506 questions
0
votes
0
answers
57
views
How to setup AWS KMS with pulumi for log group?
I'm having hard time getting my KMS key working for my log group.
Right now I got this error in pulumi up:
policy: operation error KMS: PutKeyPolicy, [some other informations] ...
0
votes
0
answers
31
views
Unable to transform request AWS Gateway VTL
I have the following pulumi go code which uses AWS Integration to start a StepFunction.
func DealRequestTemplate(stateMachineArn pulumi.StringInput) pulumi.StringInput {
return pulumi.Sprintf(`#...
0
votes
0
answers
38
views
How can we deploy serverless template Repos from Runpod repos using Pulumi in @runpod-infra/pulumi?
In the serverless section from Runpod console, there is a section called Ready-to-Deploy Repos with convenient templates that comes from github, such as https://console.runpod.io/hub/runpod-workers/...
0
votes
1
answer
58
views
pulumi up is not using the defined quota project to apply changes
Using pulumi to define a SecurityProfile in GCP (org-level object), I have:
const globalSecurityPolicy = new gcp.networksecurity.SecurityProfile(
'default-sp',
{
name: `${args....
0
votes
0
answers
33
views
Minimal pulumi infra from Azure Devops
I'm trying to create a minimal pulumi task from AzureCLI task inside a release pipeline. It works locally, but crashes from Azure Devops ubuntu agent.
#!/bin/bash
cat > __main__.py <<EOF
...
-1
votes
1
answer
54
views
Azure Function deployment with Azure SignalR Service in Pulumi
I have a Pulumi deployment that deploys Azure function app. That works without issues. Due to new requirement I need to now add Azure SignalR Service that will communicate with the existing Azure ...
0
votes
1
answer
61
views
pulumi failure trying to create google cloud certificate authority (python)
I'm hitting a wall trying to gcp create certificate authority in pulumi (python). The issue happens trying to create the authority, I get a 404 that it cannot find the authority (that it is creating). ...
0
votes
0
answers
72
views
Deploy AWS Fargate Service despite task protection
I am running an AWS Fargate Service with a Task that hasa desired count of 1. While the container is running it is polling an SQS queue for messages to process. I have set up Autoscaling depending on ...
0
votes
0
answers
44
views
Create SQL DB user without exposing database during IaC depoyment
I have and Azure DevOps CD pipeline, that deploys Azure Infrastructure (using Pulumi).
It creates and Azure Database for PostgreSQL.
I want to create SQL User (other than existing superadmin) in ...
0
votes
0
answers
68
views
Create Logic App Standard using Pulumi Azure Native
I am new to Infrastructure As Code (IAC). I have created and configured the Logic App Standard with 2 workflows in it using Azure Portal. But I was asked to create them using IAC. My requirement is to ...
0
votes
1
answer
125
views
Pulumi Dynamic Provider with azure-devops-node-api Fails Due to Serialization Error
I am writing a Pulumi dynamic resource provider to control Azure DevOps project pipeline settings using the azure-devops-node-api client. Here's my provider code:
import * as pulumi from '@pulumi/...
0
votes
1
answer
61
views
Pulumi Snowflake GrantPrivilegesToAccountRole Error
Getting an issue when trying to upgrade our system from legacy Pulumi Snowflake Grants (StageGrant) to using the newer GrantPrivilegesToAccountRole. I'm seeing an issue when trying to provision ...
0
votes
0
answers
86
views
Prevent secrets from ending up in the Pulumi statefile
I am using Pulumi to manage some resources in Snowflake. This requires providing Snowflake credentials to Pulumi, so that Pulumi can authenticate with Snowflake act on my behalf.
I am using the DIY ...
0
votes
1
answer
244
views
Secrets management in IaC solutions for the cloud
I go to great lengths to protect the secrets that my infrastructure relies on (in AWS) through, SCP's, resource policies for KMS and SecretsManager, logging and monitoring and WORM backup strategies. ...
0
votes
0
answers
112
views
GitHub Actions, Pulumi GCP, Artifact Registry and Docker - Cannot perform an interactive login from a non TTY device
There are dozens of Q/A in Stack Overflow. I've applied all the solutions out there, but I keep getting the same error:
Cannot perform an interactive login from a non TTY device
For context:
I'm ...