This message was deleted.

There are some ideas in https://www.pulumi.com/blog/exploring-circular-dependencies/

Yeah, ideas…

Can confirm it’s possible to work around the circular dep by using a

Pulumi.Command

immediately after creation of the cert. Note that it also needs a

delete

command, else a destroy can’t tear down the cert.

var command = new Command("apply-cert-binding", new CommandArgs
    {
        Create = "az webapp config ssl bind --certificate-thumbprint $THUMBPRINT --ssl-type SNI --name $APP_NAME --resource-group $RESOURCE_GROUP_NAME",
        
        Delete = "az webapp config ssl unbind --certificate-thumbprint $THUMBPRINT --name $APP_NAME --resource-group $RESOURCE_GROUP_NAME",

        Environment =
        {
            { "THUMBPRINT", cert.Thumbprint },
            { "APP_NAME", app.Name },
            { "RESOURCE_GROUP_NAME", resourceGroup.Name }
        }
    }, new CustomResourceOptions
    {
        DependsOn = cert
    });

😮 nice!