Is anyone else trying to use the pulumi kafka package to man

Question

Is anyone else trying to use the pulumi kafka package to manage topics and acls in confluent cloud I am attempting to create topics with a provider that looks like this ``` provider = kafka Provider kafka provider bootstrap servers=confluent environment apply lambda e e bootstrap servers lstrip SASL SSL opts=opts sasl mechanism= plain sasl username=confluent environment apply lambda e e environment credentials api key sasl password=confluent environment apply lambda e e environment credentials api secret tls enabled=True timeout=120 ``` and getting this error ``` kafka index Topic logs topic error 1 error occurred kafka server The client is not authorized to access this topic ``` I have given the service account attached to my API key the `CloudClusterAdmin` entitlement and have confirmed with the confluent CLI that the API key can create a topic in the cluster Any ideas what might be going wrong here

broad-dog-22463 · Answer

Hi < rough hydrogen 27449> how are you usubg that provider that you instantiated

rough-hydrogen-27449 · Answer

I m passing it in via the `opts` parameter in the `Topic` constructor like this ``` kafka Topic logs topic opts=pulumi ResourceOptions provider=provider name= logs replication factor=1 partitions=1 ```

rough-hydrogen-27449 · Answer

Is it possible that the underlying provider code is unable to use an API key secret combo IIRC the v1 ccloud CLI required a meatspace username e g email and password It didn t seem to work with service account credentials

broad-dog-22463 · Answer

if you run `pulumi up` with the following TF LOG=1 pulumi up v=9 logtostderr

broad-dog-22463 · Answer

are you able to see the correct config for the provider

rough-hydrogen-27449 · Answer

yes and I see ```I1216 16 59 49 658760 14465 eventsink go 59 resource registration successful ty=pulumi providers kafka urn=urn pulumi jgrillo sandbox grapl pulumi providers kafka kafka provider```

rough-hydrogen-27449 · Answer

and I saw this ```I1216 16 59 51 467635 14465 eventsink go 59 lazy client init MISSING s lt nil gt config 0xc00012d8d8 120 true true lt API KEY gt plain I1216 16 59 51 468102 14465 eventsink go 62 eventSink Debug lt reset gt lazy client init s lt nil gt config 0xc00012d8d8 120 true true lt API KEY gt plain lt reset gt I1216 16 59 51 471148 14465 eventsink go 59 Timeout is 2m0s I1216 16 59 51 471599 14465 eventsink go 62 eventSink Debug lt reset gt Timeout is 2m0s lt reset gt I1216 16 59 51 477125 14465 provider plugin go 1531 provider received rpc error `Unknown` `1 error occurred kafka server The client is not authorized to access this topic ` I1216 16 59 51 477394 14465 provider plugin go 1534 rpc error kind `Unknown` may not be recoverable I1216 16 59 51 477632 14465 provider plugin go 760 Provider kafka 0xc0010db1a0 Create urn pulumi jgrillo sandbox grapl kafka index topic Topic logs topic failed 1 error occurred kafka server The client is not authorized to access this topic ``` in these logs I replaced my API key with ` lt API KEY gt ` out of an abundance of caution