https://pulumi.com logo
#general
Title
# general
b

billowy-tiger-6272

11/21/2022, 8:50 AM
Is it possible to prescind of the Pulumi service and use, like in Terraform, say an Azure Blob Storage for persisting the state of the stack? I know this way I should also take care of persisting the secrets generated and all that stuff, but just to know if Pulumi would allow me to be more independent in this way. Also, would like to know if there's any restriction on this aspect, be it technical or monetary.
s

stocky-restaurant-98004

11/22/2022, 4:18 PM
You can persist state in Azure Blob storage: https://www.pulumi.com/docs/intro/concepts/state/#azure-blob-storage There are a few limitation on how stack refs work. Not totally sure, but I believe all state files have to be in the same parent folder.
And you can use Azure Key Vault as a secrets provider: https://www.pulumi.com/docs/intro/concepts/secrets/#configuring-secrets-encryption
At some scale, managing your own secrets and state is probably going to become a pain and you're going to want this hosting done for you. No monetary restrictions, just the technical one outlined above.
b

billowy-tiger-6272

11/22/2022, 4:26 PM
Thanks a lot for the clarification, @stocky-restaurant-98004!! I was kind of confused by some of the terms in regards to the "self-hosted service" option, but I think that's for deploying the Pulumi service in a private cloud/premises, right? That's what needs to be paid on the Business Critical version and not this option of chosing a BlobStorage or an S3 bucket as the Pulumi backend, right?
s

stocky-restaurant-98004

11/22/2022, 4:28 PM
Correct: Self-hosted service is when you want your own copy of app.pulumi.com. You can host your own state (object store: S3, BLOB storage, etc.) and secrets backend (Azure Key Manager, AWS KMS, etc.) free of charge forever.
b

billowy-tiger-6272

11/22/2022, 5:51 PM
Thank you so much!!