Hello When using GCP KMS as secrets provider what should be

Question

Hello When using GCP KMS as secrets provider what should be <https cloud google com kms docs algorithms key purposes|the purpose >of the key used in Pulumi

bitter-painter-92241 · Answer

`pulumi stack change secrets provider` made it clear what the expected purpose is ```error secrets code=FailedPrecondition rpc error code = FailedPrecondition desc = Operation requested for Key lt gt has incorrect key purpose ASYMMETRIC DECRYPT expected key purpose is ENCRYPT DECRYPT``` It s a shame it s not part of the Pulumi docs confused

bitter-painter-92241 · Answer

Opened <https github com pulumi pulumi hugo pull 3246>