We are planning to use Pulumi, and have some quest...
# general
f
We are planning to use Pulumi, and have some questions regarding deployments to China (on the local Azure version hosted by 21vianet. So the question is if there is a guidance on how to deploy resources to China with Pulumi (our company is located in Europe). • Has anyone experience with deployments to China? • Is it better to run the agent Europe and send the requests to the cloud provider through the Chinese firewall? • Is it supported to run the agent in China (but it will need access to the Pulumi Service, this time originating from within China to Pulumi)? • Is it possible to use Pulumi locally within China without any access to the Pulumi Service (given that we would host the state files ourselves)? Thanks!
e
• Is it possible to use Pulumi locally within China without any access to the Pulumi Service (given that we would host the state files ourselves)?
This at least should be possible. I'm not sure how the state firewall would interact with the Pulumi service outbound, or Azure inbound.
f
I have found evidence that inbound traffic to China Azure with Pulumi deployments is possible. But one never knows if rules change. So it's always good to have a backup plan that does avoids crossing the firewall. So if can work with hosting the state file ourselves, that's at least one backup option (although not preferable IMO).
For further reading: https://www.linkedin.com/pulse/things-consider-during-transition-azure-china-regions-radu-vunvulea/ "Once you have the account created, your IT global teams can manage the Azure Subscription(s) as they would be from any other Azure Regions using a dedicated Azure Portal and services endpoint for Azure China Regions."