But to do it all in golang makes sense, they wouldn't want to do m*n work

m = supported langs n = providers

all the diffing lives there too

I could get a tunnel btw with node-pty

i come from SaltStack places, so I would do configuration like that from Salt and have pulumi say "make a minion on this cloud with these values attached" and have salt do the actual fiddling on the server. (Of course, that pulumi-salt glue doesn't exist yet...)

that would mean I'd have to move everything for k8s into salt/ansible etc

depends on what you're doing?

bringing the cluster up from pulumi and provisioning it

like, you keep talking about SSH, which reads to me like you're configuring VMs?

I need a jump host to get to the kube api server

oh, you're spinning up cloud VMs to bring up a kubernetes cluster?

pulumi isn't on the same network

well, a managed cluster but that also spins up instances

no wonder i'm so confused, you're crossing layers

yes 🙂

ok, absolutely break those up

those are already

I just have some infra global changes too which do need kube api access

so most of the provisioning happens in a separate downlevel stack

cluster + iam provisioning should happen in that infra stack

now I'll probably move that iam provisioning to the services stack

if it was me, and i was writing from scratch, and I use Salt to manage the cluster itself--it handles very well configuring and managing long-lived VMs, and even provides building blocks for automation, monitoring etc. I would then use pulumi to deploy applications to that fabric--it handles cloud-native service configuration very well, were you need to say "make sure this service exists" and things like on-going operational concerns are completely handled for you. That said, neither of those assumptions apply to you (you are not me, and you are not starting from scratch), and tbh I'm not sure how to get pulumi to do salt's/ansible's/puppet's job.

Does this

import

option currently exist in Pulumi or is it just planned? https://www.pulumi.com/blog/adopting-existing-cloud-resources-into-pulumi/#adopting-existing-resources

(i assume it can; i know people do it with tf)

@high-translator-22614 I actually think pulumi can handle managing vms fine, as longs as you don't make them pets

we're using container optimized os from google anyway

that's fairly immutable already

ok

so it's hard to manage anything past cloud-init basically