pulumi / pulumi-eks

A Pulumi component for easily creating and managing an Amazon EKS Cluster
https://www.pulumi.com/registry/packages/eks/
Apache License 2.0
168 stars 76 forks source link

Setting providerCredentialOpts.profileName results in automatically created provider that can't find credentials #1207

Open gunzy83 opened 1 week ago

gunzy83 commented 1 week ago

What happened?

I found this issue while upgrading the @pulumi/eks package on our cluster project. We use providerCredentialOpts.profileName on our Cluster resource to set the profile at create time (we have profiles managed inside the project with names based on stack configuration, this could just be consistent profile names we use in our org though). The provider used to create the initial resources (suffix -eks-k8s) has a Kubeconfig with the profile included but an additional provider is created (suffix -provider) that does not have the profile available and tries to use the default credential chain. We advise users not to use default internally so the error from that provider is: Unable to locate credentials. You can configure credentials by running "aws configure".

I create a provider on the outside of the Cluster resource for use later but needed to switch from using eksCluster.kubeconfig to eksCluster.getKubeconfig({ profileName: awsProfile }) so that internally created provider is unlikely to cause us issues but it is still there and will spook users when they see the error.

Example

new eks.Cluster(
  'eks-cluster',
  {
    name: clusterName,
    version: k8sVersion,
    ...
    providerCredentialOpts: {
      profileName: awsProfile,
    },
  },
  { parent: this, provider: awsProvider }
)

Output of pulumi about

CLI          
Version      3.93.0
Go Version   go1.21.3
Go Compiler  gc

Plugins
NAME        VERSION
aws         6.41.0
eks         2.7.1
kubernetes  4.13.1
nodejs      unknown

Host     
OS       fedora
Version  39
Arch     x86_64

This project is written in nodejs: executable='/home/rossco/.asdf/shims/node' version='v16.18.1'

Current Stack: ZiplineCloud/eks-cluster/test-apse2

TYPE                                                        URN
pulumi:pulumi:Stack                                         urn:pulumi:test-apse2::eks-cluster::pulumi:pulumi:Stack::eks-cluster-test-apse2
pendula:Namespace                                           urn:pulumi:test-apse2::eks-cluster::pendula:Namespace::namespace-traefik
pendula:Namespace                                           urn:pulumi:test-apse2::eks-cluster::pendula:Namespace::namespace-prometheus
pendula:Namespace                                           urn:pulumi:test-apse2::eks-cluster::pendula:Namespace::namespace-teleport
pendula:Namespace                                           urn:pulumi:test-apse2::eks-cluster::pendula:Namespace::namespace-cert-manager
pendula:Namespace                                           urn:pulumi:test-apse2::eks-cluster::pendula:Namespace::namespace-alb-controller
pulumi:providers:pulumi                                     urn:pulumi:test-apse2::eks-cluster::pulumi:providers:pulumi::default
pendula:Namespace                                           urn:pulumi:test-apse2::eks-cluster::pendula:Namespace::namespace-external-dns
pendula:MetricsServer                                       urn:pulumi:test-apse2::eks-cluster::pendula:MetricsServer::metrics-server
pendula:Namespace                                           urn:pulumi:test-apse2::eks-cluster::pendula:Namespace::namespace-expert-services-test
pendula:Namespace                                           urn:pulumi:test-apse2::eks-cluster::pendula:Namespace::namespace-datadog
pendula:Namespace                                           urn:pulumi:test-apse2::eks-cluster::pendula:Namespace::namespace-pulsar-operator
pendula:Namespace                                           urn:pulumi:test-apse2::eks-cluster::pendula:Namespace::namespace-db-utils
pulumi:providers:aws                                        urn:pulumi:test-apse2::eks-cluster::pulumi:providers:aws::default
pendula:Namespace                                           urn:pulumi:test-apse2::eks-cluster::pendula:Namespace::namespace-cluster-services
pendula:SSCSIDriver                                         urn:pulumi:test-apse2::eks-cluster::pendula:SSCSIDriver::secret-store-csi-driver
pendula:Namespace                                           urn:pulumi:test-apse2::eks-cluster::pendula:Namespace::namespace-reloader
pulumi:pulumi:StackReference                                urn:pulumi:test-apse2::eks-cluster::pulumi:pulumi:StackReference::ZiplineCloud/vpc/test-apse2
pulumi:pulumi:StackReference                                urn:pulumi:test-apse2::eks-cluster::pulumi:pulumi:StackReference::ZiplineCloud/log-forwarder/sandbox-apse2
pulumi:pulumi:StackReference                                urn:pulumi:test-apse2::eks-cluster::pulumi:pulumi:StackReference::ZiplineCloud/iam/sandbox
pendula:Namespace                                           urn:pulumi:test-apse2::eks-cluster::pendula:Namespace::namespace-demo-test
pendula:Namespace                                           urn:pulumi:test-apse2::eks-cluster::pendula:Namespace::namespace-platform-test
pendula:Namespace                                           urn:pulumi:test-apse2::eks-cluster::pendula:Namespace::namespace-prismatic-test
pendula:Namespace                                           urn:pulumi:test-apse2::eks-cluster::pendula:Namespace::namespace-egress-proxy
pendula:Namespace                                           urn:pulumi:test-apse2::eks-cluster::pendula:Namespace::namespace-pulsar-test
pendula:TeleportAgent                                       urn:pulumi:test-apse2::eks-cluster::pendula:TeleportAgent::teleport-kube-agent
pendula:EKSManagedNodeGroup                                 urn:pulumi:test-apse2::eks-cluster::pendula:EKSManagedNodeGroup::eks-nodegroup-pulsar-b
pulumi:pulumi:StackReference                                urn:pulumi:test-apse2::eks-cluster::pulumi:pulumi:StackReference::ZiplineCloud/kms/sandbox-apse2
pendula:EKSCluster                                          urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster::eks-cluster
pendula:EKSManagedNodeGroup                                 urn:pulumi:test-apse2::eks-cluster::pendula:EKSManagedNodeGroup::eks-nodegroup-pulsar-a
pendula:EKSManagedNodeGroup                                 urn:pulumi:test-apse2::eks-cluster::pendula:EKSManagedNodeGroup::eks-nodegroup-pulsar-c
pendula:EKSManagedNodeGroup                                 urn:pulumi:test-apse2::eks-cluster::pendula:EKSManagedNodeGroup::eks-nodegroup-default
aws:iam/policy:Policy                                       urn:pulumi:test-apse2::eks-cluster::pendula:TeleportAgent$aws:iam/policy:Policy::policy-teleport-agent
eks:index:ManagedNodeGroup                                  urn:pulumi:test-apse2::eks-cluster::pendula:EKSManagedNodeGroup$eks:index:ManagedNodeGroup::eks-nodegroup-pulsar-b
pendula:EKSEBSCSIDriverRole                                 urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$pendula:EKSEBSCSIDriverRole::eks-ebs-csi-driver-role
eks:index:Cluster                                           urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$eks:index:Cluster::eks-cluster
aws:cloudwatch/logGroup:LogGroup                            urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$aws:cloudwatch/logGroup:LogGroup::log-group-eks-cluster
aws:iam/role:Role                                           urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$aws:iam/role:Role::role-eks-cluster
eks:index:ManagedNodeGroup                                  urn:pulumi:test-apse2::eks-cluster::pendula:EKSManagedNodeGroup$eks:index:ManagedNodeGroup::eks-nodegroup-default
eks:index:ManagedNodeGroup                                  urn:pulumi:test-apse2::eks-cluster::pendula:EKSManagedNodeGroup$eks:index:ManagedNodeGroup::eks-nodegroup-pulsar-c
aws:iam/role:Role                                           urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$aws:iam/role:Role::role-eks-node
eks:index:ManagedNodeGroup                                  urn:pulumi:test-apse2::eks-cluster::pendula:EKSManagedNodeGroup$eks:index:ManagedNodeGroup::eks-nodegroup-pulsar-a
aws:iam/policy:Policy                                       urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$pendula:EKSEBSCSIDriverRole$aws:iam/policy:Policy::policy-ebs-csi-driver-kms
aws:ec2/securityGroup:SecurityGroup                         urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$eks:index:Cluster$aws:ec2/securityGroup:SecurityGroup::eks-cluster-eksClusterSecurityGroup
aws:iam/rolePolicyAttachment:RolePolicyAttachment           urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$aws:iam/rolePolicyAttachment:RolePolicyAttachment::policy-attachment-eks-cluster
aws:iam/rolePolicyAttachment:RolePolicyAttachment           urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$aws:iam/rolePolicyAttachment:RolePolicyAttachment::policy-attachment-kms-ssm-audit-logs
aws:iam/rolePolicyAttachment:RolePolicyAttachment           urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$aws:iam/rolePolicyAttachment:RolePolicyAttachment::policy-attachment-eks-worker-node
aws:iam/rolePolicyAttachment:RolePolicyAttachment           urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$aws:iam/rolePolicyAttachment:RolePolicyAttachment::policy-attachment-ecr-access
aws:iam/rolePolicyAttachment:RolePolicyAttachment           urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$aws:iam/rolePolicyAttachment:RolePolicyAttachment::policy-attachment-cni
aws:iam/rolePolicyAttachment:RolePolicyAttachment           urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$aws:iam/rolePolicyAttachment:RolePolicyAttachment::policy-attachment-ssm
aws:ec2/securityGroupRule:SecurityGroupRule                 urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$eks:index:Cluster$aws:ec2/securityGroupRule:SecurityGroupRule::eks-cluster-eksClusterInternetEgressRule
aws:eks/cluster:Cluster                                     urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$eks:index:Cluster$aws:eks/cluster:Cluster::eks-cluster-eksCluster
aws:iam/openIdConnectProvider:OpenIdConnectProvider         urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$eks:index:Cluster$aws:iam/openIdConnectProvider:OpenIdConnectProvider::eks-cluster-oidcProvider
aws:eks/addon:Addon                                         urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$aws:eks/addon:Addon::eks-addon-vpc-cni
aws:eks/addon:Addon                                         urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$aws:eks/addon:Addon::eks-addon-kube-proxy
aws:ec2/securityGroup:SecurityGroup                         urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$eks:index:Cluster$aws:ec2/securityGroup:SecurityGroup::eks-cluster-nodeSecurityGroup
pulumi:providers:kubernetes                                 urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$pulumi:providers:kubernetes::provider-system-masters
pulumi:providers:kubernetes                                 urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$eks:index:Cluster$pulumi:providers:kubernetes::eks-cluster-eks-k8s
pulumi:providers:kubernetes                                 urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$eks:index:Cluster$pulumi:providers:kubernetes::eks-cluster-provider
aws:iam/role:Role                                           urn:pulumi:test-apse2::eks-cluster::pendula:TeleportAgent$aws:iam/role:Role::role-teleport-agent
aws:iam/role:Role                                           urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$pendula:EKSEBSCSIDriverRole$aws:iam/role:Role::role-ebs-csi-driver
aws:ec2/securityGroupRule:SecurityGroupRule                 urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$eks:index:Cluster$aws:ec2/securityGroupRule:SecurityGroupRule::eks-cluster-eksNodeClusterIngressRule
aws:ec2/securityGroupRule:SecurityGroupRule                 urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$eks:index:Cluster$aws:ec2/securityGroupRule:SecurityGroupRule::eks-cluster-eksNodeIngressRule
aws:ec2/securityGroupRule:SecurityGroupRule                 urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$eks:index:Cluster$aws:ec2/securityGroupRule:SecurityGroupRule::eks-cluster-eksNodeInternetEgressRule
aws:ec2/securityGroupRule:SecurityGroupRule                 urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$eks:index:Cluster$aws:ec2/securityGroupRule:SecurityGroupRule::eks-cluster-eksExtApiServerClusterIngressRule
aws:ec2/launchTemplate:LaunchTemplate                       urn:pulumi:test-apse2::eks-cluster::pendula:EKSManagedNodeGroup$aws:ec2/launchTemplate:LaunchTemplate::launch-template-pulsar-c
aws:ec2/launchTemplate:LaunchTemplate                       urn:pulumi:test-apse2::eks-cluster::pendula:EKSManagedNodeGroup$aws:ec2/launchTemplate:LaunchTemplate::launch-template-pulsar-a
aws:ec2/securityGroupRule:SecurityGroupRule                 urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$eks:index:Cluster$aws:ec2/securityGroupRule:SecurityGroupRule::eks-cluster-eksClusterIngressRule
aws:ec2/launchTemplate:LaunchTemplate                       urn:pulumi:test-apse2::eks-cluster::pendula:EKSManagedNodeGroup$aws:ec2/launchTemplate:LaunchTemplate::launch-template-default
aws:ec2/launchTemplate:LaunchTemplate                       urn:pulumi:test-apse2::eks-cluster::pendula:EKSManagedNodeGroup$aws:ec2/launchTemplate:LaunchTemplate::launch-template-pulsar-b
kubernetes:core/v1:Namespace                                urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:Namespace::namespace-demo-test
kubernetes:core/v1:Namespace                                urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:Namespace::namespace-teleport
kubernetes:core/v1:Namespace                                urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:Namespace::namespace-prometheus
kubernetes:core/v1:Namespace                                urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:Namespace::namespace-cert-manager
kubernetes:core/v1:Namespace                                urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:Namespace::namespace-platform-test
kubernetes:core/v1:Namespace                                urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:Namespace::namespace-traefik
kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding  urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding::cluster-role-binding-access-poweruser
kubernetes:core/v1:Namespace                                urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:Namespace::namespace-pulsar-operator
kubernetes:core/v1:Namespace                                urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:Namespace::namespace-datadog
kubernetes:core/v1:Namespace                                urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:Namespace::namespace-egress-proxy
kubernetes:helm.sh/v3:Release                               urn:pulumi:test-apse2::eks-cluster::pendula:MetricsServer$kubernetes:helm.sh/v3:Release::release-metrics-server
kubernetes:rbac.authorization.k8s.io/v1:ClusterRole         urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$kubernetes:rbac.authorization.k8s.io/v1:ClusterRole::cluster-role-pulsar-pv-deploy
kubernetes:rbac.authorization.k8s.io/v1:ClusterRole         urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$kubernetes:rbac.authorization.k8s.io/v1:ClusterRole::cluster-role-datadog-monitor-deploy
kubernetes:storage.k8s.io/v1:StorageClass                   urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$kubernetes:storage.k8s.io/v1:StorageClass::storage-class-gp3-retain
kubernetes:core/v1:Namespace                                urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:Namespace::namespace-prismatic-test
kubernetes:core/v1:Namespace                                urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:Namespace::namespace-cluster-services
kubernetes:storage.k8s.io/v1:StorageClassPatch              urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$kubernetes:storage.k8s.io/v1:StorageClassPatch::storage-class-patch-gp2
kubernetes:core/v1:Namespace                                urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:Namespace::namespace-db-utils
kubernetes:core/v1:Namespace                                urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:Namespace::namespace-expert-services-test
kubernetes:storage.k8s.io/v1:StorageClass                   urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$kubernetes:storage.k8s.io/v1:StorageClass::storage-class-default
kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding  urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding::cluster-role-binding-access-admin
kubernetes:core/v1:Namespace                                urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:Namespace::namespace-alb-controller
kubernetes:core/v1:Namespace                                urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:Namespace::namespace-pulsar-test
kubernetes:helm.sh/v3:Release                               urn:pulumi:test-apse2::eks-cluster::pendula:SSCSIDriver$kubernetes:helm.sh/v3:Release::release-secret-store-csi-driver
kubernetes:core/v1:Namespace                                urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:Namespace::namespace-external-dns
kubernetes:core/v1:Namespace                                urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:Namespace::namespace-reloader
kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding  urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding::cluster-role-binding-access-readonly
kubernetes:core/v1:ConfigMap                                urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$eks:index:Cluster$kubernetes:core/v1:ConfigMap::eks-cluster-nodeAccess
kubernetes:core/v1:ServiceAccount                           urn:pulumi:test-apse2::eks-cluster::pendula:TeleportAgent$kubernetes:core/v1:ServiceAccount::service-account-teleport-agent
aws:iam/rolePolicyAttachment:RolePolicyAttachment           urn:pulumi:test-apse2::eks-cluster::pendula:TeleportAgent$aws:iam/rolePolicyAttachment:RolePolicyAttachment::role-policy-attachment-teleport-agent
aws:iam/rolePolicyAttachment:RolePolicyAttachment           urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$pendula:EKSEBSCSIDriverRole$aws:iam/rolePolicyAttachment:RolePolicyAttachment::policy-attachment-ebs-csi-driver
aws:iam/rolePolicyAttachment:RolePolicyAttachment           urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$pendula:EKSEBSCSIDriverRole$aws:iam/rolePolicyAttachment:RolePolicyAttachment::policy-attachment-ebs-csi-driver-kms
kubernetes:rbac.authorization.k8s.io/v1:RoleBinding         urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:rbac.authorization.k8s.io/v1:RoleBinding::role-binding-deploy-demo-test
kubernetes:core/v1:Secret                                   urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:Secret::secret-github-image-pull-demo-test
kubernetes:rbac.authorization.k8s.io/v1:RoleBinding         urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:rbac.authorization.k8s.io/v1:RoleBinding::role-binding-deploy-prometheus
kubernetes:rbac.authorization.k8s.io/v1:RoleBinding         urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:rbac.authorization.k8s.io/v1:RoleBinding::role-binding-deploy-cert-manager
kubernetes:core/v1:Secret                                   urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:Secret::secret-github-image-pull-platform-test
kubernetes:rbac.authorization.k8s.io/v1:RoleBinding         urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:rbac.authorization.k8s.io/v1:RoleBinding::role-binding-deploy-platform-test
kubernetes:rbac.authorization.k8s.io/v1:Role                urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:rbac.authorization.k8s.io/v1:Role::role-secret-store-crd-deploy-platform-test
kubernetes:rbac.authorization.k8s.io/v1:RoleBinding         urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:rbac.authorization.k8s.io/v1:RoleBinding::role-binding-deploy-pulsar-operator
kubernetes:rbac.authorization.k8s.io/v1:RoleBinding         urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:rbac.authorization.k8s.io/v1:RoleBinding::role-binding-deploy-datadog
kubernetes:rbac.authorization.k8s.io/v1:RoleBinding         urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:rbac.authorization.k8s.io/v1:RoleBinding::role-binding-deploy-egress-proxy
kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding  urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding::cluster-role-binding-pulsar-pv-deploy
kubernetes:core/v1:Secret                                   urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:Secret::secret-github-image-pull-prismatic-test
kubernetes:rbac.authorization.k8s.io/v1:RoleBinding         urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:rbac.authorization.k8s.io/v1:RoleBinding::role-binding-deploy-prismatic-test
kubernetes:core/v1:Secret                                   urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:Secret::secret-github-image-pull-cluster-services
kubernetes:rbac.authorization.k8s.io/v1:RoleBinding         urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:rbac.authorization.k8s.io/v1:RoleBinding::role-binding-deploy-cluster-services
kubernetes:core/v1:Secret                                   urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:Secret::secret-github-image-pull-db-utils
kubernetes:rbac.authorization.k8s.io/v1:RoleBinding         urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:rbac.authorization.k8s.io/v1:RoleBinding::role-binding-deploy-db-utils
kubernetes:rbac.authorization.k8s.io/v1:RoleBinding         urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:rbac.authorization.k8s.io/v1:RoleBinding::role-binding-deploy-expert-services-test
kubernetes:core/v1:Secret                                   urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:Secret::secret-github-image-pull-expert-services-test
kubernetes:rbac.authorization.k8s.io/v1:RoleBinding         urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:rbac.authorization.k8s.io/v1:RoleBinding::role-binding-deploy-alb-controller
kubernetes:rbac.authorization.k8s.io/v1:Role                urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:rbac.authorization.k8s.io/v1:Role::role-pulsar-crd-deploy-pulsar-test
kubernetes:rbac.authorization.k8s.io/v1:RoleBinding         urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:rbac.authorization.k8s.io/v1:RoleBinding::role-binding-deploy-pulsar-test
kubernetes:helm.sh/v3:Release                               urn:pulumi:test-apse2::eks-cluster::pendula:SSCSIDriver$kubernetes:helm.sh/v3:Release::release-secrets-provider-aws
kubernetes:rbac.authorization.k8s.io/v1:RoleBinding         urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:rbac.authorization.k8s.io/v1:RoleBinding::role-binding-deploy-external-dns
aws:eks/nodeGroup:NodeGroup                                 urn:pulumi:test-apse2::eks-cluster::pendula:EKSManagedNodeGroup$eks:index:ManagedNodeGroup$aws:eks/nodeGroup:NodeGroup::eks-nodegroup-pulsar-b
aws:eks/nodeGroup:NodeGroup                                 urn:pulumi:test-apse2::eks-cluster::pendula:EKSManagedNodeGroup$eks:index:ManagedNodeGroup$aws:eks/nodeGroup:NodeGroup::eks-nodegroup-pulsar-c
aws:eks/nodeGroup:NodeGroup                                 urn:pulumi:test-apse2::eks-cluster::pendula:EKSManagedNodeGroup$eks:index:ManagedNodeGroup$aws:eks/nodeGroup:NodeGroup::eks-nodegroup-pulsar-a
kubernetes:rbac.authorization.k8s.io/v1:RoleBinding         urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:rbac.authorization.k8s.io/v1:RoleBinding::role-binding-deploy-reloader
kubernetes:helm.sh/v3:Release                               urn:pulumi:test-apse2::eks-cluster::pendula:TeleportAgent$kubernetes:helm.sh/v3:Release::release-teleport-kube-agent
kubernetes:core/v1:ServiceAccountPatch                      urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:ServiceAccountPatch::service-account-patch-default-demo-test
kubernetes:core/v1:ServiceAccountPatch                      urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:ServiceAccountPatch::service-account-patch-default-platform-test
kubernetes:rbac.authorization.k8s.io/v1:RoleBinding         urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:rbac.authorization.k8s.io/v1:RoleBinding::role-binding-secret-store-crd-deploy-platform-test
kubernetes:core/v1:ServiceAccountPatch                      urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:ServiceAccountPatch::service-account-patch-default-prismatic-test
kubernetes:core/v1:ServiceAccountPatch                      urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:ServiceAccountPatch::service-account-patch-default-cluster-services
kubernetes:core/v1:ServiceAccountPatch                      urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:ServiceAccountPatch::service-account-patch-default-db-utils
kubernetes:core/v1:ServiceAccountPatch                      urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:core/v1:ServiceAccountPatch::service-account-patch-default-expert-services-test
kubernetes:rbac.authorization.k8s.io/v1:RoleBinding         urn:pulumi:test-apse2::eks-cluster::pendula:Namespace$kubernetes:rbac.authorization.k8s.io/v1:RoleBinding::role-binding-pulsar-crd-deploy-pulsar-test
aws:eks/nodeGroup:NodeGroup                                 urn:pulumi:test-apse2::eks-cluster::pendula:EKSManagedNodeGroup$eks:index:ManagedNodeGroup$aws:eks/nodeGroup:NodeGroup::eks-nodegroup-default
aws:eks/addon:Addon                                         urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$aws:eks/addon:Addon::eks-addon-aws-ebs-csi-driver
aws:eks/addon:Addon                                         urn:pulumi:test-apse2::eks-cluster::pendula:EKSCluster$aws:eks/addon:Addon::eks-addon-coredns

Found no pending operations associated with ZiplineCloud/test-apse2

Backend        
Name           pulumi.com
URL            https://app.pulumi.com/gunzy83
User           gunzy83
Organizations  gunzy83, ZiplineCloud
Token type     personal

Dependencies:
NAME                              VERSION
eslint-plugin-prettier            4.2.1
prettier                          2.8.7
@pulumi/aws                       6.41.0
@typescript-eslint/eslint-plugin  5.57.0
@typescript-eslint/parser         5.57.0
eslint-config-prettier            8.8.0
eslint-plugin-import              2.27.5
@pulumi/eks                       2.7.1
@types/node                       16.18.22
eslint-config-airbnb-base         15.0.0
eslint                            8.37.0
@pulumi/kubernetes                4.13.1
@pulumi/pulumi                    3.78.1

Pulumi locates its logs in /tmp by default

Additional context

I think this is the change where this was introduced: https://github.com/pulumi/pulumi-eks/pull/1082. My comment on the topic is here: https://github.com/pulumi/pulumi-eks/pull/1082#issuecomment-2182003837. I do not understand the logic of having a single stack where a profile is needed for the cluster and another profile is set by the user.

Contributing

Vote on this issue by adding a 👍 reaction. To contribute a fix for this issue, leave a comment (and link to your pull request, if you've opened one already).

rquitales commented 3 days ago

Thanks for the additional info. Following from the conversation in https://github.com/pulumi/pulumi-eks/pull/1082#issuecomment-2183427750, let me take another look into this.