pulumi-community #kubernetes

ancient-megabyte-79588

03/31/2020, 4:59 PM

@gorgeous-egg-16927 Now that you have self-identified as a kubernetes expert! 😄 I'm getting this error when trying to update a

configMap

The

configMap

above generates this error and there isn't a lot in the details to suggest what is wrong.

ancient-megabyte-79588

03/31/2020, 5:00 PM

Is there guidance in how to interpret the data in the

details

that are output?

ancient-megabyte-79588

03/31/2020, 5:02 PM

In the

details

color console, are the red lines existing and green the intended replacement and that is what the task is suggesting won't work?

calm-greece-42329

04/01/2020, 7:04 PM

got a problem and not sure of the best solution.. im trying to run kafka in kubernetes and i need to provide an environment variable to the pods with the service name they provide. this is for them to advertise. so essentially i need a deployment with a service, but i need to know the service name inside of the deployment

calm-greece-42329

04/01/2020, 7:04 PM

should i just generate my own auto-name?

ancient-megabyte-79588

04/01/2020, 7:10 PM

Copy code

export consts serviceName = "<something you generate>-svc";

at the top of your pulumi app?

calm-greece-42329

04/01/2020, 7:11 PM

yeah, i was thinking along those lines

ancient-megabyte-79588

04/01/2020, 7:12 PM

I haven't looked to see if you can export a

label

value into a env var .. labels are the native grouping mechanism in k8s

calm-greece-42329

04/01/2020, 7:12 PM

well, the issue is that the deployment depends on the service, and the service depends on the deployment, but really only for the auto-name

calm-greece-42329

04/01/2020, 7:13 PM

i can do something like `

Copy code

const nameSuffix = `-${pulumi.getProject()}-${pulumi.getStack()}

and mash it into all of my metadata

calm-greece-42329

04/01/2020, 7:16 PM

kubernetesx makes everything so much easier until you need to do something just outside of its narrow confines

billowy-army-68599

04/01/2020, 11:38 PM

Are you pre-provisioning your loadbalancer, instead of letting the cloud controller provision it? or do you just want the service type loadbalancer to use a specific IP address?

ancient-megabyte-79588

04/01/2020, 9:10 PM

Mostly, I don't seem to be able to figure out how to configure the chart correctly.

hundreds-portugal-17080

04/04/2020, 5:18 PM

Hi, Trying to better understand customTimeouts on the resource. I have set 2 min on the timeout on creating helm charts. I am observing that a k8 is not able to find resources to assign in k8 and thats fine but main issue is that its taking around 8 min instead of exiting after 2 min. Am I doing something wrong with the timeout? new k8s.helm.v2.Chart("XYZ", { PATH goes here. },{ providers: { "kubernetes": this.cluster.provider },customTimeouts: { create: "2m", delete: "2m", update: "2m", } }

boundless-morning-59924

04/07/2020, 9:32 AM

I've done some investigation on how to create a CD-setup, and I think that I've found a good solution using multiple stacks for identity/infrastructure/app-deployments for a monorepo-setup. We are however now trying to split up some of our code into smaller repositories, and that is when I think it will become somewhat tricky to handle. My idea is to have a separate repo for the pulumi infrastructure configuration, where I can create database instances, k8s-cluster (with external IP, ingress, ssl-cert) and more. In the repo for each service (k8s-deployment) I would like to get hold of the Ingress-definition from the shared infra-stack, and modify the ingress-rule-spec according to each service's needs. Would this be possible, or should I try to modify the structure in any other way? (I'm using GCP/GKE and Typescript)

breezy-hamburger-69619

04/07/2020, 4:29 PM

A new set of changes has been merged for

pulumi/eks

[1] and is available in NPM [2] under version

0.18.25-alpha.1586233126

In this set of changes, we’ve added: • Support for proxied environments • Role-based kubeconfigs • And swapped out

aws-iam-authenticator

with

aws eks get token

used in kubeconfig auth We would love to hear back from

pulumi/eks

users on their experience using this version to better understand how these changes work with you and your clusters. Please let us know any feedback or open up a new issue [3]. Thank you! 1 - https://github.com/pulumi/pulumi-eks/blob/master/CHANGELOG.md#unreleased 2 - https://www.npmjs.com/package/@pulumi/eks 3 - https://github.com/pulumi/pulumi-eks/issues/new

breezy-gold-44713

04/07/2020, 11:59 PM

How can I emulate this via pulumi from pulumi config secrets?

kubectl create secret tls myservice-tls --cert=myservice.cert.pem --key=myservice.key.pem --dry-run -o yaml

. I’ve tried manually constructing a TLS secret with the exact contents of the yaml file, but it doesn’t work for some reason. I feel like I must be missing something obvious, any insights?

better-rainbow-14549

04/08/2020, 12:49 PM

i'm trying to go through and tag all the sensitive values we have in our stacks with

additionalSecretOutputs

- keyvault secrets, service principal passwords etc but when i get to

kubernetes.Provider

it doesn't accept that property in ResourceOptions

ancient-megabyte-79588

04/08/2020, 8:31 PM

I'm having trouble converting this ConfigMap into a pulumi .ts representation.

Copy code

kind: ConfigMap
apiVersion: v1
metadata:
  name: nginx-nginx-ingress-controller
  namespace: kube-system
  labels:
    k8s-app: nginx-ingress-controller
data:
  proxy-buffer-size: "128k"
  proxy-buffers: "8 128k"

I've already got k8s resource in the cluster via manifest and I'm trying to import it so I can change it in pulumi, but I can't get the

data

sections to match up and so pulumi won't let it work.

ancient-megabyte-79588

04/08/2020, 8:32 PM

This does not work

Copy code

export const nginxIngressControllerConfigMap = new k8s.core.v1.ConfigMap("nginx-nginx-ingress-controller", {
    metadata:{
        name: "nginx-nginx-ingress-controller",
        labels: {"k8s-app": "nginx-ingress-controller"},
        namespace:"kube-system"
    },
    data: {
        "proxy-buffer-size": "128k",
        "proxy-buffers": "8 128k"
    }
},{provider: k8sProvider, import: "kube-system/nginx-nginx-ingress-controller"});

ancient-megabyte-79588

04/08/2020, 8:32 PM

Copy code

kubernetes:core:ConfigMap (nginx-nginx-ingress-controller):
    error: inputs to import do not match the existing resource

brainy-nest-61978

04/09/2020, 2:08 PM

Hello. new to slack and pulumi. maybe wrong channel. Hoping someone can help. Running into issues getting started with csharp example on https://www.pulumi.com/docs/get-started/kubernetes/create-project/ its hanging forever after running pulumi up. have tried a few times. going to try with logging enabled now and see if I get some error info. From powershell I just see 'update failed' error: 4 errors occured: but the error info never shows powershell is just left spinning....

eager-pillow-75917

04/09/2020, 6:52 PM

does pulumi has anything similar to terraform Data Source: helm_repository? https://www.terraform.io/docs/providers/helm/d/repository.html

cool-egg-852

04/09/2020, 7:23 PM

Anyone know how to solve

kubernetes:apps:StatefulSet    vault/vault    updating.    [1/3] Waiting for StatefulSet update to roll out (2/2 Pods ready)

sticking around forever?

fast-dinner-32080

04/10/2020, 4:20 PM

Will kubernetesx be supposed across the other languages soon? We are using .NET and hoping to use Kubernetesx instead of the verbose standard provider.

hundreds-portugal-17080

04/12/2020, 4:17 PM

Hello, Good morning. Is there a way to specify number of masters & workers? all I see is min/max/desired. How does pulumi internally figure out number of k8 masters?

hundreds-portugal-17080

04/12/2020, 5:27 PM

Hello again, We already have set of ec2 key pairs in the aws env and have correponding .pem files in my laptop. I am trying to spin up with eks using node groups and provided "keyName" as one the ec2 pair names(String) for nodeGroup. I am not able to ssh into worker nodes using root or ec2-user. Command: ssh -I <pem file> ec2-user@<ip of the node> (root@ip of the node>. It says connect to host <host name>. Port 22: Operation time out. I am definitely missing something and unable to debug this. Please advise.

ancient-megabyte-79588

04/13/2020, 9:35 PM

Hey guys... I'm looking mostly for kubernetes advice/help, but of course I'd prefer the advice to support using pulumi. I have a asp.net core web application that is trying to send SMTP but it is failing. I think that my app can't talk using SMTP out of the container/pod and so it can't connect to the external email provider (ProofPoint). Any ideas on Kubernetes configuration that will be executed in Pulumi? My google-foo is failing, so I'm hoping I can find some guidance here.

gorgeous-elephant-23271

04/14/2020, 8:06 PM

I'm trying to setup pulumi to pull an image from a private registry (Azure ACR), so I've created a secret called

acr

with

kubectl

and referenced it in my

PodBuilder

using pulumi/kuberentesx:

Copy code

imagePullSecrets: [{
        name: "acr",
    }]

but then I'm still getting

unauthorized: authentication required

when k8s is trying to pull the image

gorgeous-elephant-23271

04/14/2020, 8:06 PM

Any ideas of where I might be going wrong?