508 questions
0
votes
0
answers
52
views
How to setup AWS KMS with pulumi for log group?
I'm having hard time getting my KMS key working for my log group.
Right now I got this error in pulumi up:
policy: operation error KMS: PutKeyPolicy, [some other informations] ...
0
votes
0
answers
31
views
Unable to transform request AWS Gateway VTL
I have the following pulumi go code which uses AWS Integration to start a StepFunction.
func DealRequestTemplate(stateMachineArn pulumi.StringInput) pulumi.StringInput {
return pulumi.Sprintf(`#...
0
votes
0
answers
36
views
How can we deploy serverless template Repos from Runpod repos using Pulumi in @runpod-infra/pulumi?
In the serverless section from Runpod console, there is a section called Ready-to-Deploy Repos with convenient templates that comes from github, such as https://console.runpod.io/hub/runpod-workers/...
-1
votes
0
answers
154
views
How to properly setup argocd behind a proxy
I have been trying to setup Argocd with EKS, helm chart and AWS ALB behind a proxy( nginx ingress) and it not working at all. After deployment to eks cluster, if i do port-forawarding, the UI works ...
0
votes
1
answer
56
views
pulumi up is not using the defined quota project to apply changes
Using pulumi to define a SecurityProfile in GCP (org-level object), I have:
const globalSecurityPolicy = new gcp.networksecurity.SecurityProfile(
'default-sp',
{
name: `${args....
0
votes
0
answers
31
views
Minimal pulumi infra from Azure Devops
I'm trying to create a minimal pulumi task from AzureCLI task inside a release pipeline. It works locally, but crashes from Azure Devops ubuntu agent.
#!/bin/bash
cat > __main__.py <<EOF
...
-1
votes
1
answer
54
views
Azure Function deployment with Azure SignalR Service in Pulumi
I have a Pulumi deployment that deploys Azure function app. That works without issues. Due to new requirement I need to now add Azure SignalR Service that will communicate with the existing Azure ...
0
votes
1
answer
61
views
pulumi failure trying to create google cloud certificate authority (python)
I'm hitting a wall trying to gcp create certificate authority in pulumi (python). The issue happens trying to create the authority, I get a 404 that it cannot find the authority (that it is creating). ...
0
votes
0
answers
71
views
Deploy AWS Fargate Service despite task protection
I am running an AWS Fargate Service with a Task that hasa desired count of 1. While the container is running it is polling an SQS queue for messages to process. I have set up Autoscaling depending on ...
0
votes
0
answers
44
views
Create SQL DB user without exposing database during IaC depoyment
I have and Azure DevOps CD pipeline, that deploys Azure Infrastructure (using Pulumi).
It creates and Azure Database for PostgreSQL.
I want to create SQL User (other than existing superadmin) in ...
0
votes
0
answers
68
views
Create Logic App Standard using Pulumi Azure Native
I am new to Infrastructure As Code (IAC). I have created and configured the Logic App Standard with 2 workflows in it using Azure Portal. But I was asked to create them using IAC. My requirement is to ...
0
votes
1
answer
122
views
Pulumi Dynamic Provider with azure-devops-node-api Fails Due to Serialization Error
I am writing a Pulumi dynamic resource provider to control Azure DevOps project pipeline settings using the azure-devops-node-api client. Here's my provider code:
import * as pulumi from '@pulumi/...
0
votes
1
answer
61
views
Pulumi Snowflake GrantPrivilegesToAccountRole Error
Getting an issue when trying to upgrade our system from legacy Pulumi Snowflake Grants (StageGrant) to using the newer GrantPrivilegesToAccountRole. I'm seeing an issue when trying to provision ...
0
votes
0
answers
84
views
Prevent secrets from ending up in the Pulumi statefile
I am using Pulumi to manage some resources in Snowflake. This requires providing Snowflake credentials to Pulumi, so that Pulumi can authenticate with Snowflake act on my behalf.
I am using the DIY ...
0
votes
1
answer
242
views
Secrets management in IaC solutions for the cloud
I go to great lengths to protect the secrets that my infrastructure relies on (in AWS) through, SCP's, resource policies for KMS and SecretsManager, logging and monitoring and WORM backup strategies. ...
0
votes
0
answers
112
views
GitHub Actions, Pulumi GCP, Artifact Registry and Docker - Cannot perform an interactive login from a non TTY device
There are dozens of Q/A in Stack Overflow. I've applied all the solutions out there, but I keep getting the same error:
Cannot perform an interactive login from a non TTY device
For context:
I'm ...
-1
votes
2
answers
256
views
Run script after VM creation just once
I'm using Pulumi on GCP, and I'd like to specify a bash script that would run just once after the VM is created. I saw that compute.Instance has the parameter metadata_startup_script, but IIUC it will ...
0
votes
0
answers
38
views
SST local stage incorrectly routes Lambda invocations across different developer machines
Issue:
When multiple developers run sst start --stage local, SST's Live Lambda Development sometimes routes function invocations to another developer’s machine instead of running locally.
Steps to ...
0
votes
1
answer
277
views
Pulumi stacks (which exist) not appearing in `pulumi stack ls -a`
I've just pulled an IaC repo with Pulumi code, and I'm trying to select my default stack, but when I run pulumi stack ls -a no stacks are listed:
% pulumi stack ls --all ...
0
votes
1
answer
73
views
Pulumi Terraform Provider reports required field missing that is definetely passed on
I'm trying to use the Pact Terraform Provider with Pulumi using the Terraform Provider for Pulumi. Setup worked fine, but as soon as I'm configuring anything else than the Provider, I'm getting an ...
0
votes
1
answer
76
views
Download Pulumi Packages from mirror
I'm trying to use Pulumi packages within a GitLab CI that doesn't have direct access to GitHub, however it may use a corresponding mirror to download the files. Currently the install command fails, ...
-1
votes
1
answer
113
views
Cannot find module 'spdx-license-ids' when running tests with Jest and Pulumi
I'm encountering an error when trying to run a test with Jest in a project that uses Pulumi.
Here's the error stack:
Cannot find module 'spdx-license-ids' from
'../../node_modules/spdx-expression-...
3
votes
1
answer
163
views
Recursive install of node_modules in Pulumi resources
I have the following project I am using Pulumi to manage my various cloud run jobs. I am trying to set up all my package management to use a tool like mise for each of development. The problem is each ...
0
votes
1
answer
76
views
Pulumi and Docker - Can't find the image when I'm passing the path relative to the context
I'm currently using Pulumi (Go) to handle the infrastructure. I'm trying to deploy to Google Cloud's Artifact Registry with a pre-built Docker image, but I'm having issues with Docker finding the ...
0
votes
0
answers
64
views
Configuring AWS Lambda with EFS in Pulumi
I have been struggling for days trying to get a deployment of Lambda+EFS that actually works
I am using Pulumi in Python
Everything I've tried results in:
Calling the invoke API action failed with ...
0
votes
1
answer
241
views
When pushing to ECS, Docker image errors out with module not found error
I am trying to get a a Docker image hosted on on AWS ECS. I am able to have a successful local build where the image is able to run without any issues.
When I upload the image to ECS I keep getting ...
1
vote
2
answers
230
views
how to create awsx.lb.ApplicationLoadBalancer in a non-default VPC?
I am trying to create a load balancer in some specific VPC, for example:
export const vpc = new awsx.ec2.Vpc(
`ls-vpc-${stackName}`,
{
numberOfAvailabilityZones: 2,
cidrBlock: '10.0.0.0/16'...
0
votes
1
answer
100
views
Exposing AWS Elasticache Redis Instance Publicly with Pulumi Fails
Question: I'm trying to expose an AWS Elasticache Redis instance publicly using Pulumi. The Redis setup uses the @pulumi/aws package, and I'm working within a VPC configured with public subnets, an ...
0
votes
1
answer
135
views
Pulumi Azure Native Provider: Error 404 when Adding WebAppApplicationSettings to Static Web App (SWA)
I'm working with the Pulumi Azure Native Provider to deploy infrastructure, and I'm encountering an issue when trying to add WebAppApplicationSettings to an Azure Static Web App (SWA). The Static Web ...
-1
votes
1
answer
48
views
Pulumi - Java - Unifi Provider
I'am wondering if Pulumi supports the unifi Provider with JAVA properly.
There are Java examples in the Pulumi registry - Pulumi Registry Unifi.
Unfortunately there is no specific unifi maven ...
0
votes
1
answer
85
views
Pulumi permissions for Python demo on AWS?
I am trying Pulumi and going through the tutorial to deploy a static website on AWS.
https://www.pulumi.com/docs/iac/get-started/aws/
There is no mention of the permissions to give via IAM (currently ...
0
votes
1
answer
364
views
Why does Pulumi give this error message that says terraform apply?
I am trying to run pulumi destroy on a cloud run resource that does not have delete protection. But I am getting the following error:-
cannot destroy service without setting deletion_protection=false ...
1
vote
0
answers
90
views
Pulumi: Possible to get a resource and update it without importing?
I'm using Pulumi to manage some resources in AWS. This really applies to ANY resource created with pulumi but I'll use a security group for this example:
There is a database-sg security group which is ...
1
vote
0
answers
373
views
CORS Issue with Dynamic Subdomains in Spring Boot Application
I am facing an issue with CORS in my Spring Boot application. I have several domains from which I can upload files without any problem:
http://localhost:4200
https://mydomain1.com
https://mydomain2....
-1
votes
1
answer
65
views
Dynamo Pulumi setup not accepting L list data type
I am attempting to set up a DynamoDB table via Pulumi and thought everything was fine after reviewing official documentation, however I am getting a warning message about my data type not being valid.
...
0
votes
1
answer
92
views
EventBridge Rule does not work when created via Pulumi
I need to create EventBridge Rule detecting stopped ECS Task and sending info to SNS Topic.
When I create the Rule manually, it works
When I create the same rule via Pulumi, it does not work - it ...
0
votes
1
answer
110
views
OpenStack Pulumi integration - Cannot connect due to apparently lacking parameter in YAML file
I am dealing with a strange situation in configuring a Pulumi deployment in order to maintain a IaC for an OpenStack environment.
The deployment is very simple as below, I started from Python:
import ...
0
votes
0
answers
226
views
Deployment of Microsoft Entra Domain Services failes with internal error via Pulumi
I would like to set up an Entra Domain Service with Pulumi. The configuration of the domain service includes the minimum necessary configurations such as domain_name, domain_service_name, ...
0
votes
1
answer
88
views
Find an azure resource group by wildcard using pulumi
I'm using pulumi with azure-native and not finding a way that I can query the subscription for resource groups using a wildcard.
The problem I'm trying to solve is needing to get resource keys (eg: ...
0
votes
1
answer
476
views
Pulumi: Preview failed: 1 error occurred: * configuring Terraform AWS Provider: no valid credential sources for Terraform AWS Provider found
I have this issue where preview keeps failing when I try to run command to import a resource into an existing pulumi stack.
Here's the error
Type Name Plan Info
pulumi: pulumi:...
3
votes
0
answers
139
views
Formatting Pulumi Automation API Stdout as JSON
I'm using the Pulumi Automation API in Go, and I want to format the standard output (stdout) as JSON. Currently, I handle stdout like this:
stdoutStreamer := optup.ProgressStreams(os.Stdout)
_, err = ...
0
votes
1
answer
321
views
Pulumi not using service account even though I set it as in official tutorial
I have set my GCP service account keys as instructed in this tutorial:
pulumi --config-file stacks/Pulumi.dev-core.yaml \
-s dev-core config \
set gcp:credentials ./stacks/dec.sa-pulumi-dev-keys....
1
vote
1
answer
106
views
Migrating from pulumi to terraform using azure, subnet Id's starting with '/' cause resources always to be updated when they should not
Since a migration from pulumi to terraform, every time the terraform script is applied azure apps with a subnet configured get updated.
It seems pulumi created them with a / in front of their ids, ...
0
votes
1
answer
448
views
Pulumi Azure devops piple getting am error - obtain subscription() from Azure CLI
I am trying to create a simple azure devops pipeline to execute a pulumi preview, however, I am getting a
error: obtain subscription() from Azure CLI: parsing json result from the Azure CLI: waiting ...
0
votes
1
answer
188
views
Pulumi - Errors on NodeJS14 - trying to switch to NodeJS21 - unable to compile TypeScript
I'm a first time user of Pulumi. I was trying a Saas Template from here: https://github.com/SimonHoiberg/saas-template
First error on "pulumi up"
aws:lambda:Function (post-confirmation-fn):...
3
votes
0
answers
195
views
How to add Addons to EKS with Pulumi
I'm creating an EKS cluster with Pulumi Crosswalk:
// vpc creation skipped
cluster, err := eks.NewCluster(ctx, ClusterName, &eks.ClusterArgs{
Name: ...
0
votes
0
answers
98
views
Pulumi and Golang to apply a subscription manifest onto a OpenShift Cluster
I am a newbie in using Pulumi. I am trying to use module github.com/pulumi/pulumi-kubernetes/sdk/v4/go/kubernetes/operators and when I do go get github.com/pulumi/pulumi-kubernetes/sdk/v4/go/...
0
votes
1
answer
998
views
Should I commit Pulumi stack files to git?
I'm starting the process of re-implementing our infrastructure-as-code with Pulumi and I'm seeing the different stack configuration files (dev/test etc) in my git project. The stack config files ...
0
votes
1
answer
966
views
Deploy AWS stack using pulumi error: no stack named 'dev' found
I'm trying to deploy a stack using pulumi in my AWS account. My deploy.yml looks like this:
name: Pushes Glue Scripts to S3
# Controls when the workflow will run
on:
# Triggers the workflow on push ...
1
vote
1
answer
145
views
Pulumi - S3 - How can I attach a AccesspointPolicy to a Accesspoint when the policy depends on it
I know I can create a Accesspoint and attach a policy like this:
exampleAccessPoint, err := pulumiS3.NewAccessPoint(ctx, accessPointName, &pulumiS3.AccessPointArgs{
AccountId: pulumi....