Thomas Kappler

Collecting issues where users have reported unexpected changes in a refresh. There are two main types: Single Unexpected Refresh: - https://github.com/pulumi/pulumi-azure/issues/1593 - https://github.com/pulumi/pulumi-azure/issues/1028 - https://github.com/pulumi/pulumi-azure/issues/1071 Persistent Unexpected Refresh: - https://github.com/pulumi/pulumi-azure/issues/1880...

### What happened? This is an upstream issue for pulumi/pulumi-azure-native#1180. Codegen for dotnet generates code that doesn't compile for some Azure examples. Unfortunately, among them are some of the important...

This is using pulumi v3.113.3. Running `pulumi new` and choosing a template manually (`aws-typescript` in my case), the resulting Pulumi.yaml has this section: ```yaml config: pulumi:tags: value: pulumi:template: "" ```...

Assist users in recovering resources that may have been created despite errors

3

## Hello! - Vote on this issue by adding a 👍 reaction - If you want to implement this feature, comment to let us know (we'll work with you on...

### What happened? ``` ❯ pulumi stack init dev error: If you're using the --stack flag, pass the fully qualified name (org/project/stack) ``` I’m not using `--stack`, though. I realize...

This issue tracks upstream issue [CloudformationSchema.zip: Descriptions longer than 1,000 chars are cut off #1930](https://github.com/aws-cloudformation/cloudformation-coverage-roadmap/issues/1930) that I filed. See this one for details. Some quantification of the impact: 106 out...

Invalid audience for Key Vault secret operations when using MSI

2

``` error: keyvault.BaseClient#DeleteSecret: Failure responding to request: StatusCode=401 -- Original Error: autorest/azure: Service returned an error. Status=401 Code="Unauthorized" Message="AKV10022: Invalid audience. Expected https://vault.azure.net, found: https://management.azure.com/." ``` When using Managed Identity...

Support Authentication PIM Role Management Policies

3

## About This PR adds support for Role Management Policies, part of Privileged Identity Management (PIM) in the Microsoft.Authentication namespace. It's one part of #2455. Note that this is about...

Way back in #20 we determined that we didn't need the `x-ms-skip-url-encoding` of the Azure spec at the time. That has changed in the meantime. For instance, `azure-native:authorization:RoleDefinition` has this...