No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

image.png

Hi,
We're using the `dbforpostgresql` Azure Native v2 module, where we create Role resources (non-entra roles). In v3, the TypeScript SDK has been changed to expose a `ServerGroupRole`. In the SDK you've set the Entra ID properties to be required.

These properties are only required if you want to create a Entra ID enabled role. The other option is to create a non-Entra ID enabled role, which requires a password. We've used these roles to provide a way for teams to access our CosmosDB for PostgreSQL cluster from systems that does not support OAuth2, like our Confluent Cloud instance, where we create several sinks to stream directly from a Kafka topic into PostgreSQL.

We are currently unable to upgrade our provider to v3 because the old Role resource has been merged into this new ServerGroupRole resource

You may be able to generate a local SDK for the older version of the API that you were using in azure-native v2: <https://www.pulumi.com/registry/packages/azure-native/version-guide/#accessing-any-api-version-via-local-packages>

To migrate to the newer API, you'll probably need to use `pulumi import`.