Tracking: issues with failing import

[t0yv0]

Tracking issues around pulumi import in bridged providers.

Themes here: Import maps to a series of calls such as Read and Check that causes mismatch between TF and Pulumi expectations. There are several known themes of failure that may inform mitigation:

1. In TF, resources are more lax in returning data through Read that might not pass validators; Pulumi can mitigate by deploying data correction strategies either at the bridge or individual provider/resource level

2. When Pulumi invokes a language-specific code generator it has strict type safety expectations on the data that is fed into it. In practice the data is often not type-conformant (for example required fields, are missing data). Pulumi can mitigate by cleaning the data to be type conformant to err on the side of succeeding with the import.

This issue is intended to track specific instances in bridged providers before suggesting more solutions in this space.

Examples

• Importing aws:ec2/routeTable:RouteTable produces resource with ipv6Cidr resource with empty string resulting in invalid CIDR address error pulumi-aws#3986
• [python] Pulumi Import Codegen Fails pulumi-aws#2517 (patched, not fixed)
  • Reproduce pulumi-aws#2517 #1105
• Pulumi import of a linode resource results in warnings pulumi-linode#373
• Can't import ActionsRepositoryAccessLevel object pulumi-github#642
• When importing self-managed certificate to ACM, remove the validationMethod from the code and don't show warning pulumi-aws#4054

Mitigations

• Remove spurious ConflictsWith warnings on import #1948
• Introduce an import heuristic to drop entries that fail validators #2314
• Deconflict ExactlyOneOf violations in Read #1949

[zbuchheit]

I believe I am having this issue as well with a user that has an internal private bridged provider. I will provide details separately.

[VenelinMartinov]

@zbuchheit I'd be interested to hear about the details here, thanks!

[t0yv0]

Thanks @corymhall for making a good dent in these set of issues with bridge fixes. I think this was useful to mine for opportunities even if we didn't find the bigger wins that we hoped to find. Closing as there are no immediate plans to move this forward.

[pulumi-bot]

Cannot close issue:

• does not have required labels: resolution/

Please fix these problems and try again.