https://pulumi.com logo
Join Slack
Powered by
# general
  • m
    image.png
  • m
    some power-outage in some part? again?
  • m
    đź‘€
  • g

    https://media2.giphy.com/media/v1.Y2lkPTc5MGI3NjExYngzdXRrYjBvZ2I0MDcwanp6Y3hhaG00dm9[…]pbnRlcm5hbF9naWZfYnlfaWQmY3Q9Zw/3o85xL7vu8vJKh71BK/giphy.gif▾

  • g
    Is there a way to call 
    pulumi preview
    that gives the same type of detail that you get when you call 
    pulumi up
    and then click 
    details
    ? Or is there a way to call 
    pulumi up
    and then automatically click 
    details
    instead of 
    up
    (this is from a CI/CD server running the command)?
    l
    • 2
    • 2
  • s
    Want to report a bug in the ESC UI: It seems the Form editor considers everything under values.* to be the same path as environmentVariables.* In my example I am trying to edit DATABASE_HOST in the environmentVariables section, however the UI says its a duplicate path. The YAML editor does not throw this error. I'm of the opinion that environmentVariables.DATABASE_HOST does not equal DATABASE_HOST (top level values)
    h
    • 2
    • 7
  • m
    Hi @here, Where can I find pulumi public components? I need a AWS VPC components instead of creating everything from scratch.
    Side Note
    Terraform has public modules for reusable with best practices
    c
    b
    +2
    • 5
    • 5
  • g
    We are seeing failures to execute deployments
    Copy code
    stderr: Logging in using access token from PULUMI_ACCESS_TOKEN 
 error: [401] Unauthorized: No credentials provided or are invalid.
    e.g. during 
    Restore cache
    r
    a
    a
    • 4
    • 25
  • g
    Is Pulumi auth having issues? (Issue with GH triggered deployments)
  • g
    Hi, what is the best / easiest way to analyze performance problems in pulumi. I have a small stack deploying AWS SSO and roles and it seems to be taking a lot of time. I’d like to know what is the problem. PS we are using selfhosted s3 backend.
    Copy code
    Resources:
    + 2 created
    ~ 1 updated
    3 changes. 168 unchanged

Duration: 1m36s
    c
    b
    • 3
    • 5
  • f
    Hi Pulumians, I have a question. Enabling verbose logging the whole stack generates lot of data to manually skim through to find the issue,. Is there a way we can enable verbose logging only to a particular resource. My pulumi stack is huge and literally impossible to find anything from the logs.
  • c
    Hello folks, I am trying to create a docker image using AWSx provider ecr.Image. However I am getting error, 
    error: booting builder: context deadline exceeded
    . Why does this happen and how to resolve this issue?
    • 1
    • 1
  • f
    hey folks, starting the stream right now where I will be continue building good AWS abstraction for VPC with Pulumi with cross-language component. Join if you are interested: https://twitch.tv/dmfigol
    m
    • 2
    • 4
  • s
    Reporting another bug. When removing a token from the Organization Access Tokens and then trying to re-add it using the same name the UI throws an error saying that token name is already taken. See video.
    existing token bug.mov
    r
    • 2
    • 2
  • b
    đź‘‹ Hello, team! I have a question . I am using pulumi-databricks to create a sql query in databricks using query api by providing query string ,warehouse id to which query to be executed etc. Query is getting created and saved under databricks queries but not executing . Do I need to use job api to trigger this sql as a job or is there any way to execute the query directly from query api after its saved ?
  • p
    Hi everyone. We just converted from the free trial of Enterprise to a Team subscription and I realized our CI/CD errors out now due to the pulumi Github auth action using an organization token erroring out since we are not on an enterprise plan. What is the recommended alternative? Is there still a way to use the OIDC set up without the organization token?
    l
    • 2
    • 4
  • a
    Hi All. I am doing some refactor in one of our providers due to API changes, and I am trying to regenerate the pulumi providers I am executing the command `$GOPATH/bin/upgrade-provider zscaler/pulumi-zpa --kind bridge`but then it returns the below errors whenever I attempt that. Does anyone have any guidance or other threads you can point me to where I can find a solution for it? Thank you
    Copy code
    warning: unable to convert HCL example for Pulumi entity '#/functions/%szpa:index/getPraConsoleController:getPraConsoleController'. The example will be dropped from any generated docs or SDKs: 1 error occurred:
	* [python] #-functions-%szpa:index-getPraConsoleController:getPraConsoleController.pp:2,5-7: unsupported attribute 'id'; unsupported attribute 'id', and 1 other diagnostic(s)


warning: unable to convert HCL example for Pulumi entity '#/functions/%szpa:index/getAppConnectorController:getAppConnectorController'. The example will be dropped from any generated docs or SDKs: 1 error occurred:
	* [python] #-functions-%szpa:index-getAppConnectorController:getAppConnectorController.pp:1,5-7: unknown property 'id' among [microtenantId microtenantName name]; , and 2 other diagnostic(s)


warning: unable to convert HCL example for Pulumi entity '#/functions/%szpa:index/getPRAApproval:getPRAApproval'. The example will be dropped from any generated docs or SDKs: 1 error occurred:
	* [python] failed to convert HCL for #/functions/%szpa:index/getPRAApproval:getPRAApproval to python: #-functions-%szpa:index-getPRAApproval:getPRAApproval.pp:0,57-2,2: cannot assign expression of type { emailIds: string } to location of type   {
    emailIds: list(output(string) | string) | output(list(string)) | output(list(string)?)?,
    id: output(string) | output(string?) | string?,
  }
| output({ emailIds: list(string)?, id: string? }): ;
    e
    • 2
    • 3
  • b
    Hello everyone, I am using pulumi postgresql provider 3.6.0 version and tried to update to latest one (3.15.1). I face the following issue: • I deploy a postgresql function with this provider, which is removed from pulumi state during pulumi refresh, after I upgrade to provider 3.15.1. • But function continues to exist inside postgresql itself Anyone faced similar issue? Is there some guide on how to properly upgrade a provider without issues?
    l
    • 2
    • 4
  • b
    Copy code
    pgFunction, err := postgresql.NewFunction(ctx, "pg-function-test", &postgresql.FunctionArgs{
			Schema: pgSchema.Name,
			Name:   pulumi.String("pg_function_test"),
			Args: postgresql.FunctionArgArray{
				&postgresql.FunctionArgArgs{
					Name: pulumi.String("pid"),
					Type: pulumi.String("integer"),
				},
			},
			Returns: pulumi.String("boolean"),
			Language: pulumi.String("plpgsql"),
			SecurityDefiner: pulumi.Bool(true),
			Volatility: pulumi.String("VOLATILE"),
			Strict: pulumi.Bool(true),
			Body: pulumi.String(`AS $$
				...
				$$
					SET search_path = pg_catalog;`),
		}, pulumi.Provider(pgProvider))
  • b
    Heya everyone đź‘‹ I have a really dumb question that has probably been asked before: Is there a way to enable dark mode on https://www.pulumi.com/registry and https://app.pulumi.com ? Easier on the old đź‘€ , ya know ...
  • m
    Hello Pulumi enthusiasts 🙂 I have a question regarding the Random Provider. It states 
    Unless otherwise stated within the documentation of a specific resource, this provider's results are not sufficiently random for cryptographic use.
    Looking at RandomString, the docs say 
    for sensitive random values please use random_password.
    However, there is no mention on RandomPassword about using it for uniques as a random value for password. Can anyone support whether it is safe to use 
    Random Password
    to create and manage passwords? Thanks in advance!
    q
    • 2
    • 2
  • a
    Is there a limitation that output names cannot start with two underscores? e.g. 
    __my_output
    ?
    e
    • 2
    • 1
  • a
    what's the best way to import existing pulumi configuration in a github repo to pulumi cloud? ideally keeping some sort of sync
  • a
    We have about 20-30 projects all with multiple env stacks all organized in various projects, and would want to have that come in
  • a
    a one way sync would be absolutely fine(say pulumi cloud->github) but initially we need to do the opposite
  • f
    hi team, I am building a comprehensive component for aws vpc and wanted your feedback about something. imagine you want to customize your route tables and you want to encode references to other objects inside your inputs. I want to support: • reference to objects defined as part of the same stack (e.g. other subnets, attachments, igw/vgw, etc.) • reference to arbitrary objects by id - this is simple, just put id • reference to an object based on tag(s) • reference to an object based on ssm value here is what I came up with (yaml):
    Copy code
    subnets:
  - name: ext-az1
    ...
  - name: ext-az2
    ...
attachments:
  - name: tgw-attachment
    # some parameters
  - name: cwan-attachment
    # some parameters
routeTables:
  - name: private
    routes:
      - destination: 0.0.0.0/0
        nextHop: igw
      - destination: ::/0
        nextHop: igw
      - destination: 10.0.0.0/8
        nextHop: tgw@tgw-attachment  # or cwan@cwan-attachment
      - destination: subnet@ext-az1.ipv4
        nextHop: vpce-123456
      - destination: subnet@ext-az1.ipv6
        nextHop: vpce-123456
      - destination: 10.1.0.0/24
        nextHop: pcx@tag:Name=MyPeering,Environment=Prod
      - destination: 10.2.0.0/24
        nextHop: pcx@ssm:/my/peering/id
    what do you think about the syntax? how would you improve it / make clearer for the user?
    q
    • 2
    • 5
  • s
    Wanted to share we are doing an in-person launch event for our new Seattle office June 11th 4-6pm for anyone in the area! https://www.meetup.com/pulumi-seattle/events/307677707
  • b
    Hi all, am new to Pulumi and just getting started with evaluating a migration from Terraform to Pulumi. I know there is a #C01PF3E1B8V channel so will post in there for any any noobie gotchas but wondered if there were any posts, either on here or the blog, that share peoples experiences and architecture tips? Would be great to read a “if only I knew then what I know now” post or “what I would do differently” post. Thanks.
    a
    a
    +3
    • 6
    • 20
  • f
    I need an advice as I can't get it to work. I am using aws-native provider for creating aws vpc component I create VPC, then create VpnGateway, then create VpcGatewayAttachment portion of code in question:
    Copy code
    vgw = awscc.ec2.VpnGateway(
            "vgw",
            tags=VPC.build_tags(
                config.common_tags,
                config.virtual_private_gateway.tags,
                Name=f"{config.name}-vgw",
            ),
            amazon_side_asn=config.virtual_private_gateway.asn,
            type="ipsec.1",
            **config.virtual_private_gateway.extra_args,
            opts=ResourceOptions(parent=self.vpc),
        )
        attachment = awscc.ec2.VpcGatewayAttachment(
            "vgw",
            opts=ResourceOptions(parent=vgw),
            vpc_id=self.vpc.id,
            vpn_gateway_id=vgw.id,
        )
    so far so good, resources are created successfully. Then, I update ASN on VpnGateway, which should trigger replacement. here is what diff shows:
    Copy code
    └─ aws-native:ec2:Vpc                                 vpc                                    
 +-        ├─ aws-native:ec2:VpnGateway                       vgw                        replace     [diff: ~amazonSideAsn]
 ~         │  ├─ aws-native:ec2:VpcGatewayAttachment          vgw                        update      [diff: ~vpnGatewayId]
    which is correct. however, if fails
    Copy code
    aws-native:ec2:VpnGateway (vgw):
    error: operation DELETE failed with "GeneralServiceException": Vpn Gateway is not in the correct state (Service: Ec2, Status Code: 400, Request ID: 34ada6f3-5619-4a5e-8dda-6d82916501ff) (SDK Attempt Count: 1)
    because it must delete 
    VpcGatewayAttachment
    first. how do I signal to pulumi that before attempting to delete 
    aws-native:ec2:VpnGateway
    , it must delete its children, e.g. 
    aws-native:ec2:VpcGatewayAttachment
    ? I am pretty sure TF does it correctly. I tried playing around with 
    deleted_with
    but I couldn't achieve the outcome I am looking for.
    b
    l
    • 3
    • 4
  • r
    Hi, is this a bug or I'm doing something wrong: for the command: pulumi config --non-interactive set --plaintext --path "custom:sqlDatabase.maxSizeBytes" '-1' -s scus.stg I do get error message: error: unknown shorthand flag: '1' in -1 I do suppose you wrongly parse the value - or should I try something else? all I have tried ( "`"-1`"", "-1" ) has the same result. Only what works is: " -1" but the result is not what I do want - in configuration is:
    Copy code
    maxSizeBytes: ' -1'
    instead of just -1
    e
    • 2
    • 3