After I run

pulumi up

, the config file

Pulumi.dev.yaml

is being restructured automatically - the commented blocks are removed, all the configs are in alphabetical order .... This started happening suddenly last week. Am I missing something?

long standing issue here: https://github.com/pulumi/pulumi/issues/423

@billowy-army-68599 Not sure why this started happening last week. The version I had for more than 3 weeks is v3.37.2. What would be the short term solution here?

This started happening suddenly last week.

This is a long standing issue, so I suspect you changed something to start triggering this. Out of interest what secrets provider are you using and has that changed recently?

I am using the default secrets provider and

export PULUMI_CONFIG_PASSPHRASE=""

Thanks, I'll have a look into why it's rewriting on up. 423 will continue to be a problem when pulumi needs to edit config (e.g. when setting a key, or secret salt) but hopefully we can at least fix it re-writing the file on every up.

I found the issue. I removed the encryptionsalt line in the config and that caused the issue. Even if I set PULUMI_CONFIG_PASSPHRASE to an empty string there is some form of encryption.

Ahhhh yes,

PULUMI_CONFIG_PASSPHRASE=""

means a password of empty string, not no password.

Learned the hard way. @echoing-dinner-19531 So I can never set no password?

correct, there's currently no way to disable secrets

thanks