db_password_ssm = pulumi.Config().require_secret('dbpassword')
db_password = aws.ssm.Parameter("pulumi-db-secret",
   type =  "SecureString",
   value = db_password_ssm)


pulumi.warn(db_password.translate_output_property("dp"))
task_def_payload = [{
      'name': 'pulumi-test-app',
      'image': 'nginx',
      'portMappings': [{
         'containerPort': 80,
         'hostPort': 80,
         'protocol': 'tcp'
      }],
      'secrets': [{ 'name': "dbpassword", 'valueFrom': {db_password.arn.apply(lambda a : a[0]['arn'])}}],

   }]

pulumi.warn(f"payload is ------ {task_def_payload}")
## simple ecs task definition


task_definition = aws.ecs.TaskDefinition('pulumi-app-task',
    family='fargate-task-definition',
    cpu='256',
    memory='512',
    network_mode='awsvpc',
   tags = global_tags,
    requires_compatibilities=['FARGATE'],
    execution_role_arn=role.arn,
    container_definitions=json.dumps(task_def_payload), opts=ResourceOptions(depends_on=[db_password])
)

task_def_payload = pulumi.Output.all('db_password.arn').apply(lambda arn : json.dumps(
 [{
		'name': 'pulumi-test-app',
		'image': 'nginx',
		'portMappings': [{
			'containerPort': 80,
			'hostPort': 80,
			'protocol': 'tcp'
		}],
		'secrets': [{ 'name': "dbpassword", 'valueFrom': arn[0]}],

	}]))