Provisioning with Pulumi

Configure Pulumi

Pulumi reads pulumi/Pulumi.cosine.yaml for region and registry configuration. It’s the single place to set the cluster’s identity and where it should live.

Pulumi.cosine.yaml

config:
  azure-native:location: "uksouth"
  azure-cosine:namePrefix: "cosine-azure-cluster"
  azure-cosine:registryServer: "registry.cosine.enterprises"
  azure-cosine:registryEmail: "readOnlyUser@cosine.sh"
  azure-cosine:registryUsername: "readOnlyUser"
  azure-cosine:registryPassword:
    secure: # Configured via Pulumi CLI
  azure-cosine:llmApiToken:
    secure: # Configured via Pulumi CLI

Use the Pulumi CLI to store secrets so they stay encrypted in state:

pulumi config set --secret registryPassword <your-password>
pulumi config set --secret llmApiToken <your-llm-api-token>

You can further configure the cluster in pulumi/index.ts if you want to adjust node size or disk space.

When you’re ready, provision the cluster and let Pulumi apply the full stack:

pulumi up