Application incorrectly being marked as different

[barclayadam]

Describe what happened

An Application resource constantly updates due to changes, so it performs an API call which wipes out our "single page application" redirect uris (that have been specified elsewhere)

We use Automation API, so can see the diff looking for resourcePreEvent. In that event I can see that no detailedDiff has been created, and looking at the old and new two differences exist. The one below (new.id is empty) and the outputs (the new object is completely empty)

I have added id to the ignoreChanges but it makes no difference

Sample program

I've not yet produced a minimum program that replicates this issue every time. We have some other applications in the same stack that do not have this issue

Log output

No response

Affected Resource(s)

azuread.Application

Output of pulumi about

CLI
Version 3.140.0
Go Version go1.23.3
Go Compiler gc

Plugins
KIND NAME VERSION
resource azure 4.37.0
resource azure-native 2.72.0
resource azuread 6.0.2
resource cloudflare 5.43.1
resource docker-build 0.0.7
resource kubernetes 4.15.0
resource newrelic 5.10.0
language nodejs unknown
resource random 4.0.0
resource tls 4.0.0

Host
OS Microsoft Windows 11 Pro
Version 10.0.22631 Build 22631
Arch x86_64

This project is written in nodejs: executable='C:\Program Files\nodejs\node.exe' version='v22.1.0'

Additional context

No response

Contributing

Vote on this issue by adding a 👍 reaction.
To contribute a fix for this issue, leave a comment (and link to your pull request, if you've opened one already).

[thomas11]

Hi @barclayadam, without a repro it's hard to say why Pulumi thinks it should recreate the Application.

If it has to do with the Application and ApplicationRedirectUris resources, see #1686.

[barclayadam]

I guess it's possible that is what causes the issue as that is the only application instance that uses ApplicationRedirectUri resource, although hard to say because Pulumi is not outputting the actual reason it thinks there is a diff, and the only thing I can see in the engine output is as above that the id is changing.

Not sure if there is any way of getting more detail out of the engine? Not sure how it can detect a change, but not actually report said diff?

[thomas11]

Verbose logs might show more information. You might want to redact your subscription id before uploading.

A changing id suggests that one of the dynamic properties in the id have changed.