Hi everyone, not sure if anyone here already had to use the pulumi registry behind an enterprise gated proxy registry (artifactory). Reason is: IT only allows to fetch from known sources which is in our case an enterprise installation of jfrog artifactory. To pull docker images, etc. this works fine. However, when we want to fetch providers etc. from the pulumi registry we would need to also "mirror" this functionality into our artifactory, so that our pulumi cli fetches from artifactory which then reaches out to the pulumi registry. Any hints or pointers are very much appreciated, thanks!

@freezing-kite-73227 mirroring the language SDKs for Pulumi providers should work by proxying these from the upstream package registries like NPM, Pypi or Nuget. Each of these language SDKs is configured to download the plugin binaries (the actual providers) from Github releases. I don't know JFrog Artifactory well enough, but I assume it can mirror Github Release artifacts for the providers you need. If you have these mirrorred artifacts in place, run Pulumi CLI with the environment variable

PULUMI_PLUGIN_DOWNLOAD_URL_OVERRIDES

active. See the docs for an example. https://www.pulumi.com/docs/iac/cli/environment-variables/

Thanks @limited-rainbow-51650 we will give it a try and hopefully be able to report the successful path back 🙂