hi, I understood that in GCP, it's safer to create...
# google-cloud
v
hi, I understood that in GCP, it's safer to create VMs without an ssh key, and to ssh only through the gcp console, how does it work w/ pulumi and IaC in general? Currently I'm deploying using ssh from my laptop
m
Why/how is connecting to a VM related to deploying infrastructure with Pulumi? I think you'll have to go into a bit more detail about your use case 🙂 In general, you don't need SSH to deploy to GCP, you just need to be able to reach the GCP APIs and valid credentials. The rule of thumb is that if you can use
gcloud
from a machine, you can also deploy to GCP using Pulumi. For production deployments, you usually don't want to run them from a laptop but through a CI/CD platform like Cloud Build or GitHub Actions. Pulumi Deployments is a dedicated tool for this that's integrated with Pulumi Cloud.