This message was deleted.

Isn't

assume_role_policy=pulumi.Output.json_dumps()

good enough?

Output.json_dumps()

should be able to unwrap outputs for you. in Typescript

assume_role_policy

can now accept object directly (most of the time) and when it cannot, you can use `pulumi.interpolate`JSON.stringiy(obj)`

pulumi.interpolate

is somewhat python equivalent of

pulumi.Output.format

so in TS it would look like this:

assumeRolePolicy={...props..}

// or

assumeRolePolicy=pulumi.interpolate`JSON.stringify({...props...}`

what about oidc_provider_url? that is a key

this is exactly it

pulumi.interpolate`JSON.stringify({...props...}`

so, how I know when i need to use interpolate or I can writ the props directly?

That f'' string needs the apply. But I'd write it as the following for python:

assume_role_policy=pulumi.Output.json_dumps(
    {
        "Version": "2012-10-17",
        "Statement": [
            {
                "Effect": "Allow",
                "Action": "sts:AssumeRoleWithWebIdentity",
                "Principal": {"Federated": eks_cluster.core.oidc_provider.arn},
                "Condition": {
                    "StringEquals": {
                        pulumi.Output.format("{0}:aud", eks_cluster.core.oidc_provider.url): ["<http://sts.amazonaws.com|sts.amazonaws.com>"]
                    }
                },
            }
        ],
    }
)

no no, I mean, the code in Python is working, I'm trying to translate it to typescript

just try it and run

pulumi preview

you'll see the policy result it depends on the what type is accepted by the input for example

aws.iamRole

accepts

assumeRolePolicy: pulumi.Input<string | aws.iam.PolicyDocument

I'd do this in TS

{
                "Version": "2012-10-17",
                "Statement": [
                    {
                        "Effect": "Allow",
                        "Action": "sts:AssumeRoleWithWebIdentity",
                        "Principal": {"Federated": eks_cluster.core.oidc_provider.arn},
                        "Condition": {
                            "StringEquals": {pulumi.interpolate`${eks_cluster.core.oidc_provider.url}:aud`: ["<http://sts.amazonaws.com|sts.amazonaws.com>"]}
                        },
                    }
                ],
            }

I understand that this means that I need to use interpolate, right?

this means that you are referencing something which does not exist

and this? 😂 does this mean that I need interpolate?

no again that's because it might be undefined and that property doesn't expect undefined

but that property exists

That

.?

can cause the whole expression to be

undefined

why that property is marked with that

?

?

Because it's optional and might be undefined

yes, It will not be empty because I set to true the

createOidcProvider

in the cluster

yeh I want to play with that at some point, but I think TS needs to do the apply here so you can have a string key

then I should put the entire policy inside of an apply like in python right?

Yup, although python does support Output keys in dicts so you could not use an apply there! Probably best to just try to keep the two as similar as possible though

Sorry for not following you at all... what I have now is this and I'm trying to set the oidcProviderUrl fat line 13 key, it should be a variable or a concatenated string, what do you mean by keeping the two as similar as possible?

Use an apply, just like you did in Python

ok, let me try, but do you mean that this is also the common way to do it in typescript? I don't need to have similar codes between python and typescript, I want to know the ts way

I think in typescript you have to use an apply In python you can use an apply OR an output as a key Given you're working in both langauges I'd just do the apply in both

Nice, this is working, any suggestion to simplify it or it is already ok?

looks fine to me

I mean, I'm directly using output in the line 10 and using the apply method in line 13, is there any way to homogenize this? Myabe using .all?

you could but it's not needed

just trying to have the code as clean as possible 😅 , let me try