This message was deleted.

Here's what I have that failing 😕

def create_route53_zone(org_id):
    return aws.route53.Zone(f'shared-hosted-zone-{org_id}', name=f'{org_id}.<http://getbuildbot.com|getbuildbot.com>')


def create_certificate(org_id):
    return aws_acm.Certificate(f'shared-certificate-{org_id}',
                               domain_name=f'{org_id}.<http://getbuildbot.com|getbuildbot.com>',
                               subject_alternative_names=f'*.{org_id}.<http://getbuildbot.com|getbuildbot.com>',
                               tags={
                                   "deployed_by": "Pulumi",
                                   "Name": {org_id},
                               },
                               validation_method="DNS")


def create_records(org_id, domain_validation_options, zone_id):
    validation_record_fqdns = []
    i = 0
    for dvo in domain_validation_options:
        cert_validation = aws.route53.Record(f'{org_id}-record-{i}',
                                             name=dvo['resourceRecordName'],
                                             records=[dvo['resourceRecordValue']],
                                             ttl=300,
                                             type=dvo['resourceRecordType'],
                                             zone_id=zone_id,
                                             opts=pulumi.ResourceOptions(delete_before_replace=True))
        i += 1
        validation_record_fqdns.append(cert_validation.fqdn)
    return validation_record_fqdns


def validate_certificate(org_id, certificate, fqdns):
    return aws_acm.CertificateValidation(f'{org_id}-validation',
                                         certificate_arn=certificate,
                                         validation_record_fqdns=fqdns)


def create_and_validate_hosted_zone(org_id):
    hosted_zone = create_route53_zone(org_id=org_id)
    certificate = create_certificate(org_id=org_id)
    fqdns = certificate.domain_validation_options.apply(lambda domain_validation_options: create_records(org_id=org_id,
                                                                                                         domain_validation_options=domain_validation_options,
                                                                                                         zone_id=hosted_zone.zone_id))

    validate_certificate(org_id=org_id, certificate=certificate.arn, fqdns=fqdns)
    return {
        "hosted_zone": hosted_zone,
        "certificate_arn": certificate.arn
    }

Can you avoid iterating? I know how many domain validation options are in my certificate, and Pulumi lifts all the values out fine, so I can create my records without looping.

Ooo. Great idea! Yes, I definition no how many options there are ahead of time. Let me try this out and see if it works!

Huh that error is indeed confusing. Is that the whole error?

@red-match-15116 Well, the only part that's intelligible for me. 😂

Hah yeah that’s fair, that error trace could definitely use some clearing up. I can’t say I can tell just from a quick glance what the issue is, I agree I don’t see any sets! Can you try commenting out just the

validate_certificate

bit and see if that works? I have a hunch it might have something to do with fqdns

Can you inspect/log the values of

certificate.domain_validation_options[0].resource_record_type

(and [1])? I didn't get a good value back for those so I hard-coded CNAME..

@little-cartoon-10569 @red-match-15116 Shucks! Didn't work 😕 Same error. I know it's related though because if I remove the function that creates all of this, the stack deploys fine.

Oh! I think it might be because of the Name tag being passed in as

{org_id}

(which is a set containing the item

org_id

) - can you try it without the curly braces?

Thanks! I'll try that too! And actually, the stack launched successfully (no more errors at least!) but when I added back the validate certificate resource, it started hanging on the validation of the certificate. Do you happen to have any experience with that / and/or how long it's supposed to take to validate? I remember when I used terraform I eventually just gave up and did it manually 😂 But maybe I'm missing something in my code somewhere?

Hmm that I do not know! You might be able to get more specific help from the #CRH5ENVDX channel in that regard.

thanks @red-match-15116! You've been awesome!

Validation happens really fast for me.. under a second.