@pulumi/docker 4.11.0 → 4.11.1

package/remoteImage.js

@@ -5,6 +5,74 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.RemoteImage = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("./utilities");
+/**
+ * <!-- Bug: Type and Name are switched -->
+ * Manages the lifecycle of a docker image in your docker host. It can be used to build a new docker image or to pull an existing one from a registry.
+ *  This resource will *not* pull new layers of the image automatically unless used in conjunction with docker.RegistryImage data source to update the `pullTriggers` field.
+ *
+ * ## Example Usage
+ *
+ * ### Basic
+ *
+ * Finds and downloads the latest `ubuntu:precise` image but does not check
+ * for further updates of the image
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as docker from "@pulumi/docker";
+ *
+ * const ubuntu = new docker.RemoteImage("ubuntu", {name: "ubuntu:precise"});
+ * ```
+ *
+ * ### Dynamic updates
+ *
+ * To be able to update an image dynamically when the `sha256` sum changes,
+ * you need to use it in combination with `docker.RegistryImage` as follows:
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as docker from "@pulumi/docker";
+ *
+ * const ubuntu = docker.getRegistryImage({
+ *     name: "ubuntu:precise",
+ * });
+ * const ubuntuRemoteImage = new docker.RemoteImage("ubuntu", {
+ *     name: ubuntu.then(ubuntu => ubuntu.name),
+ *     pullTriggers: [ubuntu.then(ubuntu => ubuntu.sha256Digest)],
+ * });
+ * ```
+ *
+ * ### Build
+ *
+ * You can also use the resource to build an image. If you want to use a buildx builder with all of its features, please read the section below.
+ *
+ * > **Note**: The default timeout for the building is 20 minutes. If you need to increase this, you can use operation timeouts.
+ *
+ * In this case the image "zoo" and "zoo:develop" are built.
+ * The `context` and `dockerfile` arguments are relative to the local Terraform process (`path.cwd`).
+ * There is no need to copy the files to remote hosts before creating the resource.
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as docker from "@pulumi/docker";
+ *
+ * const zoo = new docker.RemoteImage("zoo", {
+ *     name: "zoo",
+ *     build: {
+ *         context: ".",
+ *         tags: ["zoo:develop"],
+ *         buildArgs: {
+ *             foo: "zoo",
+ *         },
+ *         label: {
+ *             author: "zoo",
+ *         },
+ *     },
+ * });
+ * ```
+ *
+ * You can use the `triggers` argument to specify when the image should be rebuild. This is for example helpful when you want to rebuild the docker image whenever the source code changes.
+ */
 class RemoteImage extends pulumi.CustomResource {
     /**
      * Get an existing RemoteImage resource's state with the given name, ID, and optional extra

package/remoteImage.js.map

@@ -1 +1 @@
-{"version":3,"file":"remoteImage.js","sourceRoot":"","sources":["../remoteImage.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,yCAAyC;AAEzC,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAClD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwB,EAAE,IAAmC;QACtH,OAAO,IAAI,WAAW,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAClE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;IA4CD,YAAY,IAAY,EAAE,WAAgD,EAAE,IAAmC;QAC3G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2C,CAAC;YAC1D,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;SAChD;aAAM;YACH,MAAM,IAAI,GAAG,WAA0C,CAAC;YACxD,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9C,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACpD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;;AArGL,kCAsGC;AAxFG,gBAAgB;AACO,wBAAY,GAAG,sCAAsC,CAAC"}
+{"version":3,"file":"remoteImage.js","sourceRoot":"","sources":["../remoteImage.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAClD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwB,EAAE,IAAmC;QACtH,OAAO,IAAI,WAAW,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAClE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;IA+CD,YAAY,IAAY,EAAE,WAAgD,EAAE,IAAmC;QAC3G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2C,CAAC;YAC1D,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;SAChD;aAAM;YACH,MAAM,IAAI,GAAG,WAA0C,CAAC;YACxD,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9C,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACpD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;;AAxGL,kCAyGC;AA3FG,gBAAgB;AACO,wBAAY,GAAG,sCAAsC,CAAC"}

package/secret.d.ts

@@ -2,11 +2,33 @@ import * as pulumi from "@pulumi/pulumi";
 import * as inputs from "./types/input";
 import * as outputs from "./types/output";
 /**
+ * <!-- Bug: Type and Name are switched -->
+ * Manages the secrets of a Docker service in a swarm.
+ *
+ * ## Example Usage
+ *
+ * ### Basic
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as docker from "@pulumi/docker";
+ * import * as std from "@pulumi/std";
+ *
+ * const foo = new docker.Secret("foo", {
+ *     name: "foo",
+ *     data: std.index.base64encode({
+ *         input: "{\"foo\": \"s3cr3t\"}",
+ *     }).result,
+ * });
+ * ```
+ *
  * ## Import
  *
+ * ```sh
  * #!/bin/bash
  *
- * Docker secret cannot be imported as the secret data, once set, is never exposed again.
+ * # Docker secret cannot be imported as the secret data, once set, is never exposed again.
+ * ```
  */
 export declare class Secret extends pulumi.CustomResource {
     /**

package/secret.js

@@ -6,11 +6,33 @@ exports.Secret = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("./utilities");
 /**
+ * <!-- Bug: Type and Name are switched -->
+ * Manages the secrets of a Docker service in a swarm.
+ *
+ * ## Example Usage
+ *
+ * ### Basic
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as docker from "@pulumi/docker";
+ * import * as std from "@pulumi/std";
+ *
+ * const foo = new docker.Secret("foo", {
+ *     name: "foo",
+ *     data: std.index.base64encode({
+ *         input: "{\"foo\": \"s3cr3t\"}",
+ *     }).result,
+ * });
+ * ```
+ *
  * ## Import
  *
+ * ```sh
  * #!/bin/bash
  *
- * Docker secret cannot be imported as the secret data, once set, is never exposed again.
+ * # Docker secret cannot be imported as the secret data, once set, is never exposed again.
+ * ```
  */
 class Secret extends pulumi.CustomResource {
     /**

package/secret.js.map

@@ -1 +1 @@
-{"version":3,"file":"secret.js","sourceRoot":"","sources":["../secret.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,yCAAyC;AAEzC;;;;;;GAMG;AACH,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;IAuBD,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;SACxC;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3E,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;SACvC;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;QACzD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;;AAtEL,wBAuEC;AAzDG,gBAAgB;AACO,mBAAY,GAAG,4BAA4B,CAAC"}
+{"version":3,"file":"secret.js","sourceRoot":"","sources":["../secret.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAa,MAAO,SAAQ,MAAM,CAAC,cAAc;IAC7C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmB,EAAE,IAAmC;QACjH,OAAO,IAAI,MAAM,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC;IACvD,CAAC;IAuBD,YAAY,IAAY,EAAE,WAAsC,EAAE,IAAmC;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsC,CAAC;YACrD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;SACxC;aAAM;YACH,MAAM,IAAI,GAAG,WAAqC,CAAC;YACnD,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3E,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;SACvC;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;QACzD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;;AAtEL,wBAuEC;AAzDG,gBAAgB;AACO,mBAAY,GAAG,4BAA4B,CAAC"}

package/service.d.ts

@@ -2,55 +2,310 @@ import * as pulumi from "@pulumi/pulumi";
 import * as inputs from "./types/input";
 import * as outputs from "./types/output";
 /**
- * ## Import
+ * <!-- Bug: Type and Name are switched -->
+ * This resource manages the lifecycle of a Docker service. By default, the creation, update and delete of services are detached.
+ *  With the Converge Config the behavior of the `docker cli` is imitated to guarantee tha for example, all tasks of a service are running or successfully updated or to inform `terraform` that a service could no be updated and was successfully rolled back.
  *
- * ### Example
+ * ## Example Usage
  *
- * Assuming you created a `service` as follows
+ * ### Basic
  *
- * #!/bin/bash
+ * The following configuration starts a Docker Service with
  *
- * docker service create --name foo -p 8080:80 nginx
+ * - the given image,
+ * - 1 replica
+ * - exposes the port `8080` in `vip` mode to the host machine
+ * - moreover, uses the `container` runtime
  *
- * prints th ID
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as docker from "@pulumi/docker";
  *
- * 4pcphbxkfn2rffhbhe6czytgi
+ * const foo = new docker.Service("foo", {
+ *     name: "foo-service",
+ *     taskSpec: {
+ *         containerSpec: {
+ *             image: "repo.mycompany.com:8080/foo-service:v1",
+ *         },
+ *     },
+ *     endpointSpec: {
+ *         ports: [{
+ *             targetPort: 8080,
+ *         }],
+ *     },
+ * });
+ * ```
  *
- * you provide the definition for the resource as follows
+ * The following command is the equivalent:
  *
- * terraform
+ * ### Basic with Datasource
  *
- * resource "docker_service" "foo" {
+ * Alternatively, if the image is already present on the Docker Host and not managed
+ * by `terraform`, you can also use the `docker.RemoteImage` datasource:
  *
- *   name = "foo"
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as docker from "@pulumi/docker";
  *
- *   task_spec {
+ * const foo = docker.getRemoteImage({
+ *     name: "repo.mycompany.com:8080/foo-service:v1",
+ * });
+ * const fooService = new docker.Service("foo", {
+ *     name: "foo-service",
+ *     taskSpec: {
+ *         containerSpec: {
+ *             image: foo.then(foo => foo.repoDigest),
+ *         },
+ *     },
+ *     endpointSpec: {
+ *         ports: [{
+ *             targetPort: 8080,
+ *         }],
+ *     },
+ * });
+ * ```
  *
- *     container_spec {
+ * ### Advanced
  *
- *       image = "nginx"
+ * The following configuration shows the full capabilities of a Docker Service,
+ * with a `volume`, `config`, `secret` and `network`
  *
- *     }
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as docker from "@pulumi/docker";
  *
- *   }
+ * const testVolume = new docker.Volume("test_volume", {name: "tftest-volume"});
+ * const testVolume2 = new docker.Volume("test_volume_2", {name: "tftest-volume2"});
+ * const serviceConfig = new docker.ServiceConfig("service_config", {
+ *     name: "tftest-full-myconfig",
+ *     data: "ewogICJwcmVmaXgiOiAiMTIzIgp9",
+ * });
+ * const serviceSecret = new docker.Secret("service_secret", {
+ *     name: "tftest-mysecret",
+ *     data: "ewogICJrZXkiOiAiUVdFUlRZIgp9",
+ * });
+ * const testNetwork = new docker.Network("test_network", {
+ *     name: "tftest-network",
+ *     driver: "overlay",
+ * });
+ * const foo = new docker.Service("foo", {
+ *     name: "tftest-service-basic",
+ *     taskSpec: {
+ *         containerSpec: {
+ *             configs: [
+ *                 {
+ *                     configId: serviceConfig.id,
+ *                     configName: serviceConfig.name,
+ *                     fileName: "/configs.json",
+ *                 },
+ *                 {},
+ *             ],
+ *             secrets: [
+ *                 {
+ *                     secretId: serviceSecret.id,
+ *                     secretName: serviceSecret.name,
+ *                     fileName: "/secrets.json",
+ *                     fileUid: "0",
+ *                     fileGid: "0",
+ *                     fileMode: 777,
+ *                 },
+ *                 {},
+ *             ],
+ *             image: "repo.mycompany.com:8080/foo-service:v1",
+ *             labels: [{
+ *                 label: "foo.bar",
+ *                 value: "baz",
+ *             }],
+ *             commands: ["ls"],
+ *             args: ["-las"],
+ *             hostname: "my-fancy-service",
+ *             env: {
+ *                 MYFOO: "BAR",
+ *             },
+ *             dir: "/root",
+ *             user: "root",
+ *             groups: [
+ *                 "docker",
+ *                 "foogroup",
+ *             ],
+ *             privileges: {
+ *                 seLinuxContext: {
+ *                     disable: true,
+ *                     user: "user-label",
+ *                     role: "role-label",
+ *                     type: "type-label",
+ *                     level: "level-label",
+ *                 },
+ *             },
+ *             readOnly: true,
+ *             mounts: [
+ *                 {
+ *                     target: "/mount/test",
+ *                     source: testVolume.name,
+ *                     type: "bind",
+ *                     readOnly: true,
+ *                     bindOptions: {
+ *                         propagation: "rprivate",
+ *                     },
+ *                 },
+ *                 {
+ *                     target: "/mount/test2",
+ *                     source: testVolume2.name,
+ *                     type: "volume",
+ *                     readOnly: true,
+ *                     volumeOptions: {
+ *                         noCopy: true,
+ *                         labels: [{
+ *                             label: "foo",
+ *                             value: "bar",
+ *                         }],
+ *                         driverName: "random-driver",
+ *                         driverOptions: {
+ *                             op1: "val1",
+ *                         },
+ *                     },
+ *                 },
+ *             ],
+ *             stopSignal: "SIGTERM",
+ *             stopGracePeriod: "10s",
+ *             healthcheck: {
+ *                 tests: [
+ *                     "CMD",
+ *                     "curl",
+ *                     "-f",
+ *                     "http://localhost:8080/health",
+ *                 ],
+ *                 interval: "5s",
+ *                 timeout: "2s",
+ *                 retries: 4,
+ *             },
+ *             hosts: [{
+ *                 host: "testhost",
+ *                 ip: "10.0.1.0",
+ *             }],
+ *             dnsConfig: {
+ *                 nameservers: ["8.8.8.8"],
+ *                 searches: ["example.org"],
+ *                 options: ["timeout:3"],
+ *             },
+ *         },
+ *         resources: {
+ *             limits: {
+ *                 nanoCpus: 1000000,
+ *                 memoryBytes: 536870912,
+ *             },
+ *             reservation: {
+ *                 nanoCpus: 1000000,
+ *                 memoryBytes: 536870912,
+ *                 genericResources: {
+ *                     namedResourcesSpecs: ["GPU=UUID1"],
+ *                     discreteResourcesSpecs: ["SSD=3"],
+ *                 },
+ *             },
+ *         },
+ *         restartPolicy: {
+ *             condition: "on-failure",
+ *             delay: "3s",
+ *             maxAttempts: 4,
+ *             window: "10s",
+ *         }[0],
+ *         placement: {
+ *             constraints: ["node.role==manager"],
+ *             prefs: ["spread=node.role.manager"],
+ *             maxReplicas: 1,
+ *         },
+ *         forceUpdate: 0,
+ *         runtime: "container",
+ *         networks: [testNetwork.id],
+ *         logDriver: {
+ *             name: "json-file",
+ *             options: {
+ *                 "max-size": "10m",
+ *                 "max-file": "3",
+ *             },
+ *         },
+ *     },
+ *     mode: {
+ *         replicated: {
+ *             replicas: 2,
+ *         },
+ *     },
+ *     updateConfig: {
+ *         parallelism: 2,
+ *         delay: "10s",
+ *         failureAction: "pause",
+ *         monitor: "5s",
+ *         maxFailureRatio: "0.1",
+ *         order: "start-first",
+ *     },
+ *     rollbackConfig: {
+ *         parallelism: 2,
+ *         delay: "5ms",
+ *         failureAction: "pause",
+ *         monitor: "10h",
+ *         maxFailureRatio: "0.9",
+ *         order: "stop-first",
+ *     },
+ *     endpointSpec: {
+ *         ports: [
+ *             {
+ *                 name: "random",
+ *                 protocol: "tcp",
+ *                 targetPort: 8080,
+ *                 publishedPort: 8080,
+ *                 publishMode: "ingress",
+ *             },
+ *             {},
+ *         ],
+ *         mode: "vip",
+ *     },
+ * });
+ * ```
  *
- *   endpoint_spec {
+ * ## Import
  *
- *     ports {
+ * !/bin/bash
  *
- *       target_port    = "80"
+ * ```sh
+ * $ pulumi import docker:index/service:Service foo id
+ * ```
  *
- *       published_port = "8080"
+ * ### Example
+ *
+ * Assuming you created a `service` as follows
+ *
+ * ```sh
+ * #!/bin/bash
+ * docker service create --name foo -p 8080:80 nginx
+ * # prints th ID
+ * 4pcphbxkfn2rffhbhe6czytgi
+ * ```
  *
- *     }
+ * you provide the definition for the resource as follows
  *
- *   }
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as docker from "@pulumi/docker";
  *
- * }
+ * const foo = new docker.Service("foo", {
+ *     name: "foo",
+ *     taskSpec: {
+ *         containerSpec: {
+ *             image: "nginx",
+ *         },
+ *     },
+ *     endpointSpec: {
+ *         ports: [{
+ *             targetPort: 80,
+ *             publishedPort: 8080,
+ *         }],
+ *     },
+ * });
+ * ```
  *
  * then the import command is as follows
  *
- * #!/bin/bash
+ * !/bin/bash
  *
  * ```sh
  * $ pulumi import docker:index/service:Service foo 4pcphbxkfn2rffhbhe6czytgi