creamy-window-21036
09/29/2022, 6:11 PMproject_settings=auto.ProjectSettings(
name=project_name,
runtime="python",
backend={"url": "<s3://bucket-in-different-region-or-other-account>"})
stack = auto.create_or_select_stack(stack_name=stack_name,
project_name=project_name,
program=pulumi_program,
opts=auto.LocalWorkspaceOptions(project_settings=project_settings,
secrets_provider=secrets_provider}))
I am using pulumi_eks to provision a cluster
import pulumi_eks as eks
eks.Cluster(...)
Is there a way to to pass seperate credential to both of the context?
I mean separate creds for pulumi login and separate creds to provision EKS clusterechoing-dinner-19531
09/29/2022, 7:27 PMpulumi config set aws:region
and aws:profile
creamy-window-21036
10/02/2022, 12:58 AMimport pulumi
import pulumi_eks as eks
from pulumi import automation as auto
import pulumi_aws as aws
backend_credentials = {
"AWS_ACCESS_KEY_ID": "abc",
"AWS_SECRET_ACCESS_KEY": "pqr",
"AWS_REGION": "us-east-1",
"AWS_SESSION_TOKEN": "some-session-token",
"PULUMI_CONFIG_PASSPHRASE": ""
}
stack_credential = {
"region": "us-west-2",
"access_key": "def",
"secret_key": "stu",
"token": "some-session-token-again"
}
def pulumi_program():
provider = aws.Provider(
"eks_provider",
aws.ProviderArgs(
**stack_credential
)
)
cluster = eks.Cluster(
'eks-cluster',
vpc_id="some-vpc",
public_subnet_ids=["subnet-1", "subnet-2"],
public_access_cidrs=['0.0.0.0/0'],
desired_capacity=2,
min_size=2,
max_size=2,
instance_type='t3.micro',
storage_classes={"gp2": eks.StorageClassArgs(
type='gp2', allow_volume_expansion=True, default=True, encrypted=True)},
opts=pulumi.ResourceOptions(provider=provider)
)
pulumi.export("kubeconfig", cluster.kubeconfig)
stack = auto.create_stack(
stack_name="TestStack",
project_name="TestProject",
program=pulumi_program(),
opts=auto.LocalWorkspaceOptions(
project_settings=auto.ProjectSettings(
name="TestProject",
runtime="python",
backend=auto.ProjectBackend(
url="<s3://some-bucket>"
),
),
env_vars=backend_credentials
),
)
stack.refresh(on_output=print)
stack.up(on_output=print, color="always")
pulumi cancel
.echoing-dinner-19531
10/02/2022, 7:40 AMpulumi cancel
should delete it. The automation code looks like what I would expect.