from pulumi import Config

password = config.require_secret("password")

def read_config(tpl, substitutes):
    with open(tpl, "r") as template:
        yml = template.read()
        yml = string.Template(yml)
        yml = yml.substitute(substitutes)
        sp = subprocess.run(["butane"], input=yml, shell=True, capture_output=True, encoding='utf8')
        if sp.returncode == 0:
            return str(base64.b64encode(sp.stdout.encode('ascii')), encoding='ascii')
        else:
            log.error('Failed to run butane')

print(read_config("tpl.yaml", {"password": password})