Skip to content

Commit

Permalink
init
Browse files Browse the repository at this point in the history
  • Loading branch information
desteves committed Sep 20, 2024
1 parent f143bd3 commit 4afa7fc
Show file tree
Hide file tree
Showing 3 changed files with 14 additions and 28 deletions.
15 changes: 4 additions & 11 deletions aws-ts-oidc-provider-pulumi-cloud/Pulumi.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -3,19 +3,12 @@ description: ${DESCRIPTION}
runtime: nodejs

template:
description: A minimal TypeScript Pulumi program to set up AWS OIDC+Pulumi ESC
description: A minimal TypeScript Pulumi program to set up AWS OIDC
config:
aws:region:
description: The AWS region to deploy into
description: AWS Region
default: us-west-2
oidcIdpUrl:
description: The URL of the OIDC IdP to use
default: https://api.pulumi.com/oidc
thumbprint:
description: The thumbprint of the OIDC IdP SSL certificate.
# This is a valid AWS OIDC thumbprint as of June 2024.
default: 9e99a48a9960b14926bb7f3b02e22da2b0ab7280
escEnv:
description: The Pulumi ESC Environment to create ('.' to skip)
default: aws-oidc-env
description: Pulumi ESC Environment to create ('.' to skip)
default: auth/aws

14 changes: 3 additions & 11 deletions aws-ts-oidc-provider-pulumi-cloud/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ A Pulumi template to:
- Create AWS resources for AWS OIDC (IdP + Role)
- Create a new Pulumi Cloud ESC Environment (optional)

Last update: July 2024
Last update: September 2024

## 📋 Pre-requisites

Expand All @@ -32,23 +32,15 @@ Once copied to your machine, feel free to edit as needed.

## 🎬 How to run

This template will pick up the thumbprint from the URL that you set in the stack configuration. By default it will use the OIDC IDP URL for Pulumi Cloud, unless you set a different one.

To set a different URL you can run the following command:

```bash
pulumi config set oidcIdpUrl {url}
```

(where `{url}` is the URL for the OIDC IDP)
This template will pick up the thumbprint from the URL that you set in the stack configuration. By default it will use the OIDC IDP URL for Pulumi Cloud.

You must also set the name of the environment that you would like to use:

```bash
pulumi config set escEnv {environment-name}
```

(Note that `{environment-name}` must be in the format `{orgname}/environmentname}` where `orgname` can be your individual account name or the the organization that you are adding the environment to)
(Note that `{environment-name}` must be in the format `{orgname}/{project}/{environmentname}` where `orgname` can be your individual account name or the the organization that you are adding the environment to)

To deploy your infrastructure, run:

Expand Down
13 changes: 7 additions & 6 deletions aws-ts-oidc-provider-pulumi-cloud/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,13 +2,14 @@
"name": "aws-ts-oidc-provider-pulumi-cloud",
"main": "index.ts",
"devDependencies": {
"@types/node": "^20",
"typescript": "^5.4.5"
"@types/node": "^22",
"typescript": "^5.6.2"
},
"dependencies": {
"@pulumi/aws": "^6.40.0",
"@pulumi/pulumi": "^3.120.0",
"@pulumi/pulumiservice": "^0.21.2",
"@pulumi/tls": "^5.0.3"
"@pulumi/aws": "^6.52.0",
"@pulumi/command": "^1.0.1",
"@pulumi/pulumi": "^3.133.0",
"@pulumi/pulumiservice": "^0.26.0",
"@pulumi/tls": "^5.0.6"
}
}

0 comments on commit 4afa7fc

Please sign in to comment.