future-refrigerator-88869
03/31/2021, 10:39 AMpulumi up
, it will update the secret token of the service account (that's what i believe it does at least). That will always show up as a pulumi update.
My question now is: Is that intentional ? Is it supposed to show a pulumi update with every pulumi up
? If not, can anyone point me in the right direction of what to check in order to fix this ?billowy-army-68599
03/31/2021, 5:19 PMhelm template
to render the charts, so anything that generates a TLS certificates gets regenerated every time the chart is run.
To get around this issue, I would recommend omitting those resources from the chart, and generated your own TLS certificates using the tls provider. You can see an example of me doing this here:
https://github.com/jaxxstorm/pulumi-aws-loadbalancercontroller/blob/main/nodejs/src/index.ts#L276-L295
https://github.com/jaxxstorm/pulumi-aws-loadbalancercontroller/blob/main/nodejs/src/index.ts#L501-L544future-refrigerator-88869
03/31/2021, 8:08 PMaws certificate manager
(or if it is necessary even).billowy-army-68599
03/31/2021, 8:19 PMfuture-refrigerator-88869
04/05/2021, 11:40 PMbillowy-army-68599
04/05/2021, 11:43 PMfuture-refrigerator-88869
04/06/2021, 7:31 PMcaCert
, clientCert
and clientKey
are loaded from the template and are automatically generated. They don't seem to have a values
equivalent (https://github.com/aws/eks-charts/blob/master/stable/aws-load-balancer-controller/values.yaml). I have found an option for cert-manager
but I am not sure if it can actually solve my issue (never used it before).
I have found the following options for me:
1. edit the helm chart and allow values for cert
2. use pretty much your solution from your github with some modifications
3. use cert-manager (if it can be applied).
What is your suggestion ? Please let me know if i'm missing something.pulumi up
it will update the secret from the chartbillowy-army-68599
04/06/2021, 7:34 PMfuture-refrigerator-88869
04/06/2021, 7:35 PMpulumi up
(in the thread)details
option ?billowy-army-68599
04/06/2021, 7:36 PMfuture-refrigerator-88869
04/06/2021, 7:38 PMbillowy-army-68599
04/06/2021, 7:57 PMfuture-refrigerator-88869
04/06/2021, 8:10 PMbillowy-army-68599
04/07/2021, 7:21 PM