1. Docs
  2. Integrations
  3. Azure DevOps Task Extension

Azure DevOps Task Extension

    The Pulumi Task Extension for Azure Pipelines is a Pulumi-maintained extension available on the Visual Studio Marketplace. It installs the Pulumi CLI and runs Pulumi commands in your Azure Pipelines without requiring custom scripts.

    The Pulumi Task Extension can be used with any cloud provider that Pulumi supports — not just Azure.

    Installing the task extension

    Install the task from the Visual Studio Marketplace to your Azure DevOps organization. After installation, the Pulumi@1 task is available in all pipelines across your organization.

    Parameters

    ParameterRequiredDescription
    stackYesStack name in the form ORG/STACK or ORG/PROJECT/STACK.
    commandNoPulumi CLI command to run (e.g., preview, up, destroy).
    argsNoOption flags passed to the command (e.g., --yes). Separate multiple args with spaces.
    cwdNoWorking directory for the Pulumi commands. Use if your Pulumi app is in a subdirectory.
    azureSubscriptionNoReference a service connection for Azure credentials. If omitted, configure cloud credentials as environment variables.
    versionSpecNoPulumi CLI version to use. Defaults to the latest version.
    createStackNoSet to true to create the stack if it doesn’t exist. Defaults to false.
    createPrCommentNoSet to true to post pipeline output as a pull request comment. Only supported for PRs in Azure DevOps-hosted repositories. Defaults to false.
    useThreadedPrCommentsNoSet to true to append to an existing comment thread. Defaults to true.

    The task looks for the build variable pulumi.access.token and maps it automatically to PULUMI_ACCESS_TOKEN. You can also use the env directive to pass additional environment variables to your Pulumi program.

    Basic usage

    - task: Pulumi@1
  condition: or(eq(variables['Build.Reason'], 'PullRequest'), eq(variables['Build.Reason'], 'Manual'))
  inputs:
    azureSubscription: "My Service Connection"
    command: "preview"
    cwd: "infra/"
    stack: "acmeCorp/acmeProject/acme-ui"

    PR comments

    The task can post pipeline output as a comment on the pull request that triggered the build. To enable this feature:

    1. Set createPrComment: true in the task inputs.
    2. Grant the build service user the Contribute to pull requests permission:
      • Go to Project Settings > Repositories > select your repo > Security tab.
      • Under Users, find the build service user (named <Project name> Build Service).
      • Set Contribute to pull requests to Allow.

    PR comments are only supported for repositories hosted in Azure DevOps. GitHub, GitLab, and Bitbucket repositories are not supported.

    Using with other cloud providers

    To use the task extension with AWS, Google Cloud, or other providers, pass the required credentials as pipeline variables or link variable groups to your pipeline. For example, for AWS:

    - task: Pulumi@1
  inputs:
    command: "up"
    stack: "myOrg/myProject/prod"
    args: "--yes"
  env:
    AWS_ACCESS_KEY_ID: $(awsAccessKeyId)
    AWS_SECRET_ACCESS_KEY: $(awsSecretAccessKey)

    Full Azure DevOps CI/CD guide

    For a complete walkthrough of setting up Pulumi in Azure Pipelines — including stack and branch mapping, YAML pipeline configuration, and deployment scripts — see the Azure DevOps CI/CD guide.