fix(ibmcloud): pass enriched S3 URL to Pulumi via Provider.Init return

Change Provider.Init() to return (string, error) so IBM Cloud can pass
the enriched s3://bucket?endpoint=...&s3ForcePathStyle=true URL back to
the context. This ensures Pulumi receives the COS endpoint in the
backend URL instead of defaulting to amazonaws.com. AWS and Azure
return empty string (no change to backed URL).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: deekay2310

pkg/manager/context/context.go

@@ -74,7 +74,7 @@ type Context struct {
 }
 
 type Provider interface {
-	Init(ctx context.Context, backedURL string) error
+	Init(ctx context.Context, backedURL string) (string, error)
 	DefaultHostingPlace() (*string, error)
 }
 
@@ -110,9 +110,13 @@ func Init(ca *ContextArgs, provider Provider) (*Context, error) {
 		c.targetHostingPlace = *hp
 	}
 	// Manage
-	if err := provider.Init(ctx, ca.BackedURL); err != nil {
+	resolvedURL, err := provider.Init(ctx, ca.BackedURL)
+	if err != nil {
 		return nil, err
 	}
+	if resolvedURL != "" {
+		c.backedURL = resolvedURL
+	}
 	// Manage integrations
 	if err := manageIntegration(c, ca); err != nil {
 		return nil, err

pkg/provider/aws/aws.go

@@ -25,11 +25,11 @@ const pulumiLocksPath = ".pulumi/locks"
 
 type AWS struct{}
 
-func (a *AWS) Init(ctx context.Context, backedURL string) error {
+func (a *AWS) Init(ctx context.Context, backedURL string) (string, error) {
 	// Manage remote state requirements, if backedURL
 	// is on a different region we need to change to that region
 	// in order to interact with the state
-	return manageRemoteState(ctx, backedURL)
+	return "", manageRemoteState(ctx, backedURL)
 }
 
 func (a *AWS) DefaultHostingPlace() (*string, error) {

pkg/provider/azure/azure.go

@@ -28,9 +28,9 @@ func Provider() *Azure {
 	return &Azure{}
 }
 
-func (a *Azure) Init(ctx context.Context, backedURL string) error {
+func (a *Azure) Init(ctx context.Context, backedURL string) (string, error) {
 	setAZIdentityEnvs()
-	return nil
+	return "", nil
 }
 
 func (a *Azure) DefaultHostingPlace() (*string, error) {

pkg/provider/ibmcloud/ibmcloud.go

@@ -22,11 +22,11 @@ const (
 
 type IBMCloud struct{}
 
-func (i *IBMCloud) Init(ctx context.Context, backedURL string) error {
+func (i *IBMCloud) Init(ctx context.Context, backedURL string) (string, error) {
 	if isCOSBackend(backedURL) {
 		return initCOSBackend(backedURL)
 	}
-	return nil
+	return "", nil
 }
 
 func (a *IBMCloud) DefaultHostingPlace() (*string, error) {
@@ -103,18 +103,18 @@ func extractBucket(backedURL string) (string, error) {
 	return strings.SplitN(bucket, "/", 2)[0], nil
 }
 
-func initCOSBackend(backedURL string) error {
+func initCOSBackend(backedURL string) (string, error) {
 	accessKey, err := requireEnv(icConstants.EnvIBMCosAccessKeyID)
 	if err != nil {
-		return err
+		return "", err
 	}
 	secretKey, err := requireEnv(icConstants.EnvIBMCosSecretAccessKey)
 	if err != nil {
-		return err
+		return "", err
 	}
 	region, err := requireEnv(LOCATION_ENV)
 	if err != nil {
-		return err
+		return "", err
 	}
 
 	endpoint, _ := os.LookupEnv(icConstants.EnvIBMCosEndpoint)
@@ -124,11 +124,11 @@ func initCOSBackend(backedURL string) error {
 
 	bucket, err := extractBucket(backedURL)
 	if err != nil {
-		return err
+		return "", err
 	}
 
-	pulumiBackendURL := fmt.Sprintf("s3://%s?endpoint=%s&s3ForcePathStyle=true",
-		bucket, ensureHTTPS(endpoint))
+	resolvedURL := fmt.Sprintf("s3://%s?endpoint=%s&s3ForcePathStyle=true",
+		bucket, endpoint)
 
 	for k, v := range map[string]string{
 		"AWS_ACCESS_KEY_ID":     accessKey,
@@ -137,14 +137,14 @@ func initCOSBackend(backedURL string) error {
 		"AWS_REGION":            region,
 		"AWS_DEFAULT_REGION":    region,
 		"AWS_S3_USE_PATH_STYLE": "true",
-		"PULUMI_BACKEND_URL":    pulumiBackendURL,
+		"PULUMI_BACKEND_URL":    resolvedURL,
 	} {
 		if err := os.Setenv(k, v); err != nil {
-			return err
+			return "", err
 		}
 	}
-	logging.Debugf("COS backend configured: %s", pulumiBackendURL)
-	return nil
+	logging.Debugf("COS backend configured: %s", resolvedURL)
+	return resolvedURL, nil
 }
 
 func parseCOSBackedURL(mCtx *mc.Context) (*string, *string, error) {