I am using Config map from storing my variable (DB password). This config is part of git repo. Now this will be part of git history. What is the right way to fix it? I mean, is it possible, I use pulumi for entire GKE infra and manually add secrets on Google Console.

Hi there, I am using pulumi to deploy a few cloud run based services. I was wondering if there is a way to control the exact service name/id that pulumi creates. It looks like given a service name

new cloudrun.Service('my-service-name', {})

pulumi adds a 7 character long randomized suffix to the service name

my-service-name-abcdef

. Is there a way to override this and have the name/id be exactly what we specify?

I've just tried to deploy some resources using the

google-native

provider, but it looks like it's trying to use the same google credentials (

GOOGLE_CREDENTIALS

) I'm using for the Pulumi backend (I hope I'm using the right terms)

Should I be able to use different credentials for the state and the actual resource creation?

Because my Pulumi state lives in a shared

pulumi-state

GCP project and my resources will live in a completely separate project.

unrelated to my previous question: Is there an optimal way to create a GCS bucket and set the IAM permissions?

I'm currently creating the bucket then looking up the IAM policy and setting it again with amendments. Seems contrived, and it means that Pulumi gets upset if the bucket doesn't exist

Is there a place where we can find what is changed in this new gcp-native release? https://github.com/pulumi/pulumi-google-native/releases/tag/v0.12.0 Changelog is also not very informative:

Update to support the latest resource definitions and the latest Pulumi SDK

How to fix this?

Type                 Name                      Plan     Info
     pulumi:pulumi:Stack  codma-app-gcp-codma-prod           2 errors

Diagnostics:
  pulumi:pulumi:Stack (codma-app-gcp-codma-prod):
    error: Running program '/Users/narendra/Coding/yugam-tech/codma-backend/deploy/codma-app' failed with an unhandled exception:
    TypeError: Cannot read properties of undefined (reading 'length')
        at /Users/narendra/Coding/yugam-tech/codma-backend/deploy/codma-app/node_modules/@pulumi/kubernetesx/kx.js:225:25
        at /Users/narendra/Coding/yugam-tech/codma-backend/deploy/codma-app/node_modules/@pulumi/output.ts:383:31
        at Generator.next (<anonymous>)
        at /Users/narendra/Coding/yugam-tech/codma-backend/deploy/codma-app/node_modules/@pulumi/pulumi/output.js:21:71
        at new Promise (<anonymous>)
        at __awaiter (/Users/narendra/Coding/yugam-tech/codma-backend/deploy/codma-app/node_modules/@pulumi/pulumi/output.js:17:12)
        at applyHelperAsync (/Users/narendra/Coding/yugam-tech/codma-backend/deploy/codma-app/node_modules/@pulumi/pulumi/output.js:229:12)
        at /Users/narendra/Coding/yugam-tech/codma-backend/deploy/codma-app/node_modules/@pulumi/output.ts:302:65
        at processTicksAndRejections (node:internal/process/task_queues:96:5)
    error: Running program '/Users/narendra/Coding/yugam-tech/codma-backend/deploy/codma-app' failed with an unhandled exception:
    TypeError: Cannot read properties of undefined (reading 'length')
        at /Users/narendra/Coding/yugam-tech/codma-backend/deploy/codma-app/node_modules/@pulumi/kubernetesx/kx.js:225:25
        at /Users/narendra/Coding/yugam-tech/codma-backend/deploy/codma-app/node_modules/@pulumi/output.ts:383:31
        at Generator.next (<anonymous>)
        at /Users/narendra/Coding/yugam-tech/codma-backend/deploy/codma-app/node_modules/@pulumi/pulumi/output.js:21:71
        at new Promise (<anonymous>)
        at __awaiter (/Users/narendra/Coding/yugam-tech/codma-backend/deploy/codma-app/node_modules/@pulumi/pulumi/output.js:17:12)
        at applyHelperAsync (/Users/narendra/Coding/yugam-tech/codma-backend/deploy/codma-app/node_modules/@pulumi/pulumi/output.js:229:12)
        at /Users/narendra/Coding/yugam-tech/codma-backend/deploy/codma-app/node_modules/@pulumi/output.ts:302:65
        at processTicksAndRejections (node:internal/process/task_queues:96:5)

Hi All, I am struggling last one week to setup most simple K8S GKE using pulumi. able to do pods, deployment etc but stuck on Ingress and HTTPS. May somebody suggest what to read or watch. My requirement is simple - codma.app is hosted on Godaddy, when use hits - https://codma.app , All the responses should be handled by frontend pod. when use hits - https://codma.app/api , All the responses should be handled by backend pod. There are only 2 services and both are working fine on localhost.

what’s up fellas, how’s everyone holding up? wondering how do i get the current provider info on code but i can’t seem to find, anyone knows? i need the current GCP project i’m operating on

i’m avoiding getting it from env var if it’s unnecessary, but i’ll do if there is no pulumi built-in option on it’s Go’s lib API

me again, stumbling upon this while trying to import an instance and found no answer on other parts, maybe someone here already went through that? https://stackoverflow.com/q/65722739

$ pulumi import gcp:compute/instance:Instance default nodes-153d93na/us-east1-b/node-820c50ba --diff                      
Previewing import (dev):
  pulumi:pulumi:Stack: (same)
    [urn=urn:pulumi:dev::nodes-gcp::pulumi:pulumi:Stack::nodes-gcp-dev]
error: gcp:compute/instance:Instance resource 'default' has a problem: ConflictsWith: "boot_disk.0.disk_encryption_key_raw": conflicts with boot_disk.0.kms_key_self_link. Examine values at 'Instance.BootDisk.DiskEncryptionKeyRaw'.
error: gcp:compute/instance:Instance resource 'default' has a problem: Computed attribute cannot be set. Examine values at 'Instance.BootDisk.DiskEncryptionKeySha256'.
error: gcp:compute/instance:Instance resource 'default' has a problem: ConflictsWith: "boot_disk.0.kms_key_self_link": conflicts with boot_disk.0.disk_encryption_key_raw. Examine values at 'Instance.BootDisk.KmsKeySelfLink'.
error: gcp:compute/instance:Instance resource 'default' has a problem: Computed attribute cannot be set. Examine values at 'Instance.NetworkInterfaces[0].Ipv6AccessType'.
error: gcp:compute/instance:Instance resource 'default' has a problem: Computed attribute cannot be set. Examine values at 'Instance.NetworkInterfaces[0].Name'.
error: gcp:compute/instance:Instance resource 'default' has a problem: expected network_interface.0.nic_type to be one of [GVNIC VIRTIO_NET], got . Examine values at 'Instance.NetworkInterfaces[0].NicType'.
error: Preview failed: one or more inputs failed to validate
error: preview failed
Resources:
    11 unchanged

found an issue already with this: https://github.com/pulumi/pulumi-gcp/issues/505 ☝️

I'm creating a GKE cluster and want to deploy to it in the same stack. Is it possible to do this without configuring

kubectl

?

Is there support for setting up VPC peering?

Hi all. Is there a way to create sub-buckets using storage.Bucket()? I cannot find any examples of how it’s done. Thx!

I'm having trouble finding Go GCP examples for the google-cloud-native toolkit. Anyone have a nice repo they've made public with some use cases? 🧵

https://github.com/adriangb/xpresso-gke-demo I made a demo repo for a web framework I'm working on. I wanted to test the framework in a "production setting", but it also gave me the chance to try/learn Pulumi. I ended up with what I think is a pretty nice self contained GKE + CloudSQL example. Notably, I got CloudSQL auth via CloudSQL Proxy using Workload Identity working. Maybe I just couldn't find it, but I think this is the only full example of this pattern out there, written in Pulumi or otherwise. Any feedback is appreciated!

Is there any way to get the docker registry name/id (just

repo1

for example) or even better the registry address (like

<http://us-docker.pkg.dev/p1/repo1/|us-docker.pkg.dev/p1/repo1/>

) from a

gcloud.artifactregistry.v1.Repository

resource? As far as I can tell I can only do

resource.id

which is of the format

projects/p1/locations/us-central1/repositories/repo1

. I realize I could parse this and extract

repo1

but I'm wondering if there's a better way...

This message was deleted.

Hi folks! 👋 We need to grant a GCP Service Account access to a specific Google Sheet document. Can Pulumi manage Google documents permissions? Manually, we would simply share the given document using the SA’s email address, but we’d like to automate that. Any idea? 🤔

Hi all, I'm creating a service account where I need certain permissions set to allow my compute engine instance to be able to write to a storage bucket. In order to do that, I figured I'd need to create a custom role and assign that to the service account. So far I've got:

const org = gcp.organizations.getOrganization({
  domain: "my-org-name",
});

const myRole = new gcp.organizations.IAMCustomRole("role-xyz", {
  description: "xyz",
  orgId: org.then(o => o.orgId),
  permissions: [
    "storage.objects.create",
    "storage.objects.delete",
    "storage.objects.get",
    "storage.objects.list",
    "storage.objects.update",
  ],
  roleId: "my-role-id",
  title: "My New Role",
});

When I

pulumi up

I get the following error:

* Unable to verify whether custom org role organizations/<my-org-id>/roles/my-role-id already exists and must be undeleted: Error when reading or editing Custom Organization Role "organizations/<my-org-id>/roles/my-role-id": googleapi: Error 400: The role name must be in the form "roles/{role}", "organizations/{organization_id}/roles/{role}", or "projects/{project_id}/roles/{role}"., badRequest

Any idea what's happening? The error message contains the correct org id, and I've checked in GCP Console and no role has been created. Thanks for your help!

Hi all, I'm looking into running managed compute instances with docker containers atm and thought I'd see if anyone has any tips? The plan is to create my own docker image and put it in the container registry via CloudBuild. The templates would then reference my custom image (I'm not sure exactly how that would work just yet). If you're able to share any info regarding the setup and / or performing updates that'd be really useful. The compute instances will be hosting a number of websites so ideally updates would result in zero downtime.

Hi, anyone trying out Pulumi with GCP data catalog? I've have troubles importing existing datacatalog entries but getting a reference using getEntry() works just fine. As an example, I have a pubsub topic created by pulumi that is automatically picked up by datacatalog. I can get a reference to that topic using getEnty resulting in:

get-o40-entry-export         : {
        integrated_system          : "CLOUD_PUBSUB"
        linked_resource            : "//pubsub.googleapis.com/projects/mathem-m-test/topics/o40-topic"
        name                       : "projects/mathem-m-test/locations/global/entryGroups/@pubsub/entries/cHJvamVjdHMvbWF0aGVtLW0tdGVzdC90b3BpY3MvbzQwLXRvcGlj"
        source_system_timestamps   : {
            create_time: "2022-02-25T17:08:36.192Z"
            update_time: "2022-02-25T17:08:36.192Z"
        }
        type                       : "DATA_STREAM"
    }

Since that datacatalog entry already exists, I want to import it to Pulumi but then I get a response that the resource doesn't exist.

pulumi import google-native:datacatalog/v1:Entry o40-entry projects/mathem-m-test/locations/global/entryGroups/@pubsub/entries/cHJvamVjdHMvbWF0aGVtLW0tdGVzdC90b3BpY3MvbzQwLXRvcGlj

=>
 Type                                   Name                Plan       Info
     pulumi:pulumi:Stack                    datapipelines-prod             1 error
 =   └─ google-native:datacatalog/v1:Entry  o40-entry           import     1 error
 
Diagnostics:
  google-native:datacatalog/v1:Entry (o40-entry):
    error: Preview failed: resource 'projects/mathem-m-test/locations/global/entryGroups/@pubsub/entries/cHJvamVjdHMvbWF0aGVtLW0tdGVzdC90b3BpY3MvbzQwLXRvcGlj' does not exist

Should I use a different resource name for the entry? The Entry resource seems to be referenced by a combination of an entry_group_id and an entry_id when using the getEntry function or when creating a custom Entry. Running gcloud data-catalog also returns that entry:

gcloud data-catalog entries describe cHJvamVjdHMvbWF0aGVtLW0tdGVzdC90b3BpY3MvbzQwLXRvcGlj --location=global --entry-group=@pubsub

=>
integratedSystem: CLOUD_PUBSUB
linkedResource: //pubsub.googleapis.com/projects/mathem-m-test/topics/o40-topic
name: projects/mathem-m-test/locations/global/entryGroups/@pubsub/entries/cHJvamVjdHMvbWF0aGVtLW0tdGVzdC90b3BpY3MvbzQwLXRvcGlj
sourceSystemTimestamps:
  createTime: '2022-02-25T17:08:36.192Z'
  updateTime: '2022-02-25T17:08:36.192Z'
type: DATA_STREAM

How long does it take to get feedback on a bug? https://github.com/pulumi/pulumi-google-native/issues/358

Is it not possible to add labels to things using the

google-native

provider?

Be nice to tag everything with

environment: staging

for example

Hey everyone! I have followed this https://www.pulumi.com/blog/build-publish-containers-iac/ documentation 100 percent but I have no idea why am I continuously getting this error on image push to the artifact repository. Although this was working fine for me, a few months back. Any idea anyone?

Using

@pulumi/google-native

(Node.js, if that makes a difference), I'm attempting to import an existing project I'm using

const project = new Project('foo', {
  // config
}, {
  import: '<project-id>'
});

but I get an error saying

error: resource '<project-id>' does not exist

If I run

gcloud projects list

then I can see the project When importing the project, do I need to provide the identifier in a different format? For reference, I've also tried importing the project number, but didn't have any luck with that either Any suggestions would be much appreciated, thanks 🙂