https://pulumi.com
Join Slack
This message was deleted.
# general
s
This message was deleted.
i
there is no stack trace so I have no idea where this is originating
I did a 
gcloud auth revoke
locally and have no env vars set and I can preview fine….more confused.
c
@happy-yak-61289 and I were talking about something vaguely similar and she asked if you had done 'gcloud auth application-default login' (since difft layers of sdk's etc fetch difft creds .. a la https://stackoverflow.com/questions/53306131/difference-between-gcloud-auth-application-default-login-and-gcloud-auth-logi)
i
@chilly-crayon-57653 I shouldn’t be using 
gcloud
cli at all, I am creating service account credentials in an 
identity
stack, then supplying them system-wide with the env 
GOOGLE_CLOUD_KEYFILE_JSON
. This has been working fine but a pulumi? update within the past three weeks has perhaps changed something.
c
the latter command covers SDK use, rather than CLI
i
The env variable covers sdk use.
Otherwise my setup would not have worked for the past 6 months
w
I am not an expert here - but is it possible that this command is invoked as part of GKE authentication? I believe the kubeconfig files for accessing GKE end up having to do something like this to get credentials?
FWIW - I am reasonably confident that the Pulumi GCP provider itself would not be invoking this.
i
@white-balloon-205 this has been working fine - it is an automated process inside a ci container. No gcloud setup has ever been used. This error is definitely coming from 
pulumi preview
. Is there a way to have the cli report a stack trace to the console?
w
Does your stack manage a GKE cluster or deploy GKE resources? If so, could you share the 
kubeconfig
you are using? You can get very verbose logs with 
pulumi preview --logtostderr -v=9 --debug 2> out.txt
which might help here?
i
the infrastructure stack that is breaking is managing the cluster. It does also deploy some basic shared resources like cert-manager. I’ll try this in the morning and get back to you, it is only occurring on ci so I’ll ssh in and poke around.
It looks like 
provider_plugin.go:514] Provider[kubernetes, 0xc00308ab40].Diff(
now thinks I have no gcloud account. Which repo has that code?
Untitled
Ok, not sure what changed or why I now need to auth gcloud, but I can only assume it has to do with more intensive checking of something on the actual server. Only in my 
pulumi update
did I run 
gcloud auth activate-service-account
, it appears now that I need it to preview as well. So, not a problem, I just assume it has some better checking or validation.
👍 1
9 Views
Open in Slack
PreviousNext
Powered by

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Powered by