Eron Wright

Use audience-scoped access token

1

The operator transmits its own service account token to the workspace pod for authentication purposes. There is a risk of privilege elevation if the workspace pod were to capture the...

Support for pulumi.com/reconciliation-request

3

One of the features of `Stack` is support for the Flux on-demand reconciliation protocol ([ref](https://pkg.go.dev/github.com/fluxcd/pkg/runtime/predicates#ReconcileRequestedPredicate)), based on `pulumi.com/reconciliation-request` annotation. The intention is to force a stack update when the stack...

Option to retain or delete the workspace after successful sync

1

The stack controller provisions a workspace on demand, and it is fine to delete the workspace after sync was successful. Obviously the user is trading off performance/efficiency. Similar to the...

Add single-namespace deployment mode

2

A single-namespace deployment of PKO is one where the operator serves only its own namespace, and doesn't require the installation of a `ClusterRole` or `ClusterRoleBinding`. Of course, PKO requires various...

Resource Ids should be compared case-insensitively

1

Resource IDs have case-insensitive components, and so must be compared in a case-insensitive way to avoid a spurious diff. See https://github.com/pulumi/pulumi-azure-native/issues/3964 for an example, in which the subnet ID of...

### What happened? Looks like the "slot" variant of "WebAppSourceControl" resource isn't marked as an auto-created resource. ``` Diagnostics: azure-native:web:WebAppSourceControlSlot (stagingContent): error: cannot create already existing resource '/subscriptions/0282681f-7a9e-424b-80b2-96babd57a8a1/resourceGroups/rgdd0cc9be/providers/Microsoft.Web/sites/app54658a9e/slots/staging/sourcecontrols/web' ``` ###...

This ticket tracks the (eventual) removal of "v2" code from the codebase. We may act on this once we're confident that no more 2.x builds would be needed (e.g. for...

Package version constraints for Pulumi YAML

6

## Hello! - Vote on this issue by adding a 👍 reaction - If you want to implement this feature, comment to let us know (we'll work with you on...

Canonicalize the path parameters in Check and Diff

3

This PR seeks to canonicalize the value of path parameters during `Check`, so that the values are equal to what would be produced by an import of that same resource....

Remove legacy auth code

2

This PR removes the autorest library and the ability to enable its use with the `PULUMI_ENABLE_AZCORE_BACKEND` environment variable. Closes #4047 _Holding in draft until after the next release (v3.8), specifically...