Skip to content

Commit 99dc3c7

Browse files
fnunekramhuber
andauthored
Document and announce the "used by" feature for Private Registry components (#16332)
* Fixes: pulumi/pulumi-service#33383 Fixes: pulumi/pulumi-service#33384 Document and announce component usage tracking feature Adds documentation for the component usage tracking feature in the private registry and a blog post announcing its availability. The usage tracking feature shows which stacks are using components from the private registry, including version information and last update timestamps. This helps platform teams understand component adoption and plan updates. Changes: - Add usage tracking section to private registry documentation - Create blog post announcing the feature * latest * date fix * Update title for IDP component usage tracking post --------- Co-authored-by: Mark <[email protected]>
1 parent 5cd3410 commit 99dc3c7

File tree

4 files changed

+68
-0
lines changed

4 files changed

+68
-0
lines changed
56.8 KB
Loading
Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
---
2+
title: "Component Usage Tracking in Pulumi Private Registry"
3+
date: 2025-10-28
4+
draft: false
5+
meta_desc: "Track which stacks use components from your private registry to understand version sprawl, plan deprecations, and respond to security issues."
6+
meta_image: meta.png
7+
authors:
8+
- idp-team
9+
tags:
10+
- idp
11+
- features
12+
- platform-engineering
13+
---
14+
15+
Platform teams publishing components to the Pulumi Private Registry can now see exactly which stacks are using each component and at which version.
16+
<!--more-->
17+
18+
## The visibility problem
19+
20+
You've published a new major version of a component to your private registry. Most teams across your organization have adopted it. Then you need to answer a critical question: "Which teams still haven't adopted it?"
21+
22+
This visibility gap creates real consequences. When a security vulnerability appears in an old version, you can't assess the blast radius. When you want to deprecate a version, you don't know which teams need to migrate. When you release a new feature, you can't measure adoption. Version sprawl accumulates silently.
23+
24+
## Centralized components, centralized visibility
25+
26+
The Pulumi IDP registry solves this by providing both centralized distribution and centralized insight. When you publish a component to the registry, you automatically gain visibility into its usage across your organization.
27+
28+
The new usage tracking feature shows:
29+
30+
- Which stacks are using your component
31+
- What version each stack is running
32+
- When each stack was last updated
33+
34+
![Component usage tracking in the Pulumi IDP registry](idp-component-used-by.png)
35+
36+
Access usage data through the "Used By" tab on any component's detail page in the registry. The view respects your existing access controls, showing only stacks you have permission to see.
37+
38+
## Why this matters
39+
40+
This visibility transforms conversations that were previously not possible or painfully slow.
41+
42+
**Security response:** When a vulnerability is discovered in version 1.2.0 of your component, you can immediately identify every affected stack and reach out to the right teams. What used to take hours or days of detective work now takes minutes.
43+
44+
**Deprecation planning:** Before removing support for version 1.x, you can see exactly which teams are still using it and coordinate migration timelines with complete information.
45+
46+
**Version sprawl management:** See the full distribution of versions in use across your organization and make informed decisions about consolidation.
47+
48+
The registry becomes your source of truth, not just for distributing components, but for understanding how they're used.
49+
50+
## Get started
51+
52+
If you're already publishing components to the Pulumi IDP registry, usage tracking is automatically available. Visit any component detail page to see the "Used By" tab.
53+
54+
If you haven't published to the registry yet, now is the time to start. Publishing a component is as simple as running `pulumi publish`.
55+
56+
For more information, see the [private registry documentation](/docs/idp/get-started/private-registry/).
1.73 MB
Loading

content/docs/idp/get-started/private-registry.md

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -138,6 +138,18 @@ func (f *PetAbstractedOutputs) Annotate(a infer.Annotator) {
138138

139139
{{< /chooser >}}
140140

141+
#### Component usage tracking
142+
143+
Each component in the private registry includes a usage tab that shows which stacks are using that component. This helps platform teams understand component adoption and assess the impact of changes before updating versions.
144+
145+
The usage tab displays:
146+
147+
- Stack name and project
148+
- Component version in use
149+
- Last update timestamp
150+
151+
This information helps you identify stacks that may need updating when releasing new component versions and provides visibility into which teams are adopting standardized components.
152+
141153
#### Specifying an Organization
142154

143155
If you're part of multiple organizations and do not have a [default organization](/docs/iac/cli/commands/pulumi_org_set-default/) set, you must specify the org by using the `--publisher` flag.

0 commit comments

Comments
 (0)