`getCluster` function for existing eks Clusters about pulumi-eks HOT 4 OPEN

Definitely would make sense to expose it as a public API here - but note that you can construct it from aws.eks.Cluster.get() using this code from the implementation of the library:

from pulumi-eks.

I was very disappointed to find that the object returned by getCluster does not have a kubeconfig or Kubernetes provider.

I wanted to move the code that installs stuff into the cluster into a different project from the project that creates the cluster. The project was getting way too big and the dependency handling was a problem, especially when trying to destroy and rebuild a cluster.

I tried using the source code for generateKubeConfig, copied into my pulumi project with this source code, but it still does not work:

const cluster = aws.eks.getClusterOutput({ name: config.accountName });

const kubeconfig = generateKubeconfig(cluster.name, cluster.endpoint, cluster.certificateAuthorities[0].data);

const kubernetesProvider = new kubernetes.Provider('kubernetes-provider', {
  kubeconfig: kubeconfig.apply(JSON.stringify),
});

const argoCdCrds = new kubernetes.kustomize.Directory(
  'argo-cd-crds',
  {
    directory: `https://github.com/argoproj/argo-cd/tree/${argoCdApplicationVersion}/manifests/crds`,
    resourcePrefix: 'argo-cd-crds',
  },
  {
    provider: kubernetesProvider,
  }
);

I know the connection to AWS is good, because getClusterOutput returns valid endpoints and certs. I can look at the value for kubconfig in an exported state.json file, and they are IDENTICAL to the values in my pulumi project that creates the cluster, where this code ran before.

But, I get this error:

 kubernetes:apiextensions.k8s.io/v1:CustomResourceDefinition (argo-cd-crds-appprojects.argoproj.io):
      warning: configured Kubernetes cluster is unreachable: unable to load schema information from the API server: the server has asked for the client to provide credentials
      error: failed to read resource state due to unreachable cluster. If the cluster was deleted, you can remove this resource from Pulumi state by rerunning the operation with the PULUMI_K8S_DELETE_UNREACHABLE environment variable set to "true"

Does anyone know what I might be missing?

from pulumi-eks.

@RobCannon did you find a solution? they recommend importing the cluster, but that fails too:

const currentProvider = new aws.Provider("current", {
  region: awsConfig.require('region') as aws.Region,
  accessKey: awsConfig.require('accessKey'),
  secretKey: awsConfig.requireSecret('secretKey'),
});

const cluster = new eks.Cluster("cluster", {

  }, {
    id: "eu-west-3",
    provider: currentProvider,
  });

 error: ResourceError: Cannot read an existing resource unless it has a custom provider

from pulumi-eks.

My current workaround looks like this:

const cluster = aws.eks.getCluster({
  name: "hpi-eks-prod",
});

const kubeconfig = pulumi.output(cluster).apply(cluster => ({
  apiVersion: "v1",
  kind: "Config",
  "current-context": "aws",
  clusters: [{
    name: "kubernetes",
    cluster: {
      server: cluster.endpoint,
      "certificate-authority-data": cluster.certificateAuthorities[0].data,
    },
  }],
  users: [{
    name: "aws",
    user: {
      exec: {
        apiVersion: "client.authentication.k8s.io/v1beta1",
        command: "aws",
        args: ["eks", "get-token", "--cluster-name", cluster.name],
      },
    },
  }],
  contexts: [{
    name: "aws",
    context: {
      cluster: "kubernetes",
      user: "aws",
    },
  }],
}));

const provider = new k8s.Provider("default", {
  kubeconfig: kubeconfig.apply(JSON.stringify),
});

from pulumi-eks.