Any reason

vault.Policy

requires the

policy

property as a string instead of an object?

👍 this was a community provided provider so I can have a look at that

It was generated with the terraform generator you guys have, that much I know. Why doesn’t the generator detect stuff like this?

does Terraform have a known structure for this?

No idea

I thought they needed a string

Ah, so it’s terraform’s poor design that caused this, gotcha.

We can of course add this 🙂

Gotcha. At minimum it would be good to just have it support a generic object

👍

Yep - allowing typed JSON object here would be nice. FWIW- if all you care about is “a generic object” (and thus no strong typing), you can just do

JSON.stringify({...})

.

Yep, I just dislike having to add anything extra.

Pulumi offers the raw string input the same as the Terraform schema, and then adds typing where Terraform providers are really trying to represent schematized JSON data.

Right, but at least supporting generic objects without typing removes the need to stringify json. This solves a huge issue with the #1 usability issue of pulumi which is interpolation.

Understood. There's no way to automatically identify these places from TF schema - so they will always require manual annotation. And if we are doing manual annotation we may as well include the types. So this isn't a "no" it's a "we can and do try to do even better whenever we see the opportunity to do this at all".

Gotcha.

We do in many places also augment raw TF schema with enums. It currently has to be added manually - as there is no schematization of what enum values are allowed to drive from. But PRs always welcome for additional places enums should be supported in addition to raw string values.

Ho do you use the enums then? I’ve not seen it done anywhere so far.

I suspect that enum does not exist today - but it could. We have enums for EC2 instance types for example.

Ideally any value for anything that has specific known values would have enums.

Right - can't be done automatically today - but can be added manually - PRs definitely welcome!

I’d love to help, unfortunately working with Go is a nightmare. I’m always shocked when I see any projects working with it. It’s always the barrier to entry I’ve had to contribute back to pulumi.