Invalid lists of enums in .NET

[thomas11]

What happened?

This is an upstream issue for pulumi/pulumi-azure-native#1180. Codegen for dotnet generates code that doesn't compile for some Azure examples. Unfortunately, among them are some of the important Azure Key Vault examples.

Example

The azure-native provider generates this HCL, pretty-printed from a github.com/pulumi/pulumi/pkg/v3/codegen/hcl2/model:Body.

resource vault "azure-native:keyvault:Vault" {
	location = "westus"
	properties = {
		accessPolicies = [{
			objectId = "00000000-0000-0000-0000-000000000000",
			permissions = {
				certificates = [
					"get",
					"list",
					"delete",
					"create",
					"import",
					"update",
					"managecontacts",
					"getissuers",
					"listissuers",
					"setissuers",
					"deleteissuers",
					"manageissuers",
					"recover",
					"purge"
				],
				keys = [
					"encrypt",
					"decrypt",
					"wrapKey",
					"unwrapKey",
					"sign",
					"verify",
					"get",
					"list",
					"create",
					"update",
					"import",
					"delete",
					"backup",
					"restore",
					"recover",
					"purge"
				],
				secrets = [
					"get",
					"list",
					"set",
					"delete",
					"backup",
					"restore",
					"recover",
					"purge"
				]
			},
			tenantId = "00000000-0000-0000-0000-000000000000"
		}],
		enabledForDeployment = true,
		enabledForDiskEncryption = true,
		enabledForTemplateDeployment = true,
		publicNetworkAccess = "Enabled",
		sku = {
			family = "A",
			name = "standard"
		},
		tenantId = "00000000-0000-0000-0000-000000000000"
	}
	resourceGroupName = "sample-resource-group"
	vaultName = "sample-vault"
}

The permissions are translated to C# like this (full program attached createVault.json.cs.txt):

                        Keys = new[]
                        {
                            AzureNative.KeyVault.KeyPermissions.Encrypt,
                            AzureNative.KeyVault.KeyPermissions.Decrypt,
...

Correct would be a union:

Secrets = {Union<string, AzureNative.KeyVault.SecretPermissions>.FromT1(AzureNative.KeyVault.SecretPermissions.All)}

Output of pulumi about

Still occurs with pulumi v3.113.

Additional context

No response

Contributing

Vote on this issue by adding a 👍 reaction.
To contribute a fix for this issue, leave a comment (and link to your pull request, if you've opened one already).