing statefile and create one organization)

Hi @echoing-match-29901, I'm currently creating an Azure storage account using the following code.

private void InitStorageAccount(Config config)
        {
            var storageAccount = new StorageAccount("saaggregatorservice", new StorageAccountArgs
            {
                ResourceGroupName = ResourceGroup.Name,
                AccountName = $"saaggregatorservice{config.Env}",
                Sku = new StorageSkuArgs
                {
                    Name = SkuName.Standard_LRS
                },
                Kind = Kind.StorageV2,
                Tags = config.DefaultTags,
            });

            var saKey = Output.Tuple(storageAccount.Name, ResourceGroup.Name, Output.CreateSecret(""), storageAccount.Id).Apply(
                t => ListStorageAccountKeys.InvokeAsync(new ListStorageAccountKeysArgs
                {
                    AccountName = t.Item1,
                    ResourceGroupName = t.Item2,
                })).Apply(result => result.Keys.First().Value);
            StorageConnectionString =
                Output.Format($"DefaultEndpointsProtocol=https;AccountName={storageAccount.Name};AccountKey={saKey}");
        }

Before the update to 3.51.* this code was successfully able to generate a service account. Now however, I'm faced with the following error: Error:

azure-native:web:WebApp (aggregatorFunctionApp):
    error: Code="BadRequest" Message="There was a conflict. The remote name could not be resolved: '<http://saaggregatorservice.file.core.windows.net|saaggregatorservice.file.core.windows.net>'" Details=[{"Message":"There was a conflict. The remote name could not be resolved: '<http://saaggregatorservice.file.core.windows.net|saaggregatorservice.file.core.windows.net>'"},{"Code":"BadRequest"},{"ErrorEntity":{"Code":"BadRequest","ExtendedCode":"01020","Message":"There was a conflict. The remote name could not be resolved: '<http://saaggregatorservice.file.core.windows.net|saaggregatorservice.file.core.windows.net>'","MessageTemplate":"There was a conflict. {0}","Parameters":["The remote name could not be resolved: '<http://saaggregatorservice.file.core.windows.net|saaggregatorservice.file.core.windows.net>'"]}}]

Is anyone able to assist in debugging?

I'm trying to create a custom provider using the pulumi-tf-provider-boilerplate for wrapping the ElasticStack terraform provider. I have gotten things building and can create an executable for the provider, and package for my language of choice (dotnet), however I'm having some issues getting Pulumi to pull the final plugin from GitHub releases, which should be possible based on comments here: https://github.com/zlepper/pulumi-elasticstack/blob/main/provider/resources.go#L72-L75. Even with set, it doesn't seem like pulumi actually generates a URL in the shape GitHub supplies downloads in. (Next problem is that at least the dotnet provider seems to completely ignore that setting entirely, and still tries to pull from the general pulumi registry. I have tried specifying the ServerUrl option when marking the plugin for installation, but still no success). Is there some more documentation on how the releases/files in GitHub should be named for this to work? Link to the entire repo: https://github.com/zlepper/pulumi-elasticstack (Appologies for the commit messages, I was quite frustrated)

Hi everyone, I'm investigating whether pulumi is suitable for us. I'm starting simple: create a number of nodes on Linode, and then add them to a firewall. I'm creating the nodes like this:

let instances = []
const numNodes = 2

for (let n = 0; n < numNodes; n++) {
    // Create a Linode resource (Linode Instance)
    const instance = new linode.Instance(`foo-${n}`, {
        type: "g6-nanode-1",
        region: "eu-central",
        image: 'linode/ubuntu22.04',
        label: `foo-${n}`,
        group: 'foo',
        tags: ["test"],
        privateIp: true,
        interfaces: [{purpose: 'public'}, {purpose: 'vlan', label: 'acc-swarm', ipamAddress: '192.0.2.0/24'}],
    });

    instances.push(instance)
}

Then I create a firewall instance:

const accSwarmFirewall = new linode.Firewall("acc-swarm", {
    label: 'acc_swarm',
    inbounds: [ ... ],
    inboundPolicy: 'DROP',
    outbounds: [ ... ],
    outboundPolicy: "ACCEPT",
    linodes: [instances[0].id, instances[1].id]
})

This does what you'd expect: the firewall is assigned to both instances. But of course I don't want to hard-code the number of instances again in that firewall declaration. I've tried many things, for example:

pulumi.all(instances).apply(i=>i.id)

. This way when I change

numNodes

to 3, I don't get any errors, but the new node is not added to the firewall. Or this:

pulumi.all(instances.map(i => i.id.apply(id=>parseInt(id))))

, guided by TypeScript type information (apparently

instance.id

is a

string

, but the firewall expects a list of numbers), but then I get errors like this:

pulumi:pulumi:Stack (foo-dev):
    panic: interface conversion: interface {} is string, not int
    goroutine 105 [running]:
    <http://github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema.HashInt({0x291b0a0|github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema.HashInt({0x291b0a0>?, 0x31acd50?})
        /home/runner/go/pkg/mod/github.com/pulumi/terraform-plugin-sdk/v2@v2.0.0-20220824175045-450992f2f5b9/helper/schema/set.go:24 +0x55
    <http://github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfshim/sdk-v2.v2Schema.SetHash({0x0?}|github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfshim/sdk-v2.v2Schema.SetHash({0x0?}>, {0x291b0a0, 0x31acd50})
        /home/runner/go/pkg/mod/github.com/pulumi/pulumi-terraform-bridge/v3@v3.28.1/pkg/tfshim/sdk-v2/schema.go:176 +0x43
    <http://github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfbridge.visitPropertyValue({0xc003be0b20|github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfbridge.visitPropertyValue({0xc003be0b20>, 0x7}, {0xc003b019d0, 0x7}, {{0x28c7ba0?, 0xc003b2ac18?}}, {0x31dd8b8?, 0xc0000b72c0}, 0x0, 0x0, ...)
        /home/runner/go/pkg/mod/github.com/pulumi/pulumi-terraform-bridge/v3@v3.28.1/pkg/tfbridge/diff.go:114 +0x812
    <http://github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfbridge.doIgnoreChanges({0x31d1070|github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfbridge.doIgnoreChanges({0x31d1070>, 0xc00048d080}, 0xc003b45f10?, 0x31b5c00?, 0xc003b35d40?, {0x0, 0x0, 0xc000682820?}, {0x31d3b78, 0xc000634a00})
        /home/runner/go/pkg/mod/github.com/pulumi/pulumi-terraform-bridge/v3@v3.28.1/pkg/tfbridge/diff.go:260 +0x3ce
    <http://github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfbridge.(*Provider).Diff(0xc000386fc0|github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfbridge.(*Provider).Diff(0xc000386fc0>, {0x31cbc88?, 0xc003b346c0?}, 0xc000ba09a0)
        /home/runner/go/pkg/mod/github.com/pulumi/pulumi-terraform-bridge/v3@v3.28.1/pkg/tfbridge/provider.go:762 +0x608
    <http://github.com/pulumi/pulumi/sdk/v3/proto/go._ResourceProvider_Diff_Handler.func1({0x31cbc88|github.com/pulumi/pulumi/sdk/v3/proto/go._ResourceProvider_Diff_Handler.func1({0x31cbc88>, 0xc003b346c0}, {0x2bb6760?, 0xc000ba09a0})
        /home/runner/go/pkg/mod/github.com/pulumi/pulumi/sdk/v3@v3.38.0/proto/go/provider.pb.go:3707 +0x78
    <http://github.com/grpc-ecosystem/grpc-opentracing/go/otgrpc.OpenTracingServerInterceptor.func1({0x31cbc88|github.com/grpc-ecosystem/grpc-opentracing/go/otgrpc.OpenTracingServerInterceptor.func1({0x31cbc88>, 0xc003b342a0}, {0x2bb6760, 0xc000ba09a0}, 0xc003b28880, 0xc003b2a300)
        /home/runner/go/pkg/mod/github.com/grpc-ecosystem/grpc-opentracing@v0.0.0-20180507213350-8e809c8a8645/go/otgrpc/server.go:57 +0x3f9
    <http://github.com/pulumi/pulumi/sdk/v3/proto/go._ResourceProvider_Diff_Handler({0x2c7fb80|github.com/pulumi/pulumi/sdk/v3/proto/go._ResourceProvider_Diff_Handler({0x2c7fb80>?, 0xc000386fc0}, {0x31cbc88, 0xc003b342a0}, 0xc000ba0930, 0xc000a641e0)
        /home/runner/go/pkg/mod/github.com/pulumi/pulumi/sdk/v3@v3.38.0/proto/go/provider.pb.go:3709 +0x138
    <http://google.golang.org/grpc.(*Server).processUnaryRPC(0xc000a6a000|google.golang.org/grpc.(*Server).processUnaryRPC(0xc000a6a000>, {0x31d4240, 0xc000102b60}, 0xc003b079e0, 0xc000a58ab0, 0x4233608, 0x0)
        /home/runner/go/pkg/mod/google.golang.org/grpc@v1.48.0/server.go:1295 +0xb2b
    <http://google.golang.org/grpc.(*Server).handleStream(0xc000a6a000|google.golang.org/grpc.(*Server).handleStream(0xc000a6a000>, {0x31d4240, 0xc000102b60}, 0xc003b079e0, 0x0)
        /home/runner/go/pkg/mod/google.golang.org/grpc@v1.48.0/server.go:1636 +0xa2f
    <http://google.golang.org/grpc.(*Server).serveStreams.func1.2()|google.golang.org/grpc.(*Server).serveStreams.func1.2()>
        /home/runner/go/pkg/mod/google.golang.org/grpc@v1.48.0/server.go:932 +0x98
    created by <http://google.golang.org/grpc.(*Server).serveStreams.func1|google.golang.org/grpc.(*Server).serveStreams.func1>
        /home/runner/go/pkg/mod/google.golang.org/grpc@v1.48.0/server.go:930 +0x28a

I'm not sure what I'm missing here. Is there anyone who can shed some light on this? Thanks a lot!!

Hi, im just starting with pulumi, can anyone help me with this error?

Hey all, my team has been experimenting with pulumi for a few months, and I'm running into an issue with tracking down errors. We are use Go as our language, and bubbling up the errors using

return

, as is pretty common in Go. When the resource fail for whatever reason, it's hard to track down in the codebase where athey are happening. Are there are tricks to doing this? I've tried using something like https://github.com/pkg/errors, or even hand-rolling our own error with a callstack, but that hasn't deemed super successful. I'm hesitant to use

panic

everywhere, though that may be more helpful as I will know where the errors are occurring. Any advice on error handling in go to make it easier to track down where issues are happening? Thanks!

Hi all, new to pulumi. Im trying to use multiple projects (trying to implement micro stacks) in azure. I have a project that creates a vnet and has an output of the vnet name, my second project then takes this output and creates a subnet on it. Obviously I have to run pulumi up in the right order for this to work and I’m happy that the Stsckrefence will throw a decent exception if I forget to do this, however if I accidentally destroy in the wrong order there doesn’t seem to be any warning or anything and my resources can be destroyed in the wrong order causing my state to break. Specifically the vnet shows as being deleted in pulumi but its still in my portal but my subnets are gone. Am I missing something with this? Secondly if I run my second project without running my first is there anyway of telling the stack I depend on to go ahead and run if it’s outputs don’t exist?

Hi all, Is there an Azure-Native equivelent of SubnetRouteTableAssociation? The goal is to link an existing Subnet with an existing RouteTable. Thanks!

I'm trying to deploy an image to ECR and I am getting this error AttributeError: module 'pulumi_aws.ecr' has no attribute 'Image'

Is there an equivalent to Terraform provisioner

local-exec

or, better still a way of doing

eksctl utils associate-iam-oidc-provider

in Pulumi? thanks

Howdy I am trying to provision an ec2 instances with ssh. And I've done the pulumi set public/privatekeyPath. But When I check on AWS it gives me this error. This instance is not associated with a key pair. Without a key pair, you can't connect to the instance through SSH.

Hi teams. I found each time I run pulumi up, the kube-system/aws-load-balancer-tls will be updated. Do you know why this happens

Hello Team, Could anybody tried to create aws glue catalog table with Apache Iceberg Integration in pulumi code. I tried to create using the below format, the table got created with wrong format. DDL which I was able to create in Athena console and successfully created:

CREATE TABLE `t_temp_table_iceberg`
(
`col1` string,
`col2` double,
`col3` string,
`col4` BOOLEAN,
`col5` BOOLEAN
)
PARTITIONED BY(
col1,
col2
)
LOCATION '<s3://bucket-name/iceberg_location/>'
TBLPROPERTIES (
  'table_type'='ICEBERG',
  'format'='parquet'
)

Tried to deploy the same in pulumi but the table is created with wrong format similar like Hive table with partitions and not able to access in Athena( Not an issue with permissions verified). Can anyone help me with it.

t_temp_table_iceberg = aws.glue.CatalogTable(
            resource_name="t_temp_table_iceberg",
            name="t_temp_table_iceberg",
            database_name=self.glue_catalog_iceberg_catalog_db.name,
            parameters={
                "table_type": 'ICEBERG',
                "format": "parquet"
            },
            storage_descriptor=aws.glue.CatalogTableStorageDescriptorArgs(
                columns=[
                    aws.glue.CatalogTableStorageDescriptorColumnArgs(
                        name="col1",
                        type="string",
                    ),
                    aws.glue.CatalogTableStorageDescriptorColumnArgs(
                        name="col2",
                        type="double",
                    ),
                    aws.glue.CatalogTableStorageDescriptorColumnArgs(
                        comment="",
                        name="col3",
                        type="String",
                    ),
                    aws.glue.CatalogTableStorageDescriptorColumnArgs(
                        comment="",
                        name="col4",
                        type="Boolean",
                    ),
                    aws.glue.CatalogTableStorageDescriptorColumnArgs(
                        comment="",
                        name="col5",
                        type="Boolean",
                    ),
                    aws.glue.CatalogTableStorageDescriptorColumnArgs(
                        comment="",
                        name="Substituted",
                        type="Boolean",
                    ),                ],
                location=f"s3://{self.curated_bucket_name}/iceberg_location/",
            ),
            partition_keys=[
                aws.glue.CatalogTablePartitionKeyArgs(
                    name="col1",
                    type="",
                    comment="",
                ),
                aws.glue.CatalogTablePartitionKeyArgs(
                    name="col2",
                    type="",
                    comment="",
                )
            ],
        )

is there a way to do

pulumi up --retries 3

?

Currently I'm doing this, and feeling silly:

# Trigger the pulumi up => change the world.
      pulumi up --yes --message "$AUGMENTED_MESSAGE" ||
        # retry-as-a-service :P 
        pulumi up --yes --message "(1st retry) - $AUGMENTED_MESSAGE" ||
          # retry-as-a-service :P 
          pulumi up --yes --message "(2nd retry) - $AUGMENTED_MESSAGE" ||
            # retry-as-a-service :P 
            pulumi up --yes --message "(3rd and last retry) - $AUGMENTED_MESSAGE"