another question about rancher2 provider, since this provider requires you have a rancher k8s cluster in place. this brings a chicken-and-egg question, how do you create the cluster for rancher (following IasS best practices) in the first place?

@bored-monitor-99026 you would use the rke provider https://www.pulumi.com/registry/packages/rke/api-docs/cluster/

thank you! i am currently working on this by following your example. one of the parameters for ClusterNode is

ssh_key

and

ssh_cert

i was wondering how do you automate ssh key generation with pulumi or there is a better approach without using pulumi?

yes, you can do it with the tls provider: https://www.pulumi.com/registry/packages/tls/api-docs/privatekey/#publickeyopenssh_nodejs