Quick clarification question regarding IgnoreChanges: https://www.pulumi.com/docs/intro/concepts/resources/options/ignorechanges/#:~:text=Pulumi%20ignores%20a%20property%20by%20using%20the%20old,the%20state%2C%20most%20importantly%20when%20creating%20the%20resource. I have a situation where I created the Azure testing env via console and I tried importing/copy paste the response into index and running into a bunch of diffs and re-create resources. I know that what was imported is correct (such as the sql db) and I don't want pulumi to try and recreate the database, firewall rules etc. Is there a way with IgnoreChanges to ignore all resources under a resource group or something like that? If not, what would that look like if I were to do this for an existing sql db off the example from the link below?

if you’re doing an import and it’s showing a diff that’s on an immutable property (ie, it’d force a replacement) that’s almost certainly a bug and we should fix it. To answer your question though, I don’t recall

ignoreChanges

accepting anything but an explicit value

yeah I can get that one sec

no problem, thanks!

cmorrow@CMorrow-LT:~/meerkat-infra$ pulumi preview --diff

pulumi:pulumi:Stack: (same)

[urn=urn:XXXXXXXXXXX']

+-azure-native:sql:Server: (replace)

[id=/subscriptions/XXXXXXXXXXXX/resourceGroups/XXXXXXXXXXxx/providers/Microsoft.Sql/servers/XXXXXXXXXXXXX]

[urn=urn:XXXXXXXXXXXXX::azure-native:sql:Server::sqlserver]

[provider=urn:pulumi:testing_centralus::meerkat-infra::pulumi:providers:azure-native::default_1_83_0::XXXXXXXXXXXXXXXXXXXXXXx]

~ administratorLogin: (yaml) [

-     [0]: "secret"

]

=> [secret]

+-azure-native:web:AppServicePlan: (replace)

[id=/subscriptions/XXXXXXXXXXXXXXXXX/resourceGroups/lineagebasstescus/providers/Microsoft.Web/serverfarms/lineageasp]

[urn=urn:pulumi:testing_centralus::meerkat-infra::azure-native:web:AppServicePlan::appServicePlan]

[provider=urn:pulumiXXXXXXXXXXXXXX::pulumi:providers:azure-native::default_1_83_0::XXXXXXXXXXX]

~ kind    : "app" => "Linux"

~ name    : "lineageasp" => "lineagebasstescus"

~ reserved: false => true

~ sku     : {

~ name: "P1" => "P1v2"

~ size: "P1" => "P1v2"

~ tier: "Premium" => "Premium V2"

}

+-azure-native:keyvault:Vault: (replace)

[id=/subscriptions/XXXXXXXXXXXXXXXxx/resourceGroups/XXXXXXXXX/providers/Microsoft.KeyVault/vaults/XXXXXXXXXXXX]

[urn=urn:XXXXXXXXXXXXXXXxxx]

[provider=urn:XXXXXXXXXXXXXXXXXXXX]

~ properties       : {

~ accessPolicies   : [

~ [0]: {

~ permissions: {

~ certificates: [

~ [0]: "Get" => "get"

~ [1]: "List" => "list"

~ [2]: "Delete" => "delete"

~ [3]: "Create" => "create"

~ [4]: "Import" => "import"

~ [5]: "Update" => "update"

~ [6]: "ManageContacts" => "managecontacts"

~ [7]: "GetIssuers" => "getissuers"

~ [8]: "ListIssuers" => "listissuers"

~ [9]: "SetIssuers" => "setissuers"

~ [10]: "DeleteIssuers" => "deleteissuers"

~ [11]: "ManageIssuers" => "manageissuers"

~ [12]: "Recover" => "recover"

~ [13]: "Purge" => "purge"

]

~ keys        : [

~ [0]: "Encrypt" => "encrypt"

~ [1]: "Decrypt" => "decrypt"

~ [2]: "WrapKey" => "wrapKey"

~ [3]: "UnwrapKey" => "unwrapKey"

~ [4]: "Sign" => "sign"

~ [5]: "Verify" => "verify"

~ [6]: "Get" => "get"

~ [7]: "List" => "list"

~ [8]: "Create" => "create"

~ [9]: "Update" => "update"

~ [10]: "Import" => "import"

~ [11]: "Delete" => "delete"

~ [12]: "Backup" => "backup"

~ [13]: "Restore" => "restore"

~ [14]: "Recover" => "recover"

~ [15]: "Purge" => "purge"

]

~ secrets     : [

~ [0]: "Get" => "get"

~ [1]: "List" => "list"

~ [2]: "Set" => "set"

~ [3]: "Delete" => "delete"

~ [4]: "Backup" => "backup"

~ [5]: "Restore" => "restore"

~ [6]: "Recover" => "recover"

~ [7]: "Purge" => "purge"

]

}

}

- [1]: {

- objectId   : "XXXXXXXXXXXXXXXXx"

- permissions: {

- certificates: [

-     [0]: "Get"

-     [1]: "List"

-     [2]: "Update"

-     [3]: "Create"

-     [4]: "Import"

-     [5]: "Delete"

-     [6]: "Recover"

-     [7]: "Backup"

-     [8]: "Restore"

-     [9]: "ManageContacts"

-     [10]: "ManageIssuers"

-     [11]: "GetIssuers"

-     [12]: "ListIssuers"

-     [13]: "SetIssuers"

-     [14]: "DeleteIssuers"

]

- keys        : [

-     [0]: "Get"

-     [1]: "List"

-     [2]: "Update"

-     [3]: "Create"

-     [4]: "Import"

-     [5]: "Delete"

-     [6]: "Recover"

-     [7]: "Backup"

-     [8]: "Restore"

-     [9]: "GetRotationPolicy"

-     [10]: "SetRotationPolicy"

-     [11]: "Rotate"

-     [12]: "Encrypt"

-     [13]: "Decrypt"

-     [14]: "UnwrapKey"

-     [15]: "WrapKey"

-     [16]: "Verify"

-     [17]: "Sign"

-     [18]: "Purge"

-     [19]: "Release"

]

- secrets     : [

-     [0]: "Get"

-     [1]: "List"

-     [2]: "Set"

-     [3]: "Delete"

-     [4]: "Recover"

-     [5]: "Backup"

-     [6]: "Restore"

-     [7]: "Purge"

]

}

- tenantId   : (yaml) [

-     [0]: "secret"

]

}

]

- provisioningState: "Succeeded"

- vaultUri         : "XXXXXXXXXXXX/"

}

~ resourceGroupName: "lineagebasstestingcus" => "lineagebasstescus"

+ azure-native:sql:FirewallRule: (create)

[urn=urn:pulumi:XXXXXXXXXXXXXXXXXXX]

[provider=urn:pulumi:XXXXXXXXXXXXXXXXXXX]

endIpAddress     : "XXXXXXXXX"

firewallRuleName : (yaml) [

[0]: "secret"

]

resourceGroupName: "lineagebasstescus"

serverName       : output<string>

startIpAddress   : "XXXXXX"

+ azure-native:sql:FirewallRule: (create)

[urn=urn:XXXXXXXXXXXX

[provider=urn:XXXXXXXXXXXXxf]

endIpAddress     : "XXXXXX"

firewallRuleName : "XXXXXXXXXXX"

resourceGroupName: "lineagebasstescus"

serverName       : output<string>

startIpAddress   : "XXXXXXXXXXX"

+ azure-native:sql:FirewallRule: (create)

[urn=urn:XXXXXXXXXXXXXXXX]

[provider=urn:XXXXXXXXXXXX]

endIpAddress     : "XXXXXXXXX"

firewallRuleName : "XXXXXXXXXXX"

resourceGroupName: "lineagebasstescus"

serverName       : output<string>

startIpAddress   : "XXXXXXXXXXXXX"

+-azure-native:sql:FirewallRule: (replace)

[id=/subscriptions/XXXXXXXXXXXXXXXXXXXXX]

[urn=urn:XXXXXXXXXXXXXXXX]

[provider=urn:XXXXXXXXXXXXXXXxx]

~ serverName: "sqlserverXXXXX" => output<string>

startIpAddress   : "XXXXXXXXXXx"

Resources:

+ 9 to create

+-9 to replace

18 changes. 4 unchanged

okay yes that’s 100% a bug, would you mind opening an issue if you feel comfortable with the redacted info? you can fix it manually by getting all the properties matching (instead of using

ignoreChanges

) but you shiuldn’t need to

ok thanks I will review and open up a ticket. So just for my knowledge, in a non-bug scenario the copy/paste of the import would give the accurate info of what I would need for index file but the bug is continuing to show diffs and force a replacement when it shouldn't be?

yep that’s exactly it, if you’ve done an

import

of a resource, the properties should be the same as the current state of the resource. The issues here with the strings being wrong (like the capitalisation of the methods) shouldn’t be happening

gotcha ok thank you I'll make sure to add that to the bug ticket. appreciate the insight!

you should be able to just specify the property name, so for example

serverName

so lets say my database is named "sqldatabase" ...would it look like such? and where in the index is it supposed to live? (or does it not matter?)

let res = new sqlDatabase("sqldatabase",
    { prop: "sqldatabase" }, { ignoreChanges: ["sqldatabase"] });

do you have actual code rather than pseudo code? finding it hard to follow, sorry 😞

all good let me paste that here

okay so for example

azure-native:sql:Server

it’d be

ignoreChanges: [ "administratorLogin" ]

AH ok that makes sense. so in theory if I add this in the index, save and re-run the diff it should ignore the db in preview--diffs?

yep!

we have that variablized with an env prefix but I guess I could set that in the config?

yes that’ll stop the replace happening

NICE thank you. trying the diff again...if I put it here in this block it complains of not being assignable to server args. const sqlServer = new sql.Server('sqlserver', { if I put it outside the block it says it's not a unique name.

I think that should be:

const sqlServer = new sql.Server('sqlserver', {
  resourceGroupName: resourceGroup.name,
  administratorLogin: username,
  administratorLoginPassword: pwd,
  version: '12.0',
}, ignoreChanges: [ "administratorLogin" ]);

?

index.ts(92,4): error TS2304: Cannot find name 'ignoreChanges'. index.ts(92,19): error TS2554: Expected 2-3 arguments, but got 4.

one sec, let me get this into my IDE

thanks I'm trying it like this simliar to example on doc and see if it needs curly:

{ ignoreChanges: ["prop"] });

oh I think it might

index.ts(72,3): error TS1117: An object literal cannot have multiple properties with the same name.

this works great for me?

const database = new sql.Server("example", {
    administratorLogin: "admin",
    administratorLoginPassword: "correct-horse-battery-stable",
    resourceGroupName: resourceGroup.name,
    version: '12.0',
}, { ignoreChanges: ["administratorLoginPassword"] });

giving it a go now and will let you know 🙂

thik it needs to be:

{ ignoreChanges: ["reserved, "kind"] }

ah ok I'll give that a go. I was trying with separate brackets.