We should just keep

Pulumi.*.yaml

files in git, right? So long as we store the secret key for the values within the file in a proper manner this is the way, correct?

Yup, given the automatic secret management and encryption it should be fine to store these in git.

Perfect, thank you. I really wanted to do it that way, because it’s just so much simpler when letting devs locally go over their changes. / assumptions.