I’m trying to do in Pulumi what I have working with Kubernetes API calls. I’m having difficulty identifying parallel methods in Pulumi. Creating the CSR seems straightforward (

create_certificate_signing_request

in the K8s API,

CertificateSigningRequest

in Pulumi). The next step using the K8s API is

V1beta1CertificateSigningRequestCondition

followed by

replace_certificate_signing_request_approval

. I don’t see directly-equivalent methods in Pulumi. I see

CertificateSigningRequestStatusArgs

and

CertificateSigningRequestConditionArgs

but nothing to actually sign the request. I haven’t yet found any example code on this process in Pulumi. Any pointers?

I used client-go in my pulumi code to approve the CSR

I was hoping to fully eliminate the K8s API calls and the associated overhead

I guess it's still not yet supported in pulumi