new Secret("<>>", {
    metadata: {
        name: "<>",
        namespace: "default"
    },
    stringData: {
        auth: password.result.apply(p => {
            let hash = crypto.createHash('md5');
            hash.update(p);
            return hash.digest('base64')
        }).apply(p => `<>:${p}`)
    }
})

const istio = new k8s.yaml.ConfigFile("istio-1.7.yaml", {
    file: "istio/istio-1.7.yaml",
}, {dependsOn: istioSystemNamespace, providers: {kubernetes: k8sProvider}, customTimeouts: {create: "10m"}});

const argocd = new kubernetes.helm.v3.Chart("argo", {
    repo: "argo",
    chart: "argo-cd",
    fetchOpts: {
        repo: "<https://argoproj.github.io/argo-helm>",
    },

    namespace: argoNamespace.metadata.name,
}, {
    provider: kubernetesProvider,
    dependsOn: [argoNamespace]
})

StatefulSet

attachPostgreSQLConfiguration(args: pulumi.ResourceTransformationArgs): pulumi.ResourceTransformationResult | undefined {
        let props: pulumi.Input<kubernetes.types.input.apps.v1.StatefulSet> = args.props;
        let env : kubernetes.types.input.core.v1.EnvVar[] = props.spec.template.spec.containers[0].env;
        env = env.concat([
            {
                name: 'ORTHANC__POSTGRESQL__ENABLE_SSL',
                value: 'true'
            }
        ]);
        <http://pulumi.log.info|pulumi.log.info>(`In psql plugin transformation: ${util.inspect(env)}`)
        props.spec.template.spec.containers[0].env = env
        return { props: props, opts: args.opts }
    }

props.spec

Object is possibly 'undefined'

error TS2339: Property 'template' does not exist on type 'Input<StatefulSetSpec>'

pulumi up

p, err := providers.NewProvider(ctx, "kubernetes", &providers.ProviderArgs{
    Kubeconfig: pulumi.StringPtr(k.kubeConfig),
})
if err != nil {
    return errors.Wrap(err, "failed to create k8s provider")
}

_, err = helmv3.NewChart(ctx, "my-chart", helmv3.ChartArgs{
    Path:      pulumi.String(filepath.Join(chartsPath, "my-chart")),
    Namespace: pulumi.String("some-ns"),
}, pulumi.Provider(p))

if err != nil {
    return errors.Wrap(err, "failed to deploy chart")
}

failed to deploy k8s stack: failed to update stack: code: 0
, stdout: Updating (yarin/test-aws/k8s_us-west-2):
  pulumi:pulumi:Stack: (same)
      [urn=urn:pulumi:yarin/test-aws/k8s_us-west-2::test-aws::pulumi:pulumi:Stack::test-aws-yarin/test-aws/k8s_us-west-2]
          + pulumi:providers:kubernetes: (create)
                  [urn=urn:pulumi:yarin/test-aws/k8s_us-west-2::test-aws::pulumi:providers:kubernetes::kubernetes]
                          kubeconfig: \"CENSORED\"
                          + 1 created
                              1 unchanged
                              Duration: 5s
                              , stderr: engine: 127.0.0.1:57240resmon: 127.0.0.1:57252error: expected '::' in provider reference ''
                              : failed to run update: failed to run inline program and shutdown gracefully: rpc error: code = Unavailable desc = transport is closing"

expected '::' in provider reference ''

crd2pulumi

pulumi/crd2pulumi.

pulumi

preview

up

cert-manager

istio-ingressgateway

pulumi.all(...).apply(...)

for (let i = 0; i < args.containerConf.replicas; i++) {
            const service = new k8s.core.v1.Service(
                `zooservice-${i}`,
                {
                    metadata: {
                        name: `zooservice-${i}`,
                        labels: {
                            app: ZookeeperApp,
                        },
                    },
                    spec: {
                        ports: [
                            { port: 2181, name: "client" },
                            { port: 2888, name: "server" },
                            { port: 3888, name: "leader-election" },
                        ],
                    },
                },
                {
                    parent: this,
                }
            );
            this.zkServices.push(service);
        }

        const inputIPs = this.getZookeeperServicesIPs();
        pulumi.all(inputIPs).apply((servicesIPs) => {
            servicesIPs.forEach((ip) => {
                console.log(ip);
            });
            for (let i = 0; i < args.containerConf.replicas; i++) {
                const zookeeper = new Zookeeper(
                    `zookeeper-${i}`,
                    {
                        containerConf: args.containerConf,
                        imagePullSecrets: args.imagePullSecrets,
                        serviceIPs: servicesIPs,
                    },
                    {
                        parent: this,
                    }
                );
                this.zookeepers.push(zookeeper);
            }
        });

pulumi up

Exception: invocation of kubernetes:yaml:decode returned an error: error converting YAML to JSON: yaml: line 128: mapping values are not allowed in this context

render_yaml_to_directory

pulumi up

providers

BETA FEATURE

:param pulumi.Input[str] render_yaml_to_directory: BETA FEATURE - If present, render resource manifests to this directory. In this mode, resources will not

be created on a Kubernetes cluster, but the rendered manifests will be kept in sync with changes

to the Pulumi program. This feature is in developer preview, and is disabled by default.

Note that some computed Outputs such as status fields will not be populated

since the resources are not created on a Kubernetes cluster. These Output values will remain undefined,

and may result in an error if they are referenced by other resources. Also note that any secret values

used in these resources will be rendered in plaintext to the resulting YAML.

kustomize

kustomize

kubectl -k

kustomize

kubectl apply -f <https://raw.githubusercontent.com/kubernetes/autoscaler/master/cluster-autoscaler/cloudprovider/aws/examples/cluster-autoscaler-autodiscover.yaml>
kubectl -n kube-system annotate deployment.apps/cluster-autoscaler <http://cluster-autoscaler.kubernetes.io/safe-to-evict=%22false%22|cluster-autoscaler.kubernetes.io/safe-to-evict="false">

0922 12:44:54.845750       1 aws_manager.go:265] Failed to regenerate ASG cache: cannot autodiscover ASGs: AccessDenied: User: arn:aws:sts::919601712473:assumed-role/staging-f-exec-node-role-7ca4419/i-01b2a7eb09e0d618b is not authorized to perform: autoscaling:DescribeTags
	status code: 403, request id: 1a3191cd-ffda-4ee8-bdd9-8f3af2b1af93
F0922 12:44:54.845780       1 aws_cloud_provider.go:382] Failed to create AWS Manager: cannot autodiscover ASGs: AccessDenied: User: arn:aws:sts::919601712473:assumed-role/staging-f-exec-node-role-7ca4419/i-01b2a7eb09e0d618b is not authorized to perform: autoscaling:DescribeTags
	status code: 403, request id: 1a3191cd-ffda-4ee8-bdd9-8f3af2b1af93