fix(pulumi): set ComputeID for s3_export_policy_rule (empty resource.ID)

The FlashBlade S3ExportPolicyRule API schema does not expose an 'id' field

(verified against api_references/2.22.md and the OpenAPI spec). The TF resource

assigns data.ID = rule.ID, which the API leaves empty, so the Pulumi bridge

rejected Create with 'plugin for package mica returned empty resource.ID from create'.

Add a bridge ComputeID that derives the Pulumi resource ID from the composite

policyName/index, matching the TF ImportState format (policy_name/rule_index).

Also regenerate the Python SDK package directory under pulumi_mica/ to match

the v2.22.4 rebrand (the previous beta still shipped pulumi_flashblade/).

Author: SoulKyu

pulumi/CHANGELOG.md

@@ -10,10 +10,25 @@ First post-rebrand Pulumi release. Distributed via GitHub Releases (no Pulumi Re
 - Python wheel: `pulumi_mica-2.22.6-py3-none-any.whl` published as a release asset.
 - Go SDK companion tag: `sdk/go/v0.1.0-pulumi.beta`.
 
+### Fixed
+
+- `mica:index:S3ExportPolicyRule` Create no longer fails with `plugin for package
+  'mica' returned empty resource.ID from create`. The FlashBlade
+  `S3ExportPolicyRule` API schema does not expose an `id` field, so the
+  bridge-inherited TF `id` attribute was always empty and Pulumi rejected the
+  resource. A bridge `ComputeID` now derives the Pulumi resource ID from the
+  composite `policyName/index`, matching the TF `ImportState` format
+  (`policy_name/rule_index`). Existing stacks that hit this error during Create
+  must `pulumi destroy --target` the failed URN (or remove it from state) and
+  re-apply.
+- Python SDK package directory regenerated under `pulumi_mica/` to match the
+  v2.22.4 rebrand (the previous beta still shipped the legacy
+  `pulumi_flashblade/` directory).
+
 ### Notes
 
 - Builds against the same provider sources as the Terraform `v2.22.6` release (registry-published manifest fix).
-- No schema, behavior, or token changes vs `[2.22.4]` rebrand baseline — see that entry for the breaking changes from the `pulumi-flashblade` era.
+- No schema or token changes vs `[2.22.4]` rebrand baseline — see that entry for the breaking changes from the `pulumi-flashblade` era.
 
 ## [2.22.4] — 2026-04-28
 

pulumi/provider/resources.go

@@ -137,11 +137,34 @@ func Provider() tfbridge.ProviderInfo {
 		panic("flashblade_file_system resource not found after MustComputeTokens")
 	}
 
-	// flashblade_s3_export_policy_rule — TF data.ID is rule.ID (UUID from the API).
-	// No ComputeID override: the bridge uses the TF "id" attribute directly via the shim.
-	// A ComputeID producing "policyName/ruleName" would diverge from the UUID and break
-	// pulumi import / pulumi refresh round-trips (I1).
-	if _, ok := prov.Resources["flashblade_s3_export_policy_rule"]; !ok {
+	// ---- COMPOSITE-S3RULE: flashblade_s3_export_policy_rule ComputeID ----
+	// The S3ExportPolicyRule API schema does NOT expose an `id` field (verified
+	// against api_references/2.22.md and FlashBlade swagger). The TF "id" attribute
+	// is Computed and assigned from rule.ID, but the API response leaves it empty,
+	// so the Pulumi bridge fails Create with "empty resource.ID from create".
+	// Composite ID matches the TF ImportState format: "policy_name/rule_index"
+	// (verified against internal/provider/s3_export_policy_rule_resource.go ImportState).
+	if r, ok := prov.Resources["flashblade_s3_export_policy_rule"]; ok {
+		r.ComputeID = func(ctx context.Context, state resource.PropertyMap) (resource.ID, error) {
+			policyName, ok1 := state["policyName"]
+			index, ok2 := state["index"]
+			if !ok1 || !ok2 {
+				return "", fmt.Errorf(
+					"s3_export_policy_rule: missing policyName or index in state (got keys %v)",
+					mapKeys(state),
+				)
+			}
+			ps, psOk := policyName.V.(string)
+			if !psOk {
+				return "", fmt.Errorf("s3_export_policy_rule: policyName must be a string")
+			}
+			idx, idxOk := index.V.(float64)
+			if !idxOk {
+				return "", fmt.Errorf("s3_export_policy_rule: index must be a number")
+			}
+			return resource.ID(fmt.Sprintf("%s/%d", ps, int64(idx))), nil
+		}
+	} else {
 		panic("flashblade_s3_export_policy_rule resource not found after MustComputeTokens")
 	}
 

pulumi/provider/resources_test.go

@@ -304,18 +304,22 @@ func TestProviderInfo_SoftDeleteResourcesRegistered(t *testing.T) {
 // Only resources where the TF schema does NOT expose an "id" attribute need ComputeID:
 //   - flashblade_bucket_access_policy_rule: no "id" in TF schema, bridge cannot infer it.
 //   - flashblade_management_access_policy_directory_service_role_membership: id is composite role/policy.
+//   - flashblade_s3_export_policy_rule: TF "id" is computed from rule.ID, but the
+//     S3ExportPolicyRule API schema does not expose `id` — TF state.ID is therefore
+//     always empty and the bridge fails Create with "empty resource.ID". Composite
+//     ID matches ImportState format: "policy_name/rule_index" (COMPOSITE-S3RULE).
 //
 // Resources where TF already exposes a computed "id" attribute do NOT need ComputeID:
 //   - flashblade_object_store_access_policy_rule: TF id = compositeID(policyName, ruleName).
 //   - flashblade_network_access_policy_rule: TF id = rule.ID (UUID from API).
-//   - flashblade_s3_export_policy_rule: TF id = rule.ID (UUID from API).
 //   - flashblade_snapshot_policy_rule: TF id = compositeID(policyName, ruleName).
 func TestProviderInfo_AllCompositeIDsPresent(t *testing.T) {
 	prov := Provider()
 	// Resources requiring explicit ComputeID (no "id" attribute in TF schema).
 	compositeResources := []string{
 		"flashblade_bucket_access_policy_rule",
 		"flashblade_management_access_policy_directory_service_role_membership",
+		"flashblade_s3_export_policy_rule",
 	}
 	for _, name := range compositeResources {
 		r, ok := prov.Resources[name]
@@ -331,7 +335,6 @@ func TestProviderInfo_AllCompositeIDsPresent(t *testing.T) {
 	noComputeIDResources := []string{
 		"flashblade_object_store_access_policy_rule",
 		"flashblade_network_access_policy_rule",
-		"flashblade_s3_export_policy_rule",
 	}
 	for _, name := range noComputeIDResources {
 		r, ok := prov.Resources[name]
@@ -366,6 +369,29 @@ func TestProviderInfo_ComputeID_BucketAccessPolicyRule(t *testing.T) {
 	}
 }
 
+// TestProviderInfo_ComputeID_S3ExportPolicyRule invokes the COMPOSITE-S3RULE closure
+// with sample PropertyMap data and asserts the returned ID matches the TF ImportState
+// format "policy_name/rule_index" (COMPOSITE-S3RULE).
+func TestProviderInfo_ComputeID_S3ExportPolicyRule(t *testing.T) {
+	prov := Provider()
+	r := prov.Resources["flashblade_s3_export_policy_rule"]
+	if r == nil || r.ComputeID == nil {
+		t.Fatalf("ComputeID not set on flashblade_s3_export_policy_rule")
+	}
+	state := resource.PropertyMap{
+		"policyName": resource.NewStringProperty("my-policy"),
+		"index":      resource.NewNumberProperty(3),
+		"name":       resource.NewStringProperty("rule-3"),
+	}
+	id, err := r.ComputeID(context.Background(), state)
+	if err != nil {
+		t.Fatalf("ComputeID error: %v", err)
+	}
+	if string(id) != "my-policy/3" {
+		t.Errorf("expected 'my-policy/3', got %q", id)
+	}
+}
+
 // TestProviderInfo_NetworkAccessPolicyRuleNoComputeID verifies that
 // flashblade_network_access_policy_rule does NOT have a ComputeID override.
 // TF data.ID = rule.ID (UUID from API) — the bridge uses the TF "id" attribute

pulumi/sdk/python/Pulumi.yaml

@@ -1,3 +1,3 @@
-name: flashblade
-description: A Pulumi resource provider for flashblade.
+name: mica
+description: A Pulumi resource provider for mica.
 language: python