Hello - I am trying to use the pulumi cloud app to provision a project but it wont let me authenticate with my repository. No matter what details I put in the ssh / ssh pass boxes, I get an error in the build - any ideas what i am doing wrong? I am absolutely putting the right GIT url / SSH key / ssh key password in. It seems to think im not populating it?

Ive also noticed if you change the details - the "save deployment configuration" box remains greyed out. You need swap authentication method or provider for it to reflect you have made a change

Really enjoying Pulumi -- much more understandable than Terraform. One thing that's confusing for a new person -- it seems like there are often several different libraries that do more or less the same thing. There's

pulumi_aws

and also

pulumi_awsx

. There

pulumi_aws.iam

and also

pulumi_aws_iam

. Many other examples. Is there a simple way to think about this -- which libraries should we prefer? Can they all be mixed and matched?

Hi, Does anyone have information, tutorials, or links on debugging pulumi Python with VSCode debug? I can live with another debug technique … Facing some challenging issues with the pulumi.log.info() function and pulumi logs command to understand the flow and where is the logging being stored?

I'm looking to deploy fly.io apps in my pulumi stack but I see there is not yet a terraform provider. What do people do in this situation? I'm leaning towards having two seperate deployment processes, which is not necessarily a bad thing because deploying to fly with flyctl is rather slow as it waits for the machines to come up & then runs a healthcheck

I have a strange issue. I'm new to pulumi, just work with in two weeks. I'm using pulumi with C# I create a stack, then I add a config:

pulumi config set azure:clientid <value>

The config looks like this:

config:
   azure:clientid: <the value>

then I read the config

var config = new Pulumi.Config();
var clientId = config.Require("azure:clientId");

Run pulumi up and then it complain that "IaCazureclientId" does not exist. and if I do like this: (add a config value with up command)

pulumi config set azure:clientid <value>
pulumi up -c SERVICE_ID=22442

it make the file look like:

config:
   IaC:SERVICE_ID: 22422
   azure:clientid: the value

it adds a prefix to my SERVICE_ID and if I ask for the SERVICE_ID like this

var clientId = config.Require(SERVICE_ID");

it will find that one, but can't still find:

var clientId = config.Require("azure:clientId");

but if I remove the azure: and just do:

pulumi config set clientid <value>

it gives me:

config:
   IaC:clientid: the value

in the file. and:

var clientId = config.Require("clientId");

works. Why can't I just use other namespaceing like azure:something and retrieve the data without it say it does not exist and try to look for "IaCazuresomething" The IaC seams to come from pulumi.yaml name: IaC filed like a prefix. I expect:

pulumi config set azure:clientid <value>

to give me as it is:

config:
   azure:clientid: the value

but not complain about it missing and try to look for IaCazureclientId what am I doing wrong? so lost, read the documentation and I can't get this... a bug or am I just stupid? :D

Hi, I'm interested in recent launch of Pulumi commands provider. However, I'm unable to understand few concepts on it from the Docs. Mainly on the purpose of create and delete and whether it is possible to execute custom commands like ls, cat etc. on the created resource (mostly the VM). Can someone help me out

Hey there, getting started and I tried using the container-aws-typescript template. When I run

pulumi up

I get an error from aws:ec2/getVpc "no matching EC2 VPC found". Should I expect the template to yield a deployable starting point?

Hey, I've been using Pulumi for a few months now, and I have this practice that I'm not sure if it's a good or a bad pratice. When getting values from the stack, I often find my self using pulumi args e.g. gcp.compute.BackendServiceArgs. To be more precise I would create an interface and assign a variable in that interface that is type of gcp.compute.BackendServiceArgs. Is this a good or a bad practice? Is there a better way of doing these things?

Hi, I’m facing issues with AWS STS on the instantiation of the aws provider. Some days (already more than once) receive error: rpc error: code = Unknown desc = unable to validate AWS credentials. Details: validating provider credentials: retrieving caller identity from STS: operation error STS: GetCallerIdentity, https response error StatusCode: 0, RequestID: , request send failed, Post “https://sts.eu-west-1.amazonaws.com/”: dial tcp: lookup sts.eu-west-1.amazonaws.com on [20018a07b3ff5001]53: no such host Make sure you have set your AWS region, e.g.

pulumi config set aws:region us-west-2

. By the way, already tested all the sets for the config available and ensured that aws cli is operational. Those anyone else is facing this issue? pulumi version v3.69.0. (also happening with v3.68.0)

Are there any non-trivial example repos that use multiple projects and providers? I want to get an overview on what the end result looks like when heavily leveraging Pulumi

Are stacks not scoped to projects? I have projects for differents kubernetes clusters, and dev/staging/prod are non-sense in the context of those, but they still appear to be valid when using

pulumi stack ls

under any project

Hi, Some help understanding the behavior would be very appreciated: I have 2 stacks, one called core and another called base: The core pulumi file is name: core-infra project: dev-core-infra runtime: name: python description: Core Infra Dev The Stack file has the following configuration for aws region awsregion eu-west-1 And the main file uses it with region=config.get(“aws:region”) And the deploy has no issue. On the base the pulumi file is name: base-infra project: dev-base-infra runtime: name: python description: Base Infra Dev the stack file has the following for aws region awsregion eu-west-1 the main file for base uses it region=config.get(“aws:region”) But the result during deploy is pulumipulumiStack (base-infra-dev-base-infra): error: Missing required configuration variable ‘base-infraawsregion’ please set a value using the command

pulumi config set base-infra:aws:region <value>

error: an unhandled error occurred: program exited with non-zero exit code: 1 Thanks ahead

Hi all I'm starting to really love Pulumi. It's so fast and simple in most cases. I'm just really stuck on one thing: Outputs and Inputs. I tried reading the docs and it makes sense but it breaks down as soon as I apply it to something practical. For example: I'm trying to pass a Pulumi secret config value to an AWS LaunchTemplate's user_data script. As far as I can understand this variable:

gitlab_runner_token = gitlab_config.require_secret("token")

contains an

Input

. Eventually, in my code, this input gets implicitly converted to a string:

t = Template(open(f"{getcwd()}/modules/aws_asg/user_data.tpl.sh").read())
templated_user_data = t.substitute({
    'gitlab_runner_token' : gitlab_runner_token,
})

I would expect the secret value in the template, but instead it printed this:

Calling __str__ on an Output[T] is not supported. To get the value of an Output[T] as an Output[str] consider: 1. o.apply(lambda v: f"prefix{v}suffix") See <https://pulumi.io/help/outputs> for more details.

. Firstly I don't understand why we're now talking about an

Output

instead of an

Input

, but that aside. I've followed the error message and googled this many times and most of the time the solution seems to be to use the

.apply()

function as it says. However I haven't found a working solution using the

.apply()

function. Mostly it just prints the same error whatever I try. For example, I would expect the following to unwrap the output into a string given the error message but it prints the same error:

t = Template(open(f"{getcwd()}/modules/aws_asg/user_data.tpl.sh").read())
templated_user_data = t.substitute({
    'gitlab_runner_token' : gitlab_runner_token.apply(lambda v: f"{v}"),
})

My hunch here is that the apply function which takes an

Output

does not return a string, but an

Output

. https://www.pulumi.com/docs/reference/pkg/python/pulumi/#pulumi.Output.apply I don't understand why this would ever be useful. 😄 I kind of understand why this is the behavior, it's never converted to a string until somewhere deep in the pulumi code to protect it being a secret, but this makes it totally unusable in many cases where you want the secret before Pulumi starts its templating magic. So how does the apply function really work? Can Outputs ever be converted to strings to be used in templating scripts? Am I better off not using Pulumi secrets for this use case or is it possible? Thanks a lot! Ben

I'm having some trouble with pulumi defaults on version 3.46.0 Given my Pulumi.yaml:

name: utils-apps
description: Application deployment for utils
runtime: nodejs
config:
  github:owner: adriangroch
  adrian.default:image.registry: <http://google.com|google.com>
  adrian.default:image.tag: latest

and then my Pulumi.dev.yaml:

config:
  echo-trigger:image.name: echo-trigger
  echo-trigger:image.tag: 1.2.3

And my function:

export function createContainerImageForApplication(appName: string) {
  const defaultConfig = new pulumi.Config('adrian.default')
  const config = new pulumi.Config(appName)
  const registry = config.get('image.registry') ?? defaultConfig.require('image.registry')
  const name = config.require('image.name')
  const tag = config.get('image.tag') ?? defaultConfig.require('image.tag')
  return `${registry}/${name}@${tag}`
}

calling

createContainerImageForApplication("echo-trigger")

throws:

error: Missing required configuration variable 'adrian.default:image.registry'

Diagnostics:
  pulumi:pulumi:Stack (utils-apps-dev):
    error: Missing required configuration variable 'adrian.default:image.registry'
        please set a value using the command `pulumi config set adrian.default:image.registry <value>`

Any suggestions?

Hi, I made a hotfix to deploy Kubernetes CustomResource with PulumiYaml. Is the approach is valid? Thank you😉

Hey all, I currently work with Terraform and want to make the leap into Pulumi, but I can't find a suitable provider (or at least I don't understand it). Currently in Terraform I deploy first to a Hyper-V on-premises site based on Windows Server 2022. Is there any provider that helps deploy into Hyper-V on premises (I found for Azure, but I need to stay on-premises strictly). Thanks for your help 🙂

Hello! I just did the workshop for azurenative using TS. Very useful. Thanks! QQ though. I'm not from a software engineering backround, so learning TypeScript as the language of choice for Pulumi. I am (I suspect like many others) from an infrastructure background, so very familiar with PowerShell. Could Pulumi ever support PowerShell as a language of choice?

Hey all, does pulumi have support for managing elasticsearch indexes when using elastic cloud?

Hey guys! We’re a small company that is evaluating using Pulumi to define and maintain our infra. Our systems differ a bit between environments (dev, prod, staging) and I read that using different stacks per environment is a common pattern. You use different configs per stack and then use those properties to ideally spin up the same infrastructure but with different configuration per environment. However as I said, our infrastructure currently differs between environment, and the underlaying structure of the resources that defines it, varies. For this reason, having multiple stacks doesn’t really add much value in our case. I know we can just

if/else

the creation of resources based on the current stack, etc, but I wonder if that’s a good pattern to follow? Or it would be much simpler to just have 1 stack and that’s it. I wonder if we are approaching the problem right, or we should find a better way. Thanks in advance

For folks getting started with Pulumi, we have an “IaC Recommended Practices” series that discusses a lot of different topics with regard to how to use Pulumi. This includes things like where to store your Pulumi code, how to use Git branches, using per-developer stacks, structuring Pulumi projects (when to use one project versus multiple projects), and more. You can find the first post in the series here: https://www.pulumi.com/blog/iac-recommended-practices-code-organization-and-stacks/

Hi all! Quick question: How can I use mixin-type functionality with Pulumi? What I want is something along these lines: Object + feature1 + feature2 For instance, that would then become Deployment + secret1 + mountVolume (context here is Kubernetes, but it doesn't really matter). For this to work, I need to extend original objects by changing their properties. I noted that Pulumi transforms all input immediately into Output variables, meaning I can't change them any more. Is what I am looking for possible in the first place? I am coming from Tanka and was hoping to replicate its mixin behaviour in Pulumi. Thank you in advance!

Curious question for people. I've seen a number of blog articles and docs suggesting "Micro-stacks" when working with Pulumi. I'm hitting the need for that to do GitOps utilizing Stack Outputs. How many people end up doing Micro-repositories for those stacks vs. monoliths? Or sub-module micro-repos in a monolith? Especially thinking about GitHub Actions for CI/CD?

Does anybody here use a self-managed pulumi state? I am having some difficulty switching from pulumi cloud to using an s3 bucket for the state.

aws.lambda.CallbackFunction

does not seem to work with the s3 bucket for state, I think because it cannot be serialized into json. Is this correct or do I just have it configured wrong? Changing everything into zip files for the lambda functions is difficult because, the way that the backend deployment code is written it will be very difficult to figure out which dependencies to package for functions. Especially since most lambda functions are created programatically in a big loop with many different objects and functions involved.

can anyone confirm if MessageBody filtering is working with Pulumi SNS Subscription? I added the filterPolicyScope of MessageBody, yet it uses MessageAttributes

Is there a way to turn on Active Tracing for an SNS topic using Pulumi?

I am interested in Deployment webhooks but I get a 404 when I click on the link here any suggestions:

Hello. Complete noob here. I have an application that is organized as follows. Parent repo has two submodules: api and front-end. I am wondering if I can put all of my pulumi code in a separate submodule: infrastructure. If I put all of my pulumi IaC in a separate repo separate from the api I”m deploying to aws, can I still make things work? Or must the pulumi code reside in the same repo/directory as my api? Thanks and sorry for the noob question.

Hey all! Just starting on Pulumi, have some terraform experience. I am trying to get a GKE autopilot cluster under management. So far I think I can’t actually create it using pulumi (setting

enable_autopilot=True

throws an error (specifically

googleapi: Error 400: Max pods constraint on node pools for Autopilot clusters should be 32.

), but setting the

default_max_pods_per_node

to 32 leads to the error

Conflicting configuration arguments: "default_max_pods_per_node": conflicts with enable_autopilot. Examine values at 'platform-cluster-silver.defaultMaxPodsPerNode'.

. My next step was to manually create the cluster and try to import it but I ran into syntax trouble with no obvious docs to help sort it out. The command I landed on that failed was

pulumi import gcp:container/cluster:Cluster cluster-name-on-gcp cluster-name-in-pulumi

and that didn’t get me anywhere. So any pointers either towards successfully creating an autopilot cluster, or importing one? Thanks all!