did anyone try to write a Golang app that controls AWS Infrastructures that are scattered across multiple Pulumi stacks? I mean doing

pulumi up, pulumi destroy, etc

for multiple stacks? and get the output of all these stacks in a json structured file?

Hi. I am trying to create an acs policy for a service, and I need to give it access to a role I am creating also in the same pulumi template. How can I make it so that when creating a policy it uses the ARN of an element?

s3Bucket, err := s3.NewBucket(ctx, "demo", &s3.BucketArgs{})
		iam.NewPolicy(ctx, "demo", &iam.PolicyArgs{
			Policy: pulumi.Sprintf(`{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": "s3:GetObject",
            "Resource": s3Bucket.ARN
        }
    ]
}`),

Am I just missing something, or is it not possible to add resource options in transformations for Kubernetes YAML Config Groups in Go: https://github.com/pulumi/pulumi-kubernetes/blob/master/sdk/go/kubernetes/yaml/transformation.go#L28 I can’t append to the resource options and have the caller see it.

I am attempting to patch a custom resource of apiversion "helm.toolkit.fluxcd.io/v2beta1", and kind "HelmRelease", Under the spec there is a key called ValuesFrom that I want to patch with a ConfigMap of any name. How would I do this and with which CustomerResourcePatch function?

Hi! I'm writing a REST api using Pulumi automation api to create resources and I want to be able to return to the user which resource has failed. Is there any way to get information about which resources failed?

hello

Is there any way to get the primitive value of an

Output

without having to do any funky `Apply`s? I’m just trying to read some remote Terraform state and create a new struct with information from there as I see fit, but I see no easy way to do it

Anyone using this pulumi-go-provider? It’s pretty great but having an issue making use of a component/resources within other component/resources but comment seems to say there should be a way for it to properly generate the schema for that scenario.

Good morning team. I have a question. If I want to use any resources output in my description for an another resource, interpolating with Sprintf usually gives me only a memory address 😕 Example

artifactregistry.NewRepositoryIamMember(ctx, fmt.Sprintf("iam-member-%v",serviceAccount.Name), nil)

Gives me a resource name

iam-member-{0x14000236a80}

Is there any way to convert it to a string properly. there are no methods to do so on the StringOutput itself, tried the ApplyT with type conversion to, give me the same result.

Hi, I'm unable to figure how to convert efsid as String, any thoughts or pointers?

//vFS *efs.FileSystem
//efsid pulumi.Output

	volumes := []string{}
	all := pulumi.All(vFS.ID())
	efsid := pulumi.All(all).ApplyT(
		func(args []interface{}) pulumi.StringOutput {
			return pulumi.Sprintf("%v", all)
		})
	// Below append doesnt work. 
	volumes = append(volumes, `"efs-data": {
		"name": "efs-data",
		"efsVolumeConfiguration": {
			"fileSystemId": "`+efsid+`",    // <<<<< HERE
			"rootDirectory": "/mnt/efs"
		}
	}`)

Hi, a more general question, how would you deploy for example a Lambda function from your stack if the function code is written in Go aswell? For functions written in Python or JS/TS with NodeJS as Runtime, it is easy, just grab the Code via a FileArchive. But how do you compile a binary from the source code before stuffing the output into the archive? In AWS I could make use of a Codebuild job that would first compile the binary before starting the Pulumi infrastructure code. But from my stack or is this approach too far-fetched?

Hi there! I am using Pulumi to provision my GCP Cloud DNS zone, records and service accounts. Then I am using the command.remote library to bootstrap a K3s cluster on my rpi cluster. When provisioning a k3s cluster, the kubeconfig is written on the control node in a directory. I am using command.remote to cat the contents out to stdout. I am then using the stdout output to build a Kubernetes.Provider. I then pass that provider to kubernetes commands to apply yaml files. When I run "pulumi up" the preview fails with the following error:

error: an unhandled error occurred: program failed:
    1 error occurred:
        * decoding YAML: rpc error: code = Unknown desc = invocation of kubernetes:yaml:decode returned an error: failed to initialize discovery client: The gcp auth plugin has been removed.
    Please use the "gke-gcloud-auth-plugin" kubectl/client-go credential plugin instead.
    See <https://cloud.google.com/blog/products/containers-kubernetes/kubectl-auth-changes-in-gke> for further details

I figured out this is caused because during "pulumi preview" the kubeconfig does not exist on the server it returns a empty string. So the provider cannot create with an empty kubeconfig. I have used DependsOn with all the previous commands required for it to work, but it seems that it always executes the command and tries to build the provider off an empty string. If I bypass preview with "pulumi up -f", everything works without issue. Sample Code:

func (k *K3sCluster) exportKubeProvider(node K3sClusterNode, dependsOn ...pulumi.Resource) (*remote.Command, *kubernetes.Provider, error) {
	t := remote.ConnectionArgs{}
	t.Host = pulumi.String(node.IP)
	t.Password = pulumi.String(nodePassword)
	t.User = pulumi.String(nodeUsername)

	c := remote.CommandArgs{
		Connection: t.ToConnectionOutput(),
		Create:     pulumi.String("sudo cat /etc/rancher/k3s/k3s.yaml").ToStringPtrOutput(),
	}

	a, err := remote.NewCommand(k.ctx, fmt.Sprintf("get-k3s-kubeconfig-%s", node.Name), &c, pulumi.DependsOn(dependsOn))

	if err != nil {
		return nil, nil, err
	}

	dependsOn = append(dependsOn, a)

	provider, err := kubernetes.NewProvider(k.ctx, "k3s-provider", &kubernetes.ProviderArgs{
		Kubeconfig: a.Stdout.ApplyT(func(config string) string {
			config = strings.Replace(config, "<https://127.0.0.1:6443>", fmt.Sprintf("<https://%s:6443>", node.IP), -1)

			return config
		}).(pulumi.StringOutput).ToStringPtrOutput(),
	}, pulumi.DependsOn(dependsOn))

	if err != nil {
		return nil, nil, err
	}

	//k.ctx.Export("kubeconfig", config)

	dependsOn = append(dependsOn, provider)

	ingress, err := yaml.NewConfigFile(k.ctx, "k8s-ingress-nginx", &yaml.ConfigFileArgs{
		File: "pkg/kube/yaml/ingress-nginx.yaml",
	}, pulumi.Providers(provider), pulumi.DependsOn(dependsOn))
	if err != nil {
		return nil, nil, err
	}

	dependsOn = append(dependsOn, ingress)

	_, err = yaml.NewConfigFile(k.ctx, "k8s-ingress-nginx-load-balancer", &yaml.ConfigFileArgs{
		File: "pkg/kube/yaml/loadbalancer-nginx.yaml",
	}, pulumi.Providers(provider), pulumi.DependsOn(dependsOn))

	if err != nil {
		return nil, nil, err
	}

	return a, provider, nil
}

Thread in #general

Hiya, qq ref. roadmap for pulumi-go-provider. The readme says Note: This library is in active development <snip> you should probably wait to port any existing providers over, pulumi-provider-boilerplate has adopted it but pulumi-component-provider-go-boilerplate hasn't. I've been trying it out and think it's really neat. I'd love to adopt it but am a bit concerned by the lack of recent activity. Any chance of sharing what the plan is to help me decide whether to roll back to using the old-skool hand-cranked schema approach?

This message was deleted.

Hi. I’m trying to write a test for generating keys with the

tls.NewPrivateKey

method from the github.com/pulumi/pulumi-tls/sdk/v4/go/tls package. The code generates keys outside of a test but not in it. Is this not the correct way to do it:

func TestGenerateSSHKey(t *testing.T) {
	config := map[string]string{}

	err := pulumi.RunErr(func(ctx *pulumi.Context) error {

		pulumiKey, err := tls.NewPrivateKey(ctx, "private-key", &tls.PrivateKeyArgs{
			Algorithm:  pulumi.String("ECDSA"),
			EcdsaCurve: pulumi.String("P521"),
		})

		if err != nil {
			t.Logf("Error generating SSH key: %s\n", err)
			return err
		}

		pulumi.All(pulumiKey.PrivateKeyOpenssh).ApplyT(func(args []interface{}) interface{} {

			pKey := args[0]

			t.Logf("Private key: %s\n", pKey)
			if pKey == "" {
				t.Log("Error generating SSH key: private key is empty")
				t.Fail()
			}

			return pKey
		})

		return nil
	}, WithMocksAndConfig("opp-notary-composer", "opp-notary-composer-dev", config, mocks(0)))

	if err != nil {
		t.Log(err)
		t.Fail()
	}
}

I’ve looked through the unit testing and integration testing docs but haven’t been able to figure it out. Would appreciate if there were docs/examples to look at. Thanks. 🙏🏼

The API doc examples seem to have some recurring errors. I'm not 100% sure about this, since I'm very new to GoLang, programming in general and Pulumi, but I've discovered the following (see thread) ⬇️

The following state machine definition fails with a schema validation error. The resource Arn provided is incorrect. I can see, that instead of the Arn, the resource element contains a memory address:

"Resource": "{0xc0001a6b60}"

. Looking at the example on https://www.pulumi.com/registry/packages/aws-native/api-docs/stepfunctions/statemachine/ the DefinitionString should be a string as the name implies. I chose to define the state in a separate variable first, because hard coding the Arn like in the example isn't really feasible. How can I supply the correct Arn to the definition instead of the memory address?

Is there a way to reference the Pulumi stack name in code?

Any idea how to get rid of this warning? I don't want to disable the warning if it's a valid issue, but I can't figure out if I did something wrong from the - very limited - API documentation regarding lambda environment variables

I'm using the pulumi automation api in a go cli tool and really enjoying it so far. It's still a bit fuzzy to me what the requirements/dependencies are for the automation api though. Specifically, is the pulumi cli a hard dependency to use the automation api? Reason I ask is because I would love for users to be able to install the binary and use it as is while minimizing prerequisites/dependencies. This would also simplify containerizing the app. This is also ties into another question I have about pulumi's state management. Is there a way to have state management completely self-contained in a Go binary? i.e. Is it possible pulumi to create an s3 bucket to use for state storage, and then proceed to provision a stack that uses that bucket as a state backend? Or is this a chicken before the egg problem? Thanks

Hi guys, We are currently rebuilding our pulumi infrastructure and switching from python to go. We are a little stuck to understand how and when to use

pulumi.ResourceOptions

and

pulumi.ResourceOption

and there difference. In our old Python stack, we always used the ResourceOptions and use that through all components. In Go, all components always wants

pulumi.ResourceOption

(

opts ...pulumi.ResourceOption

). What is the missing part we dont unterstood? :/ We studied the docs but there was not really helpful and finding go examples on github is very hard. Thanks for your help! :)

I have a issue , Unresolved type ‘GetSubnetsFilter’, Already get all dependencies, So confused, Can anyone know about this ?

hi guys, how do you convert a

pulumi.StringOutput

to a normal go

string

?

hello I am back trying to pulumi How can i create a vpc and get it's subnetids to use on a next step? basically i create a vpc:

vpc, err := ec2.NewVpc(ctx, name, &ec2.VpcArgs{
		CidrBlock:       pulumi.String("10.0.0.0/16"),
		InstanceTenancy: pulumi.String("default"),
		Tags: pulumi.StringMap{
			"Name": pulumi.String(name),
		},
	})

and now I want to get the subnetsids (i know they don't exit yet, and this is the problem) I basically want to use to create a eks nodeGroup, from the example: https://github.com/pulumi/examples/blob/master/aws-go-eks/main.go I have the code bellow, but it gets the vpc and subnets id using a lookup that i can't do because the vpc is yet to exit

nodeGroup, err := eks.NewNodeGroup(ctx, "node-group-2", &eks.NodeGroupArgs{
			ClusterName:   eksCluster.Name,
			NodeGroupName: pulumi.String("demo-eks-nodegroup-2"),
			NodeRoleArn:   pulumi.StringInput(nodeGroupRole.Arn),
			SubnetIds:     toPulumiStringArray(subnet.Ids),
			ScalingConfig: &eks.NodeGroupScalingConfigArgs{
				DesiredSize: <http://pulumi.Int|pulumi.Int>(2),
				MaxSize:     <http://pulumi.Int|pulumi.Int>(2),
				MinSize:     <http://pulumi.Int|pulumi.Int>(1),
			},
		})

I tried to use

LookupVpcOutput

but wasn't able to get it working, mostly because of types and etc.. Does anyone have any suggestions? if i should use the lookup or something else.. if it's the lookup, some example would be nice, i had problems getting the filter to work. Basically i want to be able to create my own vpc, and then make eks and etc use this vpc, it seems it should be a simple thing, but i guess i am not getting the right idea on inputs/outputs

Hi, i am facing a problem. pulumi.String() always return json

pulumi.String(`
{
  "LocalSecondaryIndexes": [
    {
      "IndexName": "domainID",
      "KeySchema": [
        {
          "AttributeName": "domainID",
          "KeyType": "HASH",
          "AttributeType": "S"
        },
        {
          "AttributeName": "timestamp",
          "KeyType": "RANGE",
          "AttributeType": "N"
        }
      ],
      "Projection": {
        "ProjectionType": "ALL"
      }
    }
  ]
}`)

when preview

LocalSecondaryIndexes: (json) {
     LocalSecondaryIndexes: [
          [0]: {
              IndexName : "domainID"
              KeySchema : [
                   [0]: {
                           AttributeName: "domainID"
                           AttributeType: "S"
                           KeyType   : "HASH"
                        }
                   [1]: {
                          AttributeName: "timestamp"
                          AttributeType: "N"
                          KeyType   : "RANGE"
                           }
               ]
                Projection: {
                          ProjectionType: "ALL"
                }}]}

i would like to see plain string instead of jsonArray, how can i achieve it? Thanks in advance.

Hey all, I’m using the automation API and inline Go code instead of Pulumi CLI. I saw that Pulumi will auto-download required plugins/providers when needed, but I was wondering how it resolves versions? Will it just default to latest, or does it respect the plugin version in my

go.mod

file?

Hi. I’m trying to create a new network on Hetzner with code taken from this pulumi-hcloud go example but instead of

.Run

I’m using

.RunErr

to get errors:

package main

import (
	"<http://github.com/pulumi/pulumi-hcloud/sdk/go/hcloud|github.com/pulumi/pulumi-hcloud/sdk/go/hcloud>"
	"<http://github.com/pulumi/pulumi/sdk/v3/go/pulumi|github.com/pulumi/pulumi/sdk/v3/go/pulumi>"
	"log"
)

func main() {

	err := pulumi.RunErr(func(ctx *pulumi.Context) error {
		log.Println("Creating new network...")

		network, err := hcloud.NewNetwork(ctx, "demo-network", &hcloud.NetworkArgs{
			IpRange: pulumi.String("10.0.10.0/24"),
			Name:    pulumi.String("demo-project"),
		})
		if err != nil {
			return err
		}

		ctx.Export("networkName", network.Name)
		return nil
	})

	if err != nil {
		log.Fatal("Error creating network: ", err)
	}
}

When I build and run the binary, I get an error:

missing project name

. Where does the project name go? Don’t I already give it a project name “demo-network”? The docs call that parameter a “unique name”. So I’m not sure.

This installs a helm chart, however this chart generates some CA secret data on every upgrade. This is problematic when running an Update I consistently see this updating and I'd like to avoid that behavior. Anyone have a nice fix? I don't think that ignoreChanges will work here.

helm.NewChart(ctx, "cilium", helm.ChartArgs{
		Namespace: pulumi.String("kube-system"),
		FetchArgs: helm.FetchArgs{
			Version:     pulumi.String("1.13.1"),
			Repo:        pulumi.String("<https://helm.cilium.io/>"),
		},
		Chart:     pulumi.String("cilium"),
		Version:   pulumi.String("1.13.1"),
		Values: pulumi.Map{
			"eni": pulumi.Map{
				"enabled": pulumi.Bool(true),
			},
			"ipam": pulumi.Map{
				"mode": pulumi.String("eni"),
			},
			"egressMasqueradeInterfaces": pulumi.String("eth0"),
			"tunnel":                     pulumi.String("disabled"),
		},
	}, pulumi.Provider(provider), pulumi.DependsOn([]pulumi.Resource{infrastructure.Cluster.Cluster}))

Hi. I wrote an integration test for a function that sets up a network on Hetzner but I’m not sure what’s best practice for it. I wrote my question in some detail here. Let me know if I’m totally off the mark? 🙂 🙏🏼

This example https://www.pulumi.com/registry/packages/kubernetes/api-docs/helm/v3/release/#specify-helm-chart-values-in-file-and-code does not work =/ this is the error i am strugling:

./main.go:15:20: cannot use pulumi.NewFileAsset("./metrics.yml") (value of type pulumi.Asset) as pulumi.AssetOrArchiveArrayInput value in struct literal: pulumi.Asset does not implement pulumi.AssetOrArchiveArrayInput (missing method ToAssetOrArchiveArrayOutput)

any tips?