No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

you can get kubeconfig from the freshly created GKE cluster within pulumi stack

I remember if was kinda tricky though. Let me take a look at my project, maybe I’ll be able to copy’n’paste you some code snippet :slightly_smiling_face:

how? the only method I see on `Cluster` that might relate is `masterAuth`

(code is from python but you should be able to “translate” that to other lang pretty easily)

first of all, kubeconfig template:
```GKE_KUBECONFIG_TEMPLATE = """
apiVersion: v1
clusters:
- cluster:
    certificate-authority-data: {0}
    server: https://{1}
  name: {2}
contexts:
- context:
    cluster: {2}
    user: {2}
  name: {2}
current-context: {2}
kind: Config
preferences: {{}}
users:
- name: {2}
  user:
    auth-provider:
      config:
        cmd-args: config config-helper --format=json
        cmd-path: gcloud
        expiry-key: '{{.credential.token_expiry}}'
        token-key: '{{.credential.access_token}}'
      name: gcp
"""```

considering that `self.cluster` in this context is an instance of `gcp.container.Cluster`:
```        #
        # Generate kubeconfig
        #
        k8s_info = pulumi.Output.all(
            self.cluster.name,  # 0
            self.cluster.endpoint,  # 1
            self.cluster.master_auth,  # 2
            self.cluster.project,  # 3
            self.cluster.location,  # 4
        )
        self.kubeconfig = k8s_info.apply(
            lambda info: GKE_KUBECONFIG_TEMPLATE.format(
                info[2]["cluster_ca_certificate"],
                info[1],
                "{0}_{1}_{2}".format(info[3], info[4], info[0]),
            )
        )```

then you can create a k8s provider:
```k8s_provider = k8s.Provider(
    "k8s-provider",
=&gt;  kubeconfig=kubeconfig,
)```

you just have to remember to pass this provider to all k8s resources you’re gonna create using `pulumi.ResourceOptions` and `provider` option

additionally, take a look at this example:
<https://github.com/pulumi/examples/tree/master/gcp-py-gke>

huzzah it works!

Typescript template:
```function kubeConfigTemplate(
  clusterName: Output&lt;string&gt;,
  endpoint: Output&lt;string&gt;,
  clusterCaCert: Output&lt;string&gt;
) {
  return pulumi.interpolate`
apiVersion: v1
clusters:
- cluster:
    certificate-authority-data: ${clusterCaCert}
    server: https://${endpoint}
  name: ${clusterName}
contexts:
- context:
    cluster: ${clusterName}
    user: ${clusterName}
  name: ${clusterName}
current-context: ${clusterName}
kind: Config
preferences: {}
users:
- name: ${clusterName}
  user:
    auth-provider:
      config:
        cmd-args: config config-helper --format=json
        cmd-path: gcloud
        expiry-key: '{.credential.token_expiry}'
        token-key: '{.credential.access_token}'
      name: gcp
  `;
}```
Thank you <@U0288KYUB7C> for the help!