Your First Stack

RDS PostgreSQL → endpoint → Helm chart (backend API)
                          → stack output (for other stacks)

ubx init my-platform
cd my-platform

input "env" {
  type    = "string"
  default = "staging"
}

input "db_password" {
  type      = "string"
  ephemeral = true
}

# PostgreSQL database
unit "aws_rds_instance" "db" {
  engine              = "postgres"
  engine_version      = "15"
  instance_class      = input.env == "prod" ? "db.r6g.xlarge" : "db.t3.micro"
  allocated_storage   = 20
  username            = "admin"
  password            = input.db_password
  skip_final_snapshot = true

  lifecycle {
    ignore_changes = ["password"]
  }
}

# Deploy backend — db endpoint wired in automatically
deploy "helm" "backend" {
  chart     = "my-backend"
  version   = "1.0.0"
  namespace = "backend"
  values = {
    database = {
      host = ~unit.aws_rds_instance.db.endpoint  # Pending<string>
      port = 5432
      name = "appdb"
    }
  }
}

# Export for other stacks
output "db_endpoint" {
  value       = ~unit.aws_rds_instance.db.endpoint
  description = "RDS connection endpoint"
}

ubx validate
#   ◆ Compile    stack.iac
#   ✓  valid

ubx plan
#   +  aws:rds:Instance         db         (new)
#   +  kubernetes:helm.sh/v3   backend    (new)
#
#   2 to create

pulumi config set db_password --secret "yourpassword"
ubx apply

#   +  aws:rds:Instance         db         45s
#   +  kubernetes:helm.sh/v3   backend     8s
#
#   ✓  done in 54s · 2 created
#
#   ─── Outputs ────────────────────────
#   db_endpoint  =  "db.xxxx.eu-west-1.rds.amazonaws.com"

extend "unit" "aws_rds_instance" "db" {
  instance_class    = "db.r6g.2xlarge"
  allocated_storage = 100
  multi_az          = true
}

ubx apply --env prod   # uses prod overrides
ubx apply              # uses staging defaults