Is there any api for this ?

Why pulumi doesn’t encrypt in the state the kubernetes secret values? (the data property)

I’m using helm and I tried to pass the values i set there with

pulumi.ToSecret

and it is still saved to the state as plaintext @gorgeous-egg-16927

Is there a way how to tell pulumi do delete pods with some flags? An app have kinda long grafecul period. Which results into pulumi failing to delete that pod. But in that case we are sure we want to delete that pod immediately without that graceful shutdown. (--grace-period=0 --force)

I'm trying to deploy cert manager using the github url:

new ConfigFile($"{prefix}-cert-manager",
    new ConfigFileArgs { File = "<https://github.com/jetstack/cert-manager/releases/download/v1.0.3/cert-manager.yaml>" },
    new ComponentResourceOptions { Provider = kubeProvider });

But if fails with `Failed to deserialize response message`:

Diagnostics:
  pulumi:pulumi:Stack (aws-alpha):
    error: Running program 'D:\Devel\Mps\devops-gemini-pulumi\Aws\bin\Debug\Aws.dll' failed with an unhandled exception:
    Grpc.Core.RpcException: Status(StatusCode=Internal, Detail="Failed to deserialize response message.")
       at Pulumi.GrpcMonitor.InvokeAsync(InvokeRequest request) in /home/travis/gopath/src/github.com/pulumi/pulumi/sdk/dotnet/Pulumi/Deployment/GrpcMonitor.cs:line 23
       at Pulumi.Deployment.InvokeAsync[T](String token, InvokeArgs args, InvokeOptions options, Boolean convertResult) in /home/travis/gopath/src/github.com/pulumi/pulumi/sdk/dotnet/Pulumi/Deployment/Deployment_Invoke.cs:line 36
       at Pulumi.Output`1.ApplyHelperAsync[U](Task`1 dataTask, Func`2 func) in /home/travis/gopath/src/github.com/pulumi/pulumi/sdk/dotnet/Pulumi/Core/Output.cs:line 226
       at Pulumi.Output`1.ApplyHelperAsync[U](Task`1 dataTask, Func`2 func) in /home/travis/gopath/src/github.com/pulumi/pulumi/sdk/dotnet/Pulumi/Core/Output.cs:line 226
       at Pulumi.Output`1.ApplyHelperAsync[U](Task`1 dataTask, Func`2 func) in /home/travis/gopath/src/github.com/pulumi/pulumi/sdk/dotnet/Pulumi/Core/Output.cs:line 241
       at Pulumi.Output`1.Pulumi.IOutput.GetDataAsync() in /home/travis/gopath/src/github.com/pulumi/pulumi/sdk/dotnet/Pulumi/Core/Output.cs:line 142
       at Pulumi.Serialization.Serializer.SerializeAsync(String ctx, Object prop) in /home/travis/gopath/src/github.com/pulumi/pulumi/sdk/dotnet/Pulumi/Serialization/Serializer.cs:line 136
       at Pulumi.Deployment.SerializeFilteredPropertiesAsync(String label, IDictionary`2 args, Predicate`1 acceptKey) in /home/travis/gopath/src/github.com/pulumi/pulumi/sdk/dotnet/Pulumi/Deployment/Deployment_Serialization.cs:line 54
       at Pulumi.Deployment.SerializeAllPropertiesAsync(String label, IDictionary`2 args) in /home/travis/gopath/src/github.com/pulumi/pulumi/sdk/dotnet/Pulumi/Deployment/Deployment_Serialization.cs:line 33
       at Pulumi.Deployment.RegisterResourceOutputsAsync(Resource resource, Output`1 outputs) in /home/travis/gopath/src/github.com/pulumi/pulumi/sdk/dotnet/Pulumi/Deployment/Deployment_RegisterResourceOutputs.cs:line 32
       at Pulumi.Deployment.Runner.<>c__DisplayClass7_0.<<WhileRunningAsync>g__HandleCompletion|0>d.MoveNext() in /home/travis/gopath/src/github.com/pulumi/pulumi/sdk/dotnet/Pulumi/Deployment/Deployment.Runner.cs:line 117
    --- End of stack trace from previous location ---
       at Pulumi.Deployment.Runner.WhileRunningAsync() in /home/travis/gopath/src/github.com/pulumi/pulumi/sdk/dotnet/Pulumi/Deployment/Deployment.Runner.cs:line 157

I have a project I'm using pulumi for. One of the things pulumi is doing is building a docker image for me and pushing it to my container repo. One problem I have is that installing composer dependencies is taking forever and this means every single deploy is taking forever. I was thinking I could build one image that install the composer deps and then another image that uses that image. Is that possible in pulumi? Is there some way I can tell pulumi to only rebuild if for example

compose-lock.json

has changed?

@gorgeous-egg-16927 is something changed or docs are super outdated, I am seeing new interface for transformations

export declare type ResourceTransformation = (args: ResourceTransformationArgs) => ResourceTransformationResult | undefined;

Also, is there a way to omit resources? I found this approach, https://github.com/pulumi/pulumi-kubernetes/issues/486#issuecomment-527958122 any other ways to workaround it? Thanks

Hi @gorgeous-egg-16927 any idea on that thread from the other day ?

I’m seeing some “bad” behavior when I’m deploying a

deployment

whose replica count is controlled by an HPA. Basically when a

deployment

change happens, it will scale the replica set behind the deployment to

1

replica, destroying what the HPA has set. I originally had

replicas: 1

in the deployment spec, but I removed that and I still see this behavior. Anyone else experience this and is there a way to fix it?

What's the best way to create a Secret, and then not update the stringData field the next time?

Is there any way to debug how Pulumi decomposes a Helm chart? I'm having an issue where a value I set in the Helm chart doesn't seem to be translated into the actual service Pulumi creates, all the other values work fine, but not this one and I can't see why

i believe you can make it export and pulumify the chart to a folder?

Successfully installed the Datadog agent into our cluster but now am trying to figure out how to install the Istio integration. Stuck on the configuration step and how to do that via Pulumi on the Datadog agent Helm chart config https://docs.datadoghq.com/integrations/istio/#configuration Anybody successfully done this?

I’m having an issue in CI where I’ve updated

@pulumi/kubernetes

to the latest version (v2.6) but the state was using v2.2. In CI only the new one is installed (v2.6) and Pulumi fails because it attempts to load v2.2:

error: could not load plugin for kubernetes provider 'urn:pulumi:<snip>::pulumi:providers:kubernetes::default_2_2_2': failed to load plugin /<snip>/.pulumi/plugins/resource-kubernetes-v2.2.2/pulumi-resource-kubernetes: plugin not found

Is there a way to refresh the state so that it expects the latest version of the plugin instead of the older one?

Hello all! Im very new to pulumi and I was hoping to leverage the kubernetes provider to interact with an existing eks cluster but I keep getting the following -

error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: Get "https://********************.<http://sk1.us-west-2.eks.amazonaws.com/openapi/v2?timeout=32s|sk1.us-west-2.eks.amazonaws.com/openapi/v2?timeout=32s>": getting credentials: exec: exit status 2

This is using typescript and the following guide - https://www.pulumi.com/docs/get-started/kubernetes/review-project/ Can pulumi not authenticate with the existing kubeconfig via an iam role?

Hey guys, I am trying to lookup a kubernetes secret which holds the sa token and extract it. For some reason (in python) when I to a Secret.get and try to extract the token I just get a NoneType error. Its almost like it isn’t retrieving the data but if I switch the id to something that doesn’t exist it does give me an error saying it can’t find it so I know it is finding the secret. Just wanted to make sure I wasn’t doing something obviously wrong.

sa_secret = pulumi_kubernetes.core.v1.Secret.get(
    resource_name="vault-auth",
    id="kube-system/vault-auth-token-fsl4p",
    opts=ResourceOptions(
        provider=kubernetes_provider
    )
)
token = sa_secret.data.apply(lambda x: x['token'])

AttributeError: ‘NoneType’ object has no attribute ‘apply’

Hello. I'm trying to set up a k8s traefik ingress controller. I want to use the

PathType

property, but some reason it seems like the

PathType

isn't applied. I'm using pulumi .NET (F#, but that shouldn't matter). Anyone knows what might be up?

Hey guys, we are deploying helm charts and trying to figure out a way to depend on underlying resources of the chart. In Python I see there is a get_resource method on a v3 chart but it returns a Output[CustomResource] and not a Resource so I am unable to add it as a depends_on resource. Do you know a way to do this or is it not possible right now? here is an example. I wanted to extract the deployment of the cert-manager chart but that variable is an Output[CustomResource] and not a Resource so I am unable to use it.

cert_manager_deployment = cert_manager_chart.get_resource(group_version_kind="apps/v1/Deployment",
                                                          name="cert-manager",
                                                          namespace="cert-manager")

Trying to use that ends up with this exception

Exception: 'depends_on' was passed a value that was not a Resource.

anyone that has a concrete example configuring a traefik ingress using version 2 of traefik?

Cross posting: https://pulumi-community.slack.com/archives/C84L4E3N1/p1603909187255200?thread_ts=1603908998.255100&cid=C84L4E3N1

Hi, I'm struggling with a k8s.yaml.ConfigFile (a certManager's ClusterIssuer) which won't get created but i don't see any errors in the provisioning. I already tried to refresh this resource but that din't helped. Any hints on how to troubleshoot this?

I think, I’ve asked this question already, and answer was to use dynamic provider, possibly after 2 months something changed, just trying to double check. For example I am deploying StatefulSet (elasticsearch operator) that manages resources in my cluster, what will be the easiest way to wait for

export const elasticService = k8s.core.v1.Service.get(
  'elastic-lb',
  pulumi.interpolate`${namespace.metadata.name}/${elastic.metadata.name}-es-http`,
  { parent: namespace, dependsOn: elastic, provider: aks.k8s.provider }
);

elasticService

- I need to wait for this resource to appear, instead of failing instantly on preview step? Thanks!

Is there a special process required to do something like

helm upgrade

via pulumi?

I currently deploy a chart like

Chart("some-name,config=LocalChartOpts(path=path/to/helm-chart,ns=...,values=custom_values))

Can I just update my path to helm chart to the latest version and pulumi will deploy an update?

Seems like this would be good documentation. Maybe I will just export my values and upgrade via helm for now since I don't know if this will work otherwise

@billowy-army-68599 @gorgeous-egg-16927 Does the Pulumi Helm v3 support helm hooks “pre-install,pre-upgrade”? I am trying to render out a chart that includes jobs with those hook types but it doesn’t seem to be rendering them at all which breaks the deployment.

Is there a way to timeout a deploy to kubernetes faster if sometehing isn't correct?