Ok I ve got a bit of a crazy idea for something I ll paste m

Question

Ok I ve got a bit of a crazy idea for something I ll paste more info in the thread of this message but the gist is I would like to generate passwords for rabbitmq which is done with a silly sha256 512 hashing algorithm with a salt converted to base64 To do that I d like to use pulumi random RandomPassword module for the passwords themselves and put them into azure keyvault However I also need to pass those passwords in their rabbitmq obfuscated hashed form into a json object as values for rabbitmq config and put into a kubernetes secret or more likely throw into keyvault and use keyvault sync to create the secret The fun begins

better-shampoo-48884 · Answer

So I set this up to generate the passwords themselves ``` const rabbitUsers = orchestratorclient new random RandomPassword orchestratorclient length 32 orchestratoruser new random RandomPassword orchestratoruser length 32 subscriptionuser new random RandomPassword subscriptionuser length 32 orchestrator new random RandomPassword orchestrator length 32 admin new random RandomPassword admin length 32 producer new random RandomPassword producer length 32 testreader new random RandomPassword testreader length 32 ```

better-shampoo-48884 · Answer

And then I have my rabbit password hashing function ``` const rabbitPassHasher = pass2hash string salt Buffer = gt let salt = Buffer from 0x90 0x8D 0xC6 0x0A if salt else salt = randomBytes 32 console log salt let concated = Buffer concat salt Buffer from test12 let pass = Buffer from pass2hash let concated Buffer = Buffer concat salt pass let hash = createHash sha256 hash write concated let hashDigest = hash digest return Buffer concat salt hashDigest toString base64 const salt = Buffer from 0xDE 0xAD 0xCA 0xFE ```

brave-planet-10645 · Answer

You re doing `new random RandomPassword foo length 32 result` right

better-shampoo-48884 · Answer

The trick comes with this ```let rabbitLoadFile = rabbit version 3 7 13 users name orchestratorclient password hash rabbitPassHasher pulumi interpolate`rabbitUsers orchestratorclient result` salt hashing algorithm rabbit password hashing sha256 tags ``` Because of course and as it should be rabbitUsers orchestratorclient result is Output lt string gt

better-shampoo-48884 · Answer

yeah was getting to that wink

brave-planet-10645 · Answer

just to interrupt you

better-shampoo-48884 · Answer

so I ve tried both the apply and the interpolate methods and they both turn out Output lt string gt and I m realizing that yes they should it needs to be that way

better-shampoo-48884 · Answer

so my thought now is can I extend the random module to generate both the password AND the rabbit hashed version of the same

brave-planet-10645 · Answer

Could you use a component resource And the output is the rabbit hashed version

better-shampoo-48884 · Answer

like we have ` result` if I could add ` rabbitHashedResult` to the list that should solve it nicely

bored-oyster-3147 · Answer

can you not do `rabbitUsers orchestratorclient result apply x = gt rabbitPassHasher x salt `

better-shampoo-48884 · Answer

i i probably

better-shampoo-48884 · Answer

could

better-shampoo-48884 · Answer

gonna test that out

better-shampoo-48884 · Answer

and otherwise component resource looks like a good direction for a next step

bored-oyster-3147 · Answer

you might need to output tuple the salt i didn t know if that was also an output or not

better-shampoo-48884 · Answer

dammit Joshua why do you have to point out the blaringly obvious wink thanks heart

bored-oyster-3147 · Answer

haha hope it works

better-shampoo-48884 · Answer

the salt is of no consequence though it would be fun to also have the salt controlled by Random but i m going to accept a static salt in my code

bored-oyster-3147 · Answer

that would give you `Output lt string gt ` of the hash so then to put that in the JSON you would need to do like ```hash apply rabbitHash = gt return password hash rabbitHash ```

better-shampoo-48884 · Answer

So sorry to take so long for getting confirmation been struggling with automation promise leaks and everything weird in general Regardless I thought I got everything nicely handled my json object got pushed into azure as a secret and propegated into k8s as a secret through synchronization and what do I finally find this ``` users name orchestratorclient password hash Calling toJSON on an Output lt T gt is not supported n nTo get the value of an Output as a JSON value or JSON string consider either n 1 o apply v = gt v toJSON n 2 o apply v = gt JSON stringify v n nSee <https pulumi io help outputs> for more details nThis function may throw in a future version of pulumi pulumi hashing algorithm rabbit password hashing sha256 tags ``` smile smile

better-shampoo-48884 · Answer

so Joshua was right I m now just trying to wrap my head around how to JSON stringify the resulting object

better-shampoo-48884 · Answer

basically the object above needs to be created through this ```let rabbitLoadFile = rabbit version 3 8 14 users name orchestratorclient password hash rabbitUsers orchestratorclient result apply x = gt return rabbitPassHasher x salt hashing algorithm rabbit password hashing sha256 tags const rabbitLoadSecret = new azure keyvault Secret `rabbit load definition` resourceGroupName environment rg vaultName environment vault name secretName `rabbit load definition` properties value JSON stringify rabbitLoadFile apply ```

better-shampoo-48884 · Answer

now since password hash is an Output lt string gt

better-shampoo-48884 · Answer

but rabbitLoadFile is just a plain object

better-shampoo-48884 · Answer

how do I resolve all these take one of the passwords do an apply output the whole dang thing as a JSON stringify d object as the result

better-shampoo-48884 · Answer

This is the part of pulumi that makes my brain shut off and go into gaga mode for some reason I keep doing wrong things that I know that are wrong but slightly out of desperation Like `value rabbitUsers admin result apply x = gt return JSON stringify rabbitLoadFile `

bored-oyster-3147 · Answer

you re missing a key concept

bored-oyster-3147 · Answer

Output lt T gt needs to be Output lt T gt all the way down You cannot get your value you of it unless you were to await it but you wouldn t do that in a traditional pulumi program

bored-oyster-3147 · Answer

this code is an issue ```let rabbitLoadFile = rabbit version 3 8 14 users name orchestratorclient password hash rabbitUsers orchestratorclient result apply x = gt return rabbitPassHasher x salt hashing algorithm rabbit password hashing sha256 tags ```

bored-oyster-3147 · Answer

It will never work that way because you are setting an Output lt T gt on a property on the object

bored-oyster-3147 · Answer

you need the entire object to be an Output lt T gt The ```properties value JSON stringify rabbitLoadFile apply ``` The `value` here should accept Input lt T gt

better-shampoo-48884 · Answer

Right

better-shampoo-48884 · Answer

Can I simply state that the type of the object is an Output lt T gt then

better-shampoo-48884 · Answer

I mean it s never that easy That s why I was originally thinking of extending the random generation to an extent but I would have hit the same problem

bored-oyster-3147 · Answer

so you need to do this ```let rabbitLoadFile = rabbitUsers orchestratorclient result apply password = gt return rabbit version 3 8 14 users name orchestratorclient password hash rabbitPassHasher password salt hashing algorithm rabbit password hashing sha256 tags ``` now your load file is an Output lt object gt And then ```const rabbitLoadSecret = new azure keyvault Secret `rabbit load definition` resourceGroupName environment rg vaultName environment vault name secretName `rabbit load definition` properties value rabbitLoadFile apply x = gt JSON stringify x ```

better-shampoo-48884 · Answer

see this is where I m slightly confused Since rabbitLoadFile is already an Output lt T gt in the first object would it not be pertinent to simply JSON stringify that return and then use it directly with `properties value`

bored-oyster-3147 · Answer

rabbitLoadFile is not an `Output lt T gt ` in your original example

better-shampoo-48884 · Answer

i e `value rabbitUsers admin result apply x = gt return JSON stringify rabbitLoadFile ` seems to me to be identical

bored-oyster-3147 · Answer

it is an inline javascript object that you declared

better-shampoo-48884 · Answer

but in your example you re wrapping the js object inside client result apply to force it to an output That would be the same as my one liner right

bored-oyster-3147 · Answer

no

bored-oyster-3147 · Answer

your rabbitLoadFile is `object` mine is `Output lt object gt `

better-shampoo-48884 · Answer

```let rabbitLoadFile = rabbitUsers orchestratorclient result apply password = gt return JSON stringify rabbit version 3 8 14 users name orchestratorclient password hash rabbitPassHasher password salt hashing algorithm rabbit password hashing sha256 tags ``` The above would be an Output lt string gt right

bored-oyster-3147 · Answer

correct

bored-oyster-3147 · Answer

then you could just pass `rabbitLoadFile` directly to `properties value` assuming it takes `Input lt string gt `

better-shampoo-48884 · Answer

ok think I see the issue in comprehension here I m currently making an Output lt string gt of the password hash value because I do the result apply at that stage

better-shampoo-48884 · Answer

the reason being that the object itself contains multiple users ``` let rabbitLoadFile = rabbitUsers orchestratorclient result apply pass rabbit version 3 8 14 users name orchestratorclient password hash rabbitUsers orchestratorclient result apply x = gt return rabbitPassHasher x salt hashing algorithm rabbit password hashing sha256 tags name orchestratoruser password hash rabbitUsers orchestratoruser result apply x = gt return rabbitPassHasher x salt hashing algorithm rabbit password hashing sha256 tags ```

better-shampoo-48884 · Answer

each of which I want a password for ```const rabbitUsers index string random RandomPassword = orchestratorclient new random RandomPassword orchestratorclient length 32 orchestratoruser new random RandomPassword orchestratoruser length 32 subscriptionuser new random RandomPassword subscriptionuser length 32 orchestrator new random RandomPassword orchestrator length 32 admin new random RandomPassword admin length 32 producer new random RandomPassword producer length 32 testreader new random RandomPassword testreader length 32 ```

better-shampoo-48884 · Answer

so considering users is an array of Output lt Object gt it would need to be an Output lt Array gt and so on

bored-oyster-3147 · Answer

ah It s probably going to be painful but this is where `output tuple` or `output all` comes in so you can pass multiple `Output lt T gt ` into an ` apply ` call Alternatively you could save the `JSON stringify ` until the very end and append to the `users` array So you could do ```let rabbitLoadFile = password1 apply pw = gt return rabbit version 3 8 14 users name orchestratorclient password hash rabbitPassHasher pw salt hashing algorithm rabbit password hashing sha256 tags ``` and that would just be for the first password You want to keep it as an `Output lt object gt ` so you can continue to manipulate it as an object Then all passwords after that could look like ```rabbitLoadFile = output all rabbitLoadFile password2 apply file pw = gt instead of adding it to the existing object you may want to clone it modify the clone and return the clone file users add name orchestratorclient password hash rabbitPassHasher pw salt hashing algorithm rabbit password hashing sha256 tags ``` and then finally on `properties value` you would `rabbitLoadFile apply x = gt JSON stringify x `

bored-oyster-3147 · Answer

I m psuedo coding a bit when it comes to array manipulation idk what the exact syntax would be but hopefully i conveyed the idea

better-shampoo-48884 · Answer

there is much contemplation in my head but it makes some sense yes

better-shampoo-48884 · Answer

just a quick thought where did you get `output all`from

bored-oyster-3147 · Answer

what SDK are you in TypeScript

better-shampoo-48884 · Answer

yup

better-shampoo-48884 · Answer

pulumi output doesn t seem to have that

better-shampoo-48884 · Answer

so guessing it s somewhere slightly different

bored-oyster-3147 · Answer

it is this <https www pulumi com docs reference pkg nodejs pulumi pulumi all>

bored-oyster-3147 · Answer

in C it is called `Output Tuple `

better-shampoo-48884 · Answer

ah righty looking good then

better-shampoo-48884 · Answer

as such shall dive deeply into the mire of rabbits and a few previews and ups and with any hope come back to report success and share the resulting code smile

bored-oyster-3147 · Answer

good luck

bored-oyster-3147 · Answer

ill be here

better-shampoo-48884 · Answer

thanks wink

better-shampoo-48884 · Answer

So far so good preview phase ended with less than 2gb of memory used for once was 1920mb so not too far off but hey I ll take it and it updated the secret smile ``` rabbit version 3 8 14 users name orchestratorclient password hash 3q3K j9AhUZPSGJYsSu7xZHu6ggA2YsaSzDkWFUO6+Ch7aWQ hashing algorithm rabbit password hashing sha256 tags ``` happy days

better-shampoo-48884 · Answer

Heh how are we with pasting 283 lines of insanity in here wink

better-shampoo-48884 · Answer

can push it into a gist otherwise I presume

better-shampoo-48884 · Answer

better-shampoo-48884 · Answer

so yeah this works and I can live with it THANK YOU so incredibly much I m definitely hoping that next time I face something like this I ll remember the lessons on Output lt T gt

bored-oyster-3147 · Answer

glad to hear it