enough-shoe-73030
11/06/2023, 1:47 PMpulumi up
,I'm recieving error :
unable to validate AWS credentials.
I couldn't find clear steps on how to integrate esc with Pulumi.
can anyone give me a hint or point me to the proper doc?fierce-night-38522
11/06/2023, 5:31 PMenough-shoe-73030
11/06/2023, 5:33 PMfierce-night-38522
11/06/2023, 5:36 PMpulumiConfig
and add your AWS environment variables underneath that:
values:
pulumiConfig:
AWS_ACCESS_KEY_ID: ${aws.login.accessKeyId} //etc
environment
and provide the name of your environment underneath that
environment:
- <your-environment-name-here>
enough-shoe-73030
11/06/2023, 5:37 PMfierce-night-38522
11/06/2023, 5:37 PMenvironmentVariables
second level key and not the `pulumiConfig`:
values:
aws:
login:
fn::open::aws-login:
oidc:
duration: 1h
roleArn: <your-role-arn>
sessionName: esc-session
environmentVariables:
AWS_ACCESS_KEY_ID: ${aws.login.accessKeyId}
AWS_SECRET_ACCESS_KEY: ${aws.login.secretAccessKey}
AWS_SESSION_TOKEN: ${aws.login.sessionToken}
enough-shoe-73030
11/06/2023, 5:53 PMvalues:
aws:
login:
fn::open::aws-login:
oidc:
duration: 1h
roleArn: <XYZ>
sessionName: pulumi-environments-session
environmentVariables:
AWS_ACCESS_KEY_ID: ${aws.login.accessKeyId}
AWS_SECRET_ACCESS_KEY: ${aws.login.secretAccessKey}
AWS_SESSION_TOKEN: ${aws.login.sessionToken}
and esc run reetl/esc-dev -i aws s3 ls
works perfectly.
Now:
1. created a new Pulumi project/stack using this command: pulumi new aws-python
( named '`dev`') which created following files : ( Pulumi.yaml
and Pulumi.dev.yaml
)
2. no I'm trying to run Pulumi up
without need for having aws credential stored in my laptop. just using ESC .
what is the next step here ? ( how do I connect ESC to Pulumi IaC? )fierce-night-38522
11/06/2023, 7:33 PMPulumi.dev.yaml
file add the following:
environment:
- esc-dev
This is telling Pulumi IaC to import your ESC environment file into this configuration file.enough-shoe-73030
11/06/2023, 7:34 PMfierce-night-38522
11/06/2023, 7:38 PMreetl
)enough-shoe-73030
11/06/2023, 7:38 PMenvironment*s*
not environment
( s at the end)fierce-night-38522
11/06/2023, 7:40 PMenvironments
?enough-shoe-73030
11/06/2023, 7:40 PMfierce-night-38522
11/06/2023, 7:42 PMenvironment
. Let me see if I can try to reproduceenough-shoe-73030
11/06/2023, 7:42 PMfierce-night-38522
11/06/2023, 7:44 PMenough-shoe-73030
11/06/2023, 7:44 PMfierce-night-38522
11/06/2023, 7:48 PMenvironments
? We will work on getting that updated asapenough-shoe-73030
11/06/2023, 7:49 PMEnvironments
menu : https://app.pulumi.com/<XYZ>/esc