able-energy-34495
04/15/2023, 8:06 PMcrooked-lunch-29479
04/15/2023, 10:13 PMcrooked-lunch-29479
04/15/2023, 10:13 PMthankful-intern-46293
04/16/2023, 1:38 PMstraight-fireman-55591
04/17/2023, 1:48 PMgcp:container:Cluster
are enabled in 3 different ways?
addonsConfig:
horizontalPodAutoscaling:
disabled: false
clusterTelemetry:
type: ENABLED
costManagementConfig:
enabled: true
crooked-lunch-29479
04/17/2023, 2:38 PMeksctl utils associate-iam-oidc-provider --cluster <Name-EKS-Cluster> --approve
2. Create the flyte-system
IAM role, attach the AmazonS3FullAccessservice
policy to it and associate the role with a new Kubernetes service account:
eksctl create iamserviceaccount --name <my-flyte-sa> --namespace flyte --cluster <my-eks-cluster> --region <region-code> --role-name flyte-system-role \
--attach-policy-arn arn:aws:iam::aws:policy/AmazonS3FullAccess --approve
crooked-lunch-29479
04/17/2023, 2:40 PMnutritious-honey-78053
04/17/2023, 3:32 PMnutritious-honey-78053
04/17/2023, 3:32 PMmysterious-hairdresser-82060
04/17/2023, 7:26 PMhostedZoneId
, but when I ran pulumi up
, it seemed like it ignored that parameter and created the bucket in us-west-2
instead of us-east-1
const unitBucket = new aws.s3.Bucket("<my-bucket-name>", {
hostedZoneId: "us-east-1",
});
fast-vr-6049
04/17/2023, 9:23 PM--suppress-outputs
exists, but I'd rather not hide all of them.able-energy-34495
04/18/2023, 3:55 AMpurple-cat-2685
04/18/2023, 3:37 PMsteep-optician-55862
04/18/2023, 3:53 PMpurple-cat-2685
04/18/2023, 4:01 PMsparse-intern-71089
04/18/2023, 8:01 PMflat-sunset-12668
04/18/2023, 8:02 PMreplaceOnChanges
option, but it looks like that only works for resource properties?witty-vegetable-61961
04/19/2023, 1:28 PMmagnificent-pillow-80370
04/19/2023, 3:25 PMmagnificent-pillow-80370
04/19/2023, 3:26 PMerror: unable to validate AWS credentials.
Details: Assume Role: role ARN not set
magnificent-pillow-80370
04/19/2023, 3:26 PMable-energy-34495
04/19/2023, 8:12 PMpulumi config set --path 'pulumi:disable-default-providers[0]' aws
acoustic-lawyer-27551
04/20/2023, 2:34 PMfuture-library-15294
04/20/2023, 6:23 PMable-energy-34495
04/20/2023, 7:33 PMaws.lb.LoadBalancer
or aws.ec2.NatGateway
resources. Instead use the allocation_id
available in those resources to allow AWS to manage the association, otherwise you will see AuthFailure
errors.
So how do I do it?helpful-winter-64866
04/21/2023, 9:40 AMaws.lambda.CallbackFunction
?
It looks like I can only configure that using aws.lambda.Function
. The problem with this is that my functions code is written in Typescript and I'd rather have Pulumi handle the transpiling of it.freezing-flower-57391
04/21/2023, 2:25 PMsparse-intern-71089
04/21/2023, 6:04 PMdry-pilot-49577
04/21/2023, 10:57 PMdynamic.ResourceProvider
is a ts/js thing specifically. Every attempt to call an API service inside a dynamic resource provider, I reach a dead end because of native code. I tried using a polyfilled fetch
, then a ponyfilled fetch
, then got
, and even axios
. All end up calling native code eventually, because they eventually hit something like JSON.parse
or fetch
. I'm either doing something really dumb (likely), need to pre-bundle & compile my typescript before running pulumi.*
(ew?), or a third way I've yet to uncover. Open to suggestions, code in 🧵bitter-twilight-16606
04/24/2023, 5:40 PM