https://pulumi.com logo
c

cool-egg-852

07/31/2019, 3:35 PM
Seems like there is a bug when updating a VPNTunnel in GCP. If you change the localTrafficSelectors, it doesn’t remove the old tunnel first. It’s trying to create it first, thus failing because
A tunnel with same peer IP is already associated with the same gateway.
g

gentle-diamond-70147

07/31/2019, 3:54 PM
By default Pulumi will create replacements before deleting old ones. Would https://www.pulumi.com/docs/reference/programming-model/#deletebeforereplace help in this case?
c

cool-egg-852

07/31/2019, 3:55 PM
It would, but pulumi should know how to handle this automatically
Same goes for GlobalAddress. Basically pulumi should know what resources need deleteBeforeReplace and automatically handle that.
g

gentle-diamond-70147

07/31/2019, 3:57 PM
Yea... that's an interesting one. This is pretty fundamental functionality so changing it for one-off resources would be unexpected for most people, even if it is the necessary behavior.
Could you open an issue on the pulumi-gcp repo to discuss?
c

cool-egg-852

07/31/2019, 4:00 PM
Sure