Create documentation for Pulumi administration

sigstore / community

General sigstore community repo

Apache License 2.0

38 stars 47 forks source link

Create documentation for Pulumi administration #286

Open haydentherapper opened 1 year ago

haydentherapper commented 1 year ago

How do you administer Pulumi? Do you use the CLI or UI?
Who are the current administrators? Is it a shared account? Or can it be granted to the TSC?
What's the login for the UI/CLI? Can this be stored in 1password so the TSC has access?
Same question for the app token

cc @cpanato, can you help create this?

cpanato commented 1 year ago

yes, i can do that, just need to find some free time

evankanderson commented 1 year ago

FWIW, the GitHub Sync job failed today:

 /home/runner/work/_actions/pulumi/actions/4204b4e8a7e703da96ba5dd4c3a667adeee35812/webpack:/pulumi-github-action/node_modules/@pulumi/pulumi/automation/errors.js:77
                      : new CommandError(result);
  ^
  CommandError: code: -2
   stdout: 
   stderr: Command failed with exit code 255: pulumi up --yes --skip-preview --diff --exec-agent pulumi/actions@v3 --color auto --exec-kind auto.local --stack sigstore/github-prod --non-interactive
  [resource plugin github-5.12.0] installing
  error: this resource can only be used in the context of an organization, "sigstore" is a user
  error: this resource can only be used in the context of an organization, "sigstore" is a user
  error: update failed

evankanderson commented 1 year ago

Unfortunately, I don't understand what resource is being referenced, or I would send a PR to fix.

haydentherapper commented 1 year ago

@evankanderson Moving this to a dedicated issue

haydentherapper commented 3 months ago

Answered most of these, answers below. One new question is how do we transfer existing repos into the org and how do we import resources?

How do you administer Pulumi? Do you use the CLI or UI?

CLI primarily, modifying locks cannot be done via UI.

Who are the current administrators? Is it a shared account? Or can it be granted to the TSC? What's the login for the UI/CLI? Can this be stored in 1password so the TSC has access?

Credentials are stored in the shared 1password account.

Same question for the app token

App tokens should be generated as needed via CLI or UI.

cpanato commented 3 months ago

i am sorry for not prioritizing this, i will add this to my priority backlog and get this done