pulumi-community #kubernetes

Docs

Join the conversation Join Slack

kubernetes

lemon-monkey-228

02/03/2021, 1:56 PM

Is there a way to query for existing resources outside of my Pulumi stack/

lemon-monkey-228

02/03/2021, 1:56 PM

I feel like I’ve seen this somewhere, but I can’t seem to piece together the right search terms.

lemon-monkey-228

02/03/2021, 1:56 PM

We have a persistent set of infrastructure that is shared amongst some deploys and I’d like to be able to look up the server names (etc.) instead of hard-coding them

lemon-monkey-228

02/04/2021, 10:14 AM

Next question: Can you render Helm charts locally without applying them?

lemon-monkey-228

02/04/2021, 10:14 AM

like with the

renderYamlToDirectory

for a Kubernetes provider

prehistoric-kite-30979

02/05/2021, 4:11 PM

Hi all, I opened a PR for initContainer support in kubernetesx. How do I go about getting it merged? https://github.com/pulumi/pulumi-kubernetesx/pull/63

better-actor-92669

02/08/2021, 4:55 PM

Hey guys. Is there any way to skip an installation of some object in a helm chart using transformations? For instance, I want to avoid installing everything that includes the substring "test". I tried

del obj

but it doesn't work.

def remove_test_objects(obj):
    # if obj["kind"] == "Pod" and 'test' in obj["metadata"]["name"]:
    if 'test' in obj["metadata"]["name"]:
        del obj

magnificent-student-85498

02/11/2021, 4:20 PM

Hey, I am getting error of duplicate resource

kubernetes:core/v1:ConfigMap redis-configuration create replacement [diff: ~metadata]; error: Duplicate resource URN 'urn:pulumi:staging::kubernetes-deployment::kubernetes:core/v1:ConfigMap::redis-configuration'; try giving it a uniqu
e name

Why URN doesn’t have namespace in it? Is it a bug ?

blue-orange-84367

02/12/2021, 6:20 AM

hi, how do people here cope with cluster only reachable via a proxy/bastion connection?

lemon-monkey-228

02/12/2021, 11:48 AM

Does anyone have any insight as to why my custom

IngressRoute

type (TypeScript) is throwing

TypeError: types_1.IngressRoute is not a constructor

straight-cartoon-24485

02/14/2021, 7:10 PM

Can the ambient configuration be disabled? I'm thinking, perhaps I can turn

pulumi config set kubernetes:context my-context

into a required variable(?) re: https://www.pulumi.com/docs/intro/cloud-providers/kubernetes/setup/#kubernetes-configuration My goal is to avoid running pulumi against the wrong cluster (I need to switch between two live clusters often...) Is there perhaps another defensible way to configure pulumi?

red-lighter-44012

02/18/2021, 8:02 AM

I've been working on setting up one-click cluster provisioning automation so I can spin up clusters on demand (be it for test environments or disaster recovery). So far I'm pretty happy with everything but one thing - the ingress controller(s). - Do you install the ingress controller as a part of your initial cluster deployment? E.g. pulumi up installs some helm charts for the controller and thats it? - How do you handle ingress updates? This sounds like a potentially dangerous operation that should ideally be tested manually - Upgrading the ingress might work but .. - Installing the target version on a fresh cluster might fail or not work as expected - and especially vice versa: new installs are good, but helm upgrade breaks something (CRDs can be a pain) Currently I have a manual step that I do for cluster initialization. pulumi output (ingress IP, namespace name etc) is passed to the helm chart script that performs the initial ingress installation and this works pretty great. The problem is, that helm is not declarative and that on upgrade there are sometimes breaking changes (eg CRDs have to be manually applied). E.g. end up having to do perform these manual steps to ensure there's no downtime. It's literally easier to spin up a new cluster and gradually switch traffic over tbh.

proud-pizza-80589

02/19/2021, 7:43 AM

I’m using fetchOpts.repo to install helm charts out of custom repo’s, but i now have to install https://github.com/prometheus-community/helm-charts/tree/main/charts/prometheus which needs 2 repo’s so it can install dependencies. Any idea how to configure pulumi for these two repo’s?

colossal-australia-65039

02/20/2021, 2:55 AM

I'm following this blog for EKS cluster autoscaling (with managed node groups) and it's not working. My nodes stay at 1 even though there are unscheduled pods. When comparing it to the steps AWS gives, the Pulumi blog is skipping over a bunch of resources to provision. Not sure if this blog is no longer applicable since it was published in 2019, or if there's something that I'm missing.

bumpy-laptop-30846

02/24/2021, 1:53 PM

Hi guys, I am creating a cluster with fargate on aws, with awsx and eks libraries. The issue is that my deployment is not deploying on fargate. I think it might be due to the namespace of fargate. If one create the cluster like this:

const cluster = new eks.Cluster( clusterName,
  {
    fargate: true,
    vpcId: vpc.id,
    publicSubnetIds: vpc.publicSubnetIds,
    privateSubnetIds: vpc.privateSubnetIds,
    deployDashboard: false,
    nodeAssociatePublicIpAddress: false,
    providerCredentialOpts: {},
    skipDefaultNodeGroup: true, ...

then fargate use the default namespace? Is there a way to access the fargateProfile when creating the fargate profile with

fargate: true

lemon-monkey-228

02/26/2021, 12:12 PM

Is there a way to force pulumi to always render resources from fresh instead of diffs

lemon-monkey-228

02/26/2021, 12:30 PM

I’ve resorted to piping the stack.json through

jq

and deleting the resources key

lemon-monkey-228

02/26/2021, 12:31 PM

to ensure it’s rendered from fresh when required

orange-psychiatrist-22511

02/26/2021, 2:12 PM

quick question: is there a benefit to creating resources with random suffixes (the default behavior with pulumi)?

breezy-cricket-40277

02/26/2021, 3:50 PM

Is there any way to quickly template helm with a

dry-run

before applying it? I have a helm chart deployed and don’t want to deploy again without

dry-running

the helm template first.

wet-noon-14291

02/26/2021, 10:30 PM

Has anyone an example of creation of a service account and then also generation of the kubeconfig for that service account? I know I can probably do it on the command line, but I would like to do it in pulumi but can't find the right methods to do it. Basically this but in pulumi: https://docs.armory.io/docs/armory-admin/manual-service-account/

dry-engine-17210

02/27/2021, 6:32 PM

Anyone tried to build a GKE Autopilot cluster using Pulumi yet? Any gotchas?

👀 1

bitter-application-91815

03/03/2021, 4:53 PM

hey folks, when creating a eks cluster how do i ensure that the cluster is accessible from both public and private

bitter-application-91815

03/03/2021, 4:53 PM

adorable-action-51248

03/05/2021, 9:31 AM

Hi ! I am wondering what is the best way to setup K8S with GKE and control the subnet such that the cluster is “VPC-native” and has the maximum number of pods per node (110). Currently, I have a setup where i use

gcp.compute.Subnetwork

with empty

secondaryIpRanges: []

and then refer to that subnet in

gcp.container.Cluster

and use

ipAllocationPolicy

to specify the services and pods subnets. However, this setup breaks because GKE modifies the network’s

secondaryIpRanges

and on the next

pulumi up

pulumi tries to remove GKEs modifications. The fails because the subnetwork is already in use.

colossal-australia-65039

03/05/2021, 11:39 PM

I'm using the

@pulumi/eks

Node package and when creating a

new Cluster()

I can supply

roleMappings

. Ideally these roleMappings would reference

ClusterRoleBindings

but these

ClusterRoleBindings

cannot exist until the EKS cluster itself is created since they're k8s resources. I'm stuck in a chicken/egg scenario for the initial creation of the EKS cluster! Is there a way to solve this without having to fall. back to referencing a hardcoded string value instead of my ideal case of referencing the

clusterRoleBinding.subjects[0].name

limited-planet-95090

03/08/2021, 11:52 PM

Hey folks, I’m working on adding code examples to get to language parity across our top five code examples in AWS, Azure, Google Cloud, and Kubernetes. For Kubernetes, these are the tutorials I’m adding examples for: EKS - Migrating Node Groups with Zero Downtime (https://www.pulumi.com/docs/tutorials/kubernetes/eks-migrate-nodegroups/) Deploy Nginx to a Kubernetes Cluster (https://www.pulumi.com/docs/tutorials/kubernetes/exposed-deployment/) Kubernetes Helm Wordpress Chart (https://www.pulumi.com/docs/tutorials/kubernetes/wordpress-chart/) Guestbook App with Redis and Nginx(https://www.pulumi.com/docs/tutorials/kubernetes/guestbook/) Graceful App Rollout (https://www.pulumi.com/docs/tutorials/kubernetes/configmap-rollout/) Do these feel like the most important examples you’ve used or are there other examples from our examples repo that have been more helpful? Are there different examples you’d like to see? Thanks, Dave

bitter-application-91815

03/10/2021, 7:07 PM

Hey guys, are there any examples of how to roll out the cluster-autoscaler helm chart. It fails to talk to the pods with

bitter-application-91815

03/10/2021, 7:08 PM

the Kubernetes API server reported that "default/asg-chart-cloud-production-aws-cluster-autoscaler" failed to fully initialize or become live: 'asg-chart-cloud-production-aws-cluster-autoscaler' timed out waiting to be Ready
    	* Service does not target any Pods. Selected Pods may not be ready, or field '.spec.selector' may not match labels on any Pods

sticky-match-71841

03/11/2021, 1:52 PM

Can't the skipAwait annotations be used to ignore the status of a deployment? Seems to not work the way we expect it to 🤔 Some context: We would like to just configure a deployment but ignore if it ends up crash looping. From our PoV the deployment is configured correctly, so we don't care if it starts crash looping. Is it maybe a possibility to explicitly ignore the status?

Title

sticky-match-71841

03/11/2021, 1:52 PM

gorgeous-egg-16927

03/11/2021, 5:51 PM

skipAwait should do what you’re asking. Can you post the Deployment code snippet you’re using?

sticky-match-71841

03/11/2021, 6:54 PM

@gorgeous-egg-16927 the problem was caused by me 🙂 Everything works as it should

🎉 1

View count: 5