This message was deleted.

sparse-intern-71089

07/26/2021, 6:26 PM

This message was deleted.

bored-table-20691

07/26/2021, 6:27 PM

I use the

tls

package for similar purposes and haven’t seen this happen. What does this code look like?

faint-dog-16036

07/26/2021, 6:32 PM

So the

PrivateKey

resource in tls only outputs

privateKeyPem

, so I use the

sshpk

util to convert over to openssh format:

Copy code

function convertPrivateKeyToOpenSSH(key: pulumi.Input<string>) {
  return pulumi.output(key).apply((unwrappedKey) => {
    const parsedKey = sshpk.parsePrivateKey(unwrappedKey, "pem");
    // @ts-ignore
    return parsedKey.toString("ssh");
  });
}

... which is called like:

convertPrivateKeyToOpenSSH(tlsPrivateKeyOutput.privateKeyPem)

... the result of which is pushed in

stringData

in a k8s cluster Secret.

billowy-army-68599

07/26/2021, 6:39 PM

what's in the diff?

bored-table-20691

07/26/2021, 6:40 PM

and presumably

convertPrivateKeyToOpenSSH

returns the same string every time?

faint-dog-16036

07/26/2021, 6:47 PM

Diff looks like this, it's odd I can't see the keys inside `stringData`:

Copy code

+-kubernetes:core/v1:Secret: (replace)
                      ~ stringData: {
                        }

... and I compared secrets before/after application and they look identical.

faint-dog-16036

07/26/2021, 7:10 PM

If I jump into the json diff seems like the reasons are just the converted private keys (public keys unchanged), so I must be doing something wrong re: converting these keys. I also tried trimming the converted private keys just in case to no avail.

6 Views

Open in Slack

Previous Next

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.