Well, my current model (or idea) is that I run pulumi to create the infrastructure, and pulumi also creates an inventory file (containing not only IP addresses, but also some variables for ansible, which are defined in the jinja2 template). So after pulumi terminates, I call ansible to do its work. So not really within pulumi.