Pulumi CLI environment variables

Specifies the selected pulumi stack, overriding the stack selected with pulumi stack select STACK The priority is as follows:

1. The --stack command line flag
2. PULUMI_STACK
3. Stack selected with pulumi stack select <STACK>

Specifies the endpoint for Pulumi AI service.

PULUMI_AI_SERVICE_ENDPOINT="https://www.pulumi.com/ai"

Skips the minimum CLI version check used by Automation API to ensure compatibility. We do not recommend using this variable as it may result in unexpected behavior or confusing error messages from Automation API.

PULUMI_AUTOMATION_API_SKIP_VERSION_CHECK=true

Set this environment variable to authenticate into the Pulumi Cloud backend and bypass the access token prompt when running pulumi login .

PULUMI_ACCESS_TOKEN="your-access-token"

Set this environment variable to use a specified backend instead of the default backend. See State and Backends for details on valid backend URLs.

PULUMI_BACKEND_URL="s3://your-pulumi-state-bucket"

Sets configuration for unit testing. Must be in JSON format.

This environment variable is ignored during normal Pulumi operations -- e.g., up, preview, etc. -- but must be valid JSON if present.

PULUMI_CONFIG='{"project:myTag":"val1","project:mySecret":"val2"}'

Set this as an environment variable to protect and unlock your configuration values and secrets. Your passphrase is used to generate a unique key for your stack, and configuration and encrypted state values are then encrypted using AES-256-GCM. Read the change log and Configuration and Secrets to learn more about Pulumi's configuration and secrets management system.

PULUMI_CONFIG_PASSPHRASE="your-passphrase"

An alternative method to providing PULUMI_CONFIG_PASSPHRASE. Set this to the path of a file that contains the passphrase value.

PULUMI_CONFIG_PASSPHRASE_FILE="/tmp/passphrase.txt"

Overrides the domain used when generating links to the Pulumi Cloud.

PULUMI_CONSOLE_DOMAIN="yourhost.domain.com"

Continues to perform the update/destroy operation despite the occurrence of errors.

PULUMI_CONTINUE_ON_ERROR=true

Enables Copilot help and links in the CLI output, regardless of the Copilot settings for the given Pulumi organization.

PULUMI_COPILOT=true

List commands helpful for debugging Pulumi itself.

PULUMI_DEBUG_COMMANDS=true

Enables debug tracing of Pulumi gRPC internals. The variable should be set to the log file to which gRPC debug traces will be sent.

PULUMI_DEBUG_GRPC="/path/to/grpc-debug.log"

As of v0.12.2, the promise leak experience has been improved and shows a simple error message. Set this environment variable to get more verbose error messages when debugging promise leaks.

PULUMI_DEBUG_PROMISE_LEAKS=true

Enable features for hacking on Pulumi itself.

PULUMI_DEV=true

Disables the automatic installation of missing plugins.

PULUMI_DISABLE_AUTOMATIC_PLUGIN_ACQUISITION=true

Disables the caching encryption operations for unchanged stack secrets.

PULUMI_DISABLE_SECRET_CACHE=true

Disables provider preview and enables previous more conservative preview behavior.

PULUMI_DISABLE_PROVIDER_PREVIEW=true

Disables format validation of system inputs. Currently, this disables validation of stack names.

PULUMI_DISABLE_VALIDATION=true

If set, checkpoint backups will not be written to the backup folder.

PULUMI_DIY_BACKEND_DISABLE_CHECKPOINT_BACKUPS=true

Enables gzip compression when writing state files.

PULUMI_DIY_BACKEND_GZIP=true

Uses the legacy layout for new buckets, which currently default to project-scoped stacks.

PULUMI_DIY_BACKEND_LEGACY_LAYOUT=true

Disables the warning about legacy stack files mixed with project-scoped stack files.

PULUMI_DIY_BACKEND_NO_LEGACY_WARNING=true

Number of parallel operations when fetching stacks and resources from the DIY backend.

PULUMI_DIY_BACKEND_PARALLEL=NUMBER_OF_PARALLEL_OPERATIONS

If set, every checkpoint will be duplicated to a timestamped file.

PULUMI_DIY_BACKEND_RETAIN_CHECKPOINTS=true

As of 1.0.0-beta1, input properties are no longer propagated to missing output properties during a pulumi preview. If this causes issues in your Pulumi program, set this to true to enable the old behavior.

PULUMI_ENABLE_LEGACY_APPLY=true

As of v0.17.23, the detection of differences between the actual and desired state of a resource is left entirely up to that resource's provider. This change can expose bugs in resource providers that lead to diffs being present even if the desired configuration matches the actual state of the resource. Set this to 1 or true to enable the old diff behavior.

PULUMI_ENABLE_LEGACY_DIFF=true

As of v0.16.18, a fix has been released to prevent the Pulumi CLI from loading the newest plugin for a resource provider instead of the requested version. This has the potential to disrupt users that previously had working configurations. Set this environment variable to opt into the legacy plugin load behavior.

PULUMI_ENABLE_LEGACY_PLUGIN_SEARCH=true

Use legacy refresh diff behaviour, in which only output changes are reported and changes against the desired state are not calculated.

PULUMI_ENABLE_LEGACY_REFRESH_DIFF=true

Enables error reporting when dependency cycles are detected.

PULUMI_ERROR_ON_DEPENDENCY_CYCLES=true

Throws an error instead of returning a string when attempting to convert an Output to a string.

PULUMI_ERROR_OUTPUT_STRING=true

Enables experimental options and commands.

PULUMI_EXPERIMENTAL=true

When set to "true", the secrets manager stored in the stack's state is used as a fallback when the stack configuration is missing or incomplete.

PULUMI_FALLBACK_TO_STATE_SECRETS_MANAGER=true

The passphrase to use with Git operations that use SSH.

PULUMI_GITSSH_PASSPHRASE="your passphrase"

Overrides the folder where the Pulumi CLI stores its artifacts: plugins, workspaces, templates, and credentials file. By default, artifacts are stored next to Pulumi binaries in ~/.pulumi.

PULUMI_HOME="/path/to/artifacts"

Disables discovering additional plugins by examining $PATH.

PULUMI_IGNORE_AMBIENT_PLUGINS=true

Allow P resource operations to run in parallel at once (1 for no parallelism)

PULUMI_PARALLEL=NUMBER_OF_PARALLEL_OPERATIONS

Enables running diff calculations in parallel.

PULUMI_PARALLEL_DIFF=true

Specifies overrides for plugin-download URLs. The expected format is regexp=URL, and multiple pairs can be specified separated by commas.

PULUMI_PLUGIN_DOWNLOAD_URL_OVERRIDES="^https://foo=https://bar,^github://=https://buzz"

Set this environment variable to opt-in to using yarn instead of npm for installing Node.js dependencies.

PULUMI_PREFER_YARN=true

As of v0.16.6, the Pulumi CLI uses python3 instead of python when running a Python program. Set this environment variable to run a different Python binary.

PULUMI_PYTHON_CMD="python-version-binary"

Runs the Pulumi program for refresh and destroy operations. This is the same as passing '--run-program=true' to the CLI.

PULUMI_RUN_PROGRAM=true

As of v3.40.1, you may skip saving state checkpoints and only save the final deployment. See #10668. This is an experimental feature that also requires PULUMI_EXPERIMENTAL=true to be set for versions >= v3.40.1, < v3.104.0.

PULUMI_SKIP_CHECKPOINTS=true

As of v2.0.0, an explicit confirmation was required when running in non-interactive mode. Set this environment variable to make that explicit confirmation.

PULUMI_SKIP_CONFIRMATIONS=true

As of v0.17.9, you may skip the Pulumi version update check by setting this environment variable.

PULUMI_SKIP_UPDATE_CHECK=true

Suppresses showing the 'explainFailure' link to Copilot in the CLI output, regardless of the Copilot settings for the given Pulumi organization.

PULUMI_SUPPRESS_COPILOT_LINK=true

The presence of this environment variable (regardless of its value) strips color ANSI codes from text output to the terminal. See https://no-color.org/ for more details. When used with Automation API, this environment variable will strip color directives from the event logs.

NO_COLOR