Create documentation for Pulumi administration

[Hayden-IO]

• How do you administer Pulumi? Do you use the CLI or UI?
• Who are the current administrators? Is it a shared account? Or can it be granted to the TSC?
• What's the login for the UI/CLI? Can this be stored in 1password so the TSC has access?
• Same question for the app token

cc @cpanato, can you help create this?

[cpanato]

yes, i can do that, just need to find some free time

[evankanderson]

FWIW, the GitHub Sync job failed today:

 /home/runner/work/_actions/pulumi/actions/4204b4e8a7e703da96ba5dd4c3a667adeee35812/webpack:/pulumi-github-action/node_modules/@pulumi/pulumi/automation/errors.js:77
                      : new CommandError(result);
  ^
  CommandError: code: -2
   stdout: 
   stderr: Command failed with exit code 255: pulumi up --yes --skip-preview --diff --exec-agent pulumi/actions@v3 --color auto --exec-kind auto.local --stack sigstore/github-prod --non-interactive
  [resource plugin github-5.12.0] installing
  error: this resource can only be used in the context of an organization, "sigstore" is a user
  error: this resource can only be used in the context of an organization, "sigstore" is a user
  error: update failed

[evankanderson]

Unfortunately, I don't understand what resource is being referenced, or I would send a PR to fix.

[Hayden-IO]

@evankanderson Moving this to a dedicated issue

[Hayden-IO]

Answered most of these, answers below. One new question is how do we transfer existing repos into the org and how do we import resources?

How do you administer Pulumi? Do you use the CLI or UI?

CLI primarily, modifying locks cannot be done via UI.

Who are the current administrators? Is it a shared account? Or can it be granted to the TSC?
What's the login for the UI/CLI? Can this be stored in 1password so the TSC has access?

Credentials are stored in the shared 1password account.

Same question for the app token

App tokens should be generated as needed via CLI or UI.

[cpanato]

i am sorry for not prioritizing this, i will add this to my priority backlog and get this done