Looking for some clarity on the `pulumi refresh` command as

Question

Looking for some clarity on the `pulumi refresh` command as I just ran it and it seemingly removed a resource that was manually added for troubleshooting purposes From the <https www pulumi com docs reference cli pulumi refresh |documentation here> it states gt Any such changes are adopted into the current stack It s not clear if this is referring to the current stack as just the state held within Pulumi s state management OR if current stack means the actual resources in the Cloud Provider

billowy-army-68599 · Answer

`pulumi refresh` will reconcile the state of your code the state of your cloud provider and the state of your Pulumi state If you added a resource manually and didn t add it to your code and state it will indeed be removed

billowy-army-68599 · Answer

you should import this resource into your state and code before running refresh

square-laptop-45713 · Answer

that should be more clear imho

square-laptop-45713 · Answer

thanks < billowy army 68599> is there a command that will simply update the state of my stack within Pulumi only a one way sync The reason I ask is that to handle drift I d like to have a one way sync first and then apply and update via `pulumi up` to get it back inline This is what I ve been doing and how I ve assumed Pulumi was operating

square-laptop-45713 · Answer

I came to Pulumi from TF so that s why I was thinking in that way

billowy-army-68599 · Answer

that s `pulumi import`

billowy-army-68599 · Answer

TF doesn t operate that way either If you manually add a resource that s not in state it just gets ignored

square-laptop-45713 · Answer

that s easily confusing there should be some cross referencing between those 2 commands

billowy-army-68599 · Answer

what s not clear is gt I just ran it and it seemingly removed a resource that was manually added for troubleshooting purposes what resource was it that got removed

square-laptop-45713 · Answer

TF refresh only updates it s own managed state and does not make changes to the infrastructure

square-laptop-45713 · Answer

the resource is a target group manually added to an ALB since we re having ingress issues

billowy-army-68599 · Answer

okay I think i misunderstood your initial point did you add a completely new target group and Pulumi removed that or did you modify an existing target group

square-laptop-45713 · Answer

completely new target group

billowy-army-68599 · Answer

okay Pulumi shouldn t have removed that

billowy-army-68599 · Answer

Can you check cloudtrail and if that happened please file a bug

billowy-army-68599 · Answer

also do you have the result of the refresh

square-laptop-45713 · Answer

sure how do you want me to share the results of refresh

square-laptop-45713 · Answer

unfortunately we don t have CloudTrail enabled disappointed

billowy-army-68599 · Answer

you can DM me

square-laptop-45713 · Answer

sent

square-laptop-45713 · Answer

I m verifying whether it was a new target group or not I assumed since that what my teammate did last time when troubleshooting Part of the confusion is that we re both troubleshooting and I didn t know he was online doing anything so I ran the refresh

square-laptop-45713 · Answer

confirmed it the TG was manually added a new one

billowy-army-68599 · Answer

just to follow up from DMs the ALB ingress controller is the manager of some Kubernetes ingress objects which is likely the culprit