This message was deleted.

sparse-intern-71089

07/27/2023, 6:58 AM

This message was deleted.

modern-art-40204

07/27/2023, 7:02 AM

or maybe store in self managed yaml file

swift-australia-61553

07/27/2023, 7:06 AM

@modern-art-40204 perhaps you could extract all the common configs in a project level config and use stack configs for whats left? https://www.pulumi.com/blog/project-config-mvp/

modern-art-40204

07/27/2023, 7:10 AM

there is no common config I have a stack of keycloak It have many clients, roles A lot of users + role mapping

cuddly-computer-18851

07/27/2023, 8:15 AM

keycloak has its own config export/import mechanism, maybe leverage that ( or write a Keycloak Provider 😃 )

modern-art-40204

07/27/2023, 8:21 AM

https://github.com/pulumi/pulumi-keycloak

modern-art-40204

07/27/2023, 8:23 AM

User don't need to edit python code for every new user role mapping I use a for loop over CONFIG to do that So the question only is

is there a good way to split config?

modern-art-40204

07/27/2023, 8:24 AM

I has decised to store config in many yaml, then use pyyaml to load it

swift-australia-61553

07/27/2023, 8:32 AM

@modern-art-40204 in your case I believe this is a good approach. I assume each stack is a standalone version of the setup for each user, correct?

modern-art-40204

07/27/2023, 10:10 AM

hmm, I only have one keycloak stack other stack is used for different purpose

fresh-scientist-56300

07/27/2023, 4:55 PM

So I the method I was using utilized

spruce

./spruce.sh

Copy code

spruce merge accounts/*.yaml sso_permission_sets/*.yaml templates/*.yaml sso/*.yaml

e.g. accounts/backups.yaml:

Copy code

resources:
  AWS backups:
    type: aws:organizations:Account
    properties:
      email: aws+backups@XXXXXX
      name: AWS backups
      parentId: XXXXXX
      tags:
        Name: AWS backups
        environment: prod
    options:
      protect: true
outputs:
  aws_accounts:
    AWS backups:
      account_id: ${AWS backups.id}

fresh-scientist-56300

07/27/2023, 4:55 PM

https://github.com/geofffranks/spruce

fresh-scientist-56300

07/27/2023, 4:55 PM

Pulumi.yaml:

Copy code

name: infra
runtime:
  name: yaml
  options:
    compiler: "./spruce.sh"
description: A minimal Pulumi YAML program

588 Views

Open in Slack

Previous Next

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.