mirror of https://github.com/pulumi/pulumi.git
4e90fcb781
This commit implements `CreateIfNotExists`, a new resource option that allows programs to specify resource options that should be created only if they do not already exist in the provider. Use cases for this feature include "global" or shared resources, such as AWS service-linked providers within an account, or SSL policies within a GCP account/project. `CreateIfNotExists` behaves as follows: * The option accepts an ID, much like `Import`, that will be used to determine whether or not a resource exists using a `Read` operation. If it does, resource inputs must match as they would be required to in an ordinary import. If not, the resource is created as usual. * Due to the semantics specified above, it is an error to specify both `CreateIfNotExists` and `Import` resource options on a single resource. The "if not exists" part is handled by a provider `Read` call that we make in step generation. This is not ideal, since we'd like step generation to be non-blocking (and `Read` could block for an arbitrary amount of time). However, there aren't many other good options for achieving this: * Source evaluation would be a good middle ground, but this would require changing the contract of `Read`/introducing another call since we do not have a URN at this point. * Parallelising step generation (see e.g. #15026). This is the "best" outcome and feels the most correct, but carries a large amount of risk. There _are_ instances of us breaking this rule (not blocking in step generation) already (e.g. `Check` and `Diff`, which "should" be fast but in reality could do anything they like), and the hypothesis is that there won't be many resources with this option in a given stack, so this feels like an acceptable compromise. A set of lifecycle tests capturing `CreateIfNotExists`' interactions with existing resource options and scenarios are included. This commit does not include SDK updates to use the new option; these will be introduced in future changesets. Part of #16189 |
||
|---|---|---|
| .. | ||
| asset | ||
| authhelpers | ||
| backend | ||
| cmd/pulumi | ||
| codegen | ||
| display | ||
| engine | ||
| graph | ||
| importer | ||
| operations | ||
| resource | ||
| secrets | ||
| testing/integration | ||
| util | ||
| version | ||
| workspace | ||
| README.md | ||
| go.mod | ||
| go.sum | ||
README.md
pulumi/pkg
While pulumi/sdk maintains strict backwards compatibility guarantees, code under pkg/ is handled more informally: while breaking changes are still discouraged they may happen when they make sense.