better-rainbow-14549
03/08/2019, 2:19 PMgentle-diamond-70147
03/08/2019, 2:29 PMcold-piano-21918
03/08/2019, 6:43 PMimportant-leather-28796
03/08/2019, 8:20 PMdependsOn
everywhere? We have multiple stacks e.g. identity, infrastructure, app. In the app
package, we may have multiple stacks deploying to the same cluster from the infrastructure
stack. So in the app
, we want to first ensure a stack-named k8s namespace as a prerequisite for all other components. Do we need to use dependsOn
for everything or is there a simpler way to just make sure the namespace is created first?important-leather-28796
03/08/2019, 8:32 PMwhite-balloon-205
full-dress-10026
03/08/2019, 9:34 PMaws.iam.RolePolicy
and aws.iam.Policy
? Does RolePolicy
automatically do the policy attachment?full-dress-10026
03/08/2019, 9:35 PMimportant-leather-28796
03/08/2019, 10:13 PMno resource plugin 'af'
and not sure how I’m introducing it. I’ve created a CustomResource
, is it pulling it off the beginning of the name for it?incalculable-diamond-5088
03/08/2019, 10:42 PMconst samlProvider = new aws.iam.SamlProvider('saml_provider', {...})
const oktaAssumePolicy = pulumi.output(aws.iam.getPolicyDocument({
statements: [{
principals: [{
type: "Federated",
identifiers: [samlProvider.arn]
}]
}]
}))
Note the statements->principals->identifiers
proud-artist-4864
03/09/2019, 4:50 AMwitty-gigabyte-30920
03/09/2019, 5:30 PMlemon-greece-30910
03/10/2019, 4:50 PMkubeconfig
property.
const cluster = new eks.Cluster(`${name}-cluster`, {
vpcId: vpc.vpcId,
subnetIds: vpc.subnetIds,
desiredCapacity: 1,
minSize: 1,
maxSize: 3,
// storageClasses: "gp2",
deployDashboard: true,
})
export const kubeconfig = cluster.kubeconfig
the output gives me the server address in the kubeconfig json structure: kubeconfig: { clusters: [ { cluster: { server: <servername here> } ] }
... but if i go to the URL, it gives me the following response:
{
"kind": "Status",
"apiVersion": "v1",
"metadata": {},
"status": "Failure",
"message": "forbidden: User \"system:anonymous\" cannot get path \"/\"",
"reason": "Forbidden",
"details": {},
"code": 403
}
can anyone see what i am doing wrong here?incalculable-diamond-5088
03/10/2019, 9:51 PMMethod handler checkConfig for /pulumirpc.ResourceProvider/CheckConfig expected but not provided
Method handler diffConfig for /pulumirpc.ResourceProvider/DiffConfig expected but not provided
unable to recognize "/var/folders/28/z072xy4d5970vkd6l3vb_r780000gn/T/tmp-32396RlquTqkLiKdX.tmp": Unauthorized
unable to recognize "/var/folders/28/z072xy4d5970vkd6l3vb_r780000gn/T/tmp-32396RlquTqkLiKdX.tmp": Unauthorized
unable to recognize "/var/folders/28/z072xy4d5970vkd6l3vb_r780000gn/T/tmp-32396RlquTqkLiKdX.tmp": Unauthorized
unable to recognize "/var/folders/28/z072xy4d5970vkd6l3vb_r780000gn/T/tmp-32396RlquTqkLiKdX.tmp": Unauthorized
unable to recognize "/var/folders/28/z072xy4d5970vkd6l3vb_r780000gn/T/tmp-32396RlquTqkLiKdX.tmp": Unauthorized
cuddly-lizard-88530
03/11/2019, 4:04 AMcuddly-lizard-88530
03/11/2019, 4:05 AM~/.pulumi/stacks/
.cuddly-lizard-88530
03/11/2019, 4:07 AMfew-processor-86645
03/11/2019, 8:13 AMbetter-rainbow-14549
03/11/2019, 9:45 AMbetter-rainbow-14549
03/11/2019, 9:45 AMbetter-rainbow-14549
03/11/2019, 9:45 AMbetter-rainbow-14549
03/11/2019, 9:46 AMcuddly-lizard-88530
03/11/2019, 11:52 AMcuddly-lizard-88530
03/11/2019, 11:52 AMcuddly-lizard-88530
03/11/2019, 11:54 AMcuddly-lizard-88530
03/11/2019, 11:55 AMbetter-rainbow-14549
03/11/2019, 1:08 PMerror: could not load plugin for azure provider 'urn:pulumi:development::development::pulumi:providers:azure::default': failed to locate compatible plugin
better-rainbow-14549
03/11/2019, 1:08 PMbetter-rainbow-14549
03/11/2019, 1:27 PMimportant-leather-28796
03/11/2019, 3:18 PM## IMPORTANT: you MUST install the cert-manager CRDs **before** installing the
## cert-manager Helm chart
$ kubectl apply \
-f <https://raw.githubusercontent.com/jetstack/cert-manager/release-0.6/deploy/manifests/00-crds.yaml>
https://github.com/helm/charts/tree/master/stable/cert-manager#installing-the-chart