https://pulumi.com logo
Powered by
h

handsome-state-59775

04/09/2021, 8:54 AM
after updating python pulumi_kubernetes from 2.8.4 to 2.9.0, i'm getting a diff in my state it's not clear what the diff is, and selecting yes does not make it go away the next time (update succeeds, and the diagnostic warning is a deliberate placeholder) diff as follows in thread:
Copy code
# p up -r                                                                              
Previewing update (test-001)

     Type                                                Name                                    Plan     Info
     pulumi:pulumi:Stack                                 aks-pulumi-test-001                              
     ├─ azure-native:resources:ResourceGroup             resourceGroup                                    
     │  ├─ azure-native:sql:Server                       dbServer                                         
     │  │  ├─ azure-native:sql:FirewallRule              dbFirewall-allowAzureAll                         
     │  │  └─ azure-native:sql:Database                  db                                               
     │  ├─ azure-native:storage:StorageAccount           storageAccount                                   
     │  │  └─ azure-native:storage:FileShare             fileShare                                        
     │  └─ azure-native:containerservice:ManagedCluster  aks                                              
     │     └─ pulumi:providers:kubernetes                aksProvider                                      
     │        ├─ kubernetes:core/v1:Namespace            namespace-****                              1 warning
     │        │  ├─ kubernetes:core/v1:Secret            storageSecret-****                          
     │        │  └─ kubernetes:core/v1:Secret            containerRegistryCredentials-****           
     │        └─ kubernetes:core/v1:Secret               storageSecret-default                            
     └─ tls:index:PrivateKey                             sshKey                                           
 
Diagnostics:
  kubernetes:core/v1:Namespace (namespace-****):
    warning: TODO: Patch default serviceaccount with imagePullSecrets
 

Do you want to perform this update? details
~ pulumi:pulumi:Stack: (refresh)
    [urn=urn:pulumi:test-001::aks-pulumi::pulumi:pulumi:Stack::aks-pulumi-test-001]
~ pulumi:providers:kubernetes: (refresh) 🔒
    [id=f80dc9ad-d108-45e9-8528-4c762513309f]
    [urn=urn:pulumi:test-001::aks-pulumi::azure-native:resources:ResourceGroup$azure-native:containerservice:ManagedCluster$pulumi:providers:kubernetes::aksProvider]
    ~ tls:index/privateKey:PrivateKey: (refresh)
        [id=900d1bcc7d95155e218a4f1094570a95c7df028c]
        [urn=urn:pulumi:test-001::aks-pulumi::tls:index/privateKey:PrivateKey::sshKey]
        [provider=urn:pulumi:test-001::aks-pulumi::pulumi:providers:tls::default_3_3_1::6e39e421-6764-473f-8a8e-fa97eb25e016]
    ~ azure-native:resources:ResourceGroup: (refresh) 🔒
        [id=/subscriptions/e62c3518-6d96-4976-87b0-77549b73e485/resourceGroups/SaaS-aks-pulumi-test-001]
        [urn=urn:pulumi:test-001::aks-pulumi::azure-native:resources:ResourceGroup::resourceGroup]
        [provider=urn:pulumi:test-001::aks-pulumi::pulumi:providers:azure-native::default_0_8_0::503fe43c-6387-46b4-806e-1cab06913829]
            ~ azure-native:sql:Database: (refresh) 🔒
                [id=/subscriptions/e62c3518-6d96-4976-87b0-77549b73e485/resourceGroups/SaaS-aks-pulumi-test-001/providers/Microsoft.Sql/servers/aks-pulumi-test-001-db-server/databases/aks-pulumi-test-001-db]
                [urn=urn:pulumi:test-001::aks-pulumi::azure-native:resources:ResourceGroup$azure-native:sql:Server$azure-native:sql:Database::db]
                [provider=urn:pulumi:test-001::aks-pulumi::pulumi:providers:azure-native::default_0_8_0::503fe43c-6387-46b4-806e-1cab06913829]
        ~ azure-native:sql:Server: (refresh) 🔒
            [id=/subscriptions/e62c3518-6d96-4976-87b0-77549b73e485/resourceGroups/SaaS-aks-pulumi-test-001/providers/Microsoft.Sql/servers/aks-pulumi-test-001-db-server]
            [urn=urn:pulumi:test-001::aks-pulumi::azure-native:resources:ResourceGroup$azure-native:sql:Server::dbServer]
            [provider=urn:pulumi:test-001::aks-pulumi::pulumi:providers:azure-native::default_0_8_0::503fe43c-6387-46b4-806e-1cab06913829]
        ~ azure-native:storage:StorageAccount: (refresh) 🔒
            [id=/subscriptions/e62c3518-6d96-4976-87b0-77549b73e485/resourceGroups/SaaS-aks-pulumi-test-001/providers/Microsoft.Storage/storageAccounts/akspulumitest001storage]
            [urn=urn:pulumi:test-001::aks-pulumi::azure-native:resources:ResourceGroup$azure-native:storage:StorageAccount::storageAccount]
            [provider=urn:pulumi:test-001::aks-pulumi::pulumi:providers:azure-native::default_0_8_0::503fe43c-6387-46b4-806e-1cab06913829]
            ~ azure-native:storage:FileShare: (refresh) 🔒
                [id=/subscriptions/e62c3518-6d96-4976-87b0-77549b73e485/resourceGroups/SaaS-aks-pulumi-test-001/providers/Microsoft.Storage/storageAccounts/akspulumitest001storage/fileServices/default/shares/akspulumitest001-share]
                [urn=urn:pulumi:test-001::aks-pulumi::azure-native:resources:ResourceGroup$azure-native:storage:StorageAccount$azure-native:storage:FileShare::fileShare]
                [provider=urn:pulumi:test-001::aks-pulumi::pulumi:providers:azure-native::default_0_8_0::503fe43c-6387-46b4-806e-1cab06913829]
            ~ azure-native:sql:FirewallRule: (refresh) 🔒
                [id=/subscriptions/e62c3518-6d96-4976-87b0-77549b73e485/resourceGroups/SaaS-aks-pulumi-test-001/providers/Microsoft.Sql/servers/aks-pulumi-test-001-db-server/firewallRules/dbFirewall-allowAzureAll]
                [urn=urn:pulumi:test-001::aks-pulumi::azure-native:resources:ResourceGroup$azure-native:sql:Server$azure-native:sql:FirewallRule::dbFirewall-allowAzureAll]
                [provider=urn:pulumi:test-001::aks-pulumi::pulumi:providers:azure-native::default_0_8_0::503fe43c-6387-46b4-806e-1cab06913829]
        ~ azure-native:containerservice:ManagedCluster: (refresh) 🔒
            [id=/subscriptions/e62c3518-6d96-4976-87b0-77549b73e485/resourcegroups/SaaS-aks-pulumi-test-001/providers/Microsoft.ContainerService/managedClusters/aks6fa81a19]
            [urn=urn:pulumi:test-001::aks-pulumi::azure-native:resources:ResourceGroup$azure-native:containerservice:ManagedCluster::aks]
            [provider=urn:pulumi:test-001::aks-pulumi::pulumi:providers:azure-native::default_0_8_0::503fe43c-6387-46b4-806e-1cab06913829]
                ~ kubernetes:core/v1:Namespace: (refresh) 🔒
                    [id=****]
                    [urn=urn:pulumi:test-001::aks-pulumi::azure-native:resources:ResourceGroup$azure-native:containerservice:ManagedCluster$pulumi:providers:kubernetes$kubernetes:core/v1:Namespace::namespace-****]
                    [provider=urn:pulumi:test-001::aks-pulumi::azure-native:resources:ResourceGroup$azure-native:containerservice:ManagedCluster$pulumi:providers:kubernetes::aksProvider::f80dc9ad-d108-45e9-8528-4c762513309f]
                ~ kubernetes:core/v1:Secret: (refresh) 🔒
                    [id=default/azure-secret]
                    [urn=urn:pulumi:test-001::aks-pulumi::azure-native:resources:ResourceGroup$azure-native:containerservice:ManagedCluster$pulumi:providers:kubernetes$kubernetes:core/v1:Secret::storageSecret-default]
                    [provider=urn:pulumi:test-001::aks-pulumi::azure-native:resources:ResourceGroup$azure-native:containerservice:ManagedCluster$pulumi:providers:kubernetes::aksProvider::f80dc9ad-d108-45e9-8528-4c762513309f]
                    ~ kubernetes:core/v1:Secret: (refresh) 🔒
                        [id=****/regcred]
                        [urn=urn:pulumi:test-001::aks-pulumi::azure-native:resources:ResourceGroup$azure-native:containerservice:ManagedCluster$pulumi:providers:kubernetes$kubernetes:core/v1:Namespace$kubernetes:core/v1:Secret::containerRegistryCredentials-****]
                        [provider=urn:pulumi:test-001::aks-pulumi::azure-native:resources:ResourceGroup$azure-native:containerservice:ManagedCluster$pulumi:providers:kubernetes::aksProvider::f80dc9ad-d108-45e9-8528-4c762513309f]
                    ~ kubernetes:core/v1:Secret: (refresh) 🔒
                        [id=****/azure-secret]
                        [urn=urn:pulumi:test-001::aks-pulumi::azure-native:resources:ResourceGroup$azure-native:containerservice:ManagedCluster$pulumi:providers:kubernetes$kubernetes:core/v1:Namespace$kubernetes:core/v1:Secret::storageSecret-****]
                        [provider=urn:pulumi:test-001::aks-pulumi::azure-native:resources:ResourceGroup$azure-native:containerservice:ManagedCluster$pulumi:providers:kubernetes::aksProvider::f80dc9ad-d108-45e9-8528-4c762513309f]
  pulumi:pulumi:Stack: (same)
    [urn=urn:pulumi:test-001::aks-pulumi::pulumi:pulumi:Stack::aks-pulumi-test-001]

Do you want to perform this update?  [Use arrows to move, enter to select, type to filter]
b

billowy-army-68599

04/09/2021, 3:53 PM
the provider diff is expected here, because we embed the version of the provider version (ie 
2.9.0
) into the provider itself
are you concerned about changes?
h

handsome-state-59775

04/12/2021, 5:35 AM
1. yes, i'm concerned because the diff is huge and not every resource affected is even related to the kubernetes provider. 2. in this case, i know the change is due to the 2.9.0 update. but the diff doesn't make that clear, does it? how do i figure out what exactly is being changed? 3. even after repeatedly selecting yes across runs of 
pulumi up
, the diff is still the same. surely, i shouldn't need to destroy and recreate everything just for this?
@billowy-army-68599 please help me figure these out
b

billowy-army-68599

04/13/2021, 5:12 AM
looking at the diff you've posted, nothing is changing? it's just refreshing the provider and resources, which is expected after adding 
-r
h

handsome-state-59775

04/13/2021, 6:00 AM
then why is it that when i select yes, the whole process repeats the next time time around as well?
b

billowy-army-68599

04/13/2021, 2:21 PM
because you are refreshing the provider, if you omit the refresh it won't happen
5 Views
Powered by