https://pulumi.com logo
Title
h

high-leather-15669

01/20/2022, 1:36 PM
Hello everyone, greetings! We are trying to adopt Pulumi as an IaC tool to provision resources on Azure platform. I've rather run into a chicken-egg problem when provisioning a `DataBricks Workspace`using the `azure-native`provider with
cmk
. From the docu, I understand that I first need to create the `databricks-workspace`with `prepare_encryption`set to
true
. Once it is created, I need enable
encryption
by providing the key, keyvault to the same resource again. That's something I need to do manually, and do two runs of
pulumi up
. We are using
python
. What's the ideal and better way approach this? Any hints?
e

echoing-dinner-19531

01/20/2022, 3:35 PM
Oh this is a tricky one. We actually spent some time in December prototyping thoughts on this https://www.pulumi.com/blog/exploring-circular-dependencies/. There's some workarounds in that blog post using StackReference but as you said you still need to run
pulumi up
twice. The github issue for this is https://github.com/pulumi/pulumi/issues/3021 (and is literally titled "How to solve Chicken & Egg problem").
h

high-leather-15669

01/20/2022, 4:55 PM
Thank you @echoing-dinner-19531 I'll have a look. Meanwhile, had to switch to the azure_classic instead for this 😄