https://pulumi.com logo
Title
c

calm-parrot-72437

06/10/2020, 4:26 AM
Can someone help with this horrible bit of code that always wants to delete/replace network associations each time I up the stack its in: var i = 0; for (var subnetId of privateSubnetIds) { new aws.ec2clientvpn.NetworkAssociation(
assoc-${i}
, { clientVpnEndpointId: vpnEndpoint.id, subnetId: subnetId, }); i++; }
I tried sorting the privateSubnetIds.sort() but that didn't help.. still thinks there's always been a change to one of these network associations, like the ordering its getting the subnets is changing
g

gentle-diamond-70147

06/10/2020, 4:30 AM
Can you provide the
pulumi preview --diff
output?
c

calm-parrot-72437

06/10/2020, 4:46 AM
+-aws:ec2clientvpn/networkAssociation:NetworkAssociation: (replace) [id=cvpn-assoc-0a6ba882ef5d3b908] [urn=urn😛ulumi:stage::managed-infra::aws:ec2clientvpn/networkAssociation:NetworkAssociation::assoc-0] [provider=urn😛ulumi:stage::managed-infra:😛ulumi:providers:aws::default_1_19_0::20df1138-1914-4916-aa26-b87c05e0ab2d] ~ subnetId: "subnet-08301af09876e1446" => "subnet-0d8f31780fdb9602b" +-aws:ec2clientvpn/networkAssociation:NetworkAssociation: (replace) [id=cvpn-assoc-0d393de78cdc9259f] [urn=urn😛ulumi:stage::managed-infra::aws:ec2clientvpn/networkAssociation:NetworkAssociation::assoc-2] [provider=urn😛ulumi:stage::managed-infra:😛ulumi:providers:aws::default_1_19_0::20df1138-1914-4916-aa26-b87c05e0ab2d] ~ subnetId: "subnet-08301af09876e1446" => "subnet-037eec31203453d7b"
there are 3 private subnets
g

gentle-diamond-70147

06/10/2020, 5:01 AM
Where is
privateSubnetIds
coming from?
I suspect you're right. The
privateSubnetIds
doesn't appear to be in consistent order. Sorting it should work.
c

calm-parrot-72437

06/10/2020, 3:36 PM
The associations were created with .sort() but I still get the error. I removed them and tried again just in case, but still have the same problem. Here's a preview, up and preview.  pl preview --diff Previewing update: pulumi😛ulumi:Stack: (same) [urn=urn😛ulumi:stage::managed-infra:😛ulumi:pulumi:Stack::managed-infra-stage] + aws:ec2clientvpn/networkAssociation:NetworkAssociation: (create) [urn=urn😛ulumi:stage::managed-infra::aws:ec2clientvpn/networkAssociation:NetworkAssociation::assoc-0] [provider=urn😛ulumi:stage::managed-infra:😛ulumi:providers:aws::default_1_19_0::20df1138-1914-4916-aa26-b87c05e0ab2d] clientVpnEndpointId: "cvpn-endpoint-00f28758291a1c579" subnetId : "subnet-0d8f31780fdb9602b" + aws:ec2clientvpn/networkAssociation:NetworkAssociation: (create) [urn=urn😛ulumi:stage::managed-infra::aws:ec2clientvpn/networkAssociation:NetworkAssociation::assoc-2] [provider=urn😛ulumi:stage::managed-infra:😛ulumi:providers:aws::default_1_19_0::20df1138-1914-4916-aa26-b87c05e0ab2d] clientVpnEndpointId: "cvpn-endpoint-00f28758291a1c579" subnetId : "subnet-037eec31203453d7b" + aws:ec2clientvpn/networkAssociation:NetworkAssociation: (create) [urn=urn😛ulumi:stage::managed-infra::aws:ec2clientvpn/networkAssociation:NetworkAssociation::assoc-1] [provider=urn😛ulumi:stage::managed-infra:😛ulumi:providers:aws::default_1_19_0::20df1138-1914-4916-aa26-b87c05e0ab2d] clientVpnEndpointId: "cvpn-endpoint-00f28758291a1c579" subnetId : "subnet-08301af09876e1446" Resources: + 3 to create 51 unchanged Permalink: https://app.pulumi.com/Synthesis-AI-Dev/managed-infra/stage/previews/1dce16cf-6e05-4fbc-9731-7e0522537381  master  managed-infra  pl up --yes Previewing update (Synthesis-AI-Dev/stage): Type Name Plan pulumi😛ulumi:Stack managed-infra-stage + ├─ aws:ec2clientvpn:NetworkAssociation assoc-2 create + ├─ aws:ec2clientvpn:NetworkAssociation assoc-1 create + └─ aws:ec2clientvpn:NetworkAssociation assoc-0 create Resources: + 3 to create 51 unchanged Updating (Synthesis-AI-Dev/stage): Type Name Status pulumi😛ulumi:Stack managed-infra-stage + ├─ aws:ec2clientvpn:NetworkAssociation assoc-2 created + ├─ aws:ec2clientvpn:NetworkAssociation assoc-1 created + └─ aws:ec2clientvpn:NetworkAssociation assoc-0 created Outputs: allSubnetIds : [ [0]: "subnet-071cc2414add306b0" [1]: "subnet-0c92dfb7944f0d429" [2]: "subnet-0ef0eeb105af9a7fe" [3]: "subnet-0d8f31780fdb9602b" [4]: "subnet-08301af09876e1446" [5]: "subnet-037eec31203453d7b" ] privateSubnetIds: [ [0]: "subnet-0d8f31780fdb9602b" [1]: "subnet-08301af09876e1446" [2]: "subnet-037eec31203453d7b" ] publicSubnetIds : [ [0]: "subnet-071cc2414add306b0" [1]: "subnet-0c92dfb7944f0d429" [2]: "subnet-0ef0eeb105af9a7fe" ] region : "us-east-2" vpcId : "vpc-0bec8002f61d4a4ce" Resources: + 3 created 51 unchanged Duration: 6m13s  pl preview --diff Previewing update (Synthesis-AI-Dev/stage): pulumi😛ulumi:Stack: (same) [urn=urn😛ulumi:stage::managed-infra:😛ulumi:pulumi:Stack::managed-infra-stage] +-aws:ec2clientvpn/networkAssociation:NetworkAssociation: (replace) [id=cvpn-assoc-0b73da15f9a0f5591] [urn=urn😛ulumi:stage::managed-infra::aws:ec2clientvpn/networkAssociation:NetworkAssociation::assoc-1] [provider=urn😛ulumi:stage::managed-infra:😛ulumi:providers:aws::default_1_19_0::20df1138-1914-4916-aa26-b87c05e0ab2d] ~ subnetId: "subnet-037eec31203453d7b" => "subnet-08301af09876e1446" +-aws:ec2clientvpn/networkAssociation:NetworkAssociation: (replace) [id=cvpn-assoc-0497a0192f16ad1b8] [urn=urn😛ulumi:stage::managed-infra::aws:ec2clientvpn/networkAssociation:NetworkAssociation::assoc-0] [provider=urn😛ulumi:stage::managed-infra:😛ulumi:providers:aws::default_1_19_0::20df1138-1914-4916-aa26-b87c05e0ab2d] ~ subnetId: "subnet-037eec31203453d7b" => "subnet-0d8f31780fdb9602b" Resources: +-2 to replace 52 unchanged
Code is just privateSubnetIds.sort() .. privateSubnetIds is pulumi.Output<string>[] originating from awsx.ec2.Vpc.privateSubnetIds
h

hundreds-musician-51496

06/10/2020, 5:40 PM
If
privateSubnetId
is unique & stable (doesn't change), then you should be able to hash (sha1/md5) that value and use it to create an ID that won't change. If the ID doesn't change, pulumi won't try to delete/create - it will only update if the subnetId of vpnEndpoint.id value changes.
c

calm-parrot-72437

06/10/2020, 7:30 PM
I would think privateSubnetId is unique and stable after the sort. I was trying to create a unique name with the assoc-${i} there. I'm not sure why a more complex string there would help things unless I need to use that value in some other way.
h

hundreds-musician-51496

06/10/2020, 9:05 PM
Does it make any difference if you use the subnetIds to name the association? ``assoc-${subnetId}``
c

calm-parrot-72437

06/10/2020, 11:53 PM
i'll give that a shot. it's certainly makes for a cleaner look.
i do like that code better, but unfortunately it does not fix it: pulumi😛ulumi:Stack: (same) [urn=urn😛ulumi:stage::managed-infra:😛ulumi:pulumi:Stack::managed-infra-stage] +-aws:ec2clientvpn/networkAssociation:NetworkAssociation: (replace) [id=cvpn-assoc-0a4503e03505d5108] [urn=urn😛ulumi:stage::managed-infra::aws:ec2clientvpn/networkAssociation:NetworkAssociation::assoc-subnet-08301af09876e1446] [provider=urn😛ulumi:stage::managed-infra:😛ulumi:providers:aws::default_1_19_0::20df1138-1914-4916-aa26-b87c05e0ab2d] ~ subnetId: "subnet-037eec31203453d7b" => "subnet-08301af09876e1446" +-aws:ec2clientvpn/networkAssociation:NetworkAssociation: (replace) [id=cvpn-assoc-023b05af829b07830] [urn=urn😛ulumi:stage::managed-infra::aws:ec2clientvpn/networkAssociation:NetworkAssociation::assoc-subnet-0d8f31780fdb9602b] [provider=urn😛ulumi:stage::managed-infra:😛ulumi:providers:aws::default_1_19_0::20df1138-1914-4916-aa26-b87c05e0ab2d] ~ subnetId: "subnet-037eec31203453d7b" => "subnet-0d8f31780fdb9602b" Resources: +-2 to replace 52 unchanged Permalink: https://app.pulumi.com/Synthesis-AI-Dev/managed-infra/stage/previews/7d5cd998-3ac9-43d1-8bd8-9f7b191bb86e
code now looks like this: for (var subnetId of privateSubnetIds) { subnetId.apply(subnetId => new aws.ec2clientvpn.NetworkAssociation(
assoc-${subnetId}
, { clientVpnEndpointId: vpnEndpoint.id, subnetId: subnetId, })); }
that's after first removing the ones that were there (assoc-[0-2]) and creating with the code above.. and then the following preview --diff. ugh!
h

hundreds-musician-51496

06/12/2020, 4:19 PM
Seems like a bug to me. Not sure how else to explain it 😞