Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add NOTEs for exclusive management resources doc pages #4774

Merged
merged 6 commits into from
Nov 21, 2024

Conversation

t0yv0
Copy link
Member

@t0yv0 t0yv0 commented Nov 14, 2024

Exclusive Relationship Management Resources do not currently work as you would expect in Pulumi but require pulumi up --refresh. A NOTE is added with this information to the affected resources docs pages so that users are made aware of the problem.

More context in: #4772

@t0yv0 t0yv0 requested review from flostadler and corymhall and removed request for corymhall November 14, 2024 21:16
Copy link

Does the PR have any schema changes?

Looking good! No breaking changes found.
No new resources/functions.

Maintainer note: consult the runbook for dealing with any breaking changes.

@@ -0,0 +1,52 @@
---
subcategory: "IAM (Identity & Access Management)"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There's always the risk of missing docs updates from upstream, but I feel like this is the best way of ensuring we're injecting this not into the docs of those resources.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I can ask @guineveresaenger if there's a better way to inject a note, I've not found quickly.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah! To shadow @flostadler's concern, doing it this way makes the doc instantly stale. Sometimes this is an OK choice; I don't know the context for this resource.

To inject a note, I recommend using Edit Rules. I'm happy to help but you can write a string or regex based find/replace that pins a note to the main text of the doc (the "Description" section in the schema).

With EditRules, you can also add a hard fail on schemagen in case your find/replace condition is a bit too fragile.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ok I'll take a look!

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This doesn't work because of a bridge bug: pulumi/pulumi-terraform-bridge#2633

@t0yv0 t0yv0 force-pushed the t0yv0/add-docs-notices branch from 6091aea to dadddf3 Compare November 19, 2024 01:18
Copy link
Contributor

@guineveresaenger guineveresaenger left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've got a sample for what I was suggesting here - it "fixes" the empty Document section by removing the "forbidden" word and replacing it with "Pulumi". Obviously not binding, just a suggestion!

If you want to go this route, I do ask that we use > instead of ->.


Pulumi resource for maintaining exclusive management of inline policies assigned to an AWS IAM (Identity & Access Management) role.

-> **NOTE:** To reliably detect drift between customer managed inline policies listed in this resource and actual policies attached to the role in the cloud, you currently need to run Pulumi with `pulumi up --refresh`. See [#4766](https://github.com/pulumi/pulumi-aws/issues/4766) for tracking making this work with regular `pulumi up` invocations.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

To render with the expected indent bar like this, the markdown must read as follows:

Screenshot 2024-11-18 at 5 49 09 PM
Suggested change
-> **NOTE:** To reliably detect drift between customer managed inline policies listed in this resource and actual policies attached to the role in the cloud, you currently need to run Pulumi with `pulumi up --refresh`. See [#4766](https://github.com/pulumi/pulumi-aws/issues/4766) for tracking making this work with regular `pulumi up` invocations.
> **NOTE:** To reliably detect drift between customer managed inline policies listed in this resource and actual policies attached to the role in the cloud, you currently need to run Pulumi with `pulumi up --refresh`. See [#4766](https://github.com/pulumi/pulumi-aws/issues/4766) for tracking making this work with regular `pulumi up` invocations.


Pulumi resource for maintaining exclusive management of customer managed policies assigned to an AWS IAM (Identity & Access Management) role.

-> **NOTE:** To reliably detect drift between customer managed policies listed in this resource and actual policies attached to the role in the cloud, you currently need to run Pulumi with `pulumi up --refresh`. See [#4766](https://github.com/pulumi/pulumi-aws/issues/4766) for tracking making this work with regular `pulumi up` invocations.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
-> **NOTE:** To reliably detect drift between customer managed policies listed in this resource and actual policies attached to the role in the cloud, you currently need to run Pulumi with `pulumi up --refresh`. See [#4766](https://github.com/pulumi/pulumi-aws/issues/4766) for tracking making this work with regular `pulumi up` invocations.
> **NOTE:** To reliably detect drift between customer managed policies listed in this resource and actual policies attached to the role in the cloud, you currently need to run Pulumi with `pulumi up --refresh`. See [#4766](https://github.com/pulumi/pulumi-aws/issues/4766) for tracking making this work with regular `pulumi up` invocations.

@t0yv0
Copy link
Member Author

t0yv0 commented Nov 20, 2024

That's brilliant, thank you! Trying it out.

Exclusive Relationship Management Resources do not currently work as you would expect in Pulumi but require `pulumi up --refresh`. A NOTE is added with this information to the affected resources docs pages so that users are made aware of the problem.

More context in: #4772
@t0yv0 t0yv0 force-pushed the t0yv0/add-docs-notices branch from dadddf3 to 0a18790 Compare November 20, 2024 23:01
@t0yv0 t0yv0 enabled auto-merge (squash) November 20, 2024 23:03
@t0yv0 t0yv0 dismissed guineveresaenger’s stale review November 20, 2024 23:03

Addressed changes as requested

@t0yv0 t0yv0 merged commit 31df7de into master Nov 21, 2024
32 of 33 checks passed
@t0yv0 t0yv0 deleted the t0yv0/add-docs-notices branch November 21, 2024 00:57
@pulumi-bot
Copy link
Contributor

This PR has been shipped in release v6.61.0.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants