This message was deleted.

What makes it even stranger: if we remove the service (commenting it) and redeploy again (uncommenting it), this code works on the new deployment.

We had something simular, de deployed a k8s secret in a helm file with value X and then the chart had an init container to update it. Pulumi never saw the updated value, like it was “cached” or something. We fixed it by manually getting it

const secret = fabricCa.getResource('v1/Secret', 'default', 'ca-tls-cert');

// <https://www.pulumi.com/docs/intro/concepts/resources/#resource-get>
const updatedSecret = k8s.core.v1.Secret.get('tlssecret', secret.id, {
  provider,
  dependsOn: [fabricCa],
});

export const data = updatedSecret.data.apply((data) => data);

This is well worth the try. Tnx for the suggestion @proud-pizza-80589

No, i figured it works as designed because we are updating the secret outside of pulumi’s process, it cannot really know about the changed value

ok. That is clearly not the case for me. Also the service is deployed by Pulumi.

One option might be to do a get on the secret after it is created. If the nodeport is automatically allocated by k8s and not in your spec then I don’t know if pulumi does a lookup of the full resource if it was created since it is updated outside of it’s creation.

@fast-dinner-32080 the nodeport value is visible in the Pulumi state with the correct value, after the k8s

Service

is created. Why don’t I get this value (which remains unchanged) if I just add e.g. an annotation?

Hmm, that is odd. It sounds to me like the

healthPortNumber

code is running prior to the

nodePort

value resolving (it’s usually set by the cluster). This seems like a possible oversight in the await logic for Service resources. If you look at https://www.pulumi.com/docs/reference/pkg/kubernetes/core/v1/service/#service you’ll notice that the

nodePort

isn’t considered as part of the readiness check.

@gorgeous-egg-16927 @billowy-army-68599 should I file a GH issue for this?

Sorry lots of plates spinning at the moment. Yes a GitHub issue would great at thank you

@billowy-army-68599 https://github.com/pulumi/pulumi-kubernetes/issues/1540