most-lighter-95902
03/11/2022, 3:02 AMName: developer-binding-jobs-flow
Labels: <http://app.kubernetes.io/managed-by=pulumi|app.kubernetes.io/managed-by=pulumi>
Annotations: <none>
Role:
Kind: ClusterRole
Name: DeveloperRole
Subjects:
Kind Name Namespace
---- ---- ---------
ServiceAccount default jobs-flow
most-lighter-95902
03/11/2022, 3:03 AMdefault
in jobs-flow
should have the permission to create a Job in jobs-resource
namespace as well but I’m getting this error during the Automation API run:most-lighter-95902
03/11/2022, 3:03 AMjobs.batch is forbidden: User "system:serviceaccount:jobs-flow:default" cannot create resource "jobs" in API group "batch" in the namespace "jobs-resource"
most-lighter-95902
03/11/2022, 3:04 AMmost-lighter-95902
03/15/2022, 9:48 PM@pulumi/eks
library) but I’m getting this error: Unhandled exception: Error: Could not find aws CLI for EKS. See <https://github.com/pulumi/pulumi-eks> for installation instructions
most-lighter-95902
03/15/2022, 9:49 PMmost-lighter-95902
03/15/2022, 10:45 PMmost-lighter-95902
03/16/2022, 6:00 PMconst { accountId: awsAccountId } = await aws.getCallerIdentity({})
in the index.ts
of the Automation API program gives me the wrong account. The config value has AWS_ACCESS_KEY_ID
and AWS_SECRET_ACCESS_KEY
set correctly using client’s aws credentials, but the account id I’m receiving from the code is my own account id, not the client’s account id?most-lighter-95902
03/16/2022, 6:01 PMmost-lighter-95902
03/16/2022, 6:01 PMexport const createPulumiProgram = (args: CreatePulumiProgramArgs) => async () => {
const { stack, inputs } = args
// Should return client's account id since aws credentials in config
// is set to client's aws credentials, but returns my own account id
const { accountId: awsAccountId } = await aws.getCallerIdentity({})
}
proud-pizza-80589
03/16/2022, 9:59 PMmost-lighter-95902
03/18/2022, 2:05 AMno resource plugin 'eks' found in the workspace or on your $PATH
.most-lighter-95902
03/18/2022, 2:05 AMmost-lighter-95902
03/18/2022, 2:05 AMmost-lighter-95902
03/26/2022, 5:09 PMmost-lighter-95902
03/26/2022, 5:09 PMconst pulumiSecretName = `pulumi-credentials`
let pulumiSecret = k8s.core.v1.Secret.get(pulumiSecretName, `${namespaceName}/${pulumiSecretName}`)
console.log('pulumiSecret in stacks/job-flow.ts', pulumiSecret)
if (!pulumiSecret) {
pulumiSecret = new k8s.core.v1.Secret(pulumiSecretName, {
metadata: {
name: pulumiSecretName,
namespace: namespaceName,
},
stringData: {
'PULUMI_ACCESS_TOKEN': pulumiAccessToken,
}
}, { parent: this })
}
most-lighter-95902
03/26/2022, 5:10 PM${namespaceName}/${pulumiSecretName}
doesn’t exist, it will just error out and fail during Automation API runmost-lighter-95902
03/26/2022, 5:11 PMmost-lighter-95902
03/26/2022, 5:12 PMwet-soccer-72485
03/27/2022, 9:26 PMhandsome-butcher-2572
03/28/2022, 6:43 PMpurple-lion-34129
03/29/2022, 1:29 PMpurple-lion-34129
03/29/2022, 1:29 PMlemon-lamp-41193
03/29/2022, 9:35 PMproud-pizza-80589
03/31/2022, 5:51 AMwet-soccer-72485
04/06/2022, 6:36 AMbitter-psychiatrist-55958
04/07/2022, 8:27 AMbitter-psychiatrist-55958
04/07/2022, 8:33 AMquaint-hair-91883
04/12/2022, 8:17 AMpulumi login s3://……
? The tool I’m writing needs to be portable.wet-gigabyte-99270
04/12/2022, 9:31 AMwet-gigabyte-99270
04/12/2022, 9:31 AMbored-oyster-3147
04/12/2022, 12:54 PMwet-gigabyte-99270
04/12/2022, 12:56 PMbored-oyster-3147
04/12/2022, 12:58 PMbored-activity-40468
04/12/2022, 10:23 PM