pulumi-community #general

billions-lock-80282

07/30/2019, 5:39 PM

Hi, I'm stuck using getResource on a Helm chart to get the loadBalancer hostname of a nginx k8s service. I'm running

Copy code

const hostname = nginx.getResource("v1/Service", ns, "nginx-ingress-controller").status.apply(s => s.loadBalancer.ingress[0].hostname);

but I get

Copy code

TypeError: Cannot read property 'loadBalancer' of undefined

billions-lock-80282

07/30/2019, 5:39 PM

The service definitely has these fields:

Copy code

status:
  loadBalancer:
    ingress:
    - hostname: <http://a1abdb135b2cb11e9afc60e430b1c1d1-ee9745e779b8c1b8.elb.us-east-1.amazonaws.com|a1abdb135b2cb11e9afc60e430b1c1d1-ee9745e779b8c1b8.elb.us-east-1.amazonaws.com>

billions-lock-80282

07/30/2019, 5:40 PM

and nginx is the Helm chart and has type: Chart

elegant-crayon-4967

07/30/2019, 5:45 PM

easy question for you guys...how do you create a new project via CLI with a different Owner?

bitter-island-28909

07/30/2019, 5:53 PM

Where’s the best place to add a change request for the

awsx.Vpc

resource? (IMO, it should create AWS service endpoints for private subnets, since routing all S3 traffic through a NAT is probably not what most people have in mind).

early-musician-41645

07/30/2019, 6:34 PM

Is there a document somewhere with details about Pulumi's REST api? Specifically, I'd like to list all stack tags (key/values) for stacks in a given project.

orange-tailor-85423

07/30/2019, 6:43 PM

quick way to get an

aws.iam.Role

object back if you have the role name?

orange-tailor-85423

07/30/2019, 6:43 PM

aws.iam.GetRole

seems to return attributes of the role but not the role itself which is what a K8s cluster constructor wants

orange-tailor-85423

07/30/2019, 6:47 PM

this is due to building a stack that creates all the IAM roles including the cluster role, rather export the role names or ARNs and not entire role objects (if that’s even a thing)

high-translator-22614

07/30/2019, 7:02 PM

Will it accept the Role ARN?

orange-tailor-85423

07/30/2019, 7:02 PM

nope

high-translator-22614

07/30/2019, 7:02 PM

that smells like a bug with the k8s provider (as an external user that doesn't mess with k8s much)

orange-tailor-85423

07/30/2019, 7:03 PM

-.js

high-translator-22614

07/30/2019, 7:03 PM

oh, it's declared as only accepting a real

Role

but that doesn't mean it's true

high-translator-22614

07/30/2019, 7:04 PM

(JavaScript and Python have something in the common--the type declarations are more suggestions than fact)

orange-tailor-85423

07/30/2019, 7:06 PM

hard-coded an ARN - doesn’t like it

😒 1

high-translator-22614

07/30/2019, 7:10 PM

that sounds like a deficiency in the provider, and you should probably file an issue on github

high-translator-22614

07/30/2019, 7:10 PM

(there's probably an argument to be made that if you're predefining roles, they're probably not as reduced as they could be, but i don't feel like arguing opinions and best practices)

orange-tailor-85423

07/30/2019, 7:15 PM

what do you mean by “as reduced as they could be”

orange-tailor-85423

07/30/2019, 7:15 PM

i.e. not implementing something like kiam?

high-translator-22614

07/30/2019, 7:45 PM

ideally, every computation resource should have exactly as much access as it needs to do its job, and no more

orange-tailor-85423

07/30/2019, 7:46 PM

just attempting to pass info between stacks at this point

orange-tailor-85423

07/30/2019, 7:46 PM

and passing a promise like a role object seems problematic or impossible

orange-tailor-85423

07/30/2019, 7:46 PM

I’ll file a bug and see where it goes

high-translator-22614

07/30/2019, 7:46 PM

yeah, afaik there's no form of inter-stack/inter-project linking

orange-tailor-85423

07/30/2019, 7:47 PM

we do it all the time with text but since the cluster wants an actual role object it’s a problem

high-translator-22614

07/30/2019, 7:48 PM

yeah, i wouldn't expect such a feature to support full real objects, just JSON-ish stuff

orange-tailor-85423

07/30/2019, 8:21 PM

yep

busy-umbrella-36067

07/30/2019, 8:27 PM

@orange-tailor-85423 Have you tried using

aws.iam.Role.get()

orange-tailor-85423

07/30/2019, 8:47 PM