This message was deleted.
# golangs
sparse-intern-71089
03/04/2021, 5:56 PMThis message was deleted.
✅ 1
i
icy-london-58403
03/04/2021, 5:58 PMI need this to happen in the same pulumi up command so the same execution that creates the VPC also creates the firewall and the subnets and the route tables.
b
billowy-army-68599
03/04/2021, 6:06 PM
@icy-london-58403 you can range over it, but you'll need to use an
applynetworkfirewall.FirewallFirewallStatusArrayOutputArrayOutputi
icy-london-58403
03/04/2021, 6:14 PM@billowy-army-68599 let me give it a try. Thanks
icy-london-58403
03/04/2021, 10:20 PM@billowy-army-68599 any chance you know what’s wrong with this?
Copy code
func (vpc *VPC) GetFirewallEndpointIDByZone(ctx *pulumi.Context, zone string) pulumi.StringOutput {
ready := pulumi.All(vpc.NetworkFirewall.FirewallStatuses)
return ready.ApplyT(func(statuses []networkfirewall.FirewallFirewallStatus) string {
found := false
for _, status := range statuses {
for _, syncState := range status.SyncStates {
getZoneResult, err := aws.GetAvailabilityZone(ctx, &aws.GetAvailabilityZoneArgs{
AllAvailabilityZones: nil,
Filters: []aws.GetAvailabilityZoneFilter{},
Name: syncState.AvailabilityZone,
State: nil,
ZoneId: nil,
})
if err != nil {
ctx.Log.Error(fmt.Sprintf("Error: %s", err), nil)
}
if getZoneResult.ZoneId == zone {
found = true
return *syncState.Attachments[0].EndpointId
}
}
}
if !found {
ctx.Log.Error(fmt.Sprintf("Error: Could not find firewall endpoint id in zone %s", zone), nil)
}
return ""
}).(pulumi.StringOutput)
}panic: applier must have 1 input parameter assignable from []interface {}
b
billowy-army-68599
03/04/2021, 10:20 PM
hmm, not offhand. @lemon-agent-27707 any ideas?
w
white-balloon-205
03/05/2021, 9:35 AM
Why did you want to use
AllArrayOutput[]interface{}i
icy-london-58403
03/05/2021, 4:10 PM@white-balloon-205
Allicy-london-58403
03/05/2021, 4:22 PMim trying it without
icy-london-58403
03/05/2021, 4:26 PMThat did it!
icy-london-58403
03/05/2021, 4:27 PM Copy code
// GetFirewallEndpointIDByZone
func (vpc *VPC) GetFirewallEndpointIDByZone(ctx *pulumi.Context, zone string) pulumi.StringOutput {
ready := vpc.NetworkFirewall.FirewallStatuses
return ready.ApplyT(func(statuses []networkfirewall.FirewallFirewallStatus) string {
found := false
for _, status := range statuses {
for _, syncState := range status.SyncStates {
getZoneResult, err := aws.GetAvailabilityZone(ctx, &aws.GetAvailabilityZoneArgs{
AllAvailabilityZones: nil,
Filters: []aws.GetAvailabilityZoneFilter{},
Name: syncState.AvailabilityZone,
State: nil,
ZoneId: nil,
})
if err != nil {
ctx.Log.Error(fmt.Sprintf("Error: %s", err), nil)
}
if getZoneResult.ZoneId == zone {
found = true
return *syncState.Attachments[0].EndpointId
}
}
}
if !found {
ctx.Log.Error(fmt.Sprintf("Error: Could not find firewall endpoint id in zone %s", zone), nil)
}
return ""
}).(pulumi.StringOutput)
}icy-london-58403
03/05/2021, 4:27 PM@white-balloon-205 and @billowy-army-68599 thanks so much 😃
icy-london-58403
03/05/2021, 4:31 PMBuilding a Proof of Concept Multip VPC Cross Account network that utilizes the AWS Network Firewall and Transit Gateway to share NAT gateways to all other VPCs as well as provide firewall rules for ingress and egress.
I wouldn’t mind contributing it to some examples repo when I’m done -- if such a thing exists or is needed.
icy-london-58403
03/05/2021, 4:31 PMDiagram is work in progress too. But it’s roughly correct
w
white-balloon-205
03/06/2021, 4:32 AM
Awesome! We’re working on pulling together a site to link out to great components/examples - this looks like a great addition. @billowy-army-68599 is likely the right person to help make sure this gets added there!
👍 1
4 Views