No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

Hello!

When using GCP KMS as secrets provider - what should be <https://cloud.google.com/kms/docs/algorithms#key_purposes|the purpose >of the key used in Pulumi?

`pulumi stack change-secrets-provider` made it clear what the expected purpose is:

```error: secrets (code=FailedPrecondition): rpc error: code = FailedPrecondition desc = Operation requested for Key &lt;&gt; has incorrect key purpose: ASYMMETRIC_DECRYPT, expected key purpose is: ENCRYPT_DECRYPT```
It's a shame it's not part of the Pulumi docs. :confused:

Opened <https://github.com/pulumi/pulumi-hugo/pull/3246>.