Product
Joe Duffy
7 min read
Neo Security: Securing Infrastructure in the Agentic Era
Pulumi Neo Security threat models and traces attack paths across your entire cloud estate. Find and fix problems before the bad actors do.
What's new
- Policy violations now appear in pull request comments and checks
- CLI and SDK rollup: pulumi new, pulumi do, and more
- Query your infrastructure with the Pulumi Context API
- Experimental Rust support for Pulumi
- Stateful, zero-setup resource operations with pulumi do
- A notification center for Pulumi Cloud
- Release Full support for Terraform state, cross-language modules, and HCL
- Migrate CloudFormation and ARM with discovered stacks
- Pulumi Kubernetes Operator v2.8.0
- Async Python program entrypoints with pulumi.run
- Bulk cloud account onboarding for Discovery
- Improved pnpm support for Node.js projects
Product
Sean Yeh
Set Up Cloud OIDC From the Pulumi CLI
The new `pulumi env setup` command configures OIDC trust for AWS, Azure, and Google Cloud, and creates ESC Environments with the login provider.
Product
Guinevere Saenger
Pulumi Kubernetes v4.34.0: CRDs as provider extensions
Extend the Pulumi Kubernetes provider with any CustomResourceDefinition using the new --extension flag.
Compatibility Testing Pulumi HCL
Engineering
Engineering
Ian Wahbe
Compatibility Testing Pulumi HCL
How we test that Pulumi HCL is an OpenTofu compatible HCL runtime.
General
Pulumi Content Team
Best Kubernetes Infrastructure as Code Tools in 2026
The best Kubernetes IaC tools in 2026: Pulumi, Terraform, Helm, Kustomize, Crossplane, Argo CD, Flux, cdk8s, and kro, compared honestly on fit.
Product
Tom King
Never Miss What Your Infrastructure Is Telling You
The Notification Center brings Neo task updates, ESC change requests, and billing alerts into a single real-time inbox in the Pulumi Cloud console.
Product
Thomas Gummerer
Automatic Logging for Faster, Secure Debugging
Pulumi now writes encrypted logs for every operation automatically
GeneralPulumi Content Team
Terraform and Kubernetes: A Practical Guide for 2026
How teams manage Kubernetes infrastructure as code in 2026: what Terraform's Kubernetes provider does well, where it strains, and how Pulumi compares.
Best Practices
Engin Diri
YOLO Mode Is the Right Default. Your Laptop Is the Wrong Place for It.
Prompt guardrails fail right when coding agents get dangerous. How Docker Sandboxes make YOLO mode safe, plus a ready-made kit for infrastructure work.
Emulating Terraform on Pulumi's Engine
Engineering
EngineeringIan Wahbe
Emulating Terraform on Pulumi's Engine
How we map Terraform's data model onto Pulumi's execution semantics to seamlessly run your Terraform modules against the Pulumi engine.
Product
Daniel Perlovsky
Bring Your Terraform Estate Into the Agentic Era
Pulumi Cloud as a Terraform backend and HCL in Pulumi IaC are now GA, plus native Terraform module support — bring the IaC you already have.
Page 1 of 82
Popular series
See all →2 part series
Things You Can Do With Neo
Real workflows platform teams are handing to Pulumi Neo: one-off deploys, incident triage, IAM audits, drift checks, runtime upgrades, and compliance fixes that run on a schedule.
7 part series
IaC Best Practices Series
Master Infrastructure as Code through a real-world case study: code organization, stack management, developer workflows, security patterns, and automation strategies for containerized applications on Kubernetes.
7 part series
Platform Engineering Pillars Series
Six essential pillars for transforming infrastructure chaos into streamlined developer platforms: provisioning, self-service, workflows, security, observability, and governance.
6 part series
Getting Started with Kubernetes Series
Build Kubernetes clusters on AWS, Azure, GCP and deploy applications using Infrastructure as Code. Learn core objects like pods, services, volumes, deployments and move from basic setups to complex microservices.