App Service Managed Certificate

google-native

Address

INTENRAL

VPC-PEERING

subnetwork

GCE_ENDPOINT

DNS_RESOLVER

The URL of the subnetwork in which to reserve the address. If an IP address is specified, it must be within the subnetwork's IP range. This field can only be used with INTERNAL type with a GCE_ENDPOINT or DNS_RESOLVER purpose.

error: error sending request: googleapi: Error 400: Invalid value for field 'resource.subnetwork': ''. No default subnetwork was found for an address with type INTERNAL.

error: error sending request: googleapi: Error 400: Invalid value for field 'resource.purpose': 'VPC_PEERING'. The type/purpose values are invalid for subnetwork address.

subnetwork

PRIVATE_RFC_1918

Kubernetes Operator

GCP KMS

backend

secrets

Permission 'cloudkms.cryptoKeyVersions.useToDecrypt' denied on resource 'projects/XXX/locations/europe-west6/keyRings/secrets/cryptoKeys/pulumi'

go get <http://github.com/pulumi/pulumi-awsx/sdk|github.com/pulumi/pulumi-awsx/sdk>

error: no resource plugin 'pulumi-resource-awsx' found in the workspace at version v1.0.0-testplsignore.0 or on your $PATH, install the plugin using `pulumi plugin install resource awsx v1.0.0-testplsignore.0`

pulumi plugin install resource awsx v1.0.0-beta.7

user_data                   = base64encode(
    templatefile("../templates/bash_script.sh.tftpl", {
        internal_lb_dns_name = aws_lb.aws-internal-load-balancer.dns_name
      }
    )
  )

UserData:            pulumi.StringPtr(base64.StdEncoding.EncodeToString(bashScriptContent))

.ts

// Create a Kubernetes cluster.
const cluster = new eks.Cluster('mlplatform-eks', {
  createOidcProvider: true,
});

cluster.core.oidcProvider.arn
cluster.core.oidcProvider.url

aws eks describe-cluster --name mlp-mlops-eksCluster-c2aab22 --query "cluster.identity.oidc.issuer" --output text

<https://oidc.eks.us-west-1.amazonaws.com/id/ABCFDRREJJKJEFBD0D4EABB3D90A>

aws iam list-open-id-connect-providers | grep ABCFDRREJJKJEFBD0D4EABB3D90A

"Arn": "arn:aws:iam::XXXXXXX:oidc-provider/oidc.eks.us-west-1.amazonaws.com/id/ABCFDRREJJKJEFBD0D4EABB3D90A"

<eliding>

var pServiceAccountOptions []pulumi.ResourceOption
var pServiceAccount *pulumiIAM.LookupServiceAccountResult
if pServiceAccount, err = pulumiIAM.LookupServiceAccount(pctx, &pulumiIAM.LookupServiceAccountArgs{
    Project:          "<my-actual-google-project-id>",
    ServiceAccountId: "<my-actual-service-account-id>",
}); err != nil {
    err = nil // Don't propagate an error, but don't try to import it.
} else {
    // Import it.
    // This works, and we get the pServiceAccount
    pServiceAccountOptions = append(pServiceAccountOptions, pulumi.Import(pulumi.ID(<WHAT-HERE>)))
}

=  google-native:iam/v1:ServiceAccount projects/<project-id>/serviceAccounts/<service-account-id>@<project-id>.<http://iam.gserviceaccount.com|iam.gserviceaccount.com> import
 =  google-native:iam/v1:ServiceAccount projects/<project-id>/serviceAccounts/s<service-account-id>@<project-id>.<http://iam.gserviceaccount.com|iam.gserviceaccount.com> import error: Preview failed: property "projectsId"/"project" not found
 +  pulumi:pulumi:Stack <my-stack> create error: preview failed
 =  google-native:iam/v1:ServiceAccount projects/<project-id>/serviceAccounts/<service-account-id>@<project-id>.<http://iam.gserviceaccount.com|iam.gserviceaccount.com> import 1 error
 +  pulumi:pulumi:Stack <my-stack> create 1 error

mlflow_s3_policy = aws.iam.RolePolicy("mlflow_s3_policy",
                                      role=mlflow_s3_role.id,
                                      policy=json.dumps({
                                          "Version": "2012-10-17",
                                          "Statement": [{
                                              "Action": "*",
                                              "Effect": "Allow",
                                              "Resource": mlflow_bucket.bucket.apply(lambda bucket_name: f'arn:aws:s3:::{bucket_name}/*'),
                                          }],
                                      }))

TypeError: Object of type Output is not JSON serializable