Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Panic: fatal: An assertion has failed #11464

Closed
stefaneacsu147 opened this issue Nov 24, 2022 · 1 comment
Closed

Panic: fatal: An assertion has failed #11464

stefaneacsu147 opened this issue Nov 24, 2022 · 1 comment
Labels
kind/bug Some behavior is incorrect or out of spec resolution/duplicate This issue is a duplicate of another issue

Comments

@stefaneacsu147
Copy link

stefaneacsu147 commented Nov 24, 2022

What happened?

panic: fatal: An assertion has failed
goroutine 258 [running]:
github.com/pulumi/pulumi/sdk/v3/go/common/util/contract.failfast(...)
	/home/runner/work/pulumi/pulumi/sdk/go/common/util/contract/failfast.go:23
github.com/pulumi/pulumi/sdk/v3/go/common/util/contract.Assert(...)
	/home/runner/work/pulumi/pulumi/sdk/go/common/util/contract/assert.go:26
github.com/pulumi/pulumi/pkg/v3/resource/deploy.NewDeleteReplacementStep(0xc001cba630, 0xc0014a32f0, 0xc000d7f8c0, 0x49)
	/home/runner/work/pulumi/pulumi/pkg/resource/deploy/step.go:316 +0x199
github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*stepGenerator).generateStepsFromDiff(0xc00121c9a0, {0x7ff38fd6ba58, 0xc000ec4940}, {0xc0002bcaf0, 0x4d}, 0xc001b3c000, 0xc0019c4c60, 0xc001af3a40, 0x0?, 0xc000f74f30, ...)
	/home/runner/work/pulumi/pulumi/pkg/resource/deploy/step_generator.go:995 +0x1478
github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*stepGenerator).generateSteps(0xc00121c9a0, {0x7ff38fd6ba58, 0xc000ec4940})
	/home/runner/work/pulumi/pulumi/pkg/resource/deploy/step_generator.go:795 +0x2618
github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*stepGenerator).GenerateSteps(0xc00121c9a0, {0x7ff38fd6ba58?, 0xc000ec4940?})
	/home/runner/work/pulumi/pulumi/pkg/resource/deploy/step_generator.go:261 +0x46
github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*deploymentExecutor).handleSingleEvent(0xc0019b7860, {0x2acbec0?, 0xc000ec4940})
	/home/runner/work/pulumi/pulumi/pkg/resource/deploy/deployment_executor.go:419 +0xe5
github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*deploymentExecutor).Execute.func3(0xc001200960, 0xc0019b7860, 0xc000413d60, {0x2ae8530, 0xc000c49dc0}, {{0x3c69718?, 0x0?, 0x0?}, 0xc0015c4810?}, {{0x0, ...}, ...}, ...)
	/home/runner/work/pulumi/pulumi/pkg/resource/deploy/deployment_executor.go:256 +0x27e
github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*deploymentExecutor).Execute(0xc0019b7860, {0x2ae85d8?, 0xc000f75290}, {{0x7ff38fdad840, 0xc0008ccd80}, 0x7fffffff, 0x0, 0x0, {{0x0, 0x0, ...}, ...}, ...}, ...)
	/home/runner/work/pulumi/pulumi/pkg/resource/deploy/deployment_executor.go:272 +0xb0a
github.com/pulumi/pulumi/pkg/v3/resource/deploy.(*Deployment).Execute(0xc001cba630, {0x2ae85d8, 0xc000f75290}, {{0x7ff38fdad840, 0xc0008ccd80}, 0x7fffffff, 0x0, 0x0, {{0x0, 0x0, ...}, ...}, ...}, ...)
	/home/runner/work/pulumi/pulumi/pkg/resource/deploy/deployment.go:534 +0xd0
github.com/pulumi/pulumi/pkg/v3/engine.(*deployment).run.func1()
	/home/runner/work/pulumi/pulumi/pkg/engine/deployment.go:289 +0x290
created by github.com/pulumi/pulumi/pkg/v3/engine.(*deployment).run
	/home/runner/work/pulumi/pulumi/pkg/engine/deployment.go:272 +0x35b

Steps to reproduce

Tried to do pulumi preview and pulumi up and got the following error. I updated the Pulumi version but the issue still persists after the update.

Expected Behavior

The preview and up to work as intended

Output of pulumi about

CLI          
Version      3.48.0
Go Version   go1.19.3
Go Compiler  gc

Plugins
NAME        VERSION
cloudflare  4.12.1
gcp         6.43.0
kubernetes  3.22.1
nodejs      unknown

Host     
OS       darwin
Version  12.6.1
Arch     arm64

This project is written in nodejs: executable='/opt/homebrew/bin/node' version='v19.1.0'

Current Stack: Nakhoda/gke01-london

TYPE                                                        URN
pulumi:pulumi:Stack                                         urn:pulumi:gke01-london::gcp-gke::pulumi:pulumi:Stack::gcp-gke-gke01-london
pulumi:providers:kubernetes                                 urn:pulumi:gke01-london::gcp-gke::pulumi:providers:kubernetes::default_3_22_1
nakhoda:CertManager                                         urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager::cert-manager
nakhoda:GServiceAccount                                     urn:pulumi:gke01-london::gcp-gke::nakhoda:GServiceAccount::gke-node
pulumi:providers:pulumi                                     urn:pulumi:gke01-london::gcp-gke::pulumi:providers:pulumi::default
pulumi:providers:gcp                                        urn:pulumi:gke01-london::gcp-gke::pulumi:providers:gcp::default_6_43_0
gcp:compute/globalAddress:GlobalAddress                     urn:pulumi:gke01-london::gcp-gke::gcp:compute/globalAddress:GlobalAddress::ingress-stable-protected-iap
gcp:compute/globalAddress:GlobalAddress                     urn:pulumi:gke01-london::gcp-gke::gcp:compute/globalAddress:GlobalAddress::ingress-stable-public
gcp:compute/globalAddress:GlobalAddress                     urn:pulumi:gke01-london::gcp-gke::gcp:compute/globalAddress:GlobalAddress::ingress-churn-protected-iap
gcp:compute/globalAddress:GlobalAddress                     urn:pulumi:gke01-london::gcp-gke::gcp:compute/globalAddress:GlobalAddress::ingress-stable-protected-firewall
gcp:compute/globalAddress:GlobalAddress                     urn:pulumi:gke01-london::gcp-gke::gcp:compute/globalAddress:GlobalAddress::ingress-churn-protected-firewall
gcp:projects/iAMBinding:IAMBinding                          urn:pulumi:gke01-london::gcp-gke::gcp:projects/iAMBinding:IAMBinding::ingress-stable-protected-allow-iap-users
gcp:compute/globalAddress:GlobalAddress                     urn:pulumi:gke01-london::gcp-gke::gcp:compute/globalAddress:GlobalAddress::ingress-churn-public
gcp:projects/iAMCustomRole:IAMCustomRole                    urn:pulumi:gke01-london::gcp-gke::gcp:projects/iAMCustomRole:IAMCustomRole::gke-get-cluster-config
gcp:projects/iAMBinding:IAMBinding                          urn:pulumi:gke01-london::gcp-gke::gcp:projects/iAMBinding:IAMBinding::ingress-churn-protected-allow-iap-users
gcp:serviceAccount/account:Account                          urn:pulumi:gke01-london::gcp-gke::nakhoda:GServiceAccount$gcp:serviceAccount/account:Account::gke-node
pulumi:pulumi:StackReference                                urn:pulumi:gke01-london::gcp-gke::pulumi:pulumi:StackReference::nakhoda/gcp-neteng/prod
gcp:projects/iAMBinding:IAMBinding                          urn:pulumi:gke01-london::gcp-gke::gcp:projects/iAMBinding:IAMBinding::gke-get-cluster-config
gcp:projects/iAMMember:IAMMember                            urn:pulumi:gke01-london::gcp-gke::nakhoda:GServiceAccount$gcp:projects/iAMMember:IAMMember::gke-node:roles/logging.logWriter
gcp:projects/iAMMember:IAMMember                            urn:pulumi:gke01-london::gcp-gke::nakhoda:GServiceAccount$gcp:projects/iAMMember:IAMMember::gke-node:roles/monitoring.viewer
gcp:projects/iAMMember:IAMMember                            urn:pulumi:gke01-london::gcp-gke::nakhoda:GServiceAccount$gcp:projects/iAMMember:IAMMember::gke-node:roles/monitoring.metricWriter
pulumi:pulumi:StackReference                                urn:pulumi:gke01-london::gcp-gke::pulumi:pulumi:StackReference::nakhoda/gcp-bootstrap/prod
gcp:projects/iAMBinding:IAMBinding                          urn:pulumi:gke01-london::gcp-gke::gcp:projects/iAMBinding:IAMBinding::roles/compute.instanceAdmin
gcp:projects/iAMBinding:IAMBinding                          urn:pulumi:gke01-london::gcp-gke::gcp:projects/iAMBinding:IAMBinding::roles/iam.serviceAccountCreator
gcp:projects/iAMBinding:IAMBinding                          urn:pulumi:gke01-london::gcp-gke::gcp:projects/iAMBinding:IAMBinding::roles/storage.admin
gcp:projects/iAMBinding:IAMBinding                          urn:pulumi:gke01-london::gcp-gke::gcp:projects/iAMBinding:IAMBinding::roles/iam.serviceAccountUser
gcp:projects/iAMBinding:IAMBinding                          urn:pulumi:gke01-london::gcp-gke::gcp:projects/iAMBinding:IAMBinding::roles/compute.networkUser
gcp:projects/iAMBinding:IAMBinding                          urn:pulumi:gke01-london::gcp-gke::gcp:projects/iAMBinding:IAMBinding::roles/iam.securityAdmin
gcp:projects/iAMBinding:IAMBinding                          urn:pulumi:gke01-london::gcp-gke::gcp:projects/iAMBinding:IAMBinding::roles/compute.storageAdmin
gcp:projects/iAMBinding:IAMBinding                          urn:pulumi:gke01-london::gcp-gke::gcp:projects/iAMBinding:IAMBinding::roles/compute.loadBalancerAdmin
gcp:projects/iAMBinding:IAMBinding                          urn:pulumi:gke01-london::gcp-gke::gcp:projects/iAMBinding:IAMBinding::roles/container.admin
gcp:projects/iAMBinding:IAMBinding                          urn:pulumi:gke01-london::gcp-gke::gcp:projects/iAMBinding:IAMBinding::roles/compute.orgSecurityPolicyAdmin
gcp:container/cluster:Cluster                               urn:pulumi:gke01-london::gcp-gke::gcp:container/cluster:Cluster::gke01-london
pulumi:providers:kubernetes                                 urn:pulumi:gke01-london::gcp-gke::pulumi:providers:kubernetes::gke-k8s
gcp:compute/route:Route                                     urn:pulumi:gke01-london::gcp-gke::gcp:compute/route:Route::gke01-london-kube-apiserver
kubernetes:yaml:ConfigGroup                                 urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:yaml:ConfigGroup::cert-manager-crds
kubernetes:core/v1:Namespace                                urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:core/v1:Namespace::cert-manager
kubernetes:storage.k8s.io/v1:StorageClass                   urn:pulumi:gke01-london::gcp-gke::kubernetes:storage.k8s.io/v1:StorageClass::fast-safe
kubernetes:core/v1:Namespace                                urn:pulumi:gke01-london::gcp-gke::kubernetes:core/v1:Namespace::gitlab
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::kubernetes:yaml:ConfigFile::kube-system-label-job
kubernetes:storage.k8s.io/v1:StorageClass                   urn:pulumi:gke01-london::gcp-gke::kubernetes:storage.k8s.io/v1:StorageClass::scratch-space
kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding  urn:pulumi:gke01-london::gcp-gke::kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding::view-namespaces
nakhoda:IngressController                                   urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController::ingress-stable-protected
nakhoda:IngressController                                   urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController::ingress-stable-public
nakhoda:IngressController                                   urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController::ingress-churn-public
nakhoda:IngressController                                   urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController::ingress-churn-protected
kubernetes:yaml:ConfigGroup                                 urn:pulumi:gke01-london::gcp-gke::kubernetes:yaml:ConfigGroup::rbac-clusterroles
kubernetes:storage.k8s.io/v1:StorageClass                   urn:pulumi:gke01-london::gcp-gke::kubernetes:storage.k8s.io/v1:StorageClass::standard-safe
kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding  urn:pulumi:gke01-london::gcp-gke::kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding::psp:use-any
kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding  urn:pulumi:gke01-london::gcp-gke::kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding::cluster-admin
gcp:container/nodePool:NodePool                             urn:pulumi:gke01-london::gcp-gke::gcp:container/nodePool:NodePool::worker
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:yaml:ConfigGroup$kubernetes:yaml:ConfigFile::k8s-manifests/cert-manager/00-crds.yaml
kubernetes:helm.sh/v2:Chart                                 urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:helm.sh/v2:Chart::cert-manager
kubernetes:core/v1:ServiceAccount                           urn:pulumi:gke01-london::gcp-gke::kubernetes:yaml:ConfigFile$kubernetes:core/v1:ServiceAccount::kube-system/nakhoda-fixes
gcp:compute/securityPolicy:SecurityPolicy                   urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$gcp:compute/securityPolicy:SecurityPolicy::ingress-stable-protected-iap-whitelist-trusted-ips
gcp:compute/securityPolicy:SecurityPolicy                   urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$gcp:compute/securityPolicy:SecurityPolicy::ingress-churn-protected-iap-whitelist-trusted-ips
kubernetes:core/v1:Namespace                                urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace::ingress-stable-public
kubernetes:core/v1:Namespace                                urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace::ingress-churn-protected
kubernetes:rbac.authorization.k8s.io/v1:RoleBinding         urn:pulumi:gke01-london::gcp-gke::kubernetes:core/v1:Namespace$kubernetes:rbac.authorization.k8s.io/v1:RoleBinding::clusterrole:admin
kubernetes:core/v1:Namespace                                urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace::ingress-churn-public
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::kubernetes:yaml:ConfigGroup$kubernetes:yaml:ConfigFile::./k8s-manifests/rbac/cluster-roles/view-metrics.yaml
kubernetes:batch/v1:Job                                     urn:pulumi:gke01-london::gcp-gke::kubernetes:yaml:ConfigFile$kubernetes:batch/v1:Job::kube-system/kube-system-label-job
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::kubernetes:yaml:ConfigGroup$kubernetes:yaml:ConfigFile::./k8s-manifests/rbac/cluster-roles/psp-use-any.yaml
kubernetes:core/v1:Namespace                                urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace::ingress-stable-protected
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::kubernetes:yaml:ConfigGroup$kubernetes:yaml:ConfigFile::./k8s-manifests/rbac/cluster-roles/view-namespaces.yaml
kubernetes:rbac.authorization.k8s.io/v1:RoleBinding         urn:pulumi:gke01-london::gcp-gke::kubernetes:yaml:ConfigFile$kubernetes:rbac.authorization.k8s.io/v1:RoleBinding::kube-system/nakhoda-fixes-binding
kubernetes:core/v1:ServiceAccount                           urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:helm.sh/v2:Chart$kubernetes:core/v1:ServiceAccount::cert-manager/cert-manager
gcp:container/nodePool:NodePool                             urn:pulumi:gke01-london::gcp-gke::gcp:container/nodePool:NodePool::edge
gcp:container/nodePool:NodePool                             urn:pulumi:gke01-london::gcp-gke::gcp:container/nodePool:NodePool::docker
gcp:container/nodePool:NodePool                             urn:pulumi:gke01-london::gcp-gke::gcp:container/nodePool:NodePool::docker
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-stable-protected-role
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-stable-protected-firewall-service
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-stable-protected-configmap
nakhoda:TLSCertificate                                      urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$nakhoda:TLSCertificate::ingress-stable-protected-cert
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-stable-protected-daemonset
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-stable-protected-role-binding
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-stable-protected-iap-service
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-stable-protected-iap-ingress
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-stable-protected-clusterrolebinding
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-stable-protected-clusterrole
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-stable-protected-firewall-ingress
kubernetes:cloud.google.com/v1beta1:BackendConfig           urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:cloud.google.com/v1beta1:BackendConfig::ingress-stable-protected-trusted-backend-config
kubernetes:core/v1:Secret                                   urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:core/v1:Secret::ingress-stable-protected-iap-oauth-client
pulumi:providers:cloudflare                                 urn:pulumi:gke01-london::gcp-gke::pulumi:providers:cloudflare::default_4_12_1
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-stable-public-service
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-stable-public-ingress
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-stable-public-clusterrole
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-stable-public-daemonset
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-stable-public-configmap
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-stable-public-role-binding
nakhoda:TLSCertificate                                      urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$nakhoda:TLSCertificate::ingress-stable-public-cert
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-stable-public-role
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-churn-protected-role-binding
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-stable-public-clusterrolebinding
nakhoda:TLSCertificate                                      urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$nakhoda:TLSCertificate::ingress-churn-protected-cert
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-churn-protected-configmap
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-churn-protected-iap-ingress
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-churn-protected-clusterrolebinding
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-churn-protected-daemonset
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-churn-protected-iap-service
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-churn-protected-firewall-service
kubernetes:core/v1:Secret                                   urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:core/v1:Secret::ingress-churn-protected-iap-oauth-client
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-churn-protected-clusterrole
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-churn-protected-role
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-churn-protected-firewall-ingress
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-churn-public-configmap
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-churn-public-service
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-churn-public-daemonset
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-churn-public-clusterrolebinding
kubernetes:cloud.google.com/v1beta1:BackendConfig           urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:cloud.google.com/v1beta1:BackendConfig::ingress-churn-protected-trusted-backend-config
nakhoda:TLSCertificate                                      urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$nakhoda:TLSCertificate::ingress-churn-public-cert
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-churn-public-role
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-churn-public-ingress
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-churn-public-clusterrole
kubernetes:yaml:ConfigFile                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile::ingress-churn-public-role-binding
kubernetes:rbac.authorization.k8s.io/v1:ClusterRole         urn:pulumi:gke01-london::gcp-gke::kubernetes:yaml:ConfigGroup$kubernetes:yaml:ConfigFile$kubernetes:rbac.authorization.k8s.io/v1:ClusterRole::view-namespaces
kubernetes:rbac.authorization.k8s.io/v1:ClusterRole         urn:pulumi:gke01-london::gcp-gke::kubernetes:yaml:ConfigGroup$kubernetes:yaml:ConfigFile$kubernetes:rbac.authorization.k8s.io/v1:ClusterRole::view-metrics
kubernetes:rbac.authorization.k8s.io/v1:ClusterRole         urn:pulumi:gke01-london::gcp-gke::kubernetes:yaml:ConfigGroup$kubernetes:yaml:ConfigFile$kubernetes:rbac.authorization.k8s.io/v1:ClusterRole::psp:use-any
kubernetes:core/v1:Secret                                   urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:helm.sh/v2:Chart$kubernetes:core/v1:Secret::cert-manager:cluster-issuer:letsencrypt
kubernetes:rbac.authorization.k8s.io/v1:Role                urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:rbac.authorization.k8s.io/v1:Role::ingress-stable-protected/ingress
kubernetes:core/v1:ConfigMap                                urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:core/v1:ConfigMap::ingress-stable-protected/nginx-includes-d
kubernetes:core/v1:Service                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:core/v1:Service::ingress-stable-protected/ingress-stable-protected-firewall
kubernetes:core/v1:ConfigMap                                urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:core/v1:ConfigMap::ingress-stable-protected/nginx
kubernetes:rbac.authorization.k8s.io/v1:RoleBinding         urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:rbac.authorization.k8s.io/v1:RoleBinding::ingress-stable-protected/ingress
kubernetes:core/v1:Service                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:core/v1:Service::ingress-stable-protected/ingress-stable-protected-iap
kubernetes:extensions/v1beta1:Ingress                       urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:extensions/v1beta1:Ingress::ingress-stable-protected/ingress-stable-protected-iap
kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding::nakhoda:ingress-controller:ingress-stable-protected
kubernetes:extensions/v1beta1:Ingress                       urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:extensions/v1beta1:Ingress::ingress-stable-protected/ingress-stable-protected-firewall
kubernetes:cloud.google.com/v1beta1:BackendConfig           urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:cloud.google.com/v1beta1:BackendConfig::ingress-stable-protected-iap-backend-config
kubernetes:extensions/v1beta1:Ingress                       urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:extensions/v1beta1:Ingress::ingress-stable-public/ingress-stable-public
kubernetes:core/v1:Service                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:core/v1:Service::ingress-stable-public/ingress-stable-public
kubernetes:core/v1:ConfigMap                                urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:core/v1:ConfigMap::ingress-stable-public/nginx-includes-d
kubernetes:core/v1:ConfigMap                                urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:core/v1:ConfigMap::ingress-stable-public/nginx
kubernetes:rbac.authorization.k8s.io/v1:RoleBinding         urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:rbac.authorization.k8s.io/v1:RoleBinding::ingress-stable-public/ingress
kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding::nakhoda:ingress-controller:ingress-stable-public
kubernetes:rbac.authorization.k8s.io/v1:Role                urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:rbac.authorization.k8s.io/v1:Role::ingress-stable-public/ingress
kubernetes:rbac.authorization.k8s.io/v1:RoleBinding         urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:rbac.authorization.k8s.io/v1:RoleBinding::ingress-churn-protected/ingress
kubernetes:core/v1:Service                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:core/v1:Service::ingress-churn-protected/ingress-churn-protected-iap
kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding::nakhoda:ingress-controller:ingress-churn-protected
kubernetes:core/v1:ConfigMap                                urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:core/v1:ConfigMap::ingress-churn-protected/nginx-includes-d
kubernetes:core/v1:Service                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:core/v1:Service::ingress-churn-public/ingress-churn-public
kubernetes:cloud.google.com/v1beta1:BackendConfig           urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:cloud.google.com/v1beta1:BackendConfig::ingress-churn-protected-iap-backend-config
kubernetes:core/v1:ConfigMap                                urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:core/v1:ConfigMap::ingress-churn-public/nginx-includes-d
kubernetes:core/v1:ConfigMap                                urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:core/v1:ConfigMap::ingress-churn-protected/nginx
kubernetes:core/v1:Service                                  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:core/v1:Service::ingress-churn-protected/ingress-churn-protected-firewall
kubernetes:extensions/v1beta1:Ingress                       urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:extensions/v1beta1:Ingress::ingress-churn-protected/ingress-churn-protected-firewall
kubernetes:core/v1:ConfigMap                                urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:core/v1:ConfigMap::ingress-churn-public/nginx
kubernetes:extensions/v1beta1:Ingress                       urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:extensions/v1beta1:Ingress::ingress-churn-protected/ingress-churn-protected-iap
kubernetes:rbac.authorization.k8s.io/v1:Role                urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:rbac.authorization.k8s.io/v1:Role::ingress-churn-public/ingress
kubernetes:extensions/v1beta1:Ingress                       urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:extensions/v1beta1:Ingress::ingress-churn-public/ingress-churn-public
kubernetes:rbac.authorization.k8s.io/v1:Role                urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:rbac.authorization.k8s.io/v1:Role::ingress-churn-protected/ingress
kubernetes:rbac.authorization.k8s.io/v1:RoleBinding         urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:rbac.authorization.k8s.io/v1:RoleBinding::ingress-churn-public/ingress
kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding  urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding::nakhoda:ingress-controller:ingress-churn-public
kubernetes:rbac.authorization.k8s.io/v1:ClusterRole         urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:rbac.authorization.k8s.io/v1:ClusterRole::nakhoda:ingress-controller:ingress-churn-protected
kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding  urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:helm.sh/v2:Chart$kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding::cert-manager-controller-issuers
kubernetes:rbac.authorization.k8s.io/v1:ClusterRole         urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:helm.sh/v2:Chart$kubernetes:rbac.authorization.k8s.io/v1:ClusterRole::cert-manager-controller-challenges
kubernetes:rbac.authorization.k8s.io/v1:ClusterRole         urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:helm.sh/v2:Chart$kubernetes:rbac.authorization.k8s.io/v1:ClusterRole::cert-manager-controller-certificates
kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding  urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:helm.sh/v2:Chart$kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding::cert-manager-controller-certificates
kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding  urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:helm.sh/v2:Chart$kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding::cert-manager-controller-clusterissuers
kubernetes:rbac.authorization.k8s.io/v1:ClusterRole         urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:helm.sh/v2:Chart$kubernetes:rbac.authorization.k8s.io/v1:ClusterRole::cert-manager-controller-issuers
kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding  urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:helm.sh/v2:Chart$kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding::cert-manager-controller-orders
kubernetes:rbac.authorization.k8s.io/v1:Role                urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:helm.sh/v2:Chart$kubernetes:rbac.authorization.k8s.io/v1:Role::cert-manager/cert-manager-startupapicheck:create-cert
kubernetes:rbac.authorization.k8s.io/v1:ClusterRole         urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:helm.sh/v2:Chart$kubernetes:rbac.authorization.k8s.io/v1:ClusterRole::cert-manager-controller-orders
kubernetes:rbac.authorization.k8s.io/v1:ClusterRole         urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:helm.sh/v2:Chart$kubernetes:rbac.authorization.k8s.io/v1:ClusterRole::cert-manager-controller-clusterissuers
kubernetes:rbac.authorization.k8s.io/v1:ClusterRole         urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:helm.sh/v2:Chart$kubernetes:rbac.authorization.k8s.io/v1:ClusterRole::cert-manager-view
kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding  urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:helm.sh/v2:Chart$kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding::cert-manager-controller-ingress-shim
kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding  urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:helm.sh/v2:Chart$kubernetes:rbac.authorization.k8s.io/v1:ClusterRoleBinding::cert-manager-controller-challenges
kubernetes:rbac.authorization.k8s.io/v1:ClusterRole         urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:helm.sh/v2:Chart$kubernetes:rbac.authorization.k8s.io/v1:ClusterRole::cert-manager-controller-ingress-shim
kubernetes:rbac.authorization.k8s.io/v1:ClusterRole         urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:helm.sh/v2:Chart$kubernetes:rbac.authorization.k8s.io/v1:ClusterRole::cert-manager-edit
kubernetes:rbac.authorization.k8s.io/v1:RoleBinding         urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:helm.sh/v2:Chart$kubernetes:rbac.authorization.k8s.io/v1:RoleBinding::cert-manager/cert-manager-startupapicheck:create-cert
kubernetes:core/v1:ServiceAccount                           urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:helm.sh/v2:Chart$kubernetes:core/v1:ServiceAccount::cert-manager/cert-manager-startupapicheck
kubernetes:cert-manager.io/v1:Certificate                   urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$nakhoda:TLSCertificate$kubernetes:cert-manager.io/v1:Certificate::nakhoda:certificate:ingress-stable-protected-ingress-stable-protected-cert
kubernetes:apps/v1:DaemonSet                                urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:apps/v1:DaemonSet::ingress-stable-protected/nginx-ingress-controller
kubernetes:rbac.authorization.k8s.io/v1:ClusterRole         urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:rbac.authorization.k8s.io/v1:ClusterRole::nakhoda:ingress-controller:ingress-stable-protected
kubernetes:batch/v1:Job                                     urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:helm.sh/v2:Chart$kubernetes:batch/v1:Job::cert-manager/cert-manager-startupapicheck
kubernetes:rbac.authorization.k8s.io/v1:ClusterRole         urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:rbac.authorization.k8s.io/v1:ClusterRole::nakhoda:ingress-controller:ingress-stable-public
kubernetes:apps/v1:DaemonSet                                urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:apps/v1:DaemonSet::ingress-stable-public/nginx-ingress-controller
kubernetes:cert-manager.io/v1:Certificate                   urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$nakhoda:TLSCertificate$kubernetes:cert-manager.io/v1:Certificate::nakhoda:certificate:ingress-stable-public-ingress-stable-public-cert
kubernetes:cert-manager.io/v1:Certificate                   urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$nakhoda:TLSCertificate$kubernetes:cert-manager.io/v1:Certificate::nakhoda:certificate:ingress-churn-protected-ingress-churn-protected-cert
kubernetes:apps/v1:DaemonSet                                urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:apps/v1:DaemonSet::ingress-churn-public/nginx-ingress-controller
kubernetes:cert-manager.io/v1:Certificate                   urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$nakhoda:TLSCertificate$kubernetes:cert-manager.io/v1:Certificate::nakhoda:certificate:ingress-churn-public-ingress-churn-public-cert
kubernetes:apps/v1:DaemonSet                                urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:apps/v1:DaemonSet::ingress-churn-protected/nginx-ingress-controller
kubernetes:rbac.authorization.k8s.io/v1:ClusterRole         urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$kubernetes:yaml:ConfigFile$kubernetes:rbac.authorization.k8s.io/v1:ClusterRole::nakhoda:ingress-controller:ingress-churn-public
gcp:container/nodePool:NodePool                             urn:pulumi:gke01-london::gcp-gke::gcp:container/nodePool:NodePool::worker
kubernetes:apps/v1:Deployment                               urn:pulumi:gke01-london::gcp-gke::nakhoda:CertManager$kubernetes:helm.sh/v2:Chart$kubernetes:apps/v1:Deployment::cert-manager/cert-manager
pulumi:providers:gcp                                        urn:pulumi:gke01-london::gcp-gke::pulumi:providers:gcp::default_1_0_0
pulumi:providers:cloudflare                                 urn:pulumi:gke01-london::gcp-gke::pulumi:providers:cloudflare::default_0_17_13
cloudflare:index/record:Record                              urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$cloudflare:index/record:Record::ingress-stable-public-CNAME-*.rise.nakhoda.ai
cloudflare:index/record:Record                              urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$cloudflare:index/record:Record::ingress-stable-public-CNAME-*.g.nakhoda.ai
cloudflare:index/record:Record                              urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$cloudflare:index/record:Record::ingress-stable-public-CNAME-*.sandbox.g.nakhoda.ai
cloudflare:index/record:Record                              urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$cloudflare:index/record:Record::ingress-stable-protected-iap-CNAME-gitlab.nakhoda.ai
cloudflare:index/record:Record                              urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$cloudflare:index/record:Record::ingress-stable-protected-iap-CNAME-chat.nakhoda.ai
cloudflare:index/record:Record                              urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$cloudflare:index/record:Record::ingress-stable-protected-iap-CNAME-*.qa.g.nakhoda.ai
cloudflare:index/record:Record                              urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$cloudflare:index/record:Record::ingress-stable-public-A-record
cloudflare:index/record:Record                              urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$cloudflare:index/record:Record::ingress-stable-protected-iap-CNAME-*.stag.g.nakhoda.ai
cloudflare:index/record:Record                              urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$cloudflare:index/record:Record::ingress-stable-protected-iap-CNAME-*.prod.g.nakhoda.ai
cloudflare:index/record:Record                              urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$cloudflare:index/record:Record::ingress-stable-protected-iap-CNAME-*.rc.g.nakhoda.ai
cloudflare:index/record:Record                              urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$cloudflare:index/record:Record::ingress-stable-protected-iap-A-record
cloudflare:index/record:Record                              urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$cloudflare:index/record:Record::ingress-stable-protected-iap-CNAME-*.ci.g.nakhoda.ai
cloudflare:index/record:Record                              urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$cloudflare:index/record:Record::ingress-churn-public-A-record
cloudflare:index/record:Record                              urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$cloudflare:index/record:Record::ingress-churn-public-CNAME-*.preview.g.nakhoda.ai
cloudflare:index/record:Record                              urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$cloudflare:index/record:Record::ingress-churn-protected-iap-CNAME-*.dev.g.nakhoda.ai
cloudflare:index/record:Record                              urn:pulumi:gke01-london::gcp-gke::nakhoda:IngressController$kubernetes:core/v1:Namespace$cloudflare:index/record:Record::ingress-churn-protected-iap-A-record
gcp:serviceAccount/account:Account                          urn:pulumi:gke01-london::gcp-gke::gcp:serviceAccount/account:Account::gke-node


Found no pending operations associated with Nakhoda/gke01-london

Backend        
Name           pulumi.com
URL            https://app.pulumi.com/Ivanov
User           Ivanov
Organizations  Ivanov, Nakhoda

Dependencies:
NAME                              VERSION
@pulumi/cloudflare                4.12.1
@pulumi/gcp                       6.43.0
@pulumi/kubernetes                3.22.1
@pulumi/pulumi                    3.46.1
@types/lodash                     4.14.189
lodash                            4.17.21
request                           2.88.2
@types/node                       18.11.9
@typescript-eslint/eslint-plugin  5.43.0
@typescript-eslint/parser         5.43.0
eslint                            8.27.0
eslint-config-prettier            8.5.0
eslint-plugin-prettier            4.2.1
prettier                          2.7.1

Pulumi locates its logs in /var/folders/qg/y7lhc0dx317cq_rj5nd5r6ww0000gp/T/ by default

Additional context

No response

Contributing

Vote on this issue by adding a 👍 reaction.
To contribute a fix for this issue, leave a comment (and link to your pull request, if you've opened one already).

@stefaneacsu147 stefaneacsu147 added kind/bug Some behavior is incorrect or out of spec needs-triage Needs attention from the triage team labels Nov 24, 2022
@Frassle Frassle added resolution/duplicate This issue is a duplicate of another issue and removed needs-triage Needs attention from the triage team labels Nov 24, 2022
@Frassle
Copy link
Member

Frassle commented Nov 24, 2022

Duplicate of #11391 I think.

@Frassle Frassle closed this as completed Nov 24, 2022
bors bot added a commit that referenced this issue Dec 6, 2022
11475: Handle replacements of resources marked for deletion r=Frassle a=Frassle

<!--- 
Thanks so much for your contribution! If this is your first time contributing, please ensure that you have read the [CONTRIBUTING](https://github.com/pulumi/pulumi/blob/master/CONTRIBUTING.md) documentation.
-->

# Description

<!--- Please include a summary of the change and which issue is fixed. Please also include relevant motivation and context. -->

This required getting state into a bit of unusual failure mode, but clearly people are hitting this (see #11391 and #11464).

If we replace a resource with create before delete semantics, and then fail to delete it we end up with two copies of the resource in state, but one copy will have the "delete" flag set.

If we then manage to trigger another resource to replace with delete before replace semantics that has the first resource as a dependent we would hit an assertion about Delete and PendingReplace both being set the same, if you just removed that asset then state management got confused and left the first resource in the state file even after it had really been deleted.

So now we track if we've seen a pendingDelete for a resource via the state pointer not the URN (so we can handle the multiple state objects) and don't trigger a DeleteReplacement, but a plain Delete if the resource is already flagged to Delete.

Fixes #11391

## Checklist

<!--- Please provide details if the checkbox below is to be left unchecked. -->
- [x] I have added tests that prove my fix is effective or that my feature works
<!--- 
User-facing changes require a CHANGELOG entry.
-->
- [x] I have run `make changelog` and committed the `changelog/pending/<file>` documenting my change
<!--
If the change(s) in this PR is a modification of an existing call to the Pulumi Service,
then the service should honor older versions of the CLI where this change would not exist.
You must then bump the API version in /pkg/backend/httpstate/client/api.go, as well as add
it to the service.
-->
- [ ] Yes, there are changes in this PR that warrants bumping the Pulumi Service API version
  <!-- `@Pulumi` employees: If yes, you must submit corresponding changes in the service repo. -->


Co-authored-by: Fraser Waters <fraser@pulumi.com>
bors bot added a commit that referenced this issue Dec 6, 2022
11475: Handle replacements of resources marked for deletion r=Frassle a=Frassle

<!--- 
Thanks so much for your contribution! If this is your first time contributing, please ensure that you have read the [CONTRIBUTING](https://github.com/pulumi/pulumi/blob/master/CONTRIBUTING.md) documentation.
-->

# Description

<!--- Please include a summary of the change and which issue is fixed. Please also include relevant motivation and context. -->

This required getting state into a bit of unusual failure mode, but clearly people are hitting this (see #11391 and #11464).

If we replace a resource with create before delete semantics, and then fail to delete it we end up with two copies of the resource in state, but one copy will have the "delete" flag set.

If we then manage to trigger another resource to replace with delete before replace semantics that has the first resource as a dependent we would hit an assertion about Delete and PendingReplace both being set the same, if you just removed that asset then state management got confused and left the first resource in the state file even after it had really been deleted.

So now we track if we've seen a pendingDelete for a resource via the state pointer not the URN (so we can handle the multiple state objects) and don't trigger a DeleteReplacement, but a plain Delete if the resource is already flagged to Delete.

Fixes #11391

## Checklist

<!--- Please provide details if the checkbox below is to be left unchecked. -->
- [x] I have added tests that prove my fix is effective or that my feature works
<!--- 
User-facing changes require a CHANGELOG entry.
-->
- [x] I have run `make changelog` and committed the `changelog/pending/<file>` documenting my change
<!--
If the change(s) in this PR is a modification of an existing call to the Pulumi Service,
then the service should honor older versions of the CLI where this change would not exist.
You must then bump the API version in /pkg/backend/httpstate/client/api.go, as well as add
it to the service.
-->
- [ ] Yes, there are changes in this PR that warrants bumping the Pulumi Service API version
  <!-- `@Pulumi` employees: If yes, you must submit corresponding changes in the service repo. -->


Co-authored-by: Fraser Waters <fraser@pulumi.com>
bors bot added a commit that referenced this issue Dec 7, 2022
11475: Handle replacements of resources marked for deletion r=Frassle a=Frassle

<!--- 
Thanks so much for your contribution! If this is your first time contributing, please ensure that you have read the [CONTRIBUTING](https://github.com/pulumi/pulumi/blob/master/CONTRIBUTING.md) documentation.
-->

# Description

<!--- Please include a summary of the change and which issue is fixed. Please also include relevant motivation and context. -->

This required getting state into a bit of unusual failure mode, but clearly people are hitting this (see #11391 and #11464).

If we replace a resource with create before delete semantics, and then fail to delete it we end up with two copies of the resource in state, but one copy will have the "delete" flag set.

If we then manage to trigger another resource to replace with delete before replace semantics that has the first resource as a dependent we would hit an assertion about Delete and PendingReplace both being set the same, if you just removed that asset then state management got confused and left the first resource in the state file even after it had really been deleted.

So now we track if we've seen a pendingDelete for a resource via the state pointer not the URN (so we can handle the multiple state objects) and don't trigger a DeleteReplacement, but a plain Delete if the resource is already flagged to Delete.

Fixes #11391

## Checklist

<!--- Please provide details if the checkbox below is to be left unchecked. -->
- [x] I have added tests that prove my fix is effective or that my feature works
<!--- 
User-facing changes require a CHANGELOG entry.
-->
- [x] I have run `make changelog` and committed the `changelog/pending/<file>` documenting my change
<!--
If the change(s) in this PR is a modification of an existing call to the Pulumi Service,
then the service should honor older versions of the CLI where this change would not exist.
You must then bump the API version in /pkg/backend/httpstate/client/api.go, as well as add
it to the service.
-->
- [ ] Yes, there are changes in this PR that warrants bumping the Pulumi Service API version
  <!-- `@Pulumi` employees: If yes, you must submit corresponding changes in the service repo. -->


11494: Jazzyfresh/codegen python nonstring secrets r=jazzyfresh a=jazzyfresh

<!--- 
Thanks so much for your contribution! If this is your first time contributing, please ensure that you have read the [CONTRIBUTING](https://github.com/pulumi/pulumi/blob/master/CONTRIBUTING.md) documentation.
-->

# Description

Fixes incorrectly generated python code when secret is a non-string type.

<!--- Please include a summary of the change and which issue is fixed. Please also include relevant motivation and context. -->

Fixes #11278 

## Checklist

<!--- Please provide details if the checkbox below is to be left unchecked. -->
- [x] I have added tests that prove my fix is effective or that my feature works
<!--- 
User-facing changes require a CHANGELOG entry.
-->
- [ ] I have run `make changelog` and committed the `changelog/pending/<file>` documenting my change
<!--
If the change(s) in this PR is a modification of an existing call to the Pulumi Service,
then the service should honor older versions of the CLI where this change would not exist.
You must then bump the API version in /pkg/backend/httpstate/client/api.go, as well as add
it to the service.
-->
- [ ] Yes, there are changes in this PR that warrants bumping the Pulumi Service API version
  <!-- `@Pulumi` employees: If yes, you must submit corresponding changes in the service repo. -->


Co-authored-by: Fraser Waters <fraser@pulumi.com>
Co-authored-by: Jasmine Dahilig <jasmine@pulumi.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/bug Some behavior is incorrect or out of spec resolution/duplicate This issue is a duplicate of another issue
Projects
None yet
Development

No branches or pull requests

2 participants