Pulumi

The Pulumi lexicon makes a Pulumi program a chant workspace member. It declares no resource types and writes nothing: the program stays as it is, applied by pulumi up as before. chant reads it four ways.

Read	Source
the member’s graph	the pulumi stack export checked in beside Pulumi.yaml as stack-export.json
its part of the change set	pulumi preview --json
its drift records	pulumi refresh --preview-only --json, one resource at a time, or plunge drift --stream
its outputs, for another member’s parameters	pulumi stack output --json --show-secrets=false (applied) and the preview (planned)

The graph read never runs pulumi. The other reads run those commands, or plunge preview, plunge stack output and plunge drift for a member on plunge, as ruled on #4476. A member on plunge also has its engine facts read with plunge graph --json (#4529), which reads plunge’s records and calls no provider. Nothing else runs, so chant never changes a stack.

See Getting Started to add a Pulumi member to a workspace, and The pulumi member for what each read returns. The stack export covers the file the graph is read from and the checks that read it, Watching a member the PulumiWatchOp composite, and A member on plunge members that run on plunge.

At a Glance

Metric	Count
Resources	0
Property types	0
Services	0
Intrinsic functions	0
Pseudo-parameters	0
Lint rules	16

Lexicon version: 0.124.34
Namespace: Pulumi

• All Rules — 16 rules