sparse-intern-71089
03/06/2019, 8:37 AMstocky-island-3676
03/06/2019, 8:39 AMprovider
on the resource in the Pulumi stack JSON file.stocky-island-3676
03/06/2019, 11:08 AMimport kubernetes = require("@pulumi/kubernetes")
let k8sProvider = new kubernetes.Provider("test-provider", {})
new kubernetes.core.v1.Namespace("test-namespace", {}, {
// provider: k8sProvider, // add after first `pulumi update`
})
white-balloon-205
stocky-island-3676
03/06/2019, 2:39 PMkubectl config use-context ...
before.
2. To use different RBAC roles (“least privilege”) in one Pulumi project.
3. We’re normally using aws-vault
in front of the exec
plugin (aws-iam-authenticator
). As it prompts for a MFA code and Pulumi seems to not support stdin, I’m using a context with only the aws-iam-authenticator
& aws-vault
before pulumi
.cool-egg-852
03/06/2019, 2:46 PMcool-egg-852
03/06/2019, 2:47 PMstocky-island-3676
03/06/2019, 2:52 PMcreamy-potato-29402
03/06/2019, 5:24 PMcreamy-potato-29402
03/06/2019, 5:25 PMcool-egg-852
03/06/2019, 5:27 PMstocky-island-3676
03/06/2019, 5:46 PMcluster-admin
ClusterRole. Then applying monitoring with a K8s user with lowered rights, e.g. admin
RoleBinding (fixed to a monitoring
namespace).stocky-island-3676
03/06/2019, 5:47 PMcool-egg-852
03/06/2019, 5:48 PMcluster-admin
, then they are already trusted enough to have cluster-admin
..stocky-island-3676
03/06/2019, 5:59 PMcool-egg-852
03/06/2019, 6:00 PMstocky-island-3676
03/06/2019, 6:09 PMnamespace
in K8s provider (when the issue is fixed).creamy-potato-29402
03/06/2019, 6:44 PMcreamy-potato-29402
03/06/2019, 6:44 PMcreamy-potato-29402
03/06/2019, 6:45 PMcreamy-potato-29402
03/06/2019, 6:45 PMcreamy-potato-29402
03/06/2019, 6:46 PMcreamy-potato-29402
03/06/2019, 6:46 PMcool-egg-852
03/06/2019, 6:49 PMcool-egg-852
03/06/2019, 6:49 PMcreamy-potato-29402
03/06/2019, 6:50 PMcreamy-potato-29402
03/06/2019, 6:51 PMcreamy-potato-29402
03/06/2019, 6:51 PMcool-egg-852
03/06/2019, 6:53 PMcreamy-potato-29402
03/06/2019, 6:53 PMcreamy-potato-29402
03/06/2019, 6:54 PMcreamy-potato-29402
03/06/2019, 6:55 PMcreamy-potato-29402
03/06/2019, 6:55 PMstocky-island-3676
03/06/2019, 8:02 PMcreamy-potato-29402
03/06/2019, 9:29 PMcreamy-potato-29402
03/06/2019, 9:30 PMcreamy-potato-29402
03/06/2019, 9:30 PMcreamy-potato-29402
03/06/2019, 9:30 PM.metadata.name
manually, we will create new versions before deleteing the old ones.