great-sunset-355
08/16/2022, 7:08 AMpulumi config
inside the CI pipeline?
This seems to be a problem that config has to be present before CI runs but this presents another problem that the config value is already exposed to the code which has not been merged yet.
Is there any recommendation to avoid this problem?echoing-dinner-19531
08/16/2022, 8:53 AMproblem that config has to be present before CI runsWe expect that to often be the case. E.g. how many vms to deploy should normally be a decision made by an engineer and gone through review before hitting CI.
that the config value is already exposed to the code which has not been merged yet.I don't understand this statement? Is this a worry about auth tokens/secrets being picked up by public PRs?
great-sunset-355
08/16/2022, 11:51 AMpulumi preview
step in CI will fail reading the config value.
(not a problem for plaintext values, no need to run pulumi config set
but it is a problem with secrets)
Also what if there are 2 PRs working on the same project?
then the config is available for both branches
example:
Branch A:
pulumi config set variable_A valueA
Branch B:
pulumi config set variable_B valueB
above case is not a problem, however this may be a problem:
example:
Branch A:
pulumi config set variable_A valueA
Branch B:
pulumi config set variable_A valueB
after this running pulumi config
inside the branch A, returns valueB
echoing-dinner-19531
08/16/2022, 1:02 PMstack config has to be changed before PR was review is doneI mean so does the code, this is one of the reasons config is pulled from local files not from the service. So that the checked out files for code and config stay in sync.
after this runningNo the config for branch A shouldn't be affected by anything you do in branch B. You'll have to resolve the merge conflict if both branches change the same variable, but only when you go to merge the branches together.inside the branch A, returnspulumi config
valueB
great-sunset-355
08/17/2022, 6:28 AMpulumi up
but that that point I'd be changing the global state so it makes sense.