ephemeral-github-runner

A Pulumi TypeScript project that deploys ephemeral Github runner

Setup

pulumi new gcp-typescript
pulumi stack rm -s dev
pulumi login --local
pulumi stack init --secrets-provider=passphrase

config

export PULUMI_CONFIG_PASSPHRASE=<value>

or

export PULUMI_CONFIG_PASSPHRASE_FILE=<value>

The ID of the project to apply any resources to. This can also be specified using any of the following environment variables (listed in order of precedence): GOOGLE_PROJECT, GOOGLE_CLOUD_PROJECT, GCLOUD_PROJECT, CLOUDSDK_CORE_PROJECT.

Contents of a file that contains your service account private key in JSON format. You can download your existing Google Cloud service account file from the Google Cloud Console, or you can create a new one from the same page. Credentials can also be specified using any of the following environment variables (listed in order of precedence): GOOGLE_CREDENTIALS, GOOGLE_CLOUD_KEYFILE_JSON, GCLOUD_KEYFILE_JSON. The GOOGLE_APPLICATION_CREDENTIALS environment variable can also contain the path of a file to obtain credentials from. If no credentials are specified, the provider will fall back to using the Google Application Default Credentials. If you are running Pulumi from a GCE instance, see Creating and Enabling Service Accounts for Instances for details.

The region to operate under, if not specified by a given resource. This can also be specified using any of the following environment variables (listed in order of precedence): GOOGLE_REGION, GCLOUD_REGION, CLOUDSDK_COMPUTE_REGION.

The zone to operate under, if not specified by a given resource. This can also be specified using any of the following environment variables (listed in order of precedence): GOOGLE_ZONE, GCLOUD_ZONE, CLOUDSDK_COMPUTE_ZONE.

or set with:

pulumi config set gcp:<option>

node -v

v14.16.1

export PULUMI_CONFIG_PASSPHRASE= export GOOGLE_PROJECT= how to provide creds

pulumi login gs://ilgpu_pulumi_state