tool · inferred from evidence
Command-line interface for Pulumi, mentioned as needing an upgrade to resolve the issue.
Using Pulumi's Node.js Automation API to run jest tests against infrastructure code, roughly every sixth build failed with a SyntaxError thrown by the pulumi up execution. Everything provisioned correctly first; the error happened after the
Fixes the Pulumi AWS provider rejecting the configured credentials. For engineers whose keys or session are present but invalid, covering rotation, typos, and revoked keys.
Fixes the Pulumi AWS provider failing when the region is missing. For engineers who configured credentials but no region, the fix is setting aws:region in stack config or environment.
Fixes Pulumi prompting for a passphrase on every command when PULUMI_CONFIG_PASSPHRASE is unset. For engineers on passphrase-encrypted stacks who want the prompt gone in interactive and CI use.
Fixes Pulumi rejecting a changed secrets passphrase on an existing stack. For engineers who rotated PULUMI_CONFIG_PASSPHRASE and now cannot update, the passphrase is baked into state encryption and cannot be changed in place.
Fixes Pulumi Kubernetes failing to adopt resources after switching to an explicit provider. For engineers who added an explicit provider and now hit server-side apply conflicts, with the delete-and-recreate vs import choice.
Fixes Pulumi destroy or update failing because state references a provider version that is no longer installed. For engineers who upgraded the CLI or provider and now cannot even destroy, with the stack-export surgery fix.
Fixes Pulumi stack creation failing because a stale lock from a crashed process still exists. For platform teams on S3 backends (often via the Kubernetes operator) who see the lock error with no active run.
Fixes pulumi import hitting GitHub API rate limits when fetching release metadata. For engineers whose Pulumi plugin downloads 403 in CI or fresh builds, with the token fix and wait guidance.
Fixes pulumi import --from terraform failing when GitHub rate-limits the converter plugin download. For engineers converting Terraform to Pulumi who hit the plugin install rate limit, with the token and retry fixes.
Fixes Pulumi destroy failing after a state export taken with the wrong passphrase silently nulled every secret. For engineers whose stack export/import pipeline corrupted secrets, explaining the malformed RPC secret error and how to avoid i
Fixes Pulumi demanding a passphrase on a stack that uses AWS KMS for secrets. For teams on S3 backends whose CI suddenly asks for PULUMI_CONFIG_PASSPHRASE, the cause is the local stack YAML losing its KMS metadata.
Fixes Pulumi refusing to read stack outputs or run commands on a passphrase-encrypted stack without the passphrase. For engineers hitting the secrets-manager construction error on read-only commands, with the env vars that silence it.
Fixes the Pulumi AWS provider failing at preview with no valid credential sources. For engineers running Pulumi against AWS who see the provider registration fail and need to get credentials into the chain, via environment, shared config, S