I'm creating a Workload Identity pool in a separate file and at the bottom, I have these

const

export const serviceAccountEmail = serviceAccount.email
export const workloadIdentityPoolId = workloadIdentityPool.workloadIdentityPoolId
export const workloadIdentityProviderId = workloadIdentityProvider.workloadIdentityPoolProviderId

and in the

index.ts

I have this

import { serviceAccountEmail, workloadIdentityPoolId, workloadIdentityProviderId } from './resources/iam/gh-federated'

/**
 * GitHub Workflow Identity Provider information
 * check the resources/iam/gh-federated.ts for the full code
 */

console.log('Service Account Email:', serviceAccountEmail)
console.log('Workload Identity Pool ID:', workloadIdentityPoolId)
console.log('Workload Identity Provider ID:', workloadIdentityProviderId)

All the resources are created correctly but in the console I always have this

Service Account Email: OutputImpl {
      __pulumiOutput: true,
      resources: [Function (anonymous)],
      allResources: [Function (anonymous)],
      isKnown: Promise { <pending> },
      isSecret: Promise { <pending> },
      promise: [Function (anonymous)],
      toString: [Function (anonymous)],
      toJSON: [Function (anonymous)]
    }
    Workload Identity Pool ID: OutputImpl {
      __pulumiOutput: true,
      resources: [Function (anonymous)],
      allResources: [Function (anonymous)],
      isKnown: Promise { <pending> },
      isSecret: Promise { <pending> },
      promise: [Function (anonymous)],
      toString: [Function (anonymous)],
      toJSON: [Function (anonymous)]
    }
    Workload Identity Provider ID: OutputImpl {
      __pulumiOutput: true,
      resources: [Function (anonymous)],
      allResources: [Function (anonymous)],
      isKnown: Promise { <pending> },
      isSecret: Promise { <pending> },
      promise: [Function (anonymous)],
      toString: [Function (anonymous)],
      toJSON: [Function (anonymous)]
    }

how do I obtain the value that I need?

Outputs are a unique and complex type in Pulumi which behave very much like promises.

We cannot check the value of a promise using console.log. https://www.pulumi.com/docs/iac/concepts/inputs-outputs/

so I need to change it into something like this?

export const serviceAccountEmail = serviceAccount.email.apply(email => email)

so I need to change it into something like this?

export const serviceAccountEmail = serviceAccount.email.apply(email => email)

There should be no need to use apply. Example:

const vpcCidr = config.require(KEY_NAME.VPC_CIDR);
export const vpc = new awsNative.ec2.Vpc(strVpc, vpcArgs);

const albSgArgs: awsNative.ec2.SecurityGroupArgs = {
    vpcId: vpc.id,
    groupDescription: 'Allow HTTP and HTTPS traffic',
    securityGroupIngress: [
        { ipProtocol: "tcp", fromPort: 80, toPort: 80, cidrIp: vpcCidr, },
    ],
    tags: createAwsNativeTags({ Name: strAlbSG })
};

my code is as follow:

const serviceAccount = new gcp.serviceaccount.Account('github-actions-sa', {
  accountId: 'github-actions-sa',
  displayName: 'GitHub Actions Service Account',
  description: 'A service account for use in a GitHub Actions workflow',
})

export const serviceAccountEmail = serviceAccount.email

Then I import it and console.log it in

index.ts

Console.log expects a synchronous value, so when you try to print the value of an output promise, it prints the contents of the promise object.

so the

apply

makes sense for this case?

You could do something like

serviceAccountEmail.apply(email => console.log(email))

The logging needs to be done within the apply, that callback is executed once the value is resolved

now I have this

Service Account Email: OutputImpl {
      __pulumiOutput: true,
      resources: [Function (anonymous)],
      allResources: [Function (anonymous)],
      isKnown: Promise { <pending> },
      isSecret: Promise { <pending> },
      promise: [Function (anonymous)],
      toString: [Function (anonymous)],
      toJSON: [Function (anonymous)]
    }
    Workload Identity Pool ID: OutputImpl {
      __pulumiOutput: true,
      resources: [Function (anonymous)],
      allResources: [Function (anonymous)],
      isKnown: Promise { <pending> },
      isSecret: Promise { <pending> },
      promise: [Function (anonymous)],
      toString: [Function (anonymous)],
      toJSON: [Function (anonymous)]
    }
    Workload Identity Provider ID: OutputImpl {
      __pulumiOutput: true,
      resources: [Function (anonymous)],
      allResources: [Function (anonymous)],
      isKnown: Promise { <pending> },
      isSecret: Promise { <pending> },
      promise: [Function (anonymous)],
      toString: [Function (anonymous)],
      toJSON: [Function (anonymous)]
    }
    github-actions-pool
    github-actions-sa@my-project.iam.gserviceaccount.com
    github-actions-provider

in the

index.ts

shall I leave the console.log or should I export the main

const

and in

index.ts

doing this

console.log('Service Account Email:', serviceAccount.email.apply((email) => console.log(email)))

?

How are you logging it right now? Is it what you added above?

in

resources/iam/gh-federated.ts

I have the main code with the export of the above const, in

index.ts

I import them and use

console.log('const-desc', const)

You need to wrap the logging in apply, otherwise it's logging the promise-like Output. I.e.

yourConst.apply(c => console.log('desc', c))

I see that using this in the

index.ts

works

serviceAccount.email.apply((email) => console.log('Service Account Email:', email))
workloadIdentityPool.workloadIdentityPoolId.apply((id) =>
  console.log('Workload Identity Pool ID:', id)
)
workloadIdentityProvider.workloadIdentityPoolProviderId.apply((id) =>
  console.log('Workload Identity Provider ID:', id)
)

and in the other file, I have

export const serviceAccount = new gcp.serviceaccount.Account('github-actions-sa', {..

etc

Cool, happy it works!

🙂 However, I wonder if I should wrap the content of

resources/iam/gh-federated.ts

inside a function and then call it inside

index.ts

🤔 what would be the best practice here? I see that this is working only because I import those

const

in the main file else it wouldn't run at all

A good option would be crafting components: https://www.pulumi.com/docs/iac/concepts/resources/components/ This allows you to bundle resources into reusable blocks Then in your index you could do something like this:

const ghFederation = new GithubFederationSetup("name", {...});
ghFederation.email.apply(email => console.log(email));

👍 I'll look into it 🙂 TY