Hey y'all, running into a new error that popped up recently. I am working in Python. I create a KeyVault and add some secrets to it like so:

key_vault = keyvault.Vault(nameOfKeyVault,
    vault_name= nameOfKeyVault,
    resource_group_name=resource_group.name,
    location=resource_group.location,
    properties={
        "sku": {
            "name": "standard",
            "family": "A"
        },
        "enable_rbac_authorization": True,
        "tenant_id": pulumi_provider_client_info.tenant_id,
        "create_mode": keyvault.CreateMode.DEFAULT,
    })

mysecret = keyvault.Secret(
    "mysecret",
    properties=azure_native.keyvault.SecretPropertiesArgs(
        value= admin_client_key,
    ),
    vault_name= key_vault.vault_name,
    resource_group_name= resource_group.name,
)

This works fine and creates the vault and the secrets. However, I have started getting the following error when trying to delete the stack with

pulumi delete -y

azure-native:keyvault:Secret (mysecret):
    error: vaultName not found in resource state

I haven't found anything googling for this error, looking in Slack, or looking in Github. I have to manually delete the keyvault in order to destroy my stack. Any idea? I'm using Pulumi

v3.120.0

Do you still have a stack where this error reproduces? Can you run

pulumi stack export >> state.json

, search for that resource

azure-native:keyvault:Secret

and see what's in its inputs? (please remove any sensitive values before posting anything)

{
  "urn": "urn:pulumi:tyler_poc::environment-builder::azure-native:keyvault:Secret::cuebox-tower-storage-tenant-id",
  "custom": true,
  "id": "/subscriptions/<s1>/resourceGroups/tyler_poc77157078/providers/Microsoft.KeyVault/vaults/tyler-poc-kv/secrets/cuebox-tower-storage-tenant-id",
  "type": "azure-native:keyvault:Secret",
  "inputs": {
    "properties": {
      "value": "<s2>"
    },
    "resourceGroupName": "tyler_poc77157078",
    "secretName": "cuebox-tower-storage-tenant-id",
    "vaultName": "tyler-poc-kv"
  },
  "outputs": {
    "__inputs": {
      "4dabf18193072939515e22adb298388d": "1b47061264138c4ac30d75fd1eb44270",
      "ciphertext": "v1:<s3>"
    },
    "id": "/subscriptions/<s1>/resourceGroups/tyler_poc77157078/providers/Microsoft.KeyVault/vaults/tyler-poc-kv/secrets/cuebox-tower-storage-tenant-id",
    "location": "westus3",
    "name": "cuebox-tower-storage-tenant-id",
    "properties": {
      "attributes": {
        "created": 1718478416,
        "enabled": true,
        "updated": 1718478416
      },
      "secretUri": "<uri>",
      "secretUriWithVersion": "<uri>/300fa5a9f6114c5385f3a175ce1fa190"
    },
    "type": "Microsoft.KeyVault/vaults/secrets"
  },
  "parent": "urn:pulumi:tyler_poc::environment-builder::pulumi:pulumi:Stack::environment-builder-tyler_poc",
  "dependencies": [
    "urn:pulumi:tyler_poc::environment-builder::azure-native:resources:ResourceGroup::tyler_poc",
    "urn:pulumi:tyler_poc::environment-builder::azure-native:authorization:RoleAssignment::key-vault-role-assignment-su",
    "urn:pulumi:tyler_poc::environment-builder::azure-native:keyvault:Vault::tyler-poc-kv"
  ],
  "provider": "urn:pulumi:tyler_poc::environment-builder::pulumi:providers:azure-native::default_2_45_0::6f143055-c64e-41d1-ad16-ab8ad102a8cf",
  "propertyDependencies": {
    "properties": [],
    "resourceGroupName": [
      "urn:pulumi:tyler_poc::environment-builder::azure-native:resources:ResourceGroup::tyler_poc"
    ],
    "vaultName": [
      "urn:pulumi:tyler_poc::environment-builder::azure-native:keyvault:Vault::tyler-poc-kv"
    ]
  },
  "created": "2024-06-15T19:06:56.430137Z",
  "modified": "2024-06-15T19:06:56.430137Z",
  "sourcePosition": "project:///.venv/lib/python3.12/site-packages/pulumi_azure_native/keyvault/secret.py#148"
}

Here is the whole resource. Looks like the

vaultName

is in the inputs 😆 😭

Hmm, that's weird. Could you please open an issue with your repro? Thank you!

https://github.com/pulumi/pulumi-azure-native/issues/3357 Thanks for the initial troubleshooting steps!