Pulumi Release Notes: AI in the CLI, Go generics, AWS 6.0, Review Stacks and so much more!
Posted on
We’ve had an exciting quarter at Pulumi, shipping all kinds of improvements from our providers to our Cloud service. To stay up-to-date on all the details and additional improvements between release blogs, be sure to check out the pulumi/pulumi repo changelog for CLI enhancements and the Pulumi Cloud features in the new features blogs for updates on Pulumi Service features. We have a lot to cover, so let’s get started!
AI
Resource Search - AI Assist
Pulumi Cloud Resource Search AI assist is now generally available to all organizations, offering natural language search capabilities. This feature allows you to query their infrastructure with plain language requests. Suggested queries and an “I’m Feeling Lucky” button are now available to simplify the search process and provide insights into Resource Search functionality.
Pulumi Insights and AI in the CLI
We’ve integrated Pulumi Insights, including AI and Resource Search, into the pulumi CLI. Now, you can harness the power of AI and resource search directly in your terminal. This update also includes features like AI Assist for resource search and fine-grained resource property search, making these tools easily accessible via the pulumi CLI.
pulumi org search ai -q "all Kinesis streams modified since September 1st 2023"
pulumi ai web "deploy metabase on AWS with a managed postgres database"
Pulumi Cloud
Slack and Deployment Notifications
We’ve made several improvements to our Pulumi Cloud Webhooks to enhance deployment notifications and response times. Now, you can easily integrate Slack with Pulumi Cloud for organization or stack notifications without hosting their infrastructure. This integration provides centralized visibility, allowing teams to quickly access stack and update details, operation information, and user activity, streamlining collaboration and reducing context switching. Event notifications and filtering options have been expanded for both Pulumi Cloud Webhooks and the Slack integration, making deployment monitoring more efficient and accessible. These enhancements are available to all Pulumi Cloud organizations.
Microsoft Teams Webhook Integration
Setting up Microsoft Teams notifications is now easier than ever with support for Microsoft Teams formatted webhooks. You can quickly enable notifications about your Pulumi stacks and organizations in your Microsoft Teams workspace by providing an incoming webhook URL. New REST API endpoints and a Service Provider are available, allowing for efficient webhook creation at scale. These improvements enhance ChatOps workflows and provide better visibility into infrastructure changes while maintaining support for generic webhooks. For more details and how to get started, check out this blog post.
Admin Organization Access Tokens in Pulumi Cloud
The introduction of Admin permission scope for Organization Access Tokens provides elevated privileges for users who need them. These tokens enable actions like transferring stacks, modifying user access, team management, and more, previously restricted with regular Organization Access Tokens. Admin Organization Access Tokens cater to programmatic use cases that require higher-level permissions while maintaining a member’s usual permissions. This enhancement expands the utility of Organization Access Tokens for Enterprise and Business Critical customers, and is available during the 14-day trial period as well.
Restore Stacks
Pulumi Cloud now offers the capability to restore previously deleted stacks, a feature requested by many users. This addition enables users to recover stacks that were either mistakenly deleted or intentionally removed while retaining their activity history. This self-service recovery option can be conveniently accessed via the Pulumi Cloud console by navigating to the Stacks page, locating the “restore stacks” function, and selecting the stacks they wish to recover. Up to the last 10 deleted stacks can be restored, and older ones can be retrieved through support.
Review Stacks
New to Pulumi Deployments are Review Stacks, ephemeral cloud environments created automatically when a pull request is opened. These environments enable developers to make changes to both application and infrastructure code simultaneously, streamlining the development process. Review Stacks comment with the outputs from the deployment, making it easier to review code changes and collaborate with teammates. Review Stacks help optimize cloud costs by only existing as long as necessary during feature development. Configuring Review Stacks is a simple process that enhances development efficiency and collaboration among teams. Find more information in the Review Stacks documentation.
Property Search
Resource Search for Pulumi Cloud capabilities have been enhanced by allowing users to search over resource properties in addition to metadata, across over 100 cloud providers. The Property Search feature provides deeper insights into cloud infrastructure, enabling users to search based on specific property names and values, such as instance type, region, or database version. This new feature is available in the Enterprise and Business Critical editions of Pulumi Cloud and aims to streamline resource management, compliance, and diagnostics, ultimately enhancing efficiency and collaboration in cloud environments.
| Natural language | Query result |
|---|---|
| resources tagged with stack production | .tags.stack:production |
| resources without a tag in production | -tags: stack:production |
| aurora engines running MySQL engine version 5 | type:"aws:rds/cluster:Cluster" .engine:aurora .engineVersion:5 |
| s3 buckets read write in production | type:"aws:s3/bucket:Bucket" stack:production .acl:public-read-write |
| buckets objects in all clouds | type:"aws:s3/bucket:Bucket" OR type:"google:storage/bucket:Bucket" OR type:"azure:storage:BlobContainer" |
| all resources in us east 1 | region:"us-east-1" |
| resources with a private ip | .privateIpAddress: |
Dependent Stack Updates with Pulumi Deployments
Pulumi Deployments has two new features to help manage complex infrastructure projects more easily. The Deployment Webhook Destinations allow automatic triggering of updates in dependent stacks when changes occur in the parent stack. We’ve also added the Pulumi Auto Deploy Package to simplify the way you express stack dependencies, automating the creation and updating of Deployment Webhooks. For all the details and to get started, visit the blog post, auto deploy package registry page, and Pulumi Deployments documentation.
Core
Go Generics
We’ve implemented Go generics in our SDKs, enabling type safety and reducing excessive code generation. This means you can write more reliable and maintainable infrastructure code with reduced chances of panics, leading to more robust cloud infrastructure deployments. For a deeper dive into this feature and how to get started, explore this blog post.
// Given
var a pulumi.IntOutput
var b pulumi.StringOutput
// Before (could panic at runtime if you got something wrong)
o := pulumi.All(a, b).ApplyT(func(vs []interface{}) string { // could panic
a := vs[0].(int) // could panic
b := vs[1].(string) // could panic
return strconv.Itoa(a) + b
}).(pulumi.StringOutput) // could panic
// After (compile-time type-safety)
o := pulumix.Apply2(a, b, func(a int, b string) string {
return strconv.Itoa(a) + b
})
Pulumi Convert
The introduction of pulumi convert in the Pulumi CLI simplifies the migration process for teams transitioning from Terraform to Pulumi. This feature allows you to convert entire Terraform projects into Pulumi, including support for modules, core Terraform 1.4 features, and most Terraform built-in functions. Starting from Pulumi CLI version 3.71.0, you can directly access this converter, streamlining the conversion of full Terraform programs. This enhancement builds upon our CrossCode foundations, enabling universal infrastructure as code support and introducing the concept of converter plugins for future integrations. This feature supports various use cases, such as migrating existing Terraform projects and modules to Pulumi, enhancing our commitment to providing versatile solutions for infrastructure as code.
$ pulumi convert --from terraform --language typescript --out pulumi
$ pulumi convert --from terraform --language python --out pulumi
$ pulumi convert --from terraform --language go --out pulumi
$ pulumi convert --from terraform --language csharp --out pulumi
Pulumi New support for SSH-style Git URLs
In the v3.77.0 release of the Pulumi CLI, we added support for pulumi new to use SSH-style Git URLs which enables accessing templates from private Git repos, authenticated via normal Git SSH support. Many teams have been building libraries of their own private templates, and this enables those templates to be used much more naturally via pulumi new and the Deploy with Pulumi button.
$ pulumi new git@github.com:acmecorp/templates/website
New Community Supported Pulumi Language - Scala
The team at Virtus Lab released support for Scala in Pulumi as part of their Besom project at https://github.com/VirtusLab/besom. As they highlight in their README:
Besom Scala SDK for Pulumi lets you leverage the full power of Pulumi Infrastructure as Code Platform using the Scala programming language. Scala support is currently in Public Beta.
The Scala language support builds on Pulumi’s existing Java and JVM support, but with an SDK custom designed to target idiomatic Scala API design patterns.
// For each file in the directory, create an S3 object stored in `siteBucket`
val uploads: Array[Output[s3.BucketObject]] = File(siteDir).listFiles().map { file =>
val name = NonEmptyString(file.getName) match
case Some(name) => name
case None => throw new RuntimeException("Unexpected empty file name")
s3.BucketObject(
name,
s3.BucketObjectArgs(
bucket = siteBucket.id, // reference the s3.Bucket object
source = FileAsset(file.getAbsolutePath), // use FileAsset to point to a file
contentType = Files.probeContentType(file.toPath) // set the MIME type of the file
),
CustomResourceOptions(
dependsOn = siteBucket.map(List(_))
)
)
}
Providers and Packages
AWS Classic 6.0
The 6.0 release of the Pulumi AWS Classic provider introduces essential enhancements and updates to one of the most extensively used providers in the Pulumi ecosystem. These improvements encompass TF Plugin Framework support, the inclusion of new resources and functions, significant SDK size optimizations for faster downloads and improved developer experiences, resolutions to top-upvoted issues, and removal of deprecated resources. To dig deeper into these changes, check out the migration guide and blog post.
Azure Native 2.0
The Pulumi Azure Native provider 2.0 has been shipped with enhanced performance and usability, making it easier to manage Azure resources efficiently. Key features include a significant reduction in SDK size for faster development, refreshed default module versions for access to the latest Azure features, expanded top-level default module coverage, title case consistency, simplified user-assigned identity inputs, and more. Visit the blog post and migration guide to learn more.
Kubernetes 4.0
Pulumi Kubernetes 4.0 brings new enhancements in managing Kubernetes resources. It embraces Kubernetes Server-Side Apply as the default mode, enabling features like upserting and Patch resources. Improved diffs remove the dependence on kubectl annotations, and provide simpler access to outputs in the Python, Go and Java SDKs, supporting any self-hosted or managed Kubernetes cluster with version 1.13 or newer. You can migrate existing projects or start new ones with Kubernetes 4.0 for superior Kubernetes resource management. Find more information in the blog post and migration guide.
OIDC Support for Azure
The Azure Native and Azure Classic providers now fully support Azure OIDC authentication. OIDC, or OpenID Connect. OIDC authentication allows you to authenticate your Pulumi program with Azure using federated identity, reducing the need for secrets management. You can establish the trust relationship between Azure and other services like GitHub and configure your Pulumi program to use OIDC for authentication, making your cloud infrastructure management more secure and efficient.
New provider resources
In addition to releasing major versions of 3 of our most popular providers, we’re always keeping our providers up-to-date to bring you the latest functionality in your Pulumi programs. We’ve added 793 resources and 762 functions across our most popular providers, along with many more throughout our ecosystem.
New Community Providers
Welcome to the 17 new community providers in the registry!
- Cisco ACI
- ACME
- CockroachDB Cloud
- ESXi Native
- Impart Security
- Cisco IOS XE
- Matchbox
- Microsoft SQL Server
- ngrok
- Cisco NX OS
- Port
- Prodvana
- Redis Cloud
- Vantage
- Zitadel
- Vercel
- Volcengine
Wrap Up
We’ve had an incredible couple months introducing so many exciting features and enhancements across our entire platform. From Slack and Microsoft Teams integrations to Review Stacks, major provider release to Go Generics, we’ve been focused on making your cloud development experience more efficient and powerful. Don’t miss out on all these exciting developments—check out our changelog for CLI updates and our new features blogs for the latest on Pulumi Cloud. Explore these new features today and see the difference they can make in your projects. Happy coding!
