This message was deleted.

This message was deleted.

This message was deleted.

This message was deleted.

This message was deleted.

This message was deleted.

Hi all I have this func that creates a secret and its version, it used to work forever until the very recent updates where I started getting these type of errors, any ideas ?

def add_secret(name: str, value: Union[str, dict], description: str):
    """Function to add a secret to AWS"""
    secret = aws.secretsmanager.Secret(
        resource_name=name,
        name=name,
        description=description,
    )
    aws.secretsmanager.SecretVersion(
        f"secret-version/{name}",
        secret_id=secret.id,
        secret_string=value,
    )

aws:secretsmanager:SecretVersion (secret-version/production-xxxx-platform-xxxx-api-token):
    error:   sdk-v2/provider2.go:515: sdk.helper_schema: deleting Secrets Manager Secret Version (arn:aws:secretsmanager:eu-central-1:xxxx:secret:production-xxxx-platform-xxxx-api-token-Mjdgew|terraform-20250103102936863100000009) stage (AWSPREVIOUS): operation error Secrets Manager: UpdateSecretVersionStage, https response error StatusCode: 400, RequestID: 532437ac-b9a3-4460-bb0c-a60fa8ce552d, InvalidParameterException: When you move staging label AWSPREVIOUS, if you specify RemoveFromVersionId, it must be set to the version that currently has the staging label terraform-20250103114221271600000009.: provider=aws@6.66.2
    error: deleting urn:pulumi:production::platform-platform::aws:secretsmanager/secretVersion:SecretVersion::secret-version/production-xxx-platform-xxxx-api-token: 1 error occurred:
        * deleting Secrets Manager Secret Version (arn:aws:secretsmanager:eu-central-1:495775544086:secret:production-xxxx-platform-xxxx-api-token-Mjdgew|terraform-20250103102936863100000009) stage (AWSPREVIOUS): operation error Secrets Manager: UpdateSecretVersionStage, https response error StatusCode: 400, RequestID: 532437ac-b9a3-4460-bb0c-a60fa8ce552d, InvalidParameterException: When you move staging label AWSPREVIOUS, if you specify RemoveFromVersionId, it must be set to the version that currently has the staging label terraform-20250103114221271600000009.

Hi there. Looking to setup Azure OIDC using ESC. Made a small project to create the credential and save it in esc. That project successfully ups, but when I add the resulting environment into a consuming Pulumi project and run an up there I get the following error:

AADSTS70025: The client '04b07795-8ddb-461a-bbee-02f9e1bf7b46'(Microsoft Azure CLI) has no configured federated identity credentials.

Which feels like either the login isn't getting loaded, or maybe I'm missing some baseline config for Az CLI in general? I've seen similar errors in docs and issues but they all seem to be related to the audience in the configured ESC and not the 1st party az cli. This seems like I'm overriding or not correctly consuming the ESC environment entirely but I can't see how. Anybody seen anything like this before?

pulumi:pulumi:Stack testproject-test-dev  1 warning
    pulumi:providers:gcp default_7_32_0 **failed** 1 error
Diagnostics:
  pulumi:pulumi:Stack (testproject-test-dev):
    warning: failed to get regions list: failed to create compute service: google: could not find default credentials. See <https://cloud.google.com/docs/authentication/external/set-up-adc> for more information

  pulumi:providers:gcp (default_7_32_0):
    error: rpc error: code = Unknown desc = failed to load application credentials.
    To use your default gcloud credentials, run:
    	`gcloud auth application-default login`
    See <https://www.pulumi.com/registry/packages/gcp/installation-configuration/> for details.
    Expanded error message: Attempted to load application default credentials since neither `credentials` nor `access_token` was set in the provider block.  No credentials loaded. To use your gcloud credentials, run 'gcloud auth application-default login'.  Original error: google: could not find default credentials. See <https://cloud.google.com/docs/authentication/external/set-up-adc> for more information

Outputs:

Resources:
    ~ 1 updated
    1 unchanged

Duration: 1m20s

I am getting this error. I didn't use gcloud auth activate-service-account --key-file=/gcp_key.json because i want to have different keys for different gcloud resources ( like cloud build, or compute). I just use separate pulumi

gcp.NewProvider

to create providers based on the resources. What can i do here ?

Hi all, Trying to setup a Pulumi project using S3 as the backend and getting this error when trying to set an organization name:

unable to set a default organization for backend type

Any thoughts? Looks like the org name is set to

organization