Hi, I am planning to use pulumi operator on multiple clusters. Is it possible to have pulumi-operator running on one cluster which executes updates on other clusters or do I have to roll out the operator on every single cluster?

It is entirely possible to use pulumi operator from outside the cluster if your control plane is exposed (and secure). You can either refer to another stack output for getting the cluster credentials if( the clusters were created using pulumi) Alternatively, you can encrypt the control plane kubeconfig in a pulumi secret inside the Pulumi.{env}.yaml.

Sounds good. We are currently experimenting with configuring clusters using k8s cluster-api and having a operator on the management cluster (which has kubeconfigs for managed clusters in secrets) would complement it quite nicely IMO