index.ts(21,3): error TS2322: Type 'Buffer' is not assignable to type 'string | Promise<string> | OutputInstance<string> | undefined'.
      Type 'Buffer' is not assignable to type 'string'.

import * as pulumi from "@pulumi/pulumi";
import * as equinix_metal from "@pulumi/equinix-metal";
import * as fs from "fs";

const userData = fs.readFileSync('bs.sh','utf8');
const projectId = "xxx";
const testProjectSshKey = new equinix_metal.ProjectSshKey("testProjectSshKey", {
    publicKey: "ssh-rsa ",
    projectId: projectId,
});

const dsbasenode = new equinix_metal.Device("ds-base-node",{
  hostname: "ds-base-node",
  plan: "c3.small.x86",
  metro: "sv",
  operatingSystem: "ubuntu_20_04",
  billingCycle: "hourly",
  projectSshKeyIds: [testProjectSshKey.id],
  projectId: projectId,
  userData: fs.readFileSync('./basenode.sh'),
});
// Export the name of the project
export const dsbasenodeIP= dsbasenode.accessPublicIpv4;

const userData = fs.readFileSync('bs.sh','utf8'); 

userData: fs.readFileSync('./basenode.sh'),

tf2pulumi

tfstate

resources.json

{
  "resources": [
    {
      "name": "lambda",
      "type": "AWS::Lambda::Function",
      "id": "ingestDataLambda"
    }
  ]
}

pulumi import -f resources.json --out index.ts

error: preview failed: failed to validate provider config: Could not automatically download and install resource plugin 'pulumi-resource-AWS'at version v5.16.0, install the plugin using `pulumi plugin install resource AWS v5.16.0`.
    Underlying error: error downloading plugin AWS to file: failed to download plugin: AWS-5.16.0: 403 HTTP error fetching plugin from <https://get.pulumi.com/releases/plugins/pulumi-resource-AWS-v5.16.0-linux-amd64.tar.gz>

403

pulumi plugin install

node_modules

yarn

Pulumi 3.38.0

Pulumi 3.40.2

Description:    Debian GNU/Linux 9.13 (stretch)
Release:        9.13
Codename:       stretch

Description:    Ubuntu 20.04.5 LTS
Release:        20.04
Codename:       focal

v14.19.1

import * as pulumi from "@pulumi/pulumi";
import { Output } from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

export = async () => {
	const environment = pulumi.getStack();
	const clusterConfig = new pulumi.StackReference(`xyz/cluster-config/${environment}`);
	const tenantIds = await clusterConfig.requireOutput("tenantIds").apply(value => value as string[]);
	const config = new pulumi.Config();
	const project = config.require('project');
	const location = config.require('location');
	const storageClass = config.require('storageClass');

	const bucketUrls = new Array();;

	for (let tenantId of tenantIds) {
		const tenantName = tenantId.split('-')[0];
		const bucketName = `xyz-${environment}-${tenantId}`;
		const bucket = new gcp.storage.Bucket(bucketName, {
			name: bucketName,
			project,
			location,
			storageClass,
			labels: {
				'tenant': tenantName,
				'env': environment,
			},
		});
		bucketUrls.push(bucket.url);
	}

	return {
		bucketUrls
	};
};

pulumi up

index.ts(16,23): error TS2488: Type 'Output<string[]>' must have a '[Symbol.iterator]()' method that returns an iterator

const tenantIds = await clusterConfig.requireOutput("tenantIds").apply(value => value as string[]);

Ouptput<any>

string[]

import type

name

pulumi.Config()

name is the configuration bag's logical name and uniquely identifies it. The default is the name of the current project.

PowerUserAccess

saml2aws

test

~/.aws/credentials

control

saml2aws

pulumi.dev.yaml

config:
  aws:assumeRole:
    roleArn: arn:aws:iam::<<test acc id>>:role/ExternalDeployer
  aws:region: ap-southeast-2
  prima-data-ingestion:vpcId:
    secure: <<VPC ID>>

pulumi up

error: Error: invocation of aws:kms/getKey:getKey returned an error: unable to validate AWS credentials. Make sure you have:

         • Set your AWS region, e.g. `pulumi config set aws:region us-west-2`
         • Configured your AWS credentials as per <https://pulumi.io/install/aws.html>
         You can also set these via cli using `aws configure`.


        at Object.callback (/home/rhys/projects/pulumi/deploy/node_modules/@pulumi/runtime/invoke.ts:159:33)
        at Object.onReceiveStatus (/home/rhys/projects/pulumi/deploy/node_modules/@grpc/grpc-js/src/client.ts:338:26)
        at Object.onReceiveStatus (/home/rhys/projects/pulumi/deploy/node_modules/@grpc/grpc-js/src/client-interceptors.ts:426:34)
        at Object.onReceiveStatus (/home/rhys/projects/pulumi/deploy/node_modules/@grpc/grpc-js/src/client-interceptors.ts:389:48)
        at /home/rhys/projects/pulumi/deploy/node_modules/@grpc/grpc-js/src/call-stream.ts:276:24
        at processTicksAndRejections (internal/process/task_queues.js:77:11)

aws configure

Access Key ID

Secret Access Key

region

None

token

~/.aws/credentials

assume_role {
    role_arn = "arn:aws:iam::<<test acc id>>:role/ExternalDeployer"
  }

<<test acc id>>

import * as aws from "@pulumi/aws";
import * as awsx from "@pulumi/awsx";
import * as pulumi from "@pulumi/pulumi";

const vpcId = "vpc-xxx";
const awsxVpc = new awsx.ec2.Vpc("vpc", {vpcId});
console.log(`subnets: ${await awsxVpc.publicSubnetsIds}`);
console.log(`private: ${await awsxVpc.privateSubnetIds}`);
...
// A bunch of resources generated e.g. new aws.ec2.Instance(...)

pulumi up/preview

error: could not validate provider configuration: 1 error occurred:
        * Invalid or unknown key

--policy-pack

error: aws:iam/policy:Policy resource 'Amazing-Lambda-can-log-to-cloudwatch' has a problem: "policy" contains an invalid JSON: invalid character '\n' in string literal. Examine values at 'Policy.Policy'.

LogGroup

Policy

export class Lambda extends pulumi.ComponentResource {
  constructor(name: string, args?: any, opts?: pulumi.ComponentResourceOptions) {

<<<>>><<<>>>

  this.cloudwatchLog = new aws.cloudwatch.LogGroup(`${name}-lambda-vpc-cloudwatch-    log`, {
    name: `/aws/lambda/amazingLambda`,
    retentionInDays: 14
  }, {parent: this});

  this.cloudwatchPolicy = new aws.iam.Policy(`AmazingLambda-can-log-to-cloudwatch`, {
    description: `Grants AmazingLambda permission to write to Cloudwatch logs for monitoring`,
    policy: `{
       "Version": "2012-10-17",
          "Statement": [
            {
              "Sid": "AmazingLambdaCanLog",
              "Effect": "Allow",
              "Action": [
                "logs:PutLogEvents",
                "logs:CreateLogStream",
                "logs:CreateLogGroup"
              ],
            "Resource": "${this.cloudwatchLog.arn}"
         }
       ]
     }`,
  }, { parent: this });

Output<string>[]

interface Person { age: number; name: string}

export steve: Person = { age: steve.age, name: steve.name };

export steve = { age: steve.age, name: steve.name };

const steve: pulumi.Output<Person> =  stackref.requireOutput("steve") as pulumi.Output<Person>

zod

create

...which indirectly referenced
   function 'bound parse': which could not be serialized because
     it was a native code function.

SecretString

aws.secretsmanager.getSecretOutput

aws-sdk

new aws.iam.Policy('mypolicy', {
  ...,
  policy: JSON.stringify({
    ... Resource: other.resource.arn ...
  })
})

policy: pulumi.output({ … }).apply(v => JSON.stringify(v))

"publishPath": "dist"

aws.iam.Role.get

id

pulumi stack --show-ids

id

pulumi

module: "commonjs"