https://pulumi.com logo
Powered by
#google-cloud
Title
# google-cloud
a

average-plastic-1653

10/20/2023, 6:27 PM
Hi, I am adding an eventarc trigger to a Workflow. When creating a new GCP Project it takes 4 to 5 minutes for the Eventarc Service Agent account to become available. How are others handling this? For example, by adding a sleep or polling. Thanks!
s

stocky-restaurant-98004

10/20/2023, 8:29 PM
Would you prefer the resource not return until the Service Agent is available? If so, file an issue for the provider (although there may not be anything we can do about it, pending on what Google's API does). If not, yes - Command provider with 
sleep 300
or whatever.
a

average-plastic-1653

10/21/2023, 5:58 PM
Thanks @stocky-restaurant-98004 I will think about that.
It appears that the Eventarc Service Agent is added once the call is made to add the trigger. I have seen issues logged in the Terraform Provider repo: https://github.com/hashicorp/terraform-provider-google/issues/14584 If I rerun the Pulumi code after the failure, the Eventarc trigger is successfully added to the Workflow, which is fine for my usecase at the moment.
I am unsure why Google is not creating the Eventarc Service Agent account after enabling the Eventarc API. I tested this with ever-increasing timeouts, and it definitely is an issue Anyway, I went ahead and created the Service Agent myself and I am able to add the Eventarc Trigger:
Copy code
eventarc_api = projects.Service(
        "eventarc-api-service",
        project=project.project_id, 
        service="<http://eventarc.googleapis.com|eventarc.googleapis.com>",
        disable_dependent_services=True
)
pulumi.export('eventarc_api.id', eventarc_api.id)

eventarc_service_agent = projects.ServiceIdentity("eventarc-service-agent",
        project=project.project_id,
        service="<http://eventarc.googleapis.com|eventarc.googleapis.com>",
        opts=pulumi.ResourceOptions(depends_on=[eventarc_api])
)
pulumi.export ("eventarc_service_agent.email", eventarc_service_agent.email)

eventarc_service_agent_user = projects.IAMMember("eventarc-service-agent-user",
        project=project.project_id,
        role="roles/eventarc.serviceAgent",
        member=eventarc_service_agent.email.apply(lambda email: f"serviceAccount:{email}")
)
pulumi.export ("eventarc_service_agent_user.id", eventarc_service_agent_user.id)
2 Views
Powered by