This message was deleted.
# generals
sparse-intern-71089
08/07/2023, 2:40 AMThis message was deleted.
q
quick-hospital-63970
08/07/2023, 2:41 AMPulumi AI confidently suggested I do this instead - but there is no such
privateSubnetsvpc Copy code
// Map over the private subnets and retrieve the cidrBlocks
const privateSubnetCidrs = vpc.privateSubnets.apply(privateSubnets =>
privateSubnets.map(subnet => subnet.cidrBlock)
)l
little-cartoon-10569
08/07/2023, 2:49 AMYou can add subnetIds into your all/apply guards. However, you don't need to. The awsx VPC does indeed have a privateSubnets property, you don't need to filter subnets by id.
https://www.pulumi.com/registry/packages/awsx/api-docs/ec2/vpc/#privatesubnetids_nodejs
little-cartoon-10569
08/07/2023, 2:50 AMIs it possible you were looking on the AWS VPC resource for the privateSubnets property? Only the AWSX resource has it.
q
quick-hospital-63970
08/07/2023, 2:50 AMThis maybe sort of seems to work (untested, but types are happy):
Copy code
export const privateSubnetCidrs = pulumi
.all([vpc.subnets, vpc.privateSubnetIds])
.apply(([subnets, privateSubnetIds]) => {
const cidrBlocks: string[] = [];
for (const subnet of subnets) {
pulumi
.all([subnet.id, subnet.cidrBlock])
.apply(([subnetId, cidrBlock]) => {
if (privateSubnetIds.includes(subnetId) && cidrBlock) {
cidrBlocks.push(cidrBlock);
}
});
}
return cidrBlocks;
});l
little-cartoon-10569
08/07/2023, 2:50 AMIt's massive overkill.
q
quick-hospital-63970
08/07/2023, 2:50 AM@little-cartoon-10569 it has
privateSubnetIdsprivateSubnetsl
little-cartoon-10569
08/07/2023, 2:50 AMIt does. I use it. Have a look at the link I sent.
little-cartoon-10569
08/07/2023, 2:51 AMHere's the code from vpc.d.ts:
Copy code
/**
* Asynchronously retrieves the private subnets in this Vpc. This will only retrieve data for
* the subnets specified when the Vpc was created. If subnets were created externally, they
* will not be included.
*/
get privateSubnets(): Promise<x.ec2.Subnet[]>;little-cartoon-10569
08/07/2023, 2:52 AMActually, there must be a version without it. The new docs don't have it.. onesec, I'll check github.
q
quick-hospital-63970
08/07/2023, 2:53 AMI want you to be right, but I don’t think you are 🙃 https://github.com/pulumi/pulumi-awsx/blob/master/awsx/ec2/vpc.ts
l
little-cartoon-10569
08/07/2023, 2:55 AMI found it. It's not in AWSX, only AWSXclassic (which is what I use: it's in the same library, in the awsx.classic namespace). You can use that it you prefer.
little-cartoon-10569
08/07/2023, 2:55 AMq
quick-hospital-63970
08/07/2023, 2:55 AMAhhh gotcha, I wonder if there are other meaningful differences between those two
quick-hospital-63970
08/07/2023, 2:56 AMGood to know though, thankyou!
l
little-cartoon-10569
08/07/2023, 2:56 AMYes, there are a few. I'm surprised it's that hard to get CIDRs (or indeed, subnets) out of the code. I'll have a quick hunt through examples...
little-cartoon-10569
08/07/2023, 3:03 AMI can't see anything that doesn't require an
apply()little-cartoon-10569
08/07/2023, 3:04 AMAh ignore that. That's not available on the AWS subnet, only the awsx subnet.. 😞
little-cartoon-10569
08/07/2023, 3:05 AMWow they've made that sort of stuff hard, haven't they?
little-cartoon-10569
08/07/2023, 3:05 AMMaybe you'd be better off finding all routes and grabbing the CIDRs from there 🙂
q
quick-hospital-63970
08/07/2023, 3:07 AMAll good, thanks for taking a look anyway! I think the code I ended up with is… readable, if verbose
quick-hospital-63970
08/07/2023, 6:35 PMInteresting, so I was using the code above to generate Security Group ingress rules (i.e. only allow traffic from the private subnet CIDRs), but it seems that for some reason the CIDRs were never resolved, and no ingress rules ended up being created. Going to just hard-code the CIDRs for now, as this seems to go beyond my understanding of
pulumi.Outputm
millions-address-39960
10/07/2023, 6:53 PMis there a easy way to extract the private subnet ids from the awsx.ec2.Vpc ? I need to add additional route to the routetable for the private subnets
millions-address-39960
10/07/2023, 6:53 PMI am struggling from last 2 days and not able to wrap my head around Output<string[]> , how to convert it to string[]
l
little-cartoon-10569
10/07/2023, 8:04 PMYou cannot convert it to a string[] at the top level. Output<string[]> means a string[] that will be available in the indefinite future, not now. It's simply not available yet.
Instead, you can apply() the Output. The string[] is made available as a parameter to your callback in apply().