community icon indicating copy to clipboard operation
community copied to clipboard
verified publisher icon sigstore

Create documentation for Pulumi administration

Open haydentherapper opened this issue 2 years ago • 6 comments

  • How do you administer Pulumi? Do you use the CLI or UI?
  • Who are the current administrators? Is it a shared account? Or can it be granted to the TSC?
  • What's the login for the UI/CLI? Can this be stored in 1password so the TSC has access?
  • Same question for the app token

cc @cpanato, can you help create this?

haydentherapper avatar Jun 26 '23 23:06 haydentherapper

yes, i can do that, just need to find some free time

cpanato avatar Jun 27 '23 06:06 cpanato

FWIW, the GitHub Sync job failed today:

 /home/runner/work/_actions/pulumi/actions/4204b4e8a7e703da96ba5dd4c3a667adeee35812/webpack:/pulumi-github-action/node_modules/@pulumi/pulumi/automation/errors.js:77
                      : new CommandError(result);
  ^
  CommandError: code: -2
   stdout: 
   stderr: Command failed with exit code 255: pulumi up --yes --skip-preview --diff --exec-agent pulumi/actions@v3 --color auto --exec-kind auto.local --stack sigstore/github-prod --non-interactive
  [resource plugin github-5.12.0] installing
  error: this resource can only be used in the context of an organization, "sigstore" is a user
  error: this resource can only be used in the context of an organization, "sigstore" is a user
  error: update failed

evankanderson avatar Jun 28 '23 21:06 evankanderson

Unfortunately, I don't understand what resource is being referenced, or I would send a PR to fix.

evankanderson avatar Jun 28 '23 21:06 evankanderson

@evankanderson Moving this to a dedicated issue

haydentherapper avatar Jun 28 '23 21:06 haydentherapper

Answered most of these, answers below. One new question is how do we transfer existing repos into the org and how do we import resources?

How do you administer Pulumi? Do you use the CLI or UI?

CLI primarily, modifying locks cannot be done via UI.

Who are the current administrators? Is it a shared account? Or can it be granted to the TSC? What's the login for the UI/CLI? Can this be stored in 1password so the TSC has access?

Credentials are stored in the shared 1password account.

Same question for the app token

App tokens should be generated as needed via CLI or UI.

haydentherapper avatar Jul 03 '24 20:07 haydentherapper

i am sorry for not prioritizing this, i will add this to my priority backlog and get this done

cpanato avatar Jul 04 '24 11:07 cpanato