hi, I am using pulumi-random provider to import a random string, following the steps from docs. Running into the below error. code

rs, err := random.NewRandomString(ctx, fmt.Sprintf("some-project-suffix", name), &random.RandomStringArgs{
		Length:  <http://pulumi.Int|pulumi.Int>(4),
		Special: pulumi.Bool(false),
	})

pulumi -v=3 import random:index/randomString:RandomString some-project-suffix ffde
Previewing import (leftbin/org)



     Type                          Name                 Plan       Info
 +   pulumi:pulumi:Stack           some-stack           create     1 error
 =   └─ random:index:RandomString  some-project-suffix  import     2 errors

Diagnostics:
  pulumi:pulumi:Stack (some-stack):
    error: preview failed

  random:index:RandomString (some-project-suffix):
    error: random:index/randomString:RandomString resource 'some-project-suffix' has a problem: Required attribute is not set. Examine values at 'RandomString.Length'.
    error: Preview failed: one or more inputs failed to validate

can someone please help?

hey guys - newbie here to Pulumi and am working on writing my own Component Package... couple of questions: 1. do my component arguments have to all be of some type of pulumi.Input or will "CopyTo" copy the right values into like normal strings and stuff? the reason I'm asking is because I want to validate input values in my component (not in the caller code every time) for things like "Is this a valid CIDR block?" "Is the CIDR block big enough?" "Is this a valid AZ in this AWS region?" etc. Or is there some other way that I should be doing validation? 2. my component builds several pieces of "core" infrastructure: VPC, Subnets, Route Tables, NAT Gateway, etc. and I want to return a bunch of values in my outputs but I wanted them to be nested so I'd have a main struct that holds members for each resource (VPC, Subnets, etc.) that are of a struct type with the resource struct containing the actual values (eg: ARN, ID, etc.) ... the problem is when I try and do that the CLI spits out an error like:

error: program failed: waiting for RPCs: rpc error: code = Unknown desc = marshaling properties: awaiting input property vpc: cannot marshal an input of type pulumi.StringOutput with element type string as a value of type pulumi.StringOutput

If I flatten it out into a single struct, though, it works fine... 3. do I have to call

ctx.RegisterResourceOutputs

to register outputs at the end? it doesn't seem to have any effect if I comment it out. Or is that used for other languages like NodeJS and .NET? Feel free to DM me or at least tag me so I see any replies... and TIA!!

Has anyone done AWS ACM cert validation in Golang? There isn't an example in the docs, I'm scratching my head as to how to iterate over DomainValidationOptions: https://www.pulumi.com/docs/reference/pkg/aws/acm/certificatevalidation/

Anyone have any experience with the

Unexpected duplicate underscore

error thrown by pulumi-terraform-bridge? I'm not sure what the issue may be here:

pulumi:pulumi:Stack (autoscaling_group-dev):
    panic: fatal: An assertion has failed: Unexpected duplicate underscore: pulumi__project
    goroutine 31 [running]:
    <http://github.com/pulumi/pulumi/sdk/v3/go/common/util/contract.failfast(...)|github.com/pulumi/pulumi/sdk/v3/go/common/util/contract.failfast(...)>
    	/home/runner/go/pkg/mod/github.com/pulumi/pulumi/sdk/v3@v3.9.1/go/common/util/contract/failfast.go:23
    <http://github.com/pulumi/pulumi/sdk/v3/go/common/util/contract.Assertf(0xc001c01800|github.com/pulumi/pulumi/sdk/v3/go/common/util/contract.Assertf(0xc001c01800>, 0x86c3006, 0x23, 0xc001a1ae78, 0x1, 0x1)
    	/home/runner/go/pkg/mod/github.com/pulumi/pulumi/sdk/v3@v3.9.1/go/common/util/contract/assert.go:33 +0x1a5
    <http://github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfbridge.TerraformToPulumiName(0xc001c01890|github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfbridge.TerraformToPulumiName(0xc001c01890>, 0xf, 0x0, 0x0, 0x0, 0xffffffffffffff00, 0x1, 0xc001bf1440)
    	/home/runner/go/pkg/mod/github.com/pulumi/pulumi-terraform-bridge/v3@v3.5.0/pkg/tfbridge/names.go:106 +0x285
    <http://github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfbridge.getInfoFromTerraformName(0xc001c01890|github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfbridge.getInfoFromTerraformName(0xc001c01890>, 0xf, 0x92a72e0, 0xc000ad59e0, 0x0, 0x0, 0x0, 0xc001bf1440, 0x100, 0x6d7cee0, ...)
    	/home/runner/go/pkg/mod/github.com/pulumi/pulumi-terraform-bridge/v3@v3.5.0/pkg/tfbridge/schema.go:903 +0x1c5
    <http://github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfbridge.MakeTerraformOutputs(0x92c06b8|github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfbridge.MakeTerraformOutputs(0x92c06b8>, 0xc001708b40, 0xc001a1b268, 0x92a72e0, 0xc000ad59e0, 0x0, 0xc001bf1440, 0xc001c20100, 0x94)
    	/home/runner/go/pkg/mod/github.com/pulumi/pulumi-terraform-bridge/v3@v3.5.0/pkg/tfbridge/schema.go:622 +0x12e
    <http://github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfbridge.MakeTerraformOutput.func1(0x92c06b8|github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfbridge.MakeTerraformOutput.func1(0x92c06b8>, 0xc001708b40, 0x751ca60, 0xc001bf1680, 0x92c2878, 0xc000b01040, 0xc00178e9c0, 0xc001bf1440, 0x7510100, 0x4, ...)
    	/home/runner/go/pkg/mod/github.com/pulumi/pulumi-terraform-bridge/v3@v3.5.0/pkg/tfbridge/schema.go:745 +0xcc5
    <http://github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfbridge.MakeTerraformOutput(0x92c06b8|github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfbridge.MakeTerraformOutput(0x92c06b8>, 0xc001708b40, 0x751ca60, 0xc001bf1680, 0x92c2878, 0xc000b01040, 0xc00178e9c0, 0xc001bf1440, 0x92c0100, 0xc000b01040, ...)
    	/home/runner/go/pkg/mod/github.com/pulumi/pulumi-terraform-bridge/v3@v3.5.0/pkg/tfbridge/schema.go:753 +0xaf
    <http://github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfbridge.MakeTerraformOutputs(0x92c06b8|github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfbridge.MakeTerraformOutputs(0x92c06b8>, 0xc001708b40, 0xc001bf1470, 0x92a72e0, 0xc000ad5710, 0xc00175f260, 0xc001bf1440, 0x100, 0x91b3400)
    	/home/runner/go/pkg/mod/github.com/pulumi/pulumi-terraform-bridge/v3@v3.5.0/pkg/tfbridge/schema.go:626 +0x1c6
    <http://github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfbridge.(*Provider).Check(0xc0002f6780|github.com/pulumi/pulumi-terraform-bridge/v3/pkg/tfbridge.(*Provider).Check(0xc0002f6780>, 0x92879a8, 0xc001bf0ff0, 0xc001beee80, 0xc0002f6780, 0x7675101, 0xc001bef840)
    	/home/runner/go/pkg/mod/github.com/pulumi/pulumi-terraform-bridge/v3@v3.5.0/pkg/tfbridge/provider.go:701 +0x954
    <http://github.com/pulumi/pulumi/sdk/v3/proto/go._ResourceProvider_Check_Handler.func1(0x92879a8|github.com/pulumi/pulumi/sdk/v3/proto/go._ResourceProvider_Check_Handler.func1(0x92879a8>, 0xc001bf0ff0, 0x82db620, 0xc001beee80, 0x83ae320, 0xdccede8, 0x92879a8, 0xc001bf0ff0)
    	/home/runner/go/pkg/mod/github.com/pulumi/pulumi/sdk/v3@v3.9.1/proto/go/provider.pb.go:2558 +0x89
    <http://github.com/grpc-ecosystem/grpc-opentracing/go/otgrpc.OpenTracingServerInterceptor.func1(0x92879a8|github.com/grpc-ecosystem/grpc-opentracing/go/otgrpc.OpenTracingServerInterceptor.func1(0x92879a8>, 0xc001bf0cf0, 0x82db620, 0xc001beee80, 0xc0013dfbe0, 0xc001bd4fa8, 0x0, 0x0, 0x91a1080, 0xc0003ef870)
    	/home/runner/go/pkg/mod/github.com/grpc-ecosystem/grpc-opentracing@v0.0.0-20180507213350-8e809c8a8645/go/otgrpc/server.go:57 +0x30a
    <http://github.com/pulumi/pulumi/sdk/v3/proto/go._ResourceProvider_Check_Handler(0x84e8120|github.com/pulumi/pulumi/sdk/v3/proto/go._ResourceProvider_Check_Handler(0x84e8120>, 0xc0002f6780, 0x92879a8, 0xc001bf0cf0, 0xc0004cdec0, 0xc0016e7fe0, 0x92879a8, 0xc001bf0cf0, 0xc0003d1c00, 0x3e7)
    	/home/runner/go/pkg/mod/github.com/pulumi/pulumi/sdk/v3@v3.9.1/proto/go/provider.pb.go:2560 +0x150
    <http://google.golang.org/grpc.(*Server).processUnaryRPC(0xc0008defc0|google.golang.org/grpc.(*Server).processUnaryRPC(0xc0008defc0>, 0x92adef8, 0xc000522180, 0xc0018edd40, 0xc001801d70, 0xdc8a150, 0x0, 0x0, 0x0)
    	/home/runner/go/pkg/mod/google.golang.org/grpc@v1.37.0/server.go:1217 +0x52b
    <http://google.golang.org/grpc.(*Server).handleStream(0xc0008defc0|google.golang.org/grpc.(*Server).handleStream(0xc0008defc0>, 0x92adef8, 0xc000522180, 0xc0018edd40, 0x0)
    	/home/runner/go/pkg/mod/google.golang.org/grpc@v1.37.0/server.go:1540 +0xd0c
    <http://google.golang.org/grpc.(*Server).serveStreams.func1.2(0xc000556020|google.golang.org/grpc.(*Server).serveStreams.func1.2(0xc000556020>, 0xc0008defc0, 0x92adef8, 0xc000522180, 0xc0018edd40)
    	/home/runner/go/pkg/mod/google.golang.org/grpc@v1.37.0/server.go:878 +0xab
    created by <http://google.golang.org/grpc.(*Server).serveStreams.func1|google.golang.org/grpc.(*Server).serveStreams.func1>
    	/home/runner/go/pkg/mod/google.golang.org/grpc@v1.37.0/server.go:876 +0x1fd

When it comes to stack references, what are people doing to enforce that an output exists before continuing? From my tests i simply get a

nil

value if I reference an output that doesn't exist. Also, if I have a folder structure like this:

root
  infra
  app

And my

app

project references resources from the

infra

project, is there a way I can

pulumi up

the entire directory rather than running it from the individual folders/projects? Or would I need to look into the automation API for that?

is there a way to type/cast a

stack output

object? In one stack I export a

pulumi.StringArray{}

, when I reference this in another stack it returns type

pulumi.AnyOutput

. I want to iterate over this like an array, but currently the only way I've got round to do this is via reflection, ie:

output1 := stackReference.GetOutput(pulumi.String("Infra"))
		
		_ = output1.ApplyT(func(list interface{}) string {

			switch reflect.TypeOf(list).Kind() {

			case reflect.Slice:
				s := reflect.ValueOf(list)

				for i := 0; i < s.Len(); i++ {

Is it possible to use Pulumi Golang deploy k8s Operator Lifecycle Manager (OLM) in a k8s cluster? And further more, use the OLM to deploy Operators with Pulumi?

quick question - is there a way for me to consume pulumi as a library in, for example, a CLI of my own? and if so, is there any example of doing so? I’ve been playing with the automation api, but it seems to require the pulumi CLI to be installed which I’m less interested in.

Hi all, is there a way to get a raw string value from a StringOutput that I can use to feed into another resource? I'm currently using the golang digital ocean provider and the second argument of most objects is just a "plain" string and not a pulumi.String... and as pulumi seemingly only returns internal types I am having a hard time converting them...

hey all, since its related, im going to link it here as well: https://pulumi-community.slack.com/archives/C01PF3E1B8V/p1635257241047800

Hi, any idea how I get a

string

from

Output

? I'd like to get the string from

containerDefaultSA.Email

, but I don't get the docs at https://www.pulumi.com/docs/intro/concepts/inputs-outputs/

containerDefaultSA, _ := projects.NewServiceIdentity(p.ctx, "hcSa", &projects.ServiceIdentityArgs{
    Project: pulumi.String(p.projectID),
    Service: pulumi.String("<http://container.googleapis.com|container.googleapis.com>"),
  })

  kmsIAM, err := organizations.LookupIAMPolicy(p.ctx, &organizations.LookupIAMPolicyArgs{
    Bindings: []organizations.GetIAMPolicyBinding{{
        Role: "roles/cloudkms.cryptoKeyEncrypterDecrypter",
        Members: []string{
          pulumi.Sprintf("serviceAccount:%s", containerDefaultSA.Email),
        }},
    },
  }, nil)

Or...

Cluster:          pulumi.String(fmt.Sprintf("projects/%s/locations/%s/clusters/%s",
        pulumi.String(cluster.Project), pulumi.String(cluster.Location), pulumi.String(cluster.Name))),

How does error handling work with

.applyT(...)

?

@bumpy-bear-61087 the docs/examples don’t do a great job on this, but

ApplyT

can accept a function that returns an error, and then will return a rejected output

I’m trying to find an example right now on how to check if it is rejected/errored, but failing

Hmm, this error doesn't seem right?

_, err = projects.NewOrganizationPolicy(p.ctx, "disallow_iam_external_domains", &projects.OrganizationPolicyArgs{
		Project:    pulumi.String(p.projectID),
		Constraint: pulumi.String("constraints/iam.allowedPolicyMemberDomains"),
		ListPolicy: projects.OrganizationPolicyListPolicyArgs{
			Allow: projects.OrganizationPolicyListPolicyAllowArgs{
				Values: pulumi.ToStringArray([]string{
					p.gcpCustomerID,
				}),
			},
		},
	})

Diagnostics:
  gcp:projects:OrganizationPolicy (disallow_iam_external_domains):
    error: gcp:projects/organizationPolicy:OrganizationPolicy resource 'disallow_iam_external_domains' has a problem: ExactlyOne: "list_policy.0.allow.0.all": only one of `list_policy.0.allow.0.all,list_policy.0.allow.0.values` can be specified, but `list_policy.0.allow.0.all,list_policy.0.allow.0.values` were specified.. Examine values at 'OrganizationPolicy.ListPolicy.Allow[0].All'.
    error: gcp:projects/organizationPolicy:OrganizationPolicy resource 'disallow_iam_external_domains' has a problem: ExactlyOne: "list_policy.0.allow.0.values": only one of `list_policy.0.allow.0.all,list_policy.0.allow.0.values` can be specified, but `list_policy.0.allow.0.all,list_policy.0.allow.0.values` were specified.. Examine values at 'OrganizationPolicy.ListPolicy.Allow[0].Values'.

I am not specifing

All:...

so curious why that is triggered.

How do you get the stack name via golang sdk? ie something like:

pulumi.Run(func(ctx *pulumi.Context) error {
		awsCfg := config.New(ctx, "aws")
		region := awsCfg.Require("region")
		stackName :=  ctx.stack

ctx.stack

doesn't exist but *pulumi.Context has stack

type Context struct {
	ctx         context.Context
	info        RunInfo
	stack       Resource

Pulumi golang eks provider 0.34.0 broken? github.com/pulumi/pulumi-eks/sdk v0.34.0 Diagnostics: pulumi😛ulumi:Stack (infra-dev): # github.com/pulumi/pulumi-eks/sdk/go/eks ../../go/pkg/mod/github.com/pulumi/pulumi-eks/sdk@v0.34.0/go/eks/cluster.go:479:17: ctx.Call undefined (type *pulumi.Context has no field or method Call) error: an unhandled error occurred: program exited with non-zero exit code: 2

Why am I getting this error: github.com/pulumi/pulumi-aws/sdk/v4/go/eks: module github.com/pulumi/pulumi-aws/sdk/v4@latest found (v4.25.0), but does not contain package github.com/pulumi/pulumi-aws/sdk/v4/go/eks

Hi everyone! Is it possible to convert variable of type pulumi.StringOutput to string... I think it's with ApplyT but I'm running into errors trying to manipulate that.

Trying out the new helm release package (https://www.pulumi.com/blog/full-access-to-helm-features-through-new-helm-release-resource-for-kubernetes/) and I'm trying to create the following https://github.com/bitnami/charts/tree/master/bitnami/metallb/#example-layer-2-configuration by implementing the following:

Values: pulumi.Map{
				"configInline" : pulumi.Map{
					"address-pools" : pulumi.Map{
						"name": pulumi.String("pool"),
						"protocol": pulumi.String("layer2"),
						"addresses": pulumi.String("172.16.10.55-172.16.10.55"),
					},
				},
			},

However the workload from the chart has issues trying to unmarshl it:

could not parse config: yaml: unmarshal errors:\n  line 2: cannot unmarshal !!map into []config.addressPool

Getting the values from helm:

USER-SUPPLIED VALUES:
configInline:
  address-pools:
    addresses: 172.16.10.55-172.16.10.55
    name: pool
    protocol: layer2

Would appreciate a second pair of eyes

As an update to this question, Is there a way to get/lookup the load balancer resource after creating a kubernetess ingress? the

lb.LookupLoadBalancer

needs the

Name

to be of type string, however, the

Name

the Kubernetes ingress created for me is of type

Pulumi.StringOutput

. Below is how I get the Name

ingressUrlName := ingress.Status.ApplyT(
		func(status interface{}) string {
			return *status.(*networkingv1.IngressStatus).LoadBalancer.Ingress[0].Hostname
		}).(pulumi.StringOutput)

I think i'm taking this one too far, anyone got a snippet for creating an IAM role for a new service account?

containerDefaultSA, err := serviceaccount.NewAccount(p.ctx, fmt.Sprintf("gke-%s-default-sa", name), &serviceaccount.AccountArgs{
		AccountId:   pulumi.String(fmt.Sprintf("%sgke%sdefaultsa", p.args.ProjectId, name)),
		Description: nil,
		Disabled:    pulumi.Bool(false),
		DisplayName: pulumi.String("GKE default node SA"),
		Project:     pulumi.String(p.args.ProjectId),
	})
	if err != nil {
		return nil, errors.Wrap(err, "could not create new default GKE SA")
	}

	containerDefaultSA.Email.ApplyT(func(email string) error {
		kmsIAM, err := organizations.LookupIAMPolicy(p.ctx, &organizations.LookupIAMPolicyArgs{
			Bindings: []organizations.GetIAMPolicyBinding{{
				Role: "roles/cloudkms.cryptoKeyEncrypterDecrypter",
				Members: []string{
					fmt.Sprintf("serviceAccount:%s", email),
				}},
			},
		}, nil); if err != nil {
			return errors.Wrap(err, "could not get IAM policy")
		}

		_, err = serviceaccount.NewIAMPolicy(p.ctx, fmt.Sprintf("gke-%s-kms-iam", name), &serviceaccount.IAMPolicyArgs{
			ServiceAccountId: pulumi.String(fmt.Sprintf(
				"projects/%s/serviceAccounts/%s", p.args.ProjectId,
				strings.ReplaceAll(email, "container-engine-robot.", p.args.ProjectId + "."),
			)),
			PolicyData:       pulumi.String(kmsIAM.PolicyData),
		})
		if err != nil {
			return errors.Wrap(err, "could not create default IAM SA")
		}

		return nil
	})

I basically want a new SA with only the role

roles/cloudkms.cryptoKeyEncrypterDecrypter

.

Is there a way to access a

pulumi.Resource

that was created by referencing the

pulumi.Context

? I have one package that creates a resource that another package depends on

hey everyone — I know the

terraform import

and

pulumi import

don’t generate the associated HCL (in TF) or Go code (in Pulumi). Is there a reason this can’t be done?

Hello folks, I have been using the pulumi-eks library to create /manage eks clusters using Typescript as the language. I am exploring switching to Golang, and there seem to be 2 different ways / library flavors: •

<http://github.com/pulumi/pulumi-eks/sdk/go/eks|github.com/pulumi/pulumi-eks/sdk/go/eks>

- this seems to be the more visibly documented version. It is also probably compatible my current typescript-generated stacks •

<http://github.com/pulumi/pulumi-aws/sdk/v4/go/aws/eks|github.com/pulumi/pulumi-aws/sdk/v4/go/aws/eks>

<-- this seems more "modern" in the sense of adoption of / integration with aws/eks features. This is not compatible with my current stacks. It seems like both are currently maintained. Any experience / guidance / gotchas in choosing one over the other?

Hi, can someone help me with this? https://github.com/pulumi/pulumi/discussions/8414 In short: I want to marshal

pulumi.StringOutput

to json/yml. But I can't. It just print's some memory address.