# provisioners

Pulumi does not officially support `local-exec` and `remote-exec` as in Terraform. It has a helper provisioner using [dynamic providers](https://www.pulumi.com/docs/intro/concepts/programming-model/#dynamicproviders) to mimic the `remote-exec`.

This package is copied from the [helper provisioner](https://github.com/pulumi/examples/tree/master/aws-ts-ec2-provisioners). And added `local-exec` functionality.

GCP Golang SDK does not support IAM v1beta API, so Pulumi/Terraform does not support `principal://...` member format which is required in [OIDC workload identity](https://cloud.google.com/iam/docs/access-resources-oidc). So we use local-exec to run `gcloud` command instead.