h

    high-leather-15669

    8 months ago
    Hello everyone, greetings! We are trying to adopt Pulumi as an IaC tool to provision resources on Azure platform. I've rather run into a chicken-egg problem when provisioning a DataBricks Workspaceusing the azure-nativeprovider with
    cmk
    . From the docu, I understand that I first need to create the databricks-workspacewith prepare_encryptionset to
    true
    . Once it is created, I need enable
    encryption
    by providing the key, keyvault to the same resource again. That's something I need to do manually, and do two runs of
    pulumi up
    . We are using
    python
    . What's the ideal and better way approach this? Any hints?
    e

    echoing-dinner-19531

    8 months ago
    Oh this is a tricky one. We actually spent some time in December prototyping thoughts on this https://www.pulumi.com/blog/exploring-circular-dependencies/. There's some workarounds in that blog post using StackReference but as you said you still need to run
    pulumi up
    twice. The github issue for this is https://github.com/pulumi/pulumi/issues/3021 (and is literally titled "How to solve Chicken & Egg problem").
    h

    high-leather-15669

    8 months ago
    Thank you @echoing-dinner-19531 I'll have a look. Meanwhile, had to switch to the azure_classic instead for this 😄