Product
Devon Grove
6 min read
Pulumi ESC now issues OIDC tokens for any service
Pulumi ESC now signs short-lived OIDC tokens for any audience you set, with a stable subject you can pin in each service's trust policy.
Devon Grove
6 min readWhat's new
- Policy violations now appear in pull request comments and checks
- CLI and SDK rollup: pulumi new, pulumi do, and more
- Query your infrastructure with the Pulumi Context API
- Experimental Rust support for Pulumi
- Stateful, zero-setup resource operations with pulumi do
- A notification center for Pulumi Cloud
- Release Full support for Terraform state, cross-language modules, and HCL
- Migrate CloudFormation and ARM with discovered stacks
- Pulumi Kubernetes Operator v2.8.0
- Async Python program entrypoints with pulumi.run
- Bulk cloud account onboarding for Discovery
- Improved pnpm support for Node.js projects
Best Practices
Sangharsh Agarwal
Building Kubernetes PR Previews with Shared Pulumi Components
A pattern for ephemeral PR preview environments alongside persistent Dev, Stage, and Prod stacks, with lessons from operating them at scale.
Sangharsh Agarwal
Engineering
Peter Yoakum
Self-driving infrastructure with Pulumi and Jev
GeoDeploy pairs TypeSafe Jev's confidence-scored decisions with the Pulumi Automation API to place and scale Kubernetes across AWS, Azure, and Google Cloud.
Peter Yoakum
Engineering
Engin Diri
Route every Claude Code message to the right model with Jev
jev-router asks Jev, a System One model, which Claude model each Claude Code message needs, and routes it there for a fraction of a cent.
Engin Diri
AI agents need continuity, not just context
Engineering
Engineering
Derek Schaller
AI agents need continuity, not just context
Why reliable AI agents need workspace recovery, and how Pulumi Neo uses Kopia-backed snapshots to restore context, files, and in-progress work.
Derek Schaller
Product
Julien Poissonnier
Change your components, keep your infrastructure
Evolve reusable Pulumi components with state migrations that preserve existing infrastructure and ship upgrade paths alongside your component code.
Julien Poissonnier
10 tips to improve your coding agent game
Best Practices
Best PracticesEngin Diri
10 tips to improve your coding agent game
Ten coding agent habits checked against the research behind them, from AGENTS.md drift and /compact to model switching, subagents, and review.
Engin Diri
Customers
4 authors
Beyond the Hyperscalers: What Actually Protects You
Three people who have priced leaving AWS spent an hour arguing about cloud sovereignty. Here is the recording, and the advice each of them gave.
4 authors
Product
Sean Yeh
Set Up Cloud OIDC From the Pulumi CLI
The new `pulumi env setup` command configures OIDC trust for AWS, Azure, and Google Cloud, and creates ESC Environments with the login provider.
Sean Yeh
Product
Guinevere Saenger
Pulumi Kubernetes v4.34.0: CRDs as provider extensions
Extend the Pulumi Kubernetes provider with any CustomResourceDefinition using the new --extension flag.
Guinevere Saenger
Product
Joe Duffy
Neo Security: Securing Infrastructure in the Agentic Era
Pulumi Neo Security threat models and traces attack paths across your entire cloud estate. Find and fix problems before the bad actors do.
Joe Duffy
Page 1 of 83
Popular series
See all →
2 part series
Things You Can Do With Neo
Real workflows platform teams are handing to Pulumi Neo: one-off deploys, incident triage, IAM audits, drift checks, runtime upgrades, and compliance fixes that run on a schedule.
7 part series
IaC Best Practices Series
Master Infrastructure as Code through a real-world case study: code organization, stack management, developer workflows, security patterns, and automation strategies for containerized applications on Kubernetes.
7 part series
Platform Engineering Pillars Series
Six essential pillars for transforming infrastructure chaos into streamlined developer platforms: provisioning, self-service, workflows, security, observability, and governance.
6 part series
Getting Started with Kubernetes Series
Build Kubernetes clusters on AWS, Azure, GCP and deploy applications using Infrastructure as Code. Learn core objects like pods, services, volumes, deployments and move from basic setups to complex microservices.