gcp.serviceAccount.Account

serviceAccount:<unique email address>

Pulumi SDK has not been installed

yarn install

pulumi login <GCP Bucket address>
Logged into <GCP Bucket address>
pulumi preview --cwd=/workspace/identity --stack=identity-prod --refresh --non-interactive
Previewing update (identity-prod):
    pulumi:pulumi:Stack identity-identity-prod  error: It looks like the Pulumi SDK has not been installed. Have you run npm install or yarn install?
    pulumi:pulumi:Stack identity-identity-prod  1 message
Diagnostics:
  pulumi:pulumi:Stack (identity-identity-prod):
    error: It looks like the Pulumi SDK has not been installed. Have you run npm install or yarn install?
error: failed to load language plugin nodejs: could not read plugin [/usr/bin/pulumi-language-nodejs] stdout: EOF
Makefile:17: recipe for target 'ci-up' failed
make: *** [ci-up] Error 255

creating urn:pulumi:dev-api::api::gcp:cloudfunctions/function:Function::api-nest-func: Error waiting for Creating CloudFunctions Function: error while retrieving operation: googleapi: Error 403: Your application has authenticated using end user credentials from the Google Cloud SDK or Google Cloud Shell which are not supported by the <http://cloudfunctions.googleapis.com|cloudfunctions.googleapis.com>. We recommend configuring the billing/quota_project setting in gcloud or using a service account through the auth/impersonate_service_account setting. For more information about service accounts and how to use them in your application, see <https://cloud.google.com/docs/authentication/>., accessNotConfigured

gcloud auth login

Organization Administrator

Project

ServiceAccount

pulumi up

error: Error waiting for creating folder: Error code 7, message: Permission 'resourcemanager.projects.create' denied on parent resource 'organizations/<my_org_number_here>'.

{
  "permissions": [
    "resourcemanager.projects.create"
  ]
}

gcloud auth application-default login

new gcp.cloudrun.DomainMapping

new gcp.dns.RecordSet

const mapping = new gcp.cloudrun.DomainMapping(...)
new gcp.dns.RecordSet(
    `${prefix}-a-records`,
    {
      name: 'xxx.',
      managedZone: zone.name,
      type: 'A',
      ttl: 3600,
      rrdatas: mapping.status.resourceRecords,
    },
    {
      dependsOn: [zone, mapping],
      deleteBeforeReplace: true,
    },
  )

pulumi.export("instance_ip", instance.network_interfaces[0]['networkIp'])

pulumi up

KeyError: 'networkIp'

Error waiting for Creating CloudFunctions Function: error while retrieving operation: googleapi: Error 403: Your application has authenticated using end user credentials from the Google Cloud SDK or Google Cloud Shell which are not supported by the <http://cloudfunctions.googleapis.com|cloudfunctions.googleapis.com>. We recommend configuring the billing/quota_project setting in gcloud or using a service account through the auth/impersonate_service_account setting. For more information about service accounts and how to use them in your application, see <https://cloud.google.com/docs/authentication/>., accessNotConfigured

index.ts

pulumi up

cluster.ts

import * as gcp from "@pulumi/gcp";
import { config } from "./config";
import { regionalKeyring } from "./keyrings";

export const experimentsregionalClusterKey = new gcp.kms.CryptoKey(
  config.regionalClusterKey,
  {
    keyRing: regionalKeyring.selfLink,
    rotationPeriod: "31556952s",
    name: config.regionalClusterKey,
    purpose: "ENCRYPT_DECRYPT"
  },
  {
    protect: true
  }
);

export const regionalClusterKeyEDPerms = new gcp.kms.CryptoKeyIAMBinding(
    config.regionalClusterKeyEDPermsName,
    {
    cryptoKeyId: `${config.gcpProject}/${config.gcpRegion}/${config.regionalKeyring}/${config.regionalClusterKey}`,
    members: [config.k8sServiceAgent],
    role: "roles/cloudkms.cryptoKeyEncrypterDecrypter"
    }
);

index.ts

export

cluster.ts

pulumi up

export * from './pulumi'
export * from './cluster'
export * from './cloudbuild'


export * from './apps/zzz'

pulumi up

gcp:kms:CryptoKey             <regional-cluster-key-name>  delete      1 error

index.ts

export

export * from "./pulumi";
export * from "./cluster";
export * from "./cloudbuild";


export * from "./apps/zzz";

@pulumi/kubernetes/helm

GOOGLE_CREDENTIALS

compute.Instance

# actual vm creation
instance = compute.Instance("instance",
        machine_type=config.require('type'),
        boot_disk={
            "initializeParams": {
                "image": config.require('image')
                }
            },
        network_interfaces=[
            {
                "subnetwork": parentStack.get_output('subnet_id'),
                }
            ],
        # metadata={
        #     "startup-script": init_script
        #     },
        zone = config.require('zone'),
        tags = ["mytags"]
        )
# Register the DNS record
dns_name = parentStack.get_output('private_dns_zone').apply(lambda a: f"instance.{a}")
instance_recordset = dns.RecordSet("instance-recordset",
        managed_zone = parentStack.get_output('private_dns_name'),
        name = dns_name,
        rrdatas = [ instance.network_interfaces[0]['networkIp'] ],
        ttl = 3600,
        type = "A",
        opts=pulumi.ResourceOptions(depends_on=[instance]))

gcp.compute.RouterNat

Previewing update (dev):
     Type                      Name         Plan       Info
     pulumi:pulumi:Stack       appital-dev
 ~   └─ gcp:compute:RouterNat  router-nat   update     [diff: ~natIps]

Resources:
    ~ 1 to update
    28 unchanged

export const router = new gcp.compute.Router('router', {
	network: network.name
})

const routerIpName = `${pulumi.getProject()}-${pulumi.getStack()}-ip`

export const routerIp = new gcp.compute.Address('router-ip', {
	name: routerIpName
})

export const routerNat = new gcp.compute.RouterNat('router-nat', {
	router: router.name,
	natIpAllocateOption: 'MANUAL_ONLY',
	natIps: [routerIpName],
	sourceSubnetworkIpRangesToNat: 'LIST_OF_SUBNETWORKS',
	subnetworks: [
		{
			name: subnetwork.name,
			sourceIpRangesToNats: ['ALL_IP_RANGES']
		}
	]
})

gcp.cloudrun.DomainMapping

const domainMapping = new gcp.cloudrun.DomainMapping(
    `${prefix}-domain-mapping-${env}`,
    {
      location: region,
      name: `${dnsName}`,
      metadata: {
        namespace: project,
      },
      project,
      spec: {
        routeName: service.name,
      },
    },
  )