I'm having a problem at the moment, we use Emissary Ingress to handle our ingress, which creates an NLB for us, and it attaches to our Security Group some manual rules. When I do a

refresh

it will update our state to have these rules, which means that when I do a

update

these rules get deleted (because we have it missing in our

.ts

file since we don't know what the node endpoint IPs are etc. How can I handle this?

so something outside of Pulumi modifies the security group? YOur options really are: • stop managing the security group with Pulumi • use

ignoreChanges

Hmm,

ignoreChanges

might be what I need for now.