Parameterized extension does not seem to work with explicit providers

Author: yann-soubeyrandCreated Sep 16, 2026Updated Sep 17, 2026

Labelskind/bugBugpulumi/pulumi

What happened?

I tried to use parameterized extensions for the Kubernetes provider to deploy CRDs. However, this does not seem to work when using an explicit provider.

Example

I have a sample Go program here: https://github.com/yann-soubeyrand/pulumi-parameterized-extensions-test.git.

Here is what happens:

PULUMI_CONFIG_PASSPHRASE="" pulumi up
Previewing update (dev):
     Type                                                 Name                               Plan       Info
 +   pulumi:pulumi:Stack                                  parameterized-extensions-test-dev  create
 +   ├─ pulumi:providers:kubernetes                       test                               create
     └─ gateway-api:gateway.networking.k8s.io/v1:Gateway  test                                          1 error

Diagnostics:
  gateway-api:gateway.networking.k8s.io/v1:Gateway (test):
    error: provider urn:pulumi:denied::denied::denied$pulumi:providers:denied::kubernetes::denydefaultprovider not registered

Resources:
    + 2 to create
    1 errored

I expected this program to just work (the default Kubernetes provider should not be used, the explicitly declared one must be used instead).

Output of `pulumi about`

CLI
Version      3.262.0
Go Version   go1.27.1
Go Compiler  gc

Plugins
KIND      NAME        VERSION
language  go          3.262.0
resource  kubernetes  4.34.1
resource  kubernetes  4.34.1
resource  kubernetes  4.34.1

Host
OS       fedora
Version  45
Arch     x86_64

This project is written in go: executable='/usr/bin/go' version='go version go1.27.1-X:nodwarf5 linux/amd64'

Current Stack: organization/parameterized-extensions-test/dev

Found no resources associated with dev

Found no pending operations associated with dev

Backend
Name           fb4dbba62927
URL            file://~
User           developer
Organizations
Token type     personal

Environment Variables:
Name                     Value
PULUMI_EXPERIMENTAL      true
PULUMI_SKIP_CHECKPOINTS  true

Dependencies:
NAME                                        VERSION
gateway-api
github.com/pulumi/pulumi-kubernetes/sdk/v4  v4.34.1
github.com/pulumi/pulumi/sdk/v3             v3.262.0
istio

Pulumi locates its logs in /tmp by default

Additional context

No response

Contributing

Vote on this issue by adding a reaction. To contribute a fix for this issue, leave a comment (and link to your pull request, if you've opened one already).

Source: pulumi/pulumi