Skip to content

Conversation

@ctreatma
Copy link
Contributor

Provider upgrades are failing again. Java code generation was moved into the Pulumi-Terraform bridge and now provider upgrades are failing because the upgrade-provider CLI no longer has a --java-version option. It's possible we could lock upgrade-provider to a known good commit (there are no releases or tags in our CI instead of dropping pulumi-java-gen, but that will likely lead to even more work down the road as we drift further from the intended maintenance workflow.

Long-term, we need to reconsider how we maintain this provider. We are using workflows and tools that are not intended for use outside of Pulumi and will continue to run into these sorts of breakages.

@github-actions
Copy link

Does the PR have any schema changes?

Does the PR have any schema changes?

Looking good! No breaking changes found.

New functions:

  • pulumi.providers.equinix/terraformConfig

Maintainer note: consult the runbook for dealing with any breaking changes.

module equinix-fabric-connection-example_fcr_to_network

go 1.22.0
go 1.23
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If we can get away with updating examples later, it'd probably be a good idea to revert these changes since this PR is huge.

import com.pulumi.equinix.metal.ProjectSshKeyArgs;
import com.pulumi.equinix.metal.Device;
import com.pulumi.equinix.metal.DeviceArgs;
import com.equinix.equinix.metal.ProjectSshKey;
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The old docs were wrong, but so are the new ones. To keep this PR small, I'm tempted to use sed to inject the old, wrong package to avoid this diff for now and then update sed to inject the new, correct package in a later PR.

import com.pulumi.core.Output;
import com.pulumi.equinix.fabric.CloudRouter;
import com.pulumi.equinix.fabric.CloudRouterArgs;
import com.equinix.equinix.fabric.CloudRouter;
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

As with docs, the old and new packages here are both wrong, but it might be better to restore the old wrong value to keep the diff small and then fix it later.

@ctreatma ctreatma force-pushed the fix-upgrade-provider-action branch from bb22ef0 to 86f74aa Compare November 6, 2025 15:23
@ctreatma ctreatma changed the base branch from main to stop-patching-java November 6, 2025 15:24
@apiiro
Copy link

apiiro bot commented Nov 6, 2025

⚠️ Apiiro found 4 new risks - 4 high ⚠️

🔴 High: Exposed Secrets with Unknown Validity in Public, Applicative Code - High in secret of type User password
  • Secret type: User password
  • Validity: No validator
  • Exposure: Exposed
  • File type: Source Code
  • Appearances: Appears 1 time in the file
  • Preview: * final var bgpPassword = "•••••"; line 54
  • Insights: Public repository
🔴 High: Exposed Secrets with Unknown Validity in Public, Applicative Code - High in secret of type User password
  • Secret type: User password
  • Validity: No validator
  • Exposure: Exposed
  • File type: Source Code
  • Appearances: Appears 1 time in the file
  • Preview: * .password("•••••") line 45
  • Insights: Public repository

Repository: pulumi-equinix
Applications: ORG - EQUINIX

View in Apiiro

Comment on lines +165 to +166
import com.equinix.pulumi.equinix.fabric.CloudRouter;
import com.equinix.pulumi.equinix.fabric.CloudRouterArgs;
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It looks like the change to basePackage in #318 doesn't have an effect on import paths in Java examples until we switch to the bridge-provided Java generator. That's fine, just worth keeping in mind that this chain of PRs is working towards consistency & accuracy and we may not be in a completely stable state until we're fully caught up with broader Pulumi CI standards.

"name": "equinix-fabric-cloud_router-example_2",
"devDependencies": {
"@types/node": "^14"
"@types/node": "^18"
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There are some minor changes to Go and JavaScript examples included in this PR. Unfortunately I can't break these out because upgrading the provider bridge without dropping pulumi-java-gen causes make build_java to fail.

@ctreatma ctreatma force-pushed the stop-patching-java branch 2 times, most recently from 7e80af1 to 4d3074c Compare November 6, 2025 17:19
@ctreatma ctreatma force-pushed the fix-upgrade-provider-action branch from 86f74aa to 53106af Compare November 6, 2025 17:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants