https://pulumi.com logo
Join Slack
Powered by
# general
  • c
    I posted this in the dotnet channel but it's also a more general question that I think applies to pulumi as a whole: https://pulumi-community.slack.com/archives/CQ2QFLNFL/p1756322646789759 The general version is: can you tie a resource and an immediate "get" on that resource together in such a way that the "get" isn't known (and thus isn't called) unless pulumi knows that the resource definitely exists? EDIT: This has been resolved, the issue was that the Endpoint itself was returning the wrong error code when the resource didn't exist. I was thrown off because the URL it was calling was identical to the GetSecret call I was attempting to (not) make.
    • 1
    • 4
  • m
    Hey folks, You are using Pulumi and want to share your story, lessons learned, or a cool project? Our next Berlin Pulumi User Group is on September 11 and we are looking for community speakers. It doesn’t matter if it’s a quick lightning talk or a full session. This is your chance to inspire others, show what you’ve built, and connect with the community. Check out the event here: https://www.meetup.com/berlin-pulumi-user-group/events/310227212/?slug=berlin-pulumi-user-group&eventId=310227212 Ping me if you’d like to speak in the #C09056S6091 channel or DM. Would love to have you on stage.
  • f
    Hi everyone! is there an equivalent of pulumi state delete in pulumi's automation api? Thanks!
    l
    e
    • 3
    • 3
  • d
    Are there any migration docs for 
    @pulumi/cloudflare
    going from v5 to v6?
    s
    • 2
    • 2
  • r
    Hey, is renaming the branch from master to main a topic of discussion or ever has been? - I'd like to keep this non-political if it's the way it is that's ok
    a
    b
    s
    • 4
    • 4
  • e
    Hi Can you explain, concurrent updates means we can do updates to the same stack or update multiple stack ?
    r
    • 2
    • 2
  • c
    Hi Everyone. Is anyone actively working on a Pulumi implementation of Azure Landing Zones, subscription vending, and AVM-aligned modules? Microsoft publishes these in Bicep/Terraform, but I haven’t found a curated Pulumi library.
    s
    • 2
    • 2
  • l
    hi all, I'm playng with the pulumi kubernetes operator. In my use case we want to have an other system trigger a "sync" so we don't really need continous drift detection. I was a little surprised to see that the pulumi operator spins up a pod that just seems to sit there. For us that would mean wasted resources as we're talking a large number of stacks. I was hoping it'd be possible for the operator to spin up the "workspace pod" and do a "pulumi up" on demand rather than continously. Anyone know how it's meant to behave and whether it's possible to get rid of the pod when there's no need for it?
    s
    • 2
    • 2
  • m
    Hi All, I am trying to create oidc issuer. everytime I select oidc issuer, I am getting 404. Is it down or i am alone getting this error. Could someone please check from your end. thank you.
    s
    • 2
    • 7
  • g
    Hi, I want to migrate from Terraform to Pulumi, mainly using the Automation API. I saw that Pulumi can use local Terraform modules. Can I use a local Terraform module within the Automation API? Are there any examples?
    m
    • 2
    • 1
  • f
    hey, is there any resource for pulumi specific LLM instruction files that help with coding? Like 
    CLAUDE.md
    , 
    .cursor/rules
    or 
    .github/instructions
    ?
    s
    m
    • 3
    • 5
  • p
    hello! does running 
    pulumi up --refresh --run-program
    make any changes before confirming?
    s
    • 2
    • 3
  • o
    👋 I recently migrated to https://www.pulumi.com/registry/packages/docker-build/ - but it appears that this resource is storing ECR creds in state, and they seem to expire - is this a user error type thing? or one of those issues where a refresh is required to force a creds flush from state before running up? as I wrote this, i came upon --run-program, which might help with the issue 👀 but posting here anyway incase this helps others, or im on the wrong track heres the up command (run via github actions + 
    pulumi/actions@v6
    ) 
    pulumi preview --refresh --exec-agent pulumi/actions@v6 --color auto --exec-kind auto.local --event-log /tmp/automation-logs-preview-jPRIR1/eventlog.txt --stack dev --non-interactive
    heres one error
    Copy code
    docker-build:index:Image (backend-base):
      warning: failed to get manifest <REMOVED>.<http://dkr.ecr.us-west-2.amazonaws.com/<name>:<tag>@<sha|dkr.ecr.us-west-2.amazonaws.com/<name>:<tag>@<sha>>: request failed: unauthorized [http 403]: {"errors":[{"code":"DENIED","message":"Your authorization token has expired. Reauthenticate and try again."}]}
    This was running fine last week, but the long weekend exposed this interesting issue. FWIW, ive had the same problems with RDS root creds noted here
    l
    • 2
    • 5
  • m
    ^ I forgot to update this. But better late than never, but Cam is on community rotation this week.
  • e
    hey all o/ I'm developing my custom pulumi provider for an internal service, and I can't get my Delete() function to be called. Do I need to set something up specifically for it to work? What am I missing?
    m
    • 2
    • 7
  • b
    Hey 👋 Facing an issue where Pulumi forces a replacement of Docker images on each new deployment without any changes done to the deployment code/dockerfile. Pulumi output just shows 
    [diff: ~provider]
    - we're using 
    awsx.ecr.Image
    . The issue started popping up ~last week. No changes have done to this part of our codebase recently, causing us to question whether the issue could be on Pulumi side 👀
    👀 1
    b
    b
    • 3
    • 4
  • b
    Something seems to have changed with how configs are passed in yaml. Since 3.192.0 there has been an error thrown 
    Property access is only allowed on Resources and Objects
    when you attempt to use maps like so in the stack file
    Copy code
    project-name:foo:
   bar: test-value
    and use in the yaml program like so
    Copy code
    blah:
  type: ...
  properties:
    something: ${foo.bar}
    👀 1
    • 1
    • 3
  • b
    We have found ourselves in a situation where we have an unsatisfactory solution, but we wanted to know if there is a better, more elegant alternative. • We have a project containing shared infrastructure, with stacks allocated per environment (UAT/PROD). • We also have projects containing infrastructure per partner/environment (e.g., PARTNER-A-UAT, PARTNER-B-UAT, etc.), and they have stack references to the shared infrastructure (Ex, a VPC in the shared environment is referenced by partner/environment to add a subnet). • We manage triggering Pulumi previews and updates in CircleCI, where the workflow builds out the shared infra, then the partners. Which works fine in the full CI/CD workflow • We want to be able to run the shared and partner lower env previews for Pull Requests in GitHub. The problem is that without running the actual Pulumi apply in the shared environment and adding, for example, the VPC referenced in the partner stack, it will fail. Our hacky solution is to: 1. Are we running the code currently in a 
    preview
    ? 2. If so, mock all stack references to the shared project. Is there a better way to do this?
    👀 3
    m
    w
    • 3
    • 18
  • b
    Hello Pulumi Community! I am on the community rotation this week and will be going through and responding to questions
    👋🏻 1
    👋 4
  • b
    Feel free to DM me if you have a question!
  • s
    Hi community! Is there a tool in the Pulumi ecosystem similar to Terragrunt that helps coordinate multiple Pulumi projects—for example, handling init, destroy, and managing dependencies between them? Would the Pulumi Automation API be the right comparison here?
    l
    • 2
    • 3
  • s
  • g
    Anyone here using Fargate that would know what I'm doing wrong? Not sure if it's an AWS issue or a Pulumi issue. Getting:
    Copy code
    awsx:ecs:FargateTaskDefinition resource 'my-resource' has a problem: Requested resources exceed the maximum allowed for Fargate. Requested: 17 vCPU and 2GB. Max: 16 vCPU and 120GB.
    For:
    Copy code
    import { ecs } from '@pulumi/awsx/types/input'
import TaskDefinitionContainerDefinitionArgs = ecs.TaskDefinitionContainerDefinitionArgs

const serviceContainerDefinition: TaskDefinitionContainerDefinitionArgs = {
// ...
        cpu: 16384,
        memory: 32768,
    }
    Should be a valid config according to this: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#task_size
    m
    • 2
    • 2
  • a
    Is there any way to extract the Duration of a pulumi update/destroy (through automation api) from the output? (seeing that the duration is only part of the standard output so something along the lines 
    pulumi_output = stack.up(on_output=print)
    or do I need to parse the output in a callback for achieving this?
  • i
    I’m having some issues trying to connect my claude code to the pulumi mcp. I am logged into pulumi, but is it expecting other variables in the environment? I get 
    pulumi: npx @pulumi/mcp-server@latest - ✗ Failed to connect
    , the current CLI is 
    3.194.0
    .
  • b
    Hi All. I recently started using Pulumi and accidentally created both a personal and an organization account for myself. Now, the organization account I created is showing that the free trial has ended. My company, Modivcare, already has an existing organization account that we use, and I’m trying to switch to that account. However, when I go to the settings to switch, I can’t seem to find it listed. Any help would be appreciated!
    l
    • 2
    • 1
  • i
    Hello, Is there any way to get the Github environment public key (replicating this https://docs.github.com/en/rest/actions/secrets?apiVersion=2022-11-28#get-an-environment-public-key in Pulumi)? The documentation, what little there is, is useless and the Pulumi "AI" just made me waste an hour trying to implement it's hallucination passed of as a solution.
    l
    • 2
    • 1
  • m
    Hi my new role uses Pulumi across Python/Node where each repo has its own decoupled infra. I am moving to create a monorepo for all our infrastructure. I come from a Terraform background and was wondering what is the recommended way to do it? Can a monorepo with Pulumi infrastructure exists across different languages? I have a strict requirement that my platform team creates reusable modules across things such as AWS S3/RDS/etc. Is this possible with Pulumi? Are there any examples showing how this works?
    a
    l
    m
    • 4
    • 4
  • p
    Hi everyone, Is there some mechanism that would allow me to run my code on error? Here're some examples of what I need: Let's say an azure resource provider runs into some errors like: • 429 rate limit exceeded • 409 already exists • a random issue I dont yet know how to handle That I want to react on by: • requesting and logging the remaining rate limits • logging the resource ID, URN and parent to the filesystem so that I can import the resource before trying again (which happens to be needed for example in case of some intermittent issues on Azure) • log it to some analytical tool
    l
    • 2
    • 3
  • p
    Hi all, I have a bit of a wild issue (at least to me) and not found any kind of resource about it yet. We are using Pulumi to manage the state of our 3 environments (dev, staging, prod) and the staging envrionment is always slow. Slow meaning 4+ minutes for previews and updates while dev and prod are done in 20ish seconds or faster. It doesn't matter which operation I am running, it doesn't matter which resource is updated (or no resource at all). I have enabled debug logs and compared a 
    pulumi preview
    on prod vs staging (with no changes in each of them) and found things like     • ~On staging it's doing LOTS of 
    <https://api.pulumi.com/api/stacks/[COMPANY> NAME]/[COMPANY NAME]/staging/decrypt
    calls at the start, specifically there's 2 blocks of lots of these calls which roughly add 2 minutes each (so this is the issue) • Staging has 50 resources less than prod but is slower • The log files on staging is 20MB smaller (just interesting I thought) Does anyone have an idea on what this could be / how to debug this more? It's starting to drive us nuts I am an absolute idiot, for some reason staging didnt have our own Azure KV as secrets prvider while the other stacks had it. I'll leave this here because others may be as stupid and find this but god damn this is stupid
    😅 1
    l
    • 2
    • 1