pulumi-community #install

elegant-twilight-2745

12/09/2019, 4:31 PM

Placed —logtostderr in positions 1. then 2. and finally 3. Same basic error: authorization failed Pulumi 1. new aws-typescript 2. -s niceseb/aws-typescript-cigna-poc/dev 3. Edit forgot the -v=9 flag and now I1209 163518.742020 14728 sink.go:154] defaultSink::Error(error: authorization failed)

white-balloon-205

12/09/2019, 4:37 PM

We’ll need to see a lot more of the output to help identify where the problem is - can you share the whole thing? Or a larger block?

elegant-twilight-2745

12/09/2019, 5:21 PM

elegant-twilight-2745

12/09/2019, 5:21 PM

So in typical situation like this I need to get IT helpdesk to whitelist it?

elegant-twilight-2745

12/09/2019, 5:22 PM

Anyone please?

white-balloon-205

12/09/2019, 5:24 PM

Can you access https://github.com/pulumi/templates from this machine? The

pulumi new

command download from there by default.

elegant-twilight-2745

12/09/2019, 5:25 PM

Hi Luke, /templates endpoint is readable / accessible but cannot clone but able to download as zip

white-balloon-205

12/09/2019, 5:32 PM

Okay - I think that explains it - we currently clone the git repo to get the templates: https://github.com/pulumi/pulumi/blob/811386cca7064b4b8e2920d1ba04007964bb1b62/pkg/workspace/templates.go#L308

white-balloon-205

12/09/2019, 5:34 PM

Do you know what is preventing cloning it? Can you request an exception? Else - you can always avoid using

pulumi new

and just put the files you want for your project in the file system yourself and then

pulumi stack init

pulumi new

is just for templating a few files - it is not critical to be able to use Pulumi.

elegant-twilight-2745

12/09/2019, 6:10 PM

Corporate cannot clone from public Github

elegant-twilight-2745

12/09/2019, 6:11 PM

Policy I think

elegant-twilight-2745

12/09/2019, 6:12 PM

Pulumi stack init is the same as pulumi new?

elegant-twilight-2745

12/09/2019, 6:13 PM

Since I haven’t managed to do new I don’t know what are the differences or what pulumi stack init creates for us?

elegant-twilight-2745

12/09/2019, 6:21 PM

So pulumi stack init -> stack new (dev) -> error no Pulumi project found in current directory so what files are required ?

elegant-twilight-2745

12/09/2019, 6:24 PM

I just like to start a project to demo in corporate environment and having a hard time, because of the error message says Github or Bitbucket not authorized at least better than an authorization error

white-balloon-205

12/09/2019, 7:30 PM

I’d suggest downloading https://github.com/pulumi/examples (as a zip) to the target machine. Then pick an example you are interested in (perhaps one of the

-webserver

-s3-folder

examples). Then the README in that folder will show you how to use

pulumi stack init

and

pulumi up

to deploy the example. You can then modify it as you wish.

elegant-twilight-2745

12/10/2019, 12:23 PM

Pulumi stack init dev what does that do? If I tried to do this without any of the Pulumi.yaml, requirements.txt then I get error but if I do this inside the examples then nothing gets created?

elegant-twilight-2745

12/10/2019, 12:34 PM

Either way not sure how to create resources that are not present before

elegant-twilight-2745

12/10/2019, 1:24 PM

Pulumi up: error Failed to locate python3? But I just created a virtualenv from it?

limited-honey-31480

12/18/2019, 7:18 PM

anyone can help me... just start change from terraform to pulumi and when i did the start tutorial for gcp i got the error... I already tryed check the gcloud auths...install the gcloud inside the env and check bill permissions, but noting looks solve it

elegant-twilight-2745

12/20/2019, 12:13 PM

All I need to connect pulumi to AWS is to make sure .aws/credentials have aws_access_key aws_secret_access_key ? As I was able to deploy previously in Terraform but Pulumi up in Mac OS: Error: error using credentials to get account ID: error calling stateGetCallerIdentity InvalidClientTokenId: the security token included in the request is invalid: 403

stocky-spoon-28903

12/20/2019, 3:01 PM

Hmm that looks like a different problem

stocky-spoon-28903

12/20/2019, 3:01 PM

Can you output the credentials in your program? And then try looking at sts directly to see the root cause?

elegant-twilight-2745

12/25/2019, 11:45 PM

How to output the credentials? And the second sts directly?

lively-car-62251

12/26/2019, 5:24 PM

Hi all, I am having problems accessing AWS via profile that requires switching roles. here is my set up: ~/.aws/config: [profile security] region=us-east-1 role_arn=arnawsiam:xxxxxxxxx651role/OrgAdmin mfa_serial=arnawsiam:xxxxxxxxx488mfa/axxxxxxxxxrg source_profile=xxxx-tech ~/.aws/credentials [xxxx-tech] aws_access_key_id = xxxxxxxxxxxxxxPHQ aws_secret_access_key = xxxxxxxxxxxxxxxxxxxxxxx region = us-west-1 env | grep -i aws AWS_DEFAULT_PROFILE=security AWS_PROFILE=security

lively-car-62251

12/26/2019, 5:25 PM

aws ls s3 works, but pulumi up throughs an error

lively-car-62251

12/26/2019, 5:25 PM

Here is debug output

out.txt

lively-car-62251

12/26/2019, 5:39 PM

aws sts get-caller-identity { "Account": "xxxxxxxx651", "UserId": "xxxxxxxxxxxxxxxxxxxx:botocore-session-1577379519", "Arn": "arnawssts:xxxxxxxxx651assumed-role/OrgAdmin/botocore-session-1577379519" }

elegant-twilight-2745

12/28/2019, 2:06 PM

Actually what should be inside aws/config vs aws/credentials

shy-microphone-28807

01/08/2020, 6:40 PM

Hi there. The new github actions container, broke my builds, switched to using 1.71 tag instead of latest(1.8.1) and confirm that fixes it.