https://pulumi.com logo
b

busy-umbrella-36067

09/27/2018, 9:58 PM
bummer, was hoping to start using this. project is awesome though Thanks for the info
c

creamy-potato-29402

09/27/2018, 10:02 PM
@busy-umbrella-36067 I’m curious to hear what the problem is
is the issue just that you don’t want the state to be in the Pulumi service?
b

busy-umbrella-36067

09/27/2018, 10:03 PM
I dont want deployment to not work if the cloud service is down
everyone here is already using terraform with s3 remote state
dont wanna talk security into allowing yet another oauth github app
c

creamy-potato-29402

09/27/2018, 10:04 PM
What do you mean by having S3 support “built in” then?
b

busy-umbrella-36067

09/27/2018, 10:04 PM
stacks stored on s3
with locking
c

creamy-potato-29402

09/27/2018, 10:04 PM
That would still include a service, no?
Locking is provided by the service.
That issue tracks whether the statefile is stored in Pulumi or in the service’s database, right?
b

busy-umbrella-36067

09/27/2018, 10:05 PM
yes
c

creamy-potato-29402

09/27/2018, 10:05 PM
In general to provide locking some service would have to be involved, right?
b

busy-umbrella-36067

09/27/2018, 10:05 PM
basically, if you go under. we still need to be able to work in a team env
c

creamy-potato-29402

09/27/2018, 10:05 PM
Right, that should work with the local backend.
You can just make your CI/CD solutino that invokes
pulumi up
be the lock, right?
b

busy-umbrella-36067

09/27/2018, 10:06 PM
with the local backend, I have to git recomit and push
c

creamy-potato-29402

09/27/2018, 10:06 PM
hmm, not sure I understand.
b

busy-umbrella-36067

09/27/2018, 10:06 PM
to share the stack with other people
state*
c

creamy-potato-29402

09/27/2018, 10:07 PM
Why not just have your CI/CD scripts push/pull from s3?
Your CI/CD is going to “lock” anyway, right?
b

busy-umbrella-36067

09/27/2018, 10:07 PM
because we also need the ability to apply locally
c

creamy-potato-29402

09/27/2018, 10:07 PM
Ah.
I see.
b

busy-umbrella-36067

09/27/2018, 10:08 PM
if it was just ci system launching it I wouldnt care so much for locking
c

creamy-potato-29402

09/27/2018, 10:08 PM
Right, right. This makes sense.
This is one place where terraform apply really works out.
b

busy-umbrella-36067

09/27/2018, 10:09 PM
we are using that heavily for gitops right now
but the architecture of TF is a pain point right now
c

creamy-potato-29402

09/27/2018, 10:09 PM
Having a separate plan/apply makes this nice.
You mean, the statefile stuff, or something else?
b

busy-umbrella-36067

09/27/2018, 10:10 PM
module nesting 🤮
c

creamy-potato-29402

09/27/2018, 10:10 PM
ah
b

busy-umbrella-36067

09/27/2018, 10:10 PM
and count on modules
that just baffles me. no bool toggles for resources that are modules
c

creamy-potato-29402

09/27/2018, 10:10 PM
Yeah, making a new language is hard. 🙂
💯 1
b

busy-umbrella-36067

09/27/2018, 10:11 PM
right, I don’t want to sound like I dont appreciate the work all the people put into it.
c

creamy-potato-29402

09/27/2018, 10:12 PM
No, I feel your pain. I used to work on a system like that.