Skip to content

Instantly share code, notes, and snippets.

@KingNoosh
Last active May 26, 2023 13:52
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save KingNoosh/5da1f4cb5d0a5ba84575f11961cd67db to your computer and use it in GitHub Desktop.
Save KingNoosh/5da1f4cb5d0a5ba84575f11961cd67db to your computer and use it in GitHub Desktop.
2023-05-26T13:27:52.4706648Z Requested labels: ubuntu-latest
2023-05-26T13:27:52.4707034Z Job defined at: *****/platform-infra/.github/workflows/development.yml@refs/heads/main
2023-05-26T13:27:52.4707202Z Waiting for a runner to pick up this job...
2023-05-26T13:27:53.1846455Z Job is waiting for a hosted runner to come online.
2023-05-26T13:27:55.8655342Z Job is about to start running on the hosted runner: GitHub Actions 2 (hosted)
2023-05-26T13:27:58.7248808Z Current runner version: '2.304.0'
2023-05-26T13:27:58.7282545Z ##[group]Operating System
2023-05-26T13:27:58.7283291Z Ubuntu
2023-05-26T13:27:58.7283684Z 22.04.2
2023-05-26T13:27:58.7284166Z LTS
2023-05-26T13:27:58.7284572Z ##[endgroup]
2023-05-26T13:27:58.7285101Z ##[group]Runner Image
2023-05-26T13:27:58.7285542Z Image: ubuntu-22.04
2023-05-26T13:27:58.7285982Z Version: 20230507.1
2023-05-26T13:27:58.7286625Z Included Software: https://github.com/actions/runner-images/blob/ubuntu22/20230507.1/images/linux/Ubuntu2204-Readme.md
2023-05-26T13:27:58.7287453Z Image Release: https://github.com/actions/runner-images/releases/tag/ubuntu22%2F20230507.1
2023-05-26T13:27:58.7288069Z ##[endgroup]
2023-05-26T13:27:58.7288537Z ##[group]Runner Image Provisioner
2023-05-26T13:27:58.7288979Z 2.0.171.1
2023-05-26T13:27:58.7289376Z ##[endgroup]
2023-05-26T13:27:58.7290605Z ##[group]GITHUB_TOKEN Permissions
2023-05-26T13:27:58.7291456Z Actions: write
2023-05-26T13:27:58.7291871Z Checks: write
2023-05-26T13:27:58.7292448Z Contents: write
2023-05-26T13:27:58.7293086Z Deployments: write
2023-05-26T13:27:58.7293508Z Discussions: write
2023-05-26T13:27:58.7293887Z Issues: write
2023-05-26T13:27:58.7294306Z Metadata: read
2023-05-26T13:27:58.7294715Z Packages: write
2023-05-26T13:27:58.7295107Z Pages: write
2023-05-26T13:27:58.7295508Z PullRequests: write
2023-05-26T13:27:58.7295996Z RepositoryProjects: write
2023-05-26T13:27:58.7296431Z SecurityEvents: write
2023-05-26T13:27:58.7296852Z Statuses: write
2023-05-26T13:27:58.7297244Z ##[endgroup]
2023-05-26T13:27:58.7301335Z Secret source: Actions
2023-05-26T13:27:58.7301969Z Prepare workflow directory
2023-05-26T13:27:58.8182463Z Prepare all required actions
2023-05-26T13:27:58.8404835Z Getting action download info
2023-05-26T13:27:59.1800555Z Download action repository 'actions/checkout@v3' (SHA:8e5e7e5ab8b370d6c329ec480221332ada57f0ab)
2023-05-26T13:27:59.8492571Z Download action repository 'actions/setup-node@v3' (SHA:64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c)
2023-05-26T13:28:00.4603733Z Download action repository 'pulumi/actions@v4' (SHA:b8fd87f2cc23aaf9f686fc38db7cd813cc303229)
2023-05-26T13:28:01.2173778Z Complete job name: cluster-configuration
2023-05-26T13:28:01.3435935Z ##[group]Run actions/checkout@v3
2023-05-26T13:28:01.3436325Z with:
2023-05-26T13:28:01.3436636Z repository: ****/platform-infra
2023-05-26T13:28:01.3437271Z token: ***
2023-05-26T13:28:01.3437540Z ssh-strict: true
2023-05-26T13:28:01.3437830Z persist-credentials: true
2023-05-26T13:28:01.3438123Z clean: true
2023-05-26T13:28:01.3438381Z fetch-depth: 1
2023-05-26T13:28:01.3438637Z lfs: false
2023-05-26T13:28:01.3438876Z submodules: false
2023-05-26T13:28:01.3439170Z set-safe-directory: true
2023-05-26T13:28:01.3439461Z ##[endgroup]
2023-05-26T13:28:01.6637551Z Syncing repository: ****/platform-infra
2023-05-26T13:28:01.6639520Z ##[group]Getting Git version info
2023-05-26T13:28:01.6640151Z Working directory is '/home/runner/work/platform-infra/platform-infra'
2023-05-26T13:28:01.6640857Z [command]/usr/bin/git version
2023-05-26T13:28:01.6725130Z git version 2.40.1
2023-05-26T13:28:01.6757712Z ##[endgroup]
2023-05-26T13:28:01.6779532Z Temporarily overriding HOME='/home/runner/work/_temp/97cb6fa8-7289-4190-a76c-b2871465bb79' before making global git config changes
2023-05-26T13:28:01.6780150Z Adding repository directory to the temporary git global config as a safe directory
2023-05-26T13:28:01.6786488Z [command]/usr/bin/git config --global --add safe.directory /home/runner/work/platform-infra/platform-infra
2023-05-26T13:28:01.6843230Z Deleting the contents of '/home/runner/work/platform-infra/platform-infra'
2023-05-26T13:28:01.6849608Z ##[group]Initializing the repository
2023-05-26T13:28:01.6854190Z [command]/usr/bin/git init /home/runner/work/platform-infra/platform-infra
2023-05-26T13:28:01.6944587Z hint: Using 'master' as the name for the initial branch. This default branch name
2023-05-26T13:28:01.6945776Z hint: is subject to change. To configure the initial branch name to use in all
2023-05-26T13:28:01.6946750Z hint: of your new repositories, which will suppress this warning, call:
2023-05-26T13:28:01.6947099Z hint:
2023-05-26T13:28:01.6947914Z hint: git config --global init.defaultBranch <name>
2023-05-26T13:28:01.6948255Z hint:
2023-05-26T13:28:01.6948708Z hint: Names commonly chosen instead of 'master' are 'main', 'trunk' and
2023-05-26T13:28:01.6949285Z hint: 'development'. The just-created branch can be renamed via this command:
2023-05-26T13:28:01.6949651Z hint:
2023-05-26T13:28:01.6949968Z hint: git branch -m <name>
2023-05-26T13:28:01.6959358Z Initialized empty Git repository in /home/runner/work/platform-infra/platform-infra/.git/
2023-05-26T13:28:01.6976588Z [command]/usr/bin/git remote add origin https://github.com/****/platform-infra
2023-05-26T13:28:01.7030221Z ##[endgroup]
2023-05-26T13:28:01.7031586Z ##[group]Disabling automatic garbage collection
2023-05-26T13:28:01.7038193Z [command]/usr/bin/git config --local gc.auto 0
2023-05-26T13:28:01.7074120Z ##[endgroup]
2023-05-26T13:28:01.7074899Z ##[group]Setting up auth
2023-05-26T13:28:01.7081878Z [command]/usr/bin/git config --local --name-only --get-regexp core\.sshCommand
2023-05-26T13:28:01.7121302Z [command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :"
2023-05-26T13:28:01.7568876Z [command]/usr/bin/git config --local --name-only --get-regexp http\.https\:\/\/github\.com\/\.extraheader
2023-05-26T13:28:01.7605307Z [command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'http\.https\:\/\/github\.com\/\.extraheader' && git config --local --unset-all 'http.https://github.com/.extraheader' || :"
2023-05-26T13:28:01.7869184Z [command]/usr/bin/git config --local http.https://github.com/.extraheader AUTHORIZATION: basic ***
2023-05-26T13:28:01.7916261Z ##[endgroup]
2023-05-26T13:28:01.7917229Z ##[group]Fetching the repository
2023-05-26T13:28:01.7928921Z [command]/usr/bin/git -c protocol.version=2 fetch --no-tags --prune --progress --no-recurse-submodules --depth=1 origin +5eb0e2f3dd8031c8ec445fa743bb5557877850d4:refs/remotes/origin/main
2023-05-26T13:28:02.3170467Z remote: Enumerating objects: 46, done.
2023-05-26T13:28:02.3171420Z remote: Counting objects: 2% (1/46)
2023-05-26T13:28:02.3173217Z remote: Counting objects: 4% (2/46)
2023-05-26T13:28:02.3173779Z remote: Counting objects: 6% (3/46)
2023-05-26T13:28:02.3174441Z remote: Counting objects: 8% (4/46)
2023-05-26T13:28:02.3175241Z remote: Counting objects: 10% (5/46)
2023-05-26T13:28:02.3175896Z remote: Counting objects: 13% (6/46)
2023-05-26T13:28:02.3176607Z remote: Counting objects: 15% (7/46)
2023-05-26T13:28:02.3177349Z remote: Counting objects: 17% (8/46)
2023-05-26T13:28:02.3178034Z remote: Counting objects: 19% (9/46)
2023-05-26T13:28:02.3178722Z remote: Counting objects: 21% (10/46)
2023-05-26T13:28:02.3179313Z remote: Counting objects: 23% (11/46)
2023-05-26T13:28:02.3180017Z remote: Counting objects: 26% (12/46)
2023-05-26T13:28:02.3180704Z remote: Counting objects: 28% (13/46)
2023-05-26T13:28:02.3181380Z remote: Counting objects: 30% (14/46)
2023-05-26T13:28:02.3182069Z remote: Counting objects: 32% (15/46)
2023-05-26T13:28:02.3182842Z remote: Counting objects: 34% (16/46)
2023-05-26T13:28:02.3183340Z remote: Counting objects: 36% (17/46)
2023-05-26T13:28:02.3183964Z remote: Counting objects: 39% (18/46)
2023-05-26T13:28:02.3184912Z remote: Counting objects: 41% (19/46)
2023-05-26T13:28:02.3185597Z remote: Counting objects: 43% (20/46)
2023-05-26T13:28:02.3186112Z remote: Counting objects: 45% (21/46)
2023-05-26T13:28:02.3186588Z remote: Counting objects: 47% (22/46)
2023-05-26T13:28:02.3187321Z remote: Counting objects: 50% (23/46)
2023-05-26T13:28:02.3187904Z remote: Counting objects: 52% (24/46)
2023-05-26T13:28:02.3188722Z remote: Counting objects: 54% (25/46)
2023-05-26T13:28:02.3189637Z remote: Counting objects: 56% (26/46)
2023-05-26T13:28:02.3190184Z remote: Counting objects: 58% (27/46)
2023-05-26T13:28:02.3190944Z remote: Counting objects: 60% (28/46)
2023-05-26T13:28:02.3191772Z remote: Counting objects: 63% (29/46)
2023-05-26T13:28:02.3192574Z remote: Counting objects: 65% (30/46)
2023-05-26T13:28:02.3193119Z remote: Counting objects: 67% (31/46)
2023-05-26T13:28:02.3193879Z remote: Counting objects: 69% (32/46)
2023-05-26T13:28:02.3194414Z remote: Counting objects: 71% (33/46)
2023-05-26T13:28:02.3195180Z remote: Counting objects: 73% (34/46)
2023-05-26T13:28:02.3195714Z remote: Counting objects: 76% (35/46)
2023-05-26T13:28:02.3196473Z remote: Counting objects: 78% (36/46)
2023-05-26T13:28:02.3197009Z remote: Counting objects: 80% (37/46)
2023-05-26T13:28:02.3197815Z remote: Counting objects: 82% (38/46)
2023-05-26T13:28:02.3198373Z remote: Counting objects: 84% (39/46)
2023-05-26T13:28:02.3199143Z remote: Counting objects: 86% (40/46)
2023-05-26T13:28:02.3199686Z remote: Counting objects: 89% (41/46)
2023-05-26T13:28:02.3200441Z remote: Counting objects: 91% (42/46)
2023-05-26T13:28:02.3200974Z remote: Counting objects: 93% (43/46)
2023-05-26T13:28:02.3201738Z remote: Counting objects: 95% (44/46)
2023-05-26T13:28:02.3202268Z remote: Counting objects: 97% (45/46)
2023-05-26T13:28:02.3203036Z remote: Counting objects: 100% (46/46)
2023-05-26T13:28:02.3203584Z remote: Counting objects: 100% (46/46), done.
2023-05-26T13:28:02.3204380Z remote: Compressing objects: 3% (1/32)
2023-05-26T13:28:02.3204944Z remote: Compressing objects: 6% (2/32)
2023-05-26T13:28:02.3205721Z remote: Compressing objects: 9% (3/32)
2023-05-26T13:28:02.3206858Z remote: Compressing objects: 12% (4/32)
2023-05-26T13:28:02.3209996Z remote: Compressing objects: 15% (5/32)
2023-05-26T13:28:02.3211306Z remote: Compressing objects: 18% (6/32)
2023-05-26T13:28:02.3213943Z remote: Compressing objects: 21% (7/32)
2023-05-26T13:28:02.3214575Z remote: Compressing objects: 25% (8/32)
2023-05-26T13:28:02.3215399Z remote: Compressing objects: 28% (9/32)
2023-05-26T13:28:02.3215988Z remote: Compressing objects: 31% (10/32)
2023-05-26T13:28:02.3216778Z remote: Compressing objects: 34% (11/32)
2023-05-26T13:28:02.3217370Z remote: Compressing objects: 37% (12/32)
2023-05-26T13:28:02.3218160Z remote: Compressing objects: 40% (13/32)
2023-05-26T13:28:02.3218740Z remote: Compressing objects: 43% (14/32)
2023-05-26T13:28:02.3220058Z remote: Compressing objects: 46% (15/32)
2023-05-26T13:28:02.3220652Z remote: Compressing objects: 50% (16/32)
2023-05-26T13:28:02.3223535Z remote: Compressing objects: 53% (17/32)
2023-05-26T13:28:02.3226566Z remote: Compressing objects: 56% (18/32)
2023-05-26T13:28:02.3228126Z remote: Compressing objects: 59% (19/32)
2023-05-26T13:28:02.3228800Z remote: Compressing objects: 62% (20/32)
2023-05-26T13:28:02.3229621Z remote: Compressing objects: 65% (21/32)
2023-05-26T13:28:02.3230197Z remote: Compressing objects: 68% (22/32)
2023-05-26T13:28:02.3230979Z remote: Compressing objects: 71% (23/32)
2023-05-26T13:28:02.3231717Z remote: Compressing objects: 75% (24/32)
2023-05-26T13:28:02.3232603Z remote: Compressing objects: 78% (25/32)
2023-05-26T13:28:02.3233159Z remote: Compressing objects: 81% (26/32)
2023-05-26T13:28:02.3233938Z remote: Compressing objects: 84% (27/32)
2023-05-26T13:28:02.3234485Z remote: Compressing objects: 87% (28/32)
2023-05-26T13:28:02.3235260Z remote: Compressing objects: 90% (29/32)
2023-05-26T13:28:02.3235808Z remote: Compressing objects: 93% (30/32)
2023-05-26T13:28:02.3236891Z remote: Compressing objects: 96% (31/32)
2023-05-26T13:28:02.3237456Z remote: Compressing objects: 100% (32/32)
2023-05-26T13:28:02.3238261Z remote: Compressing objects: 100% (32/32), done.
2023-05-26T13:28:02.3605362Z remote: Total 46 (delta 9), reused 36 (delta 9), pack-reused 0
2023-05-26T13:28:02.3796992Z From https://github.com/****/platform-infra
2023-05-26T13:28:02.3797986Z * [new ref] 5eb0e2f3dd8031c8ec445fa743bb5557877850d4 -> origin/main
2023-05-26T13:28:02.3831567Z ##[endgroup]
2023-05-26T13:28:02.3832353Z ##[group]Determining the checkout info
2023-05-26T13:28:02.3834890Z ##[endgroup]
2023-05-26T13:28:02.3836052Z ##[group]Checking out the ref
2023-05-26T13:28:02.3840605Z [command]/usr/bin/git checkout --progress --force -B main refs/remotes/origin/main
2023-05-26T13:28:02.3958995Z Switched to a new branch 'main'
2023-05-26T13:28:02.3963964Z branch 'main' set up to track 'origin/main'.
2023-05-26T13:28:02.3968973Z ##[endgroup]
2023-05-26T13:28:02.4019930Z [command]/usr/bin/git log -1 --format='%H'
2023-05-26T13:28:02.4055785Z '5eb0e2f3dd8031c8ec445fa743bb5557877850d4'
2023-05-26T13:28:02.4441808Z ##[group]Run actions/setup-node@v3
2023-05-26T13:28:02.4442131Z with:
2023-05-26T13:28:02.4442382Z node-version: lts/*
2023-05-26T13:28:02.4442647Z cache: yarn
2023-05-26T13:28:02.4442989Z cache-dependency-path: 03-cluster-config/yarn.lock
2023-05-26T13:28:02.4443337Z always-auth: false
2023-05-26T13:28:02.4443609Z check-latest: false
2023-05-26T13:28:02.4444082Z token: ***
2023-05-26T13:28:02.4444330Z ##[endgroup]
2023-05-26T13:28:02.7162439Z Attempt to resolve LTS alias from manifest...
2023-05-26T13:28:03.3268380Z Found in cache @ /opt/hostedtoolcache/node/18.16.0/x64
2023-05-26T13:28:03.3278893Z ##[group]Environment details
2023-05-26T13:28:04.2940931Z node: v18.16.0
2023-05-26T13:28:04.2941966Z npm: 9.5.1
2023-05-26T13:28:04.2942587Z yarn: 1.22.19
2023-05-26T13:28:04.2944263Z ##[endgroup]
2023-05-26T13:28:04.2978113Z [command]/usr/local/bin/yarn --version
2023-05-26T13:28:04.4978782Z 1.22.19
2023-05-26T13:28:04.5198872Z [command]/usr/local/bin/yarn cache dir
2023-05-26T13:28:04.7374715Z /home/runner/.cache/yarn/v6
2023-05-26T13:28:04.8904451Z yarn cache is not found
2023-05-26T13:28:04.9086116Z ##[group]Run cd 03-cluster-config
2023-05-26T13:28:04.9086660Z cd 03-cluster-config
2023-05-26T13:28:04.9087033Z yarn install
2023-05-26T13:28:04.9157827Z shell: /usr/bin/bash -e {0}
2023-05-26T13:28:04.9158342Z ##[endgroup]
2023-05-26T13:28:05.1384021Z yarn install v1.22.19
2023-05-26T13:28:05.1531429Z warning package.json: No license field
2023-05-26T13:28:05.1958037Z warning cluster-config: No license field
2023-05-26T13:28:05.2007471Z [1/4] Resolving packages...
2023-05-26T13:28:05.3159513Z [2/4] Fetching packages...
2023-05-26T13:28:15.0860643Z [3/4] Linking dependencies...
2023-05-26T13:28:20.3277744Z [4/4] Building fresh packages...
2023-05-26T13:28:31.8870140Z Done in 26.76s.
2023-05-26T13:28:32.1363019Z ##[group]Run aws configure set aws_access_key_id *** --profile development
2023-05-26T13:28:32.1363802Z aws configure set aws_access_key_id *** --profile development
2023-05-26T13:28:32.1364538Z aws configure set aws_secret_access_key *** --profile development
2023-05-26T13:28:32.1365093Z aws configure set region eu-west-2 --profile development
2023-05-26T13:28:32.1365623Z aws configure set output json --profile development
2023-05-26T13:28:32.1427426Z shell: /usr/bin/bash -e {0}
2023-05-26T13:28:32.1427826Z ##[endgroup]
2023-05-26T13:28:39.3966905Z ##[group]Run pulumi/actions@v4
2023-05-26T13:28:39.3967279Z with:
2023-05-26T13:28:39.3967476Z command: up
2023-05-26T13:28:39.3967677Z stack-name: dev
2023-05-26T13:28:39.3968147Z cloud-url: s3://***-platform-infrastructure
2023-05-26T13:28:39.3968486Z work-dir: ./03-cluster-config
2023-05-26T13:28:39.3968764Z pulumi-version: ^3
2023-05-26T13:28:39.3969032Z comment-on-pr: false
2023-05-26T13:28:39.3969649Z github-token: ***
2023-05-26T13:28:39.3969924Z expect-no-changes: false
2023-05-26T13:28:39.3970190Z diff: false
2023-05-26T13:28:39.3970445Z target-dependents: false
2023-05-26T13:28:39.3970706Z refresh: false
2023-05-26T13:28:39.3970946Z upsert: false
2023-05-26T13:28:39.3971181Z remove: false
2023-05-26T13:28:39.3971433Z edit-pr-comment: true
2023-05-26T13:28:39.3971683Z color: auto
2023-05-26T13:28:39.3971937Z exclude-protected: false
2023-05-26T13:28:39.3972202Z env:
2023-05-26T13:28:39.3972488Z AWS_ACCESS_KEY_ID: ***
2023-05-26T13:28:39.3972930Z AWS_SECRET_ACCESS_KEY: ***
2023-05-26T13:28:39.3973203Z AWS_REGION: eu-west-2
2023-05-26T13:28:39.3973481Z PULUMI_CONFIG_PASSPHRASE:
2023-05-26T13:28:39.3973727Z ##[endgroup]
2023-05-26T13:28:39.6456061Z Configured range: ^3
2023-05-26T13:28:39.6521811Z [command]/usr/local/bin/pulumi version
2023-05-26T13:28:39.7783890Z v3.66.0
2023-05-26T13:28:39.7790669Z warning: A new version of Pulumi is available. To upgrade from version '3.66.0' to '3.68.0', visit https://pulumi.com/docs/reference/install/ for manual instructions and release notes.
2023-05-26T13:28:39.7879956Z Pulumi version 3.66.0 is already installed on this machine. Skipping download
2023-05-26T13:28:39.7881527Z Logging into s3://****-platform-infrastructure
2023-05-26T13:28:43.2026431Z ##[group]pulumi up on dev
2023-05-26T13:28:45.8889619Z Updating (dev):
2023-05-26T13:28:45.8889962Z
2023-05-26T13:28:47.3789222Z @ updating....
2023-05-26T13:28:48.3785275Z .
2023-05-26T13:28:49.1743822Z
2023-05-26T13:28:49.1744910Z
2023-05-26T13:28:49.1752904Z
2023-05-26T13:28:49.1753572Z
2023-05-26T13:28:49.3791724Z @ updating....
2023-05-26T13:28:50.3292623Z
2023-05-26T13:28:50.3293238Z + pulumi:pulumi:Stack cluster-dev creating (0s)
2023-05-26T13:28:50.3293599Z
2023-05-26T13:28:50.3792669Z @ updating....
2023-05-26T13:28:51.3794937Z .
2023-05-26T13:28:52.3794245Z .
2023-05-26T13:28:53.3789565Z .
2023-05-26T13:28:54.3788474Z .
2023-05-26T13:28:55.3790108Z .
2023-05-26T13:28:56.3785547Z .
2023-05-26T13:28:57.3787219Z .
2023-05-26T13:28:58.3794540Z .
2023-05-26T13:28:59.3787172Z .
2023-05-26T13:29:00.3787244Z .
2023-05-26T13:29:01.3784713Z .
2023-05-26T13:29:02.3828123Z .
2023-05-26T13:29:03.3794826Z .
2023-05-26T13:29:04.3786676Z .
2023-05-26T13:29:05.3784256Z .
2023-05-26T13:29:06.3800373Z .
2023-05-26T13:29:07.3784919Z .
2023-05-26T13:29:08.3834132Z .
2023-05-26T13:29:09.3793056Z .
2023-05-26T13:29:10.3789401Z .
2023-05-26T13:29:11.3784815Z .
2023-05-26T13:29:12.3786906Z .
2023-05-26T13:29:13.3788293Z .
2023-05-26T13:29:14.2533712Z
2023-05-26T13:29:14.2539802Z + pulumi:providers:aws cluster-aws creating (0s)
2023-05-26T13:29:14.2540100Z
2023-05-26T13:29:14.3786453Z @ updating....
2023-05-26T13:29:15.3794485Z .
2023-05-26T13:29:16.2856119Z
2023-05-26T13:29:16.2856143Z
2023-05-26T13:29:16.2858242Z + pulumi:providers:aws cluster-aws created (2s)
2023-05-26T13:29:16.2858952Z
2023-05-26T13:29:16.3789593Z @ updating....
2023-05-26T13:29:17.1424051Z
2023-05-26T13:29:17.1425332Z + pulumi:pulumi:Stack cluster-dev creating (26s) read pulumi:pulumi:StackReference organization/identity/dev
2023-05-26T13:29:17.1426206Z + pulumi:pulumi:Stack cluster-dev creating (26s) read pulumi:pulumi:StackReference organization/infra/dev
2023-05-26T13:29:17.1426541Z
2023-05-26T13:29:17.3789361Z @ updating....
2023-05-26T13:29:18.0120204Z
2023-05-26T13:29:18.0120476Z + eks:index:Cluster cluster creating (0s)
2023-05-26T13:29:18.0120730Z
2023-05-26T13:29:18.3792297Z @ updating....
2023-05-26T13:29:19.3788330Z .
2023-05-26T13:29:20.3449808Z
2023-05-26T13:29:20.3451064Z + pulumi:pulumi:Stack cluster-dev creating (30s) read pulumi:pulumi:StackReference organization/identity/dev
2023-05-26T13:29:20.3451549Z
2023-05-26T13:29:20.3786591Z @ updating....
2023-05-26T13:29:21.3788552Z .
2023-05-26T13:29:21.5034656Z
2023-05-26T13:29:21.5035111Z
2023-05-26T13:29:21.5036821Z + pulumi:pulumi:Stack cluster-dev creating (31s) read pulumi:pulumi:StackReference organization/infra/dev
2023-05-26T13:29:21.5037856Z
2023-05-26T13:29:22.3787571Z @ updating....
2023-05-26T13:29:23.3794672Z .
2023-05-26T13:29:24.3784923Z .
2023-05-26T13:29:25.1161355Z
2023-05-26T13:29:25.1165345Z + eks:index:ServiceRole cluster-eksRole creating (0s)
2023-05-26T13:29:25.1165840Z
2023-05-26T13:29:25.1168918Z + aws:ec2:SecurityGroup cluster-eksClusterSecurityGroup creating (0s)
2023-05-26T13:29:25.1169382Z
2023-05-26T13:29:25.3792684Z @ updating....
2023-05-26T13:29:26.3790649Z .
2023-05-26T13:29:27.3787021Z .
2023-05-26T13:29:28.3784312Z .
2023-05-26T13:29:28.5833524Z
2023-05-26T13:29:28.5833783Z
2023-05-26T13:29:28.5837002Z + pulumi:pulumi:Stack cluster-dev creating (38s) read aws:iam:Role devsIamRole
2023-05-26T13:29:28.5837434Z
2023-05-26T13:29:28.5848309Z + pulumi:pulumi:Stack cluster-dev creating (38s) read aws:iam:Role adminsIamRole
2023-05-26T13:29:28.5848611Z
2023-05-26T13:29:28.5849211Z + aws:iam:InstanceProfile ng-standard creating (0s)
2023-05-26T13:29:28.5849478Z
2023-05-26T13:29:29.3792320Z @ updating....
2023-05-26T13:29:29.4807028Z
2023-05-26T13:29:29.4809222Z
2023-05-26T13:29:29.4823892Z + aws:iam:Role cluster-eksRole-role creating (0s)
2023-05-26T13:29:29.4824314Z
2023-05-26T13:29:30.3787029Z @ updating....
2023-05-26T13:29:30.9719486Z
2023-05-26T13:29:30.9720518Z + pulumi:pulumi:Stack cluster-dev creating (40s) read aws:iam:Role devsIamRole
2023-05-26T13:29:30.9721227Z
2023-05-26T13:29:31.0207245Z + aws:ec2:SecurityGroup cluster-eksClusterSecurityGroup created (5s)
2023-05-26T13:29:31.0207586Z
2023-05-26T13:29:31.3794365Z @ updating....
2023-05-26T13:29:31.5419479Z
2023-05-26T13:29:31.5420733Z + pulumi:pulumi:Stack cluster-dev creating (41s) read aws:iam:Role adminsIamRole
2023-05-26T13:29:31.5421285Z
2023-05-26T13:29:32.3792591Z @ updating....
2023-05-26T13:29:32.5378228Z
2023-05-26T13:29:32.5379170Z + aws:iam:InstanceProfile ng-standard created (3s)
2023-05-26T13:29:32.5430160Z
2023-05-26T13:29:33.3793962Z @ updating...
2023-05-26T13:29:33.3798480Z .
2023-05-26T13:29:34.3759050Z
2023-05-26T13:29:34.3760819Z + aws:iam:Role cluster-eksRole-role created (4s)
2023-05-26T13:29:34.3761255Z
2023-05-26T13:29:34.3784024Z @ updating....
2023-05-26T13:29:35.3787338Z .
2023-05-26T13:29:35.4062074Z
2023-05-26T13:29:35.4064138Z + aws:ec2:SecurityGroupRule cluster-eksClusterInternetEgressRule creating (0s)
2023-05-26T13:29:35.4064731Z
2023-05-26T13:29:36.3788498Z @ updating....
2023-05-26T13:29:37.3790921Z .
2023-05-26T13:29:37.9278146Z
2023-05-26T13:29:37.9278628Z + aws:iam:RolePolicyAttachment cluster-eksRole-4b490823 creating (0s)
2023-05-26T13:29:37.9278998Z
2023-05-26T13:29:38.3787050Z @ updating....
2023-05-26T13:29:39.3788682Z .
2023-05-26T13:29:39.5851056Z
2023-05-26T13:29:39.5851936Z + aws:ec2:SecurityGroupRule cluster-eksClusterInternetEgressRule created (4s)
2023-05-26T13:29:39.5852401Z
2023-05-26T13:29:40.0430678Z + aws:iam:RolePolicyAttachment cluster-eksRole-4b490823 created (2s)
2023-05-26T13:29:40.0431743Z
2023-05-26T13:29:40.3794840Z @ updating....
2023-05-26T13:29:41.3790888Z .
2023-05-26T13:29:41.4641227Z
2023-05-26T13:29:41.4643812Z
2023-05-26T13:29:41.4645639Z + aws:eks:Cluster cluster-eksCluster creating (0s)
2023-05-26T13:29:41.4645926Z
2023-05-26T13:29:42.3784238Z @ updating...
2023-05-26T13:29:42.3786736Z .
2023-05-26T13:29:43.3784405Z .
2023-05-26T13:29:44.3788490Z .
2023-05-26T13:29:45.3788930Z .
2023-05-26T13:29:46.3793723Z .
2023-05-26T13:29:47.3787456Z .
2023-05-26T13:29:48.3793983Z .
2023-05-26T13:29:49.3790208Z .
2023-05-26T13:29:50.3790211Z .
2023-05-26T13:29:51.3784710Z .
2023-05-26T13:29:52.3787387Z .
2023-05-26T13:29:53.3788902Z .
2023-05-26T13:29:54.3793032Z .
2023-05-26T13:29:55.3786670Z .
2023-05-26T13:29:56.3785316Z .
2023-05-26T13:29:57.3787071Z .
2023-05-26T13:29:58.3791798Z .
2023-05-26T13:29:59.3789465Z .
2023-05-26T13:30:00.3786633Z .
2023-05-26T13:30:01.3787660Z .
2023-05-26T13:30:02.3789500Z .
2023-05-26T13:30:03.3798738Z .
2023-05-26T13:30:04.3786754Z .
2023-05-26T13:30:05.3787849Z .
2023-05-26T13:30:06.3788915Z .
2023-05-26T13:30:07.3792361Z .
2023-05-26T13:30:08.3787790Z .
2023-05-26T13:30:09.3789666Z .
2023-05-26T13:30:10.3789296Z .
2023-05-26T13:30:11.3786940Z .
2023-05-26T13:30:12.3784407Z .
2023-05-26T13:30:13.3788553Z .
2023-05-26T13:30:14.3784845Z .
2023-05-26T13:30:15.3787272Z .
2023-05-26T13:30:16.3795024Z .
2023-05-26T13:30:17.3790309Z .
2023-05-26T13:30:18.3788565Z .
2023-05-26T13:30:19.3801114Z .
2023-05-26T13:30:20.3790439Z .
2023-05-26T13:30:21.3790296Z .
2023-05-26T13:30:22.3793514Z .
2023-05-26T13:30:23.3792987Z .
2023-05-26T13:30:24.3787568Z .
2023-05-26T13:30:25.3789655Z .
2023-05-26T13:30:26.3786294Z .
2023-05-26T13:30:27.3786278Z .
2023-05-26T13:30:28.3788728Z .
2023-05-26T13:30:29.3790592Z .
2023-05-26T13:30:30.3791189Z .
2023-05-26T13:30:31.3787179Z .
2023-05-26T13:30:32.3789728Z .
2023-05-26T13:30:33.3795246Z .
2023-05-26T13:30:34.3794109Z .
2023-05-26T13:30:35.3785956Z .
2023-05-26T13:30:36.3789047Z .
2023-05-26T13:30:37.3788492Z .
2023-05-26T13:30:38.3787696Z .
2023-05-26T13:30:39.3788052Z .
2023-05-26T13:30:40.3786297Z .
2023-05-26T13:30:41.3786019Z .
2023-05-26T13:30:42.3787302Z .
2023-05-26T13:30:43.3797172Z .
2023-05-26T13:30:44.3786657Z .
2023-05-26T13:30:45.3788606Z .
2023-05-26T13:30:46.3788307Z .
2023-05-26T13:30:47.3788956Z .
2023-05-26T13:30:48.3789473Z .
2023-05-26T13:30:49.3787895Z .
2023-05-26T13:30:50.3787717Z .
2023-05-26T13:30:51.3786012Z .
2023-05-26T13:30:52.3784779Z .
2023-05-26T13:30:53.3792212Z .
2023-05-26T13:30:54.3791467Z .
2023-05-26T13:30:55.3792782Z .
2023-05-26T13:30:56.3795621Z .
2023-05-26T13:30:57.3786295Z .
2023-05-26T13:30:58.3788230Z .
2023-05-26T13:30:59.3786125Z .
2023-05-26T13:31:00.3785324Z .
2023-05-26T13:31:01.3794193Z .
2023-05-26T13:31:02.3784859Z .
2023-05-26T13:31:03.3790499Z .
2023-05-26T13:31:04.3790787Z .
2023-05-26T13:31:05.3793536Z .
2023-05-26T13:31:06.3787212Z .
2023-05-26T13:31:07.3787770Z .
2023-05-26T13:31:08.3787952Z .
2023-05-26T13:31:09.3788813Z .
2023-05-26T13:31:10.3790657Z .
2023-05-26T13:31:11.3791747Z .
2023-05-26T13:31:12.3787541Z .
2023-05-26T13:31:13.3790799Z .
2023-05-26T13:31:14.3785863Z .
2023-05-26T13:31:15.3787952Z .
2023-05-26T13:31:16.3788533Z .
2023-05-26T13:31:17.3784502Z .
2023-05-26T13:31:18.3790176Z .
2023-05-26T13:31:19.3786622Z .
2023-05-26T13:31:20.3786066Z .
2023-05-26T13:31:21.3787043Z .
2023-05-26T13:31:22.3785605Z .
2023-05-26T13:31:23.3788423Z .
2023-05-26T13:31:24.3790368Z .
2023-05-26T13:31:25.3788254Z .
2023-05-26T13:31:26.3786342Z .
2023-05-26T13:31:27.3785954Z .
2023-05-26T13:31:28.3789248Z .
2023-05-26T13:31:29.3792091Z .
2023-05-26T13:31:30.3784138Z .
2023-05-26T13:31:31.3787252Z .
2023-05-26T13:31:32.3788869Z .
2023-05-26T13:31:33.3790090Z .
2023-05-26T13:31:34.3792625Z .
2023-05-26T13:31:35.3795753Z .
2023-05-26T13:31:36.3786511Z .
2023-05-26T13:31:37.3786050Z .
2023-05-26T13:31:38.3787674Z .
2023-05-26T13:31:39.3792327Z .
2023-05-26T13:31:40.3785946Z .
2023-05-26T13:31:41.3785868Z .
2023-05-26T13:31:42.3787489Z .
2023-05-26T13:31:43.3789142Z .
2023-05-26T13:31:44.3786850Z .
2023-05-26T13:31:45.3786436Z .
2023-05-26T13:31:46.3785044Z .
2023-05-26T13:31:47.3787775Z .
2023-05-26T13:31:48.3789257Z .
2023-05-26T13:31:49.3789573Z .
2023-05-26T13:31:50.3788070Z .
2023-05-26T13:31:51.3788173Z .
2023-05-26T13:31:52.3787637Z .
2023-05-26T13:31:53.3785586Z .
2023-05-26T13:31:54.3787768Z .
2023-05-26T13:31:55.3790143Z .
2023-05-26T13:31:56.3790586Z .
2023-05-26T13:31:57.3785275Z .
2023-05-26T13:31:58.3787903Z .
2023-05-26T13:31:59.3790508Z .
2023-05-26T13:32:00.3791052Z .
2023-05-26T13:32:01.3786633Z .
2023-05-26T13:32:02.3786438Z .
2023-05-26T13:32:03.3788441Z .
2023-05-26T13:32:04.3788720Z .
2023-05-26T13:32:05.3788544Z .
2023-05-26T13:32:06.3786773Z .
2023-05-26T13:32:07.3786471Z .
2023-05-26T13:32:08.3787066Z .
2023-05-26T13:32:09.3789691Z .
2023-05-26T13:32:10.3790364Z .
2023-05-26T13:32:11.3791095Z .
2023-05-26T13:32:12.3793969Z .
2023-05-26T13:32:13.3791540Z .
2023-05-26T13:32:14.3793162Z .
2023-05-26T13:32:15.3787681Z .
2023-05-26T13:32:16.3789359Z .
2023-05-26T13:32:17.3789636Z .
2023-05-26T13:32:18.3790627Z .
2023-05-26T13:32:19.3792235Z .
2023-05-26T13:32:20.3787441Z .
2023-05-26T13:32:21.3785394Z .
2023-05-26T13:32:22.3788051Z .
2023-05-26T13:32:23.3792668Z .
2023-05-26T13:32:24.3794505Z .
2023-05-26T13:32:25.3796572Z .
2023-05-26T13:32:26.3787401Z .
2023-05-26T13:32:27.3798028Z .
2023-05-26T13:32:28.3788175Z .
2023-05-26T13:32:29.3789895Z .
2023-05-26T13:32:30.3787143Z .
2023-05-26T13:32:31.3789296Z .
2023-05-26T13:32:32.3787919Z .
2023-05-26T13:32:33.3791221Z .
2023-05-26T13:32:34.3788801Z .
2023-05-26T13:32:35.3792171Z .
2023-05-26T13:32:36.3792295Z .
2023-05-26T13:32:37.3790179Z .
2023-05-26T13:32:38.3784409Z .
2023-05-26T13:32:39.3788681Z .
2023-05-26T13:32:40.3789085Z .
2023-05-26T13:32:41.3789043Z .
2023-05-26T13:32:42.3791822Z .
2023-05-26T13:32:43.3786803Z .
2023-05-26T13:32:44.3787204Z .
2023-05-26T13:32:45.3787618Z .
2023-05-26T13:32:46.3785084Z .
2023-05-26T13:32:47.3787384Z .
2023-05-26T13:32:48.3786632Z .
2023-05-26T13:32:49.3786103Z .
2023-05-26T13:32:50.3789934Z .
2023-05-26T13:32:51.3786246Z .
2023-05-26T13:32:52.3786902Z .
2023-05-26T13:32:53.3792094Z .
2023-05-26T13:32:54.3794071Z .
2023-05-26T13:32:55.3785829Z .
2023-05-26T13:32:56.3789487Z .
2023-05-26T13:32:57.3790406Z .
2023-05-26T13:32:58.3791777Z .
2023-05-26T13:32:59.3786391Z .
2023-05-26T13:33:00.3786972Z .
2023-05-26T13:33:01.3784697Z .
2023-05-26T13:33:02.3787625Z .
2023-05-26T13:33:03.3793076Z .
2023-05-26T13:33:04.3796530Z .
2023-05-26T13:33:05.3786060Z .
2023-05-26T13:33:06.3787963Z .
2023-05-26T13:33:07.3789643Z .
2023-05-26T13:33:08.3791571Z .
2023-05-26T13:33:09.3785222Z .
2023-05-26T13:33:10.3788796Z .
2023-05-26T13:33:11.3785859Z .
2023-05-26T13:33:12.3787697Z .
2023-05-26T13:33:13.3793358Z .
2023-05-26T13:33:14.3786739Z .
2023-05-26T13:33:15.3786457Z .
2023-05-26T13:33:16.3787279Z .
2023-05-26T13:33:17.3790086Z .
2023-05-26T13:33:18.3784836Z .
2023-05-26T13:33:19.3788370Z .
2023-05-26T13:33:20.3790493Z .
2023-05-26T13:33:21.3792124Z .
2023-05-26T13:33:22.3791135Z .
2023-05-26T13:33:23.3793951Z .
2023-05-26T13:33:24.3795340Z .
2023-05-26T13:33:25.3789921Z .
2023-05-26T13:33:26.3790621Z .
2023-05-26T13:33:27.3792741Z .
2023-05-26T13:33:28.3787014Z .
2023-05-26T13:33:29.3793468Z .
2023-05-26T13:33:30.3793290Z .
2023-05-26T13:33:31.3791965Z .
2023-05-26T13:33:32.3795098Z .
2023-05-26T13:33:33.3792635Z .
2023-05-26T13:33:34.3795654Z .
2023-05-26T13:33:35.3795671Z .
2023-05-26T13:33:36.3785737Z .
2023-05-26T13:33:37.3789770Z .
2023-05-26T13:33:38.3791932Z .
2023-05-26T13:33:39.3792538Z .
2023-05-26T13:33:40.3793281Z .
2023-05-26T13:33:41.3788253Z .
2023-05-26T13:33:42.3794538Z .
2023-05-26T13:33:43.3786708Z .
2023-05-26T13:33:44.3791905Z .
2023-05-26T13:33:45.3788969Z .
2023-05-26T13:33:46.3790731Z .
2023-05-26T13:33:47.3787753Z .
2023-05-26T13:33:48.3789393Z .
2023-05-26T13:33:49.3786881Z .
2023-05-26T13:33:50.3787252Z .
2023-05-26T13:33:51.3788832Z .
2023-05-26T13:33:52.3790355Z .
2023-05-26T13:33:53.3796286Z .
2023-05-26T13:33:54.3786986Z .
2023-05-26T13:33:55.3787958Z .
2023-05-26T13:33:56.3794135Z .
2023-05-26T13:33:57.3788933Z .
2023-05-26T13:33:58.3789753Z .
2023-05-26T13:33:59.3787694Z .
2023-05-26T13:34:00.3791565Z .
2023-05-26T13:34:01.3789899Z .
2023-05-26T13:34:02.3792834Z .
2023-05-26T13:34:03.3793678Z .
2023-05-26T13:34:04.3786810Z .
2023-05-26T13:34:05.3788334Z .
2023-05-26T13:34:06.3793831Z .
2023-05-26T13:34:07.3785375Z .
2023-05-26T13:34:08.3788324Z .
2023-05-26T13:34:09.3789660Z .
2023-05-26T13:34:10.3787437Z .
2023-05-26T13:34:11.3787440Z .
2023-05-26T13:34:12.3786022Z .
2023-05-26T13:34:13.3794344Z .
2023-05-26T13:34:14.3786546Z .
2023-05-26T13:34:15.3786592Z .
2023-05-26T13:34:16.3795561Z .
2023-05-26T13:34:17.3845134Z .
2023-05-26T13:34:18.3792818Z .
2023-05-26T13:34:19.3794044Z .
2023-05-26T13:34:20.3788646Z .
2023-05-26T13:34:21.3788290Z .
2023-05-26T13:34:22.3790354Z .
2023-05-26T13:34:23.3792712Z .
2023-05-26T13:34:24.3789073Z .
2023-05-26T13:34:25.3789282Z .
2023-05-26T13:34:26.3794515Z .
2023-05-26T13:34:27.3790103Z .
2023-05-26T13:34:28.3789866Z .
2023-05-26T13:34:29.3787274Z .
2023-05-26T13:34:30.3785509Z .
2023-05-26T13:34:31.3787518Z .
2023-05-26T13:34:32.3788671Z .
2023-05-26T13:34:33.3792769Z .
2023-05-26T13:34:34.3789569Z .
2023-05-26T13:34:35.3789597Z .
2023-05-26T13:34:36.3787273Z .
2023-05-26T13:34:37.3789145Z .
2023-05-26T13:34:38.3787234Z .
2023-05-26T13:34:39.3788955Z .
2023-05-26T13:34:40.3791834Z .
2023-05-26T13:34:41.3790173Z .
2023-05-26T13:34:42.3794994Z .
2023-05-26T13:34:43.3788151Z .
2023-05-26T13:34:44.3791121Z .
2023-05-26T13:34:45.3792726Z .
2023-05-26T13:34:46.3796110Z .
2023-05-26T13:34:47.3786367Z .
2023-05-26T13:34:48.3787905Z .
2023-05-26T13:34:49.3789721Z .
2023-05-26T13:34:50.3790904Z .
2023-05-26T13:34:51.3785737Z .
2023-05-26T13:34:52.3786874Z .
2023-05-26T13:34:53.3790704Z .
2023-05-26T13:34:54.3787743Z .
2023-05-26T13:34:55.3790410Z .
2023-05-26T13:34:56.3792394Z .
2023-05-26T13:34:57.3786253Z .
2023-05-26T13:34:58.3787144Z .
2023-05-26T13:34:59.3789371Z .
2023-05-26T13:35:00.3791177Z .
2023-05-26T13:35:01.3787233Z .
2023-05-26T13:35:02.3792093Z .
2023-05-26T13:35:03.3785615Z .
2023-05-26T13:35:04.3791036Z .
2023-05-26T13:35:05.3787620Z .
2023-05-26T13:35:06.3789157Z .
2023-05-26T13:35:07.3794293Z .
2023-05-26T13:35:08.3786734Z .
2023-05-26T13:35:09.3785579Z .
2023-05-26T13:35:10.3786562Z .
2023-05-26T13:35:11.3790408Z .
2023-05-26T13:35:12.3787549Z .
2023-05-26T13:35:13.3797019Z .
2023-05-26T13:35:14.3787025Z .
2023-05-26T13:35:15.3787328Z .
2023-05-26T13:35:16.3789292Z .
2023-05-26T13:35:17.3789813Z .
2023-05-26T13:35:18.3787192Z .
2023-05-26T13:35:19.3788543Z .
2023-05-26T13:35:20.3786842Z .
2023-05-26T13:35:21.3786992Z .
2023-05-26T13:35:22.3790088Z .
2023-05-26T13:35:23.3791977Z .
2023-05-26T13:35:24.3797368Z .
2023-05-26T13:35:25.3786135Z .
2023-05-26T13:35:26.3788027Z .
2023-05-26T13:35:27.3789301Z .
2023-05-26T13:35:28.3795468Z .
2023-05-26T13:35:29.3786741Z .
2023-05-26T13:35:30.3787367Z .
2023-05-26T13:35:31.3786121Z .
2023-05-26T13:35:32.3789507Z .
2023-05-26T13:35:33.3793761Z .
2023-05-26T13:35:34.3795863Z .
2023-05-26T13:35:35.3785064Z .
2023-05-26T13:35:36.3788225Z .
2023-05-26T13:35:37.3789155Z .
2023-05-26T13:35:38.3792619Z .
2023-05-26T13:35:39.3794161Z .
2023-05-26T13:35:40.3786777Z .
2023-05-26T13:35:41.3793079Z .
2023-05-26T13:35:42.3786966Z .
2023-05-26T13:35:43.3785829Z .
2023-05-26T13:35:44.3792910Z .
2023-05-26T13:35:45.3786607Z .
2023-05-26T13:35:46.3788526Z .
2023-05-26T13:35:47.3786320Z .
2023-05-26T13:35:48.3787775Z .
2023-05-26T13:35:49.3789810Z .
2023-05-26T13:35:50.3792071Z .
2023-05-26T13:35:51.3786916Z .
2023-05-26T13:35:52.3787611Z .
2023-05-26T13:35:53.3792746Z .
2023-05-26T13:35:54.3794522Z .
2023-05-26T13:35:55.3784777Z .
2023-05-26T13:35:56.3786102Z .
2023-05-26T13:35:57.3789022Z .
2023-05-26T13:35:58.3791676Z .
2023-05-26T13:35:59.3787636Z .
2023-05-26T13:36:00.3789260Z .
2023-05-26T13:36:01.3786536Z .
2023-05-26T13:36:02.3788580Z .
2023-05-26T13:36:03.3791108Z .
2023-05-26T13:36:04.3793867Z .
2023-05-26T13:36:05.3796444Z .
2023-05-26T13:36:06.3793751Z .
2023-05-26T13:36:07.3790405Z .
2023-05-26T13:36:08.3787638Z .
2023-05-26T13:36:09.3784282Z .
2023-05-26T13:36:10.3790212Z .
2023-05-26T13:36:11.3789270Z .
2023-05-26T13:36:12.3791771Z .
2023-05-26T13:36:13.3790876Z .
2023-05-26T13:36:14.3795146Z .
2023-05-26T13:36:15.3788440Z .
2023-05-26T13:36:16.3786584Z .
2023-05-26T13:36:17.3788579Z .
2023-05-26T13:36:18.3790784Z .
2023-05-26T13:36:19.3787965Z .
2023-05-26T13:36:20.3785994Z .
2023-05-26T13:36:21.3785570Z .
2023-05-26T13:36:22.3791601Z .
2023-05-26T13:36:23.3785995Z .
2023-05-26T13:36:24.3787625Z .
2023-05-26T13:36:25.3788575Z .
2023-05-26T13:36:26.3789392Z .
2023-05-26T13:36:27.3793720Z .
2023-05-26T13:36:28.3793525Z .
2023-05-26T13:36:29.3790601Z .
2023-05-26T13:36:30.3790898Z .
2023-05-26T13:36:31.3791936Z .
2023-05-26T13:36:32.3793785Z .
2023-05-26T13:36:33.3793036Z .
2023-05-26T13:36:34.3787661Z .
2023-05-26T13:36:35.3788549Z .
2023-05-26T13:36:36.3789911Z .
2023-05-26T13:36:37.3792550Z .
2023-05-26T13:36:38.3786796Z .
2023-05-26T13:36:39.3787164Z .
2023-05-26T13:36:40.3795409Z .
2023-05-26T13:36:41.3788229Z .
2023-05-26T13:36:42.3788846Z .
2023-05-26T13:36:43.3790549Z .
2023-05-26T13:36:44.3793447Z .
2023-05-26T13:36:45.3797285Z .
2023-05-26T13:36:46.3785029Z .
2023-05-26T13:36:47.3786304Z .
2023-05-26T13:36:48.3790220Z .
2023-05-26T13:36:49.3786650Z .
2023-05-26T13:36:50.3793130Z .
2023-05-26T13:36:51.3794141Z .
2023-05-26T13:36:52.3786355Z .
2023-05-26T13:36:53.3791559Z .
2023-05-26T13:36:54.3794884Z .
2023-05-26T13:36:55.3786434Z .
2023-05-26T13:36:56.3787569Z .
2023-05-26T13:36:57.3788410Z .
2023-05-26T13:36:58.3790152Z .
2023-05-26T13:36:59.3787691Z .
2023-05-26T13:37:00.3795207Z .
2023-05-26T13:37:01.3786910Z .
2023-05-26T13:37:02.3789887Z .
2023-05-26T13:37:03.3793858Z .
2023-05-26T13:37:04.3788188Z .
2023-05-26T13:37:05.3789603Z .
2023-05-26T13:37:06.3792189Z .
2023-05-26T13:37:07.3787398Z .
2023-05-26T13:37:08.3789977Z .
2023-05-26T13:37:09.3789920Z .
2023-05-26T13:37:10.3790623Z .
2023-05-26T13:37:11.3785909Z .
2023-05-26T13:37:12.3786965Z .
2023-05-26T13:37:13.3789629Z .
2023-05-26T13:37:14.3789387Z .
2023-05-26T13:37:15.3785504Z .
2023-05-26T13:37:16.3786634Z .
2023-05-26T13:37:17.3788470Z .
2023-05-26T13:37:18.3791002Z .
2023-05-26T13:37:19.3789148Z .
2023-05-26T13:37:20.3787303Z .
2023-05-26T13:37:21.3785934Z .
2023-05-26T13:37:22.3787699Z .
2023-05-26T13:37:23.3793957Z .
2023-05-26T13:37:24.3797076Z .
2023-05-26T13:37:25.3785555Z .
2023-05-26T13:37:26.3786760Z .
2023-05-26T13:37:27.3788591Z .
2023-05-26T13:37:28.3787838Z .
2023-05-26T13:37:29.3790672Z .
2023-05-26T13:37:30.3792328Z .
2023-05-26T13:37:31.3786532Z .
2023-05-26T13:37:32.3788663Z .
2023-05-26T13:37:33.3793437Z .
2023-05-26T13:37:34.3787089Z .
2023-05-26T13:37:35.3786496Z .
2023-05-26T13:37:36.3789319Z .
2023-05-26T13:37:37.3794036Z .
2023-05-26T13:37:38.3793356Z .
2023-05-26T13:37:39.3792546Z .
2023-05-26T13:37:40.3784555Z .
2023-05-26T13:37:41.3790939Z .
2023-05-26T13:37:42.3793719Z .
2023-05-26T13:37:43.3786610Z .
2023-05-26T13:37:44.3790575Z .
2023-05-26T13:37:45.3786641Z .
2023-05-26T13:37:46.3786970Z .
2023-05-26T13:37:47.3785358Z .
2023-05-26T13:37:48.3787444Z .
2023-05-26T13:37:49.3787123Z .
2023-05-26T13:37:50.3787128Z .
2023-05-26T13:37:51.3791756Z .
2023-05-26T13:37:52.3793389Z .
2023-05-26T13:37:53.3793091Z .
2023-05-26T13:37:54.3791578Z .
2023-05-26T13:37:55.3789016Z .
2023-05-26T13:37:56.3788716Z .
2023-05-26T13:37:57.3792418Z .
2023-05-26T13:37:58.3787454Z .
2023-05-26T13:37:59.3787001Z .
2023-05-26T13:38:00.3784958Z .
2023-05-26T13:38:01.3786578Z .
2023-05-26T13:38:02.3783622Z .
2023-05-26T13:38:03.3788596Z .
2023-05-26T13:38:04.3787307Z .
2023-05-26T13:38:05.3787847Z .
2023-05-26T13:38:06.3788663Z .
2023-05-26T13:38:07.3790767Z .
2023-05-26T13:38:08.3787509Z .
2023-05-26T13:38:09.3787640Z .
2023-05-26T13:38:10.3790759Z .
2023-05-26T13:38:11.3790491Z .
2023-05-26T13:38:11.9146755Z
2023-05-26T13:38:11.9192714Z + aws:eks:Cluster cluster-eksCluster created (510s)
2023-05-26T13:38:11.9193359Z
2023-05-26T13:38:12.3790270Z @ updating....
2023-05-26T13:38:13.3787227Z .
2023-05-26T13:38:13.5722355Z
2023-05-26T13:38:13.5723134Z + aws:ec2:SecurityGroup cluster-nodeSecurityGroup creating (0s)
2023-05-26T13:38:13.5723704Z
2023-05-26T13:38:14.2232378Z + aws:eks:Cluster cluster-eksCluster created (510s) Cluster is ready
2023-05-26T13:38:14.2233118Z
2023-05-26T13:38:14.3789987Z @ updating....
2023-05-26T13:38:15.1381337Z
2023-05-26T13:38:15.1381821Z + pulumi:providers:kubernetes cluster-provider creating (0s)
2023-05-26T13:38:15.1382217Z
2023-05-26T13:38:15.2051169Z + pulumi:providers:kubernetes cluster-eks-k8s creating (0s)
2023-05-26T13:38:15.2051555Z
2023-05-26T13:38:15.3790012Z @ updating....
2023-05-26T13:38:16.3795711Z .
2023-05-26T13:38:16.9892506Z
2023-05-26T13:38:16.9892961Z + pulumi:providers:kubernetes cluster-provider created (1s)
2023-05-26T13:38:16.9893259Z
2023-05-26T13:38:17.3796273Z @ updating....
2023-05-26T13:38:17.8631733Z
2023-05-26T13:38:17.8633104Z + aws:ec2:SecurityGroup cluster-nodeSecurityGroup created (4s)
2023-05-26T13:38:17.8634046Z
2023-05-26T13:38:18.3792918Z @ updating....
2023-05-26T13:38:18.7459334Z
2023-05-26T13:38:18.7460007Z + pulumi:providers:kubernetes cluster-eks-k8s created (3s)
2023-05-26T13:38:18.7460780Z
2023-05-26T13:38:19.3795934Z @ updating....
2023-05-26T13:38:19.6486549Z
2023-05-26T13:38:19.6488441Z + eks:index:VpcCni cluster-vpc-cni creating (0s)
2023-05-26T13:38:19.6489006Z
2023-05-26T13:38:20.3789014Z @ updating...
2023-05-26T13:38:20.3791643Z .
2023-05-26T13:38:20.5855408Z
2023-05-26T13:38:20.5856449Z + kubernetes:core/v1:Namespace cluster-svcs creating (0s)
2023-05-26T13:38:20.5856725Z
2023-05-26T13:38:20.5857596Z + kubernetes:policy/v1beta1:PodSecurityPolicy restrictive creating (0s)
2023-05-26T13:38:20.5857866Z
2023-05-26T13:38:20.5858667Z + kubernetes:core/v1:Namespace app-svcs creating (0s)
2023-05-26T13:38:20.5858903Z
2023-05-26T13:38:20.5859343Z + kubernetes:core/v1:Namespace apps creating (0s)
2023-05-26T13:38:20.5859575Z
2023-05-26T13:38:20.5910649Z + kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding privileged creating (0s)
2023-05-26T13:38:20.5911002Z
2023-05-26T13:38:20.5940996Z + eks:index:NodeGroup cluster-ng-standard creating (0s)
2023-05-26T13:38:20.5941347Z
2023-05-26T13:38:20.5942202Z + kubernetes:core/v1:Namespace ingress-nginx creating (0s)
2023-05-26T13:38:20.5942528Z
2023-05-26T13:38:21.3790933Z @ updating....
2023-05-26T13:38:21.4719713Z
2023-05-26T13:38:21.4720474Z + aws:ec2:SecurityGroupRule cluster-eksNodeInternetEgressRule creating (0s)
2023-05-26T13:38:21.4720919Z
2023-05-26T13:38:21.4731161Z + aws:ec2:SecurityGroupRule cluster-eksExtApiServerClusterIngressRule creating (0s)
2023-05-26T13:38:21.4731653Z
2023-05-26T13:38:21.4740262Z + aws:ec2:SecurityGroupRule cluster-eksNodeIngressRule creating (0s)
2023-05-26T13:38:21.4740668Z
2023-05-26T13:38:21.4761561Z + aws:ec2:SecurityGroupRule cluster-eksNodeClusterIngressRule creating (0s)
2023-05-26T13:38:21.4762005Z
2023-05-26T13:38:21.4767159Z + aws:ec2:SecurityGroupRule cluster-eksClusterIngressRule creating (0s)
2023-05-26T13:38:21.4767618Z
2023-05-26T13:38:22.3279241Z + kubernetes:storage.k8s.io/v1:StorageClass cluster-gp2-encrypted creating (0s)
2023-05-26T13:38:22.3279954Z
2023-05-26T13:38:22.3281406Z + kubernetes:core/v1:ConfigMap cluster-nodeAccess creating (0s)
2023-05-26T13:38:22.3281708Z
2023-05-26T13:38:22.3293368Z + kubernetes:storage.k8s.io/v1:StorageClass cluster-sc1 creating (0s)
2023-05-26T13:38:22.3293667Z
2023-05-26T13:38:22.3794627Z @ updating....
2023-05-26T13:38:23.3793063Z .
2023-05-26T13:38:24.1438125Z
2023-05-26T13:38:24.1439550Z + kubernetes:core/v1:Namespace cluster-svcs creating (3s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:24.1441031Z + kubernetes:core/v1:Namespace cluster-svcs **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:24.1441550Z
2023-05-26T13:38:24.3785723Z @ updating....
2023-05-26T13:38:25.0206050Z
2023-05-26T13:38:25.0207781Z + kubernetes:policy/v1beta1:PodSecurityPolicy restrictive creating (4s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:25.0211373Z + kubernetes:policy/v1beta1:PodSecurityPolicy restrictive **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:25.0212819Z
2023-05-26T13:38:25.3784314Z @ updating....
2023-05-26T13:38:25.5181804Z
2023-05-26T13:38:25.5183367Z + pulumi:pulumi:Stack cluster-dev creating (575s) error: You must be logged in to the server (the server has asked for the client to provide credentials)
2023-05-26T13:38:25.5183984Z
2023-05-26T13:38:25.5199233Z + eks:index:VpcCni cluster-vpc-cni creating (5s) error: Command failed: kubectl apply -f /tmp/tmp-2099yNN6sixwZWI6.tmp
2023-05-26T13:38:25.5200716Z + eks:index:VpcCni cluster-vpc-cni **creating failed** error: Command failed: kubectl apply -f /tmp/tmp-2099yNN6sixwZWI6.tmp
2023-05-26T13:38:25.5201194Z
2023-05-26T13:38:25.8901847Z + kubernetes:core/v1:Namespace app-svcs creating (5s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:25.8904315Z + kubernetes:core/v1:Namespace app-svcs **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:25.8905201Z
2023-05-26T13:38:26.3795094Z @ updating...
2023-05-26T13:38:26.3796062Z .
2023-05-26T13:38:26.7656628Z
2023-05-26T13:38:26.7657792Z + kubernetes:core/v1:Namespace apps creating (6s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:26.7659384Z + kubernetes:core/v1:Namespace apps **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:26.7660036Z
2023-05-26T13:38:27.3795423Z @ updating....
2023-05-26T13:38:27.6913109Z
2023-05-26T13:38:27.6913157Z
2023-05-26T13:38:27.6918602Z + kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding privileged creating (7s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:27.6919336Z
2023-05-26T13:38:27.6920467Z + kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding privileged **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:27.6921044Z
2023-05-26T13:38:28.3790364Z @ updating....
2023-05-26T13:38:29.3790005Z .
2023-05-26T13:38:29.5360772Z
2023-05-26T13:38:29.5360797Z
2023-05-26T13:38:29.5364722Z + kubernetes:core/v1:Namespace ingress-nginx creating (8s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:29.5368110Z + kubernetes:core/v1:Namespace ingress-nginx **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:29.5369459Z
2023-05-26T13:38:30.3786585Z @ updating....
2023-05-26T13:38:31.2400150Z
2023-05-26T13:38:31.2401032Z + aws:ec2:SecurityGroupRule cluster-eksNodeInternetEgressRule created (9s)
2023-05-26T13:38:31.2401659Z
2023-05-26T13:38:31.3793831Z @ updating....
2023-05-26T13:38:32.1053623Z
2023-05-26T13:38:32.1055970Z + aws:ec2:SecurityGroupRule cluster-eksExtApiServerClusterIngressRule created (10s)
2023-05-26T13:38:32.1056622Z
2023-05-26T13:38:32.3789247Z @ updating....
2023-05-26T13:38:33.3793810Z .
2023-05-26T13:38:33.7382248Z
2023-05-26T13:38:33.7383063Z + aws:ec2:SecurityGroupRule cluster-eksNodeIngressRule created (12s)
2023-05-26T13:38:33.7383617Z
2023-05-26T13:38:34.3789035Z @ updating....
2023-05-26T13:38:34.6144554Z
2023-05-26T13:38:34.6145840Z + aws:ec2:SecurityGroupRule cluster-eksNodeClusterIngressRule created (13s)
2023-05-26T13:38:34.6146331Z
2023-05-26T13:38:35.3792091Z @ updating....
2023-05-26T13:38:35.4868545Z
2023-05-26T13:38:35.4869812Z + aws:ec2:SecurityGroupRule cluster-eksClusterIngressRule created (14s)
2023-05-26T13:38:35.4870436Z
2023-05-26T13:38:35.5335347Z + kubernetes:storage.k8s.io/v1:StorageClass cluster-gp2-encrypted creating (13s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:35.5337387Z + kubernetes:storage.k8s.io/v1:StorageClass cluster-gp2-encrypted **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:35.5337938Z
2023-05-26T13:38:36.3795642Z @ updating....
2023-05-26T13:38:36.4422029Z
2023-05-26T13:38:36.4422076Z
2023-05-26T13:38:36.4425492Z + kubernetes:core/v1:ConfigMap cluster-nodeAccess creating (14s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:36.4428049Z + kubernetes:core/v1:ConfigMap cluster-nodeAccess **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:36.4428966Z
2023-05-26T13:38:37.3625939Z + kubernetes:storage.k8s.io/v1:StorageClass cluster-sc1 creating (15s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:37.3629225Z + kubernetes:storage.k8s.io/v1:StorageClass cluster-sc1 **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:37.3630476Z
2023-05-26T13:38:37.3785166Z @ updating....
2023-05-26T13:38:38.3787545Z .
2023-05-26T13:38:39.3797445Z .
2023-05-26T13:38:40.3790014Z .
2023-05-26T13:38:41.3792548Z .
2023-05-26T13:38:42.3790739Z .
2023-05-26T13:38:43.3789917Z .
2023-05-26T13:38:44.3790881Z .
2023-05-26T13:38:45.3793867Z .
2023-05-26T13:38:46.3790180Z .
2023-05-26T13:38:47.3784955Z .
2023-05-26T13:38:48.3795254Z .
2023-05-26T13:38:49.3790254Z .
2023-05-26T13:38:50.3793650Z .
2023-05-26T13:38:51.3797621Z .
2023-05-26T13:38:52.3233502Z
2023-05-26T13:38:52.3233519Z
2023-05-26T13:38:52.3234446Z + pulumi:pulumi:Stack cluster-dev creating (601s) error: update failed
2023-05-26T13:38:52.3234751Z
2023-05-26T13:38:52.3800366Z @ updating....
2023-05-26T13:38:52.4308987Z
2023-05-26T13:38:52.4309474Z + pulumi:pulumi:Stack cluster-dev **creating failed** 1 error; 1 message
2023-05-26T13:38:52.4310044Z + eks:index:NodeGroup cluster-ng-standard created
2023-05-26T13:38:52.4310751Z
2023-05-26T13:38:52.4313069Z
2023-05-26T13:38:52.4313364Z Diagnostics:
2023-05-26T13:38:52.4313960Z kubernetes:storage.k8s.io/v1:StorageClass (cluster-gp2-encrypted):
2023-05-26T13:38:52.4314851Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:52.4315362Z
2023-05-26T13:38:52.4315757Z eks:index:VpcCni (cluster-vpc-cni):
2023-05-26T13:38:52.4316444Z error: Command failed: kubectl apply -f /tmp/tmp-2099yNN6sixwZWI6.tmp
2023-05-26T13:38:52.4317156Z error: You must be logged in to the server (the server has asked for the client to provide credentials)
2023-05-26T13:38:52.4317594Z
2023-05-26T13:38:52.4317991Z kubernetes:core/v1:Namespace (app-svcs):
2023-05-26T13:38:52.4318788Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:52.4319720Z
2023-05-26T13:38:52.4320089Z pulumi:pulumi:Stack (cluster-dev):
2023-05-26T13:38:52.4320515Z error: update failed
2023-05-26T13:38:52.4320713Z
2023-05-26T13:38:52.4321079Z error: You must be logged in to the server (the server has asked for the client to provide credentials)
2023-05-26T13:38:52.4321395Z
2023-05-26T13:38:52.4357119Z kubernetes:core/v1:Namespace (cluster-svcs):
2023-05-26T13:38:52.4358720Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:52.4359229Z
2023-05-26T13:38:52.4359633Z kubernetes:core/v1:Namespace (ingress-nginx):
2023-05-26T13:38:52.4360427Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:52.4360898Z
2023-05-26T13:38:52.4361309Z kubernetes:core/v1:ConfigMap (cluster-nodeAccess):
2023-05-26T13:38:52.4362121Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:52.4362610Z
2023-05-26T13:38:52.4362953Z kubernetes:policy/v1beta1:PodSecurityPolicy (restrictive):
2023-05-26T13:38:52.4363772Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:52.4364261Z
2023-05-26T13:38:52.4365229Z
2023-05-26T13:38:52.4365613Z kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding (privileged):
2023-05-26T13:38:52.4366479Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:52.4366955Z
2023-05-26T13:38:52.4367381Z kubernetes:storage.k8s.io/v1:StorageClass (cluster-sc1):
2023-05-26T13:38:52.4368197Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:52.4368674Z
2023-05-26T13:38:52.4368935Z kubernetes:core/v1:Namespace (apps):
2023-05-26T13:38:52.4369225Z
2023-05-26T13:38:52.4370114Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:52.4370586Z
2023-05-26T13:38:52.4370796Z Resources:
2023-05-26T13:38:52.4371147Z + 19 created
2023-05-26T13:38:52.4371386Z
2023-05-26T13:38:52.4371585Z Duration: 10m4s
2023-05-26T13:38:52.4371834Z
2023-05-26T13:38:52.4371918Z
2023-05-26T13:38:54.4508650Z
2023-05-26T13:38:54.4510167Z /home/runner/work/_actions/pulumi/actions/v4/webpack:/pulumi-github-action/node_modules/@pulumi/pulumi/automation/errors.js:77
2023-05-26T13:38:54.4510941Z : new CommandError(result);
2023-05-26T13:38:54.4513695Z ^
2023-05-26T13:38:54.4514230Z CommandError: code: -2
2023-05-26T13:38:54.4514512Z stdout:
2023-05-26T13:38:54.4515389Z stderr: Command failed with exit code 255: pulumi up --yes --skip-preview --exec-agent pulumi/actions@v3 --color auto --exec-kind auto.local --stack dev --non-interactive
2023-05-26T13:38:54.4516082Z [resource plugin eks-1.0.1] installing
2023-05-26T13:38:54.4517178Z warning: A new version of Pulumi is available. To upgrade from version '3.66.0' to '3.68.0', visit https://pulumi.com/docs/reference/install/ for manual instructions and release notes.
2023-05-26T13:38:54.4517703Z Updating (dev):
2023-05-26T13:38:54.4517982Z @ updating.....
2023-05-26T13:38:54.4518147Z
2023-05-26T13:38:54.4518263Z @ updating....
2023-05-26T13:38:54.4518720Z + pulumi:pulumi:Stack cluster-dev creating (0s)
2023-05-26T13:38:54.4519150Z @ updating...........................
2023-05-26T13:38:54.4519639Z + pulumi:providers:aws cluster-aws creating (0s)
2023-05-26T13:38:54.4520763Z @ updating.....
2023-05-26T13:38:54.4521238Z + pulumi:providers:aws cluster-aws created (2s)
2023-05-26T13:38:54.4521573Z @ updating....
2023-05-26T13:38:54.4522235Z + pulumi:pulumi:Stack cluster-dev creating (26s) read pulumi:pulumi:StackReference organization/identity/dev
2023-05-26T13:38:54.4523043Z + pulumi:pulumi:Stack cluster-dev creating (26s) read pulumi:pulumi:StackReference organization/infra/dev
2023-05-26T13:38:54.4523645Z @ updating....
2023-05-26T13:38:54.4524118Z + eks:index:Cluster cluster creating (0s)
2023-05-26T13:38:54.4524431Z @ updating.....
2023-05-26T13:38:54.4525061Z + pulumi:pulumi:Stack cluster-dev creating (30s) read pulumi:pulumi:StackReference organization/identity/dev
2023-05-26T13:38:54.4525479Z @ updating.....
2023-05-26T13:38:54.4526096Z + pulumi:pulumi:Stack cluster-dev creating (31s) read pulumi:pulumi:StackReference organization/infra/dev
2023-05-26T13:38:54.4526504Z @ updating......
2023-05-26T13:38:54.4526969Z + eks:index:ServiceRole cluster-eksRole creating (0s)
2023-05-26T13:38:54.4527580Z + aws:ec2:SecurityGroup cluster-eksClusterSecurityGroup creating (0s)
2023-05-26T13:38:54.4527985Z @ updating.......
2023-05-26T13:38:54.4528523Z + pulumi:pulumi:Stack cluster-dev creating (38s) read aws:iam:Role devsIamRole
2023-05-26T13:38:54.4529149Z + pulumi:pulumi:Stack cluster-dev creating (38s) read aws:iam:Role adminsIamRole
2023-05-26T13:38:54.4529703Z + aws:iam:InstanceProfile ng-standard creating (0s)
2023-05-26T13:38:54.4530031Z @ updating....
2023-05-26T13:38:54.4530471Z + aws:iam:Role cluster-eksRole-role creating (0s)
2023-05-26T13:38:54.4530791Z @ updating....
2023-05-26T13:38:54.4531312Z + pulumi:pulumi:Stack cluster-dev creating (40s) read aws:iam:Role devsIamRole
2023-05-26T13:38:54.4531930Z + aws:ec2:SecurityGroup cluster-eksClusterSecurityGroup created (5s)
2023-05-26T13:38:54.4532308Z @ updating....
2023-05-26T13:38:54.4532835Z + pulumi:pulumi:Stack cluster-dev creating (41s) read aws:iam:Role adminsIamRole
2023-05-26T13:38:54.4533205Z @ updating....
2023-05-26T13:38:54.4533641Z + aws:iam:InstanceProfile ng-standard created (3s)
2023-05-26T13:38:54.4533965Z @ updating....
2023-05-26T13:38:54.4534394Z + aws:iam:Role cluster-eksRole-role created (4s)
2023-05-26T13:38:54.4534718Z @ updating.....
2023-05-26T13:38:54.4535286Z + aws:ec2:SecurityGroupRule cluster-eksClusterInternetEgressRule creating (0s)
2023-05-26T13:38:54.4535697Z @ updating.....
2023-05-26T13:38:54.4536487Z + aws:iam:RolePolicyAttachment cluster-eksRole-4b490823 creating (0s)
2023-05-26T13:38:54.4536893Z @ updating.....
2023-05-26T13:38:54.4537478Z + aws:ec2:SecurityGroupRule cluster-eksClusterInternetEgressRule created (4s)
2023-05-26T13:38:54.4538155Z + aws:iam:RolePolicyAttachment cluster-eksRole-4b490823 created (2s)
2023-05-26T13:38:54.4538534Z @ updating.....
2023-05-26T13:38:54.4538988Z + aws:eks:Cluster cluster-eksCluster creating (0s)
2023-05-26T13:38:54.4540531Z @ updating.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
2023-05-26T13:38:54.4541485Z + aws:eks:Cluster cluster-eksCluster created (510s)
2023-05-26T13:38:54.4541825Z @ updating.....
2023-05-26T13:38:54.4542348Z + aws:ec2:SecurityGroup cluster-nodeSecurityGroup creating (0s)
2023-05-26T13:38:54.4542963Z + aws:eks:Cluster cluster-eksCluster created (510s) Cluster is ready
2023-05-26T13:38:54.4543331Z @ updating....
2023-05-26T13:38:54.4543827Z + pulumi:providers:kubernetes cluster-provider creating (0s)
2023-05-26T13:38:54.4544393Z + pulumi:providers:kubernetes cluster-eks-k8s creating (0s)
2023-05-26T13:38:54.4544890Z @ updating.....
2023-05-26T13:38:54.4547626Z + pulumi:providers:kubernetes cluster-provider created (1s)
2023-05-26T13:38:54.4548007Z @ updating....
2023-05-26T13:38:54.4548578Z + aws:ec2:SecurityGroup cluster-nodeSecurityGroup created (4s)
2023-05-26T13:38:54.4548957Z @ updating....
2023-05-26T13:38:54.4549455Z + pulumi:providers:kubernetes cluster-eks-k8s created (3s)
2023-05-26T13:38:54.4550033Z @ updating....
2023-05-26T13:38:54.4550496Z + eks:index:VpcCni cluster-vpc-cni creating (0s)
2023-05-26T13:38:54.4550941Z @ updating....
2023-05-26T13:38:54.4551518Z + kubernetes:core/v1:Namespace cluster-svcs creating (0s)
2023-05-26T13:38:54.4552030Z + kubernetes:policy/v1beta1:PodSecurityPolicy restrictive creating (0s)
2023-05-26T13:38:54.4552593Z + kubernetes:core/v1:Namespace app-svcs creating (0s)
2023-05-26T13:38:54.4553024Z + kubernetes:core/v1:Namespace apps creating (0s)
2023-05-26T13:38:54.4553564Z + kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding privileged creating (0s)
2023-05-26T13:38:54.4554163Z + eks:index:NodeGroup cluster-ng-standard creating (0s)
2023-05-26T13:38:54.4554703Z + kubernetes:core/v1:Namespace ingress-nginx creating (0s)
2023-05-26T13:38:54.4555306Z @ updating....
2023-05-26T13:38:54.4556006Z + aws:ec2:SecurityGroupRule cluster-eksNodeInternetEgressRule creating (0s)
2023-05-26T13:38:54.4556857Z + aws:ec2:SecurityGroupRule cluster-eksExtApiServerClusterIngressRule creating (0s)
2023-05-26T13:38:54.4557807Z + aws:ec2:SecurityGroupRule cluster-eksNodeIngressRule creating (0s)
2023-05-26T13:38:54.4558600Z + aws:ec2:SecurityGroupRule cluster-eksNodeClusterIngressRule creating (0s)
2023-05-26T13:38:54.4559375Z + aws:ec2:SecurityGroupRule cluster-eksClusterIngressRule creating (0s)
2023-05-26T13:38:54.4560154Z + kubernetes:storage.k8s.io/v1:StorageClass cluster-gp2-encrypted creating (0s)
2023-05-26T13:38:54.4560928Z + kubernetes:core/v1:ConfigMap cluster-nodeAccess creating (0s)
2023-05-26T13:38:54.4561642Z + kubernetes:storage.k8s.io/v1:StorageClass cluster-sc1 creating (0s)
2023-05-26T13:38:54.4562105Z @ updating.....
2023-05-26T13:38:54.4563221Z + kubernetes:core/v1:Namespace cluster-svcs creating (3s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4564730Z + kubernetes:core/v1:Namespace cluster-svcs **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4565427Z @ updating....
2023-05-26T13:38:54.4566377Z + kubernetes:policy/v1beta1:PodSecurityPolicy restrictive creating (4s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4567642Z + kubernetes:policy/v1beta1:PodSecurityPolicy restrictive **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4568388Z @ updating....
2023-05-26T13:38:54.4569276Z + pulumi:pulumi:Stack cluster-dev creating (575s) error: You must be logged in to the server (the server has asked for the client to provide credentials)
2023-05-26T13:38:54.4570282Z + eks:index:VpcCni cluster-vpc-cni creating (5s) error: Command failed: kubectl apply -f /tmp/tmp-2099yNN6sixwZWI6.tmp
2023-05-26T13:38:54.4571253Z + eks:index:VpcCni cluster-vpc-cni **creating failed** error: Command failed: kubectl apply -f /tmp/tmp-2099yNN6sixwZWI6.tmp
2023-05-26T13:38:54.4572563Z + kubernetes:core/v1:Namespace app-svcs creating (5s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4624424Z + kubernetes:core/v1:Namespace app-svcs **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4625078Z @ updating....
2023-05-26T13:38:54.4625844Z + kubernetes:core/v1:Namespace apps creating (6s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4627078Z + kubernetes:core/v1:Namespace apps **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4627659Z @ updating....
2023-05-26T13:38:54.4628526Z + kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding privileged creating (7s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4629741Z + kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding privileged **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4630380Z @ updating.....
2023-05-26T13:38:54.4631555Z + kubernetes:core/v1:Namespace ingress-nginx creating (8s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4632903Z + kubernetes:core/v1:Namespace ingress-nginx **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4633491Z @ updating....
2023-05-26T13:38:54.4634070Z + aws:ec2:SecurityGroupRule cluster-eksNodeInternetEgressRule created (9s)
2023-05-26T13:38:54.4634488Z @ updating....
2023-05-26T13:38:54.4635115Z + aws:ec2:SecurityGroupRule cluster-eksExtApiServerClusterIngressRule created (10s)
2023-05-26T13:38:54.4635556Z @ updating.....
2023-05-26T13:38:54.4636095Z + aws:ec2:SecurityGroupRule cluster-eksNodeIngressRule created (12s)
2023-05-26T13:38:54.4636472Z @ updating....
2023-05-26T13:38:54.4637054Z + aws:ec2:SecurityGroupRule cluster-eksNodeClusterIngressRule created (13s)
2023-05-26T13:38:54.4637467Z @ updating....
2023-05-26T13:38:54.4638029Z + aws:ec2:SecurityGroupRule cluster-eksClusterIngressRule created (14s)
2023-05-26T13:38:54.4639310Z + kubernetes:storage.k8s.io/v1:StorageClass cluster-gp2-encrypted creating (13s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4640802Z + kubernetes:storage.k8s.io/v1:StorageClass cluster-gp2-encrypted **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4641456Z @ updating....
2023-05-26T13:38:54.4642492Z + kubernetes:core/v1:ConfigMap cluster-nodeAccess creating (14s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4643889Z + kubernetes:core/v1:ConfigMap cluster-nodeAccess **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4645433Z + kubernetes:storage.k8s.io/v1:StorageClass cluster-sc1 creating (15s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4646846Z + kubernetes:storage.k8s.io/v1:StorageClass cluster-sc1 **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4647506Z @ updating..................
2023-05-26T13:38:54.4648065Z + pulumi:pulumi:Stack cluster-dev creating (601s) error: update failed
2023-05-26T13:38:54.4648589Z @ updating....
2023-05-26T13:38:54.4649124Z + pulumi:pulumi:Stack cluster-dev **creating failed** 1 error; 1 message
2023-05-26T13:38:54.4649694Z + eks:index:NodeGroup cluster-ng-standard created
2023-05-26T13:38:54.4649941Z
2023-05-26T13:38:54.4650064Z Diagnostics:
2023-05-26T13:38:54.4650753Z kubernetes:storage.k8s.io/v1:StorageClass (cluster-gp2-encrypted):
2023-05-26T13:38:54.4651521Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4651926Z
2023-05-26T13:38:54.4652183Z eks:index:VpcCni (cluster-vpc-cni):
2023-05-26T13:38:54.4652772Z error: Command failed: kubectl apply -f /tmp/tmp-2099yNN6sixwZWI6.tmp
2023-05-26T13:38:54.4653383Z error: You must be logged in to the server (the server has asked for the client to provide credentials)
2023-05-26T13:38:54.4653687Z
2023-05-26T13:38:54.4653960Z kubernetes:core/v1:Namespace (app-svcs):
2023-05-26T13:38:54.4654661Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4655066Z
2023-05-26T13:38:54.4655308Z pulumi:pulumi:Stack (cluster-dev):
2023-05-26T13:38:54.4655639Z error: update failed
2023-05-26T13:38:54.4655822Z
2023-05-26T13:38:54.4656171Z error: You must be logged in to the server (the server has asked for the client to provide credentials)
2023-05-26T13:38:54.4656473Z
2023-05-26T13:38:54.4656760Z kubernetes:core/v1:Namespace (cluster-svcs):
2023-05-26T13:38:54.4657474Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4657867Z
2023-05-26T13:38:54.4658150Z kubernetes:core/v1:Namespace (ingress-nginx):
2023-05-26T13:38:54.4658847Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4659250Z
2023-05-26T13:38:54.4659556Z kubernetes:core/v1:ConfigMap (cluster-nodeAccess):
2023-05-26T13:38:54.4660281Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4660678Z
2023-05-26T13:38:54.4660941Z kubernetes:policy/v1beta1:PodSecurityPolicy (restrictive):
2023-05-26T13:38:54.4661677Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4662065Z
2023-05-26T13:38:54.4662370Z kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding (privileged):
2023-05-26T13:38:54.4663133Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4663539Z
2023-05-26T13:38:54.4663867Z kubernetes:storage.k8s.io/v1:StorageClass (cluster-sc1):
2023-05-26T13:38:54.4664597Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4665006Z
2023-05-26T13:38:54.4665192Z kubernetes:core/v1:Namespace (apps):
2023-05-26T13:38:54.4666002Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4666395Z
2023-05-26T13:38:54.4666512Z Resources:
2023-05-26T13:38:54.4666778Z + 19 created
2023-05-26T13:38:54.4666941Z
2023-05-26T13:38:54.4667061Z Duration: 10m4s
2023-05-26T13:38:54.4667233Z
2023-05-26T13:38:54.4667956Z err?: Error: Command failed with exit code 255: pulumi up --yes --skip-preview --exec-agent pulumi/actions@v3 --color auto --exec-kind auto.local --stack dev --non-interactive
2023-05-26T13:38:54.4668934Z [resource plugin eks-1.0.1] installing
2023-05-26T13:38:54.4672194Z warning: A new version of Pulumi is available. To upgrade from version '3.66.0' to '3.68.0', visit https://pulumi.com/docs/reference/install/ for manual instructions and release notes.
2023-05-26T13:38:54.4672768Z Updating (dev):
2023-05-26T13:38:54.4673056Z @ updating.....
2023-05-26T13:38:54.4673311Z
2023-05-26T13:38:54.4673631Z @ updating....
2023-05-26T13:38:54.4674145Z + pulumi:pulumi:Stack cluster-dev creating (0s)
2023-05-26T13:38:54.4674582Z @ updating...........................
2023-05-26T13:38:54.4675083Z + pulumi:providers:aws cluster-aws creating (0s)
2023-05-26T13:38:54.4675429Z @ updating.....
2023-05-26T13:38:54.4675881Z + pulumi:providers:aws cluster-aws created (2s)
2023-05-26T13:38:54.4676218Z @ updating....
2023-05-26T13:38:54.4676880Z + pulumi:pulumi:Stack cluster-dev creating (26s) read pulumi:pulumi:StackReference organization/identity/dev
2023-05-26T13:38:54.4677703Z + pulumi:pulumi:Stack cluster-dev creating (26s) read pulumi:pulumi:StackReference organization/infra/dev
2023-05-26T13:38:54.4678134Z @ updating....
2023-05-26T13:38:54.4678501Z + eks:index:Cluster cluster creating (0s)
2023-05-26T13:38:54.4678827Z @ updating.....
2023-05-26T13:38:54.4679482Z + pulumi:pulumi:Stack cluster-dev creating (30s) read pulumi:pulumi:StackReference organization/identity/dev
2023-05-26T13:38:54.4679913Z @ updating.....
2023-05-26T13:38:54.4680567Z + pulumi:pulumi:Stack cluster-dev creating (31s) read pulumi:pulumi:StackReference organization/infra/dev
2023-05-26T13:38:54.4681037Z @ updating......
2023-05-26T13:38:54.4681523Z + eks:index:ServiceRole cluster-eksRole creating (0s)
2023-05-26T13:38:54.4682156Z + aws:ec2:SecurityGroup cluster-eksClusterSecurityGroup creating (0s)
2023-05-26T13:38:54.4682581Z @ updating.......
2023-05-26T13:38:54.4683146Z + pulumi:pulumi:Stack cluster-dev creating (38s) read aws:iam:Role devsIamRole
2023-05-26T13:38:54.4683893Z + pulumi:pulumi:Stack cluster-dev creating (38s) read aws:iam:Role adminsIamRole
2023-05-26T13:38:54.4684421Z + aws:iam:InstanceProfile ng-standard creating (0s)
2023-05-26T13:38:54.4684741Z @ updating....
2023-05-26T13:38:54.4685172Z + aws:iam:Role cluster-eksRole-role creating (0s)
2023-05-26T13:38:54.4685490Z @ updating....
2023-05-26T13:38:54.4686006Z + pulumi:pulumi:Stack cluster-dev creating (40s) read aws:iam:Role devsIamRole
2023-05-26T13:38:54.4686612Z + aws:ec2:SecurityGroup cluster-eksClusterSecurityGroup created (5s)
2023-05-26T13:38:54.4686985Z @ updating....
2023-05-26T13:38:54.4687501Z + pulumi:pulumi:Stack cluster-dev creating (41s) read aws:iam:Role adminsIamRole
2023-05-26T13:38:54.4687857Z @ updating....
2023-05-26T13:38:54.4688287Z + aws:iam:InstanceProfile ng-standard created (3s)
2023-05-26T13:38:54.4688651Z @ updating....
2023-05-26T13:38:54.4689074Z + aws:iam:Role cluster-eksRole-role created (4s)
2023-05-26T13:38:54.4689403Z @ updating.....
2023-05-26T13:38:54.4689962Z + aws:ec2:SecurityGroupRule cluster-eksClusterInternetEgressRule creating (0s)
2023-05-26T13:38:54.4690358Z @ updating.....
2023-05-26T13:38:54.4690869Z + aws:iam:RolePolicyAttachment cluster-eksRole-4b490823 creating (0s)
2023-05-26T13:38:54.4691228Z @ updating.....
2023-05-26T13:38:54.4691776Z + aws:ec2:SecurityGroupRule cluster-eksClusterInternetEgressRule created (4s)
2023-05-26T13:38:54.4692411Z + aws:iam:RolePolicyAttachment cluster-eksRole-4b490823 created (2s)
2023-05-26T13:38:54.4692996Z @ updating.....
2023-05-26T13:38:54.4693436Z + aws:eks:Cluster cluster-eksCluster creating (0s)
2023-05-26T13:38:54.4694874Z @ updating.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
2023-05-26T13:38:54.4695911Z + aws:eks:Cluster cluster-eksCluster created (510s)
2023-05-26T13:38:54.4696238Z @ updating.....
2023-05-26T13:38:54.4696732Z + aws:ec2:SecurityGroup cluster-nodeSecurityGroup creating (0s)
2023-05-26T13:38:54.4697310Z + aws:eks:Cluster cluster-eksCluster created (510s) Cluster is ready
2023-05-26T13:38:54.4697652Z @ updating....
2023-05-26T13:38:54.4698129Z + pulumi:providers:kubernetes cluster-provider creating (0s)
2023-05-26T13:38:54.4698674Z + pulumi:providers:kubernetes cluster-eks-k8s creating (0s)
2023-05-26T13:38:54.4699014Z @ updating.....
2023-05-26T13:38:54.4699481Z + pulumi:providers:kubernetes cluster-provider created (1s)
2023-05-26T13:38:54.4699815Z @ updating....
2023-05-26T13:38:54.4700301Z + aws:ec2:SecurityGroup cluster-nodeSecurityGroup created (4s)
2023-05-26T13:38:54.4700661Z @ updating....
2023-05-26T13:38:54.4701120Z + pulumi:providers:kubernetes cluster-eks-k8s created (3s)
2023-05-26T13:38:54.4701451Z @ updating....
2023-05-26T13:38:54.4701867Z + eks:index:VpcCni cluster-vpc-cni creating (0s)
2023-05-26T13:38:54.4702179Z @ updating....
2023-05-26T13:38:54.4702630Z + kubernetes:core/v1:Namespace cluster-svcs creating (0s)
2023-05-26T13:38:54.4703121Z + kubernetes:policy/v1beta1:PodSecurityPolicy restrictive creating (0s)
2023-05-26T13:38:54.4703659Z + kubernetes:core/v1:Namespace app-svcs creating (0s)
2023-05-26T13:38:54.4704079Z + kubernetes:core/v1:Namespace apps creating (0s)
2023-05-26T13:38:54.4704889Z + kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding privileged creating (0s)
2023-05-26T13:38:54.4705466Z + eks:index:NodeGroup cluster-ng-standard creating (0s)
2023-05-26T13:38:54.4705993Z + kubernetes:core/v1:Namespace ingress-nginx creating (0s)
2023-05-26T13:38:54.4706324Z @ updating....
2023-05-26T13:38:54.4706865Z + aws:ec2:SecurityGroupRule cluster-eksNodeInternetEgressRule creating (0s)
2023-05-26T13:38:54.4707572Z + aws:ec2:SecurityGroupRule cluster-eksExtApiServerClusterIngressRule creating (0s)
2023-05-26T13:38:54.4708437Z + aws:ec2:SecurityGroupRule cluster-eksNodeIngressRule creating (0s)
2023-05-26T13:38:54.4709120Z + aws:ec2:SecurityGroupRule cluster-eksNodeClusterIngressRule creating (0s)
2023-05-26T13:38:54.4709815Z + aws:ec2:SecurityGroupRule cluster-eksClusterIngressRule creating (0s)
2023-05-26T13:38:54.4710516Z + kubernetes:storage.k8s.io/v1:StorageClass cluster-gp2-encrypted creating (0s)
2023-05-26T13:38:54.4711148Z + kubernetes:core/v1:ConfigMap cluster-nodeAccess creating (0s)
2023-05-26T13:38:54.4711903Z + kubernetes:storage.k8s.io/v1:StorageClass cluster-sc1 creating (0s)
2023-05-26T13:38:54.4712287Z @ updating.....
2023-05-26T13:38:54.4713327Z + kubernetes:core/v1:Namespace cluster-svcs creating (3s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4714692Z + kubernetes:core/v1:Namespace cluster-svcs **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4715289Z @ updating....
2023-05-26T13:38:54.4716261Z + kubernetes:policy/v1beta1:PodSecurityPolicy restrictive creating (4s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4717434Z + kubernetes:policy/v1beta1:PodSecurityPolicy restrictive **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4718181Z @ updating....
2023-05-26T13:38:54.4718972Z + pulumi:pulumi:Stack cluster-dev creating (575s) error: You must be logged in to the server (the server has asked for the client to provide credentials)
2023-05-26T13:38:54.4719877Z + eks:index:VpcCni cluster-vpc-cni creating (5s) error: Command failed: kubectl apply -f /tmp/tmp-2099yNN6sixwZWI6.tmp
2023-05-26T13:38:54.4720759Z + eks:index:VpcCni cluster-vpc-cni **creating failed** error: Command failed: kubectl apply -f /tmp/tmp-2099yNN6sixwZWI6.tmp
2023-05-26T13:38:54.4721941Z + kubernetes:core/v1:Namespace app-svcs creating (5s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4723297Z + kubernetes:core/v1:Namespace app-svcs **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4723859Z @ updating....
2023-05-26T13:38:54.4724611Z + kubernetes:core/v1:Namespace apps creating (6s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4725672Z + kubernetes:core/v1:Namespace apps **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4726326Z @ updating....
2023-05-26T13:38:54.4727019Z + kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding privileged creating (7s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4728021Z + kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding privileged **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4728778Z @ updating.....
2023-05-26T13:38:54.4729946Z + kubernetes:core/v1:Namespace ingress-nginx creating (8s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4731304Z + kubernetes:core/v1:Namespace ingress-nginx **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4731897Z @ updating....
2023-05-26T13:38:54.4732480Z + aws:ec2:SecurityGroupRule cluster-eksNodeInternetEgressRule created (9s)
2023-05-26T13:38:54.4732897Z @ updating....
2023-05-26T13:38:54.4733530Z + aws:ec2:SecurityGroupRule cluster-eksExtApiServerClusterIngressRule created (10s)
2023-05-26T13:38:54.4733987Z @ updating.....
2023-05-26T13:38:54.4734534Z + aws:ec2:SecurityGroupRule cluster-eksNodeIngressRule created (12s)
2023-05-26T13:38:54.4734923Z @ updating....
2023-05-26T13:38:54.4735503Z + aws:ec2:SecurityGroupRule cluster-eksNodeClusterIngressRule created (13s)
2023-05-26T13:38:54.4735913Z @ updating....
2023-05-26T13:38:54.4736470Z + aws:ec2:SecurityGroupRule cluster-eksClusterIngressRule created (14s)
2023-05-26T13:38:54.4737829Z + kubernetes:storage.k8s.io/v1:StorageClass cluster-gp2-encrypted creating (13s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4739320Z + kubernetes:storage.k8s.io/v1:StorageClass cluster-gp2-encrypted **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4740084Z @ updating....
2023-05-26T13:38:54.4741123Z + kubernetes:core/v1:ConfigMap cluster-nodeAccess creating (14s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4742503Z + kubernetes:core/v1:ConfigMap cluster-nodeAccess **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4743909Z + kubernetes:storage.k8s.io/v1:StorageClass cluster-sc1 creating (15s) error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4745304Z + kubernetes:storage.k8s.io/v1:StorageClass cluster-sc1 **creating failed** error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4745993Z @ updating..................
2023-05-26T13:38:54.4746551Z + pulumi:pulumi:Stack cluster-dev creating (601s) error: update failed
2023-05-26T13:38:54.4746922Z @ updating....
2023-05-26T13:38:54.4747448Z + pulumi:pulumi:Stack cluster-dev **creating failed** 1 error; 1 message
2023-05-26T13:38:54.4748006Z + eks:index:NodeGroup cluster-ng-standard created
2023-05-26T13:38:54.4748251Z
2023-05-26T13:38:54.4748369Z Diagnostics:
2023-05-26T13:38:54.4748916Z kubernetes:storage.k8s.io/v1:StorageClass (cluster-gp2-encrypted):
2023-05-26T13:38:54.4749677Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4750076Z
2023-05-26T13:38:54.4750329Z eks:index:VpcCni (cluster-vpc-cni):
2023-05-26T13:38:54.4750906Z error: Command failed: kubectl apply -f /tmp/tmp-2099yNN6sixwZWI6.tmp
2023-05-26T13:38:54.4751670Z error: You must be logged in to the server (the server has asked for the client to provide credentials)
2023-05-26T13:38:54.4751977Z
2023-05-26T13:38:54.4752249Z kubernetes:core/v1:Namespace (app-svcs):
2023-05-26T13:38:54.4752951Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4753348Z
2023-05-26T13:38:54.4753586Z pulumi:pulumi:Stack (cluster-dev):
2023-05-26T13:38:54.4753915Z error: update failed
2023-05-26T13:38:54.4754101Z
2023-05-26T13:38:54.4754446Z error: You must be logged in to the server (the server has asked for the client to provide credentials)
2023-05-26T13:38:54.4754746Z
2023-05-26T13:38:54.4755028Z kubernetes:core/v1:Namespace (cluster-svcs):
2023-05-26T13:38:54.4755732Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4756136Z
2023-05-26T13:38:54.4756416Z kubernetes:core/v1:Namespace (ingress-nginx):
2023-05-26T13:38:54.4757116Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4757514Z
2023-05-26T13:38:54.4757826Z kubernetes:core/v1:ConfigMap (cluster-nodeAccess):
2023-05-26T13:38:54.4758701Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4759106Z
2023-05-26T13:38:54.4759370Z kubernetes:policy/v1beta1:PodSecurityPolicy (restrictive):
2023-05-26T13:38:54.4760091Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4760480Z
2023-05-26T13:38:54.4760913Z kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding (privileged):
2023-05-26T13:38:54.4761667Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4762062Z
2023-05-26T13:38:54.4762396Z kubernetes:storage.k8s.io/v1:StorageClass (cluster-sc1):
2023-05-26T13:38:54.4763355Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4763842Z
2023-05-26T13:38:54.4764029Z kubernetes:core/v1:Namespace (apps):
2023-05-26T13:38:54.4764704Z error: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
2023-05-26T13:38:54.4765084Z
2023-05-26T13:38:54.4765199Z Resources:
2023-05-26T13:38:54.4765455Z + 19 created
2023-05-26T13:38:54.4765621Z
2023-05-26T13:38:54.4765739Z Duration: 10m4s
2023-05-26T13:38:54.4765903Z
2023-05-26T13:38:54.4765913Z
2023-05-26T13:38:54.4766612Z at Object.createCommandError (/home/runner/work/_actions/pulumi/actions/v4/webpack:/pulumi-github-action/node_modules/@pulumi/pulumi/automation/errors.js:77:1)
2023-05-26T13:38:54.4767667Z at Object.<anonymous> (/home/runner/work/_actions/pulumi/actions/v4/webpack:/pulumi-github-action/node_modules/@pulumi/pulumi/automation/cmd.js:76:1)
2023-05-26T13:38:54.4768215Z at Generator.throw (<anonymous>)
2023-05-26T13:38:54.4769092Z at rejected (/home/runner/work/_actions/pulumi/actions/v4/webpack:/pulumi-github-action/node_modules/@pulumi/pulumi/automation/cmd.js:19:1)
2023-05-26T13:38:54.4769588Z at runMicrotasks (<anonymous>)
2023-05-26T13:38:54.4770019Z at processTicksAndRejections (node:internal/process/task_queues:96:5)
2023-05-26T13:38:54.4830846Z Post job cleanup.
2023-05-26T13:38:54.6098766Z [command]/usr/bin/git version
2023-05-26T13:38:54.6152685Z git version 2.40.1
2023-05-26T13:38:54.6216329Z Temporarily overriding HOME='/home/runner/work/_temp/5a642ada-c0c6-419a-8e14-32cf1b760cf9' before making global git config changes
2023-05-26T13:38:54.6222296Z Adding repository directory to the temporary git global config as a safe directory
2023-05-26T13:38:54.6230977Z [command]/usr/bin/git config --global --add safe.directory /home/runner/work/platform-infra/platform-infra
2023-05-26T13:38:54.6284667Z [command]/usr/bin/git config --local --name-only --get-regexp core\.sshCommand
2023-05-26T13:38:54.6332123Z [command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :"
2023-05-26T13:38:54.6620643Z [command]/usr/bin/git config --local --name-only --get-regexp http\.https\:\/\/github\.com\/\.extraheader
2023-05-26T13:38:54.6651840Z http.https://github.com/.extraheader
2023-05-26T13:38:54.6673072Z [command]/usr/bin/git config --local --unset-all http.https://github.com/.extraheader
2023-05-26T13:38:54.6737601Z [command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'http\.https\:\/\/github\.com\/\.extraheader' && git config --local --unset-all 'http.https://github.com/.extraheader' || :"
2023-05-26T13:38:54.7262333Z Cleaning up orphan processes
import * as aws from "@pulumi/aws";
// Creates a collection of IAM instance profiles from the given roles.
export function createInstanceProfiles(name: string, roles: aws.iam.Role[]): aws.iam.InstanceProfile[] {
const profiles: aws.iam.InstanceProfile[] = [];
for (let i = 0; i < roles.length; i++) {
const role = roles[i];
profiles.push(new aws.iam.InstanceProfile(`${name}-instanceProfile-${i}`, {role: role}));
}
return profiles;
}
import * as aws from "@pulumi/aws";
// Creates a collection of IAM instance profiles from the given roles.
export function createInstanceProfiles(name: string, roles: aws.iam.Role[]): aws.iam.InstanceProfile[] {
const profiles: aws.iam.InstanceProfile[] = [];
for (let i = 0; i < roles.length; i++) {
const role = roles[i];
profiles.push(new aws.iam.InstanceProfile(`${name}-instanceProfile-${i}`, {role: role}));
}
return profiles;
}
import * as aws from "@pulumi/aws";
import * as eks from "@pulumi/eks";
import * as k8s from "@pulumi/kubernetes";
import * as pulumi from "@pulumi/pulumi";
import { config } from "./config";
const projectName = pulumi.getProject();
export const adminsIamRoleArn = config.adminsIamRoleArn
export const devsIamRoleArn = config.devsIamRoleArn
export const stdNodegroupIamRoleArn = config.stdNodegroupIamRoleArn
export const perfNodegroupIamRoleArn = config.perfNodegroupIamRoleArn
const adminsIamRoleName = adminsIamRoleArn.apply(s => s.split("/")).apply(s => s[1])
const devsIamRoleName = devsIamRoleArn.apply(s => s.split("/")).apply(s => s[1])
const stdNodegroupIamRoleName = stdNodegroupIamRoleArn.apply(s => s.split("/")).apply(s => s[1])
const perfNodegroupIamRoleName = perfNodegroupIamRoleArn.apply(s => s.split("/")).apply(s => s[1])
// Create an AWS provider instance.
const awsProvider = new aws.Provider(`${projectName}-aws`, {
region: aws.config.region,
profile: aws.config.profile,
});
// Create an EKS cluster.
const cluster = new eks.Cluster(`${projectName}`, {
providerCredentialOpts: {
profileName: aws.config.profile,
},
instanceRoles: [
aws.iam.Role.get("adminsIamRole", stdNodegroupIamRoleName),
aws.iam.Role.get("devsIamRole", perfNodegroupIamRoleName),
],
roleMappings: [
{
roleArn: config.adminsIamRoleArn,
groups: ["system:masters"],
username: "pulumi:admins",
},
{
roleArn: config.devsIamRoleArn,
groups: ["pulumi:devs"],
username: "pulumi:anosh",
},
],
vpcId: config.vpcId,
publicSubnetIds: config.publicSubnetIds,
privateSubnetIds: config.privateSubnetIds,
storageClasses: {
"gp2-encrypted": { type: "gp2", encrypted: true },
"sc1": { type: "sc1" }
},
nodeAssociatePublicIpAddress: false,
skipDefaultNodeGroup: true,
deployDashboard: false,
version: "1.24",
tags: {
"Project": "k8s-aws-cluster",
"Org": "pulumi",
},
clusterSecurityGroupTags: { "ClusterSecurityGroupTag": "true" },
nodeSecurityGroupTags: { "NodeSecurityGroupTag": "true" },
enabledClusterLogTypes: ["api", "audit", "authenticator", "controllerManager", "scheduler"],
// endpointPublicAccess: false, // Requires bastion to access cluster API endpoint
// endpointPrivateAccess: true, // Requires bastion to access cluster API endpoint
}, {
providers: { aws: awsProvider },
});
// Export the cluster details.
export const kubeconfig = cluster.kubeconfig.apply(JSON.stringify);
export const clusterName = cluster.core.cluster.name;
export const region = aws.config.region;
export const securityGroupIds = [cluster.nodeSecurityGroup.id];
// Create a Standard node group of t4g.medium workers.
const ngStandard = new eks.NodeGroup(`${projectName}-ng-standard`, {
cluster: cluster,
instanceProfile: new aws.iam.InstanceProfile("ng-standard", { role: stdNodegroupIamRoleName }),
nodeAssociatePublicIpAddress: false,
nodeSecurityGroup: cluster.nodeSecurityGroup,
clusterIngressRule: cluster.eksClusterIngressRule,
amiId: "ami-0c5d56699950f253f", // k8s v1.24 in eu-west-2 ARM
amiType: "AL2_ARM_64",
instanceType: "t4g.medium",
desiredCapacity: 3,
minSize: 3,
maxSize: 10,
labels: { "amiId": "ami-0ca5998dc2c88e64b" },
cloudFormationTags: clusterName.apply(clusterName => ({
"CloudFormationGroupTag": "true",
"k8s.io/cluster-autoscaler/enabled": "true",
[`k8s.io/cluster-autoscaler/${clusterName}`]: "true",
})),
}, {
providers: { kubernetes: cluster.provider, aws: awsProvider },
});
// Create a 2xlarge node group of t4g.2xlarge workers with taints for special workloads.
// const ng2xlarge = new eks.NodeGroup(`${projectName}-ng-2xlarge`, {
// cluster: cluster,
// instanceProfile: new aws.iam.InstanceProfile("ng-2xlarge", {role: perfNodegroupIamRoleName}),
// nodeAssociatePublicIpAddress: false,
// nodeSecurityGroup: cluster.nodeSecurityGroup,
// clusterIngressRule: cluster.eksClusterIngressRule,
// // amiId: "ami-0ca5998dc2c88e64b", // k8s v1.14.7 in us-west-2
// instanceType: "t4g.2xlarge",
// desiredCapacity: 5,
// minSize: 5,
// maxSize: 10,
// // labels: {"amiId": "ami-0ca5998dc2c88e64b"},
// taints: { "special": { value: "true", effect: "NoSchedule"}},
// cloudFormationTags: clusterName.apply(clusterName => ({
// "CloudFormationGroupTag": "true",
// "k8s.io/cluster-autoscaler/enabled": "true",
// [`k8s.io/cluster-autoscaler/${clusterName}`]: "true",
// })),
// }, {
// providers: { kubernetes: cluster.provider},
// });
// Create Kubernetes namespaces.
const clusterSvcsNamespace = new k8s.core.v1.Namespace("cluster-svcs", undefined, { provider: cluster.provider });
export const clusterSvcsNamespaceName = clusterSvcsNamespace.metadata.name;
const appSvcsNamespace = new k8s.core.v1.Namespace("app-svcs", undefined, { provider: cluster.provider });
export const appSvcsNamespaceName = appSvcsNamespace.metadata.name;
const appsNamespace = new k8s.core.v1.Namespace("apps", undefined, { provider: cluster.provider });
export const appsNamespaceName = appsNamespace.metadata.name;
const nginxNs = new k8s.core.v1.Namespace("ingress-nginx", { metadata: { name: "ingress-nginx" } }, { provider: cluster.provider });
export const nginxNsName = nginxNs.metadata.name;
// Create a resource quota in the apps namespace.
const quotaAppNamespace = new k8s.core.v1.ResourceQuota("apps", {
metadata: { namespace: appsNamespaceName },
spec: {
hard: {
cpu: "20",
memory: "1Gi",
pods: "10",
replicationcontrollers: "20",
resourcequotas: "1",
services: "5",
},
}
}, {
provider: cluster.provider
});
// Create a limited role for the `pulumi:devs` to use in the apps namespace.
const roleNamespaces = [appsNamespaceName, nginxNs.metadata.name];
roleNamespaces.forEach((roleNs, index) => {
const devsGroupRole = new k8s.rbac.v1.Role(`pulumi-devs-${index}`,
{
metadata: { namespace: roleNs },
rules: [
{
apiGroups: [""],
resources: ["configmap", "pods", "secrets", "services", "persistentvolumeclaims"],
verbs: ["get", "list", "watch", "create", "update", "delete"],
},
{
apiGroups: ["rbac.authorization.k8s.io"],
resources: ["clusterrole", "clusterrolebinding", "role", "rolebinding"],
verbs: ["get", "list", "watch", "create", "update", "delete"],
},
{
apiGroups: ["extensions", "apps"],
resources: ["replicasets", "deployments"],
verbs: ["get", "list", "watch", "create", "update", "delete"],
},
],
},
{ provider: cluster.provider },
);
// Bind the `pulumi:devs` RBAC group to the new, limited role.
const devsGroupRoleBinding = new k8s.rbac.v1.RoleBinding(`pulumi-devs-${index}`,
{
metadata: { namespace: roleNs },
subjects: [{
kind: "Group",
name: "pulumi:devs",
}],
roleRef: {
apiGroup: "rbac.authorization.k8s.io",
kind: "Role",
name: devsGroupRole.metadata.name,
},
}, { provider: cluster.provider });
});
// Create a persistent volume using a persistent volume claim.
if (cluster.core.storageClasses) {
if ("gp2-encrypted" in cluster.core.storageClasses) {
cluster.core.storageClasses["gp2-encrypted"].apply(sc => {
sc.metadata.name.apply(name => {
if (name) {
const myPvc = new k8s.core.v1.PersistentVolumeClaim("mypvc", {
spec: {
accessModes: ["ReadWriteOnce"],
storageClassName: name,
resources: { requests: { storage: "1Gi" } }
}
},
{ provider: cluster.provider }
);
}
});
});
}
}
// Create a restrictive PodSecurityPolicy.
const restrictivePSP = new k8s.policy.v1beta1.PodSecurityPolicy("restrictive", {
metadata: { name: "restrictive" },
spec: {
privileged: false,
hostNetwork: false,
allowPrivilegeEscalation: false,
defaultAllowPrivilegeEscalation: false,
hostPID: false,
hostIPC: false,
runAsUser: { rule: "RunAsAny" },
fsGroup: { rule: "RunAsAny" },
seLinux: { rule: "RunAsAny" },
supplementalGroups: { rule: "RunAsAny" },
volumes: [
"configMap",
"downwardAPI",
"emptyDir",
"persistentVolumeClaim",
"secret",
"projected"
],
allowedCapabilities: [
"*"
]
}
}, { provider: cluster.provider });
// Create a ClusterRole to use the restrictive PodSecurityPolicy.
const restrictiveClusterRole = new k8s.rbac.v1.ClusterRole("restrictive", {
metadata: { name: "restrictive" },
rules: [
{
apiGroups: [
"policy"
],
resourceNames: [
restrictivePSP.metadata.name,
],
resources: [
"podsecuritypolicies"
],
verbs: [
"use"
]
}
]
}, { provider: cluster.provider });
// Create a ClusterRoleBinding for the ServiceAccounts of Namespace kube-system
// to the ClusterRole that uses the restrictive PodSecurityPolicy.
const allowRestrictedKubeSystemCRB = new k8s.rbac.v1.ClusterRoleBinding("allow-restricted-kube-system", {
metadata: { name: "allow-restricted-kube-system" },
roleRef: {
apiGroup: "rbac.authorization.k8s.io",
kind: "ClusterRole",
name: restrictiveClusterRole.metadata.name
},
subjects: [
{
kind: "Group",
name: "system:serviceaccounts",
namespace: "kube-system"
}
]
}, { provider: cluster.provider });
// Create a ClusterRoleBinding for the RBAC group pulumi:devs
// to the ClusterRole that uses the restrictive PodSecurityPolicy.
const allowRestrictedAppsCRB = new k8s.rbac.v1.ClusterRoleBinding("allow-restricted-apps", {
metadata: { name: "allow-restricted-apps" },
roleRef: {
apiGroup: "rbac.authorization.k8s.io",
kind: "ClusterRole",
name: restrictiveClusterRole.metadata.name
},
subjects: [
{
kind: "Group",
name: "pulumi:devs",
namespace: appsNamespaceName
}
]
}, { provider: cluster.provider });
// Create a ClusterRoleBinding for the SeviceAccounts of Namespace ingress-nginx
// to the ClusterRole that uses the privileged PodSecurityPolicy.
const privilegedCRB = new k8s.rbac.v1.ClusterRoleBinding("privileged", {
metadata: { name: "allow-privileged-ingress-nginx" },
roleRef: {
apiGroup: "rbac.authorization.k8s.io",
kind: "ClusterRole",
name: "eks.privileged"
},
subjects: [
{
kind: "Group",
name: "system:serviceaccounts:ingress-nginx",
apiGroup: "rbac.authorization.k8s.io"
}
]
}, { provider: cluster.provider });
config:
aws:profile: development
aws:region: eu-west-2
cluster:identityStackRef: organization/identity/dev
cluster:infraStackRef: organization/infra/dev
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment