sparse-intern-71089
10/17/2023, 2:39 PMbillowy-army-68599
billowy-army-68599
database = aws.rds.Instance(
f"my-db",
# other options here
)
db_provider = postgresql.Provider(
"rds-db",
host=database.address,
port=database.port,
username=database.username,
password=database.password,
)
billowy-army-68599
postgres_db = postgresql.Database(
"thedb",
name="an internal db"
owner=database.username,
opts=pulumi.ResourceOptions(provider=db_provider, parent=db_provider),
)
creamy-hamburger-70712
10/17/2023, 2:52 PMcreamy-hamburger-70712
10/17/2023, 3:07 PMaws.secretsmanager.get_random_password()
and the feed this value to aws.rds.Instance(password=random_password.random_password)
The undesired side effect is that the password is re-generated every time i run pulumi up
needlessly increasing my wait time. Is there a way to say "only generate a random password if the instance is being created but leave it unchanged otherwise"?billowy-army-68599
creamy-hamburger-70712
10/17/2023, 7:14 PMrandom_password_provider = random.RandomPassword(
random_password_resource_name,
length=16,
min_lower=1,
min_numeric=1,
min_special=1,
min_upper=1,
keepers={
"engine": engine,
"instance_class": db_instance_class,
"username": master_db_username,
},
)
aws.rds.Instance(
password=random_password_provider.result,
....
)
It's wild guess what may justify regeneration of the password. Is there a better way whereby Pulumi can decide to call the random password provider only when it is creating the rds.Instance()
?