Skip to main content
Updates agents in-place using pulumi up --refresh to sync cloud state and apply changes. Preserves existing infrastructure and Tailscale devices. If the stack doesn’t exist yet, falls back to a fresh deploy. Like deploy, this command automatically validates secrets and configures Pulumi before redeploying.

Usage

Options

What It Does

  1. Validates secrets and configures Pulumi (cloud deploys only)
  2. Selects the existing Pulumi stack (or creates one if missing)
  3. Syncs manifest and config to the Pulumi project
  4. Cleans up stale Tailscale devices (cloud only)
  5. Runs pulumi up --refresh to read actual cloud state and apply changes
  6. Displays updated agent details (IPs, Tailscale URLs)

Local Docker Mode

Use --local to redeploy local Docker containers:
This targets the <stackName>-local Pulumi stack, copies config from the cloud stack (skipping Tailscale keys), and updates containers in-place. No Tailscale setup is performed.

Examples

Use redeploy after changing config values (clawup config set) or secrets (clawup secrets set) to apply changes to running agents.
If an in-place update can’t recover, do a clean rebuild: clawup destroy -y && clawup deploy -y