arnoschutijzer/pulumi-as-a-service

pulumi-as-a-service

Example repository on how the automation API could work. Don't expect many updates.

requirements

We assume you have the following utilities installed and configured:

• pulumi
• aws-vault
• aws-cli

Familiarise yourself with these tools before continuing.

# Authenticate with AWS
$ aws-vault exec some-aws-account
# Tell pulumi to use the KMS encryption key to encrypt the state
$ export KMS_KEY_ALIAS=pulumi-secrets-encryption-key
# Tell pulumi to use the state bucket you have created
$ export PULUMI_BACKEND_URL=s3://arno-pulumi-state-bucket-deleteme

interesting reads, pulumi docs & gotcha's

Pulumi Environment Variables

When using a custom backend, you have to persist the StackSettings as well. See pulumi/automation-api-examples#4 (comment).

Pulumi generates stack settings files in the form of Pulumi.yaml and Pulumi.dev.yaml. These files seem redundant as they are regenerated each time.

Use the AWS KMS secrets provider instead of a passphrase. See https://github.com/pulumi/automation-api-examples/blob/main/nodejs/inlineSecretsProvider-ts/index.ts#L75.

Don't use direct imports for infrastructure resources, see pulumi/pulumi-aws#772.

For example:

// won't work
import { Bucket } from "@pulumi/aws/s3";

// will work
import * as aws from "@pulumi/aws";
const bucket = new aws.s3.Bucket();

Check out the unit testing docs since there are a few gotcha's.

pulumi-as-a-service's Issues

cross-account infra?

remove history + backups

Figure out if we can remove the full history and backups of a stack.

use yarn

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

This repository currently has no open or pending branches.

Detected dependencies

github-actions

.github/workflows/build.yml

• actions/checkout v3
• actions/setup-node v3
• borales/actions-yarn v3.0.0
• borales/actions-yarn v3.0.0
• borales/actions-yarn v3.0.0
• borales/actions-yarn v3.0.0

npm

api/package.json

• @types/jest 29.2.2
• jest 29.2.2
• nodemon 2.0.20
• prettier 2.7.1
• ts-jest 29.0.3

cli/package.json

• ts-node ^10.4.0
• yargs ^17.2.1
• @types/jest 29.2.2
• @types/node 18.11.9
• jest 29.2.2
• prettier 2.7.1
• typescript 4.8.4

core/package.json

• @pulumi/aws ^5.0.0
• @pulumi/pulumi ^3.16.0
• @types/express ^4.17.13
• express ^4.17.1
• ts-node ^10.8.2
• typescript ^4.4.4
• @types/jest 29.2.2
• jest 29.2.2
• prettier 2.7.1
• ts-jest 29.0.3

package.json

---

• Check this box to trigger a request for Renovate to run again on this repository

Programatically configure remote backend

Figure out how we can configure the backend at run-time.

Action Required: Fix Renovate Configuration

There is an error with this repository's Renovate configuration that needs to be fixed. As a precaution, Renovate will stop PRs until it is resolved.

Error type: Cannot find preset's package (local>refsiverdur/renovate-config)