08/09/2023, 8:43 AM
Hello! When using GCP KMS as secrets provider - what should be the purpose of the key used in Pulumi?
pulumi stack change-secrets-provider
made it clear what the expected purpose is:
Copy code
error: secrets (code=FailedPrecondition): rpc error: code = FailedPrecondition desc = Operation requested for Key <> has incorrect key purpose: ASYMMETRIC_DECRYPT, expected key purpose is: ENCRYPT_DECRYPT
It's a shame it's not part of the Pulumi docs. 😕