Update AWS OIDC examples #1657
Merged
Update AWS OIDC examples #1657
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…ertificate So no need to use openssl
|
🍹 The Update for pulumi/k8s-ci-cluster/ef471e8adfbd075898d74b622cd33621df8006a9-1805 was successful. Resource Changes Name Type Operation
+ primary-node-pool gcp:container/nodePool:NodePool create
+ gke pulumi:providers:kubernetes create
+ k8s-ci-cluster-ef471e8adfbd075898d74b622cd33621df8006a9-1805 pulumi:pulumi:Stack create
+ multicloud pulumi-kubernetes:ci:GkeCluster create
+ password random:index/randomPassword:RandomPassword create
+ ephemeral-ci-cluster gcp:container/cluster:Cluster create
|
|
🍹 The Update for pulumi/k8s-ci-cluster/6e2f671de426c140920a00a013660f8d3d56b483-1806 was successful. Resource Changes Name Type Operation
+ k8s-ci-cluster-6e2f671de426c140920a00a013660f8d3d56b483-1806 pulumi:pulumi:Stack create
+ multicloud pulumi-kubernetes:ci:GkeCluster create
+ password random:index/randomPassword:RandomPassword create
+ ephemeral-ci-cluster gcp:container/cluster:Cluster create
+ primary-node-pool gcp:container/nodePool:NodePool create
+ gke pulumi:providers:kubernetes create
|
|
🍹 The Destroy for pulumi/k8s-ci-cluster/ef471e8adfbd075898d74b622cd33621df8006a9-1805 was successful. Resource Changes Name Type Operation
- k8s-ci-cluster-ef471e8adfbd075898d74b622cd33621df8006a9-1805 pulumi:pulumi:Stack delete
- gke pulumi:providers:kubernetes delete
- primary-node-pool gcp:container/nodePool:NodePool delete
- ephemeral-ci-cluster gcp:container/cluster:Cluster delete
- multicloud pulumi-kubernetes:ci:GkeCluster delete
- password random:index/randomPassword:RandomPassword delete
|
|
🍹 The Destroy for pulumi/k8s-ci-cluster/6e2f671de426c140920a00a013660f8d3d56b483-1806 was successful. Resource Changes Name Type Operation
- gke pulumi:providers:kubernetes delete
- primary-node-pool gcp:container/nodePool:NodePool delete
- ephemeral-ci-cluster gcp:container/cluster:Cluster delete
- multicloud pulumi-kubernetes:ci:GkeCluster delete
- password random:index/randomPassword:RandomPassword delete
- k8s-ci-cluster-6e2f671de426c140920a00a013660f8d3d56b483-1806 pulumi:pulumi:Stack delete
|
desteves
reviewed
Jul 2, 2024
|
|
||
| # Create an OIDC identity provider | ||
| print("Creating OIDC provider...") | ||
| oidc_provider = iam.OpenIdConnectProvider("oidcProvider", | ||
| client_id_lists=[audience], | ||
| thumbprint_lists=[thumbprint], | ||
| thumbprint_lists=[certificate.certificates[0].sha1_fingerprint], |
There was a problem hiding this comment.
If you run this:
import * as tls from "@pulumi/tls";
export = async () => {
const certs = tls.getCertificateOutput({
url: "https://api.pulumi.com/oidc"
});
return {
thumbprint: certs.certificates[0].sha1Fingerprint
}
}the thumbprint is the same as what's in IAM > Identity Providers > api.pulumi.com/oidc
and look at the thumbprint value.
There was a problem hiding this comment.
9e99a48a9960b14926bb7f3b02e22da2b0ab7280
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Now using the tls provider to get the thumbprints required for the oidcprovider