The mind boggles why Pulumi doesn't do ssh.
I have a whole bunch of bare metal sitting in data centers all over the world, how am I expected to manage it?
Ansible/Salt/Chef is obviously one type of solution, but like you said, being able to code things in TS is really nice.
One thing TF does well, is bare metal.