Hi Team, Quick question which I think will actually be a feature request ... I was trying to set up an ESC environment to give access to an Oracle Cloud Infrastructure Tenancy so I could manage it's RBAC independently to the stack access. (Was trying to avoid having to lock down every pulumi stack just so I could remove access to some but maintain open access for the rest... hence trying to use ESC rather then stack secrets). However, OCI access config requires an

oci_api_key.pem

certificate to be provided to pulumi config ... as per the pulumi docs here: https://www.pulumi.com/registry/packages/oci/installation-configuration/#pulumi-configuration However, I noticed that

pulumi env set

Cannot take an input of a secret value from STDIN like

pulumi config set

can as indicated by the docs. This means it is almost impossible (I've not managed it) to get the .pem file formatted the way the OCI provider is expecting it. ie you cannot run similar to

# Set the private key from standard input to retain the format
cat "~/.oci/oci_api_key.pem" | pulumi env set org/proj/env pulumiConfig.oci:privateKey --secret

Is this a functionality hole? Or is there another way around that I am missing?

Here's the issue: https://github.com/pulumi/esc/issues/224 Please upvote it! There's a comment there that outlines how you can currently work around this.

Thanks Komal! ... Can give that a go and have upvoted the issue!

I was able to get this working at some point, but probably not via pure CLI. I believe I just pasted this in the UI and messed with the indentation there. (I know the part you need help with is listed as a comment, but I'm pretty sure that's how I got it working.) https://github.com/pulumi/workshops/blob/067c844c69030e8dc44e983ae658d6b6e1698921/oci-k8s-py/README.md?plain=1#L10-L31

Ah that makes sense! I did try to do it using the table view in the UI but that really doesn't like new lines!

Yeah, I think if you drop into the text editor you'll be able to get it working. BTW, I found that ESC really made things nice for working with OCI!

Yeah I think your snippet there from your workshop is a dream! Needs adding to some docs for sure 🤔

Where would you expect to find it? I don't know that we have an obvious home for that information.

Yeah hence the thinking face 😅

Agreed - it's current home is not great at all for discoverability.

https://www.pulumi.com/registry/packages/oci/installation-configuration/#pulumi-configuration Could be a 3rd heading around adding to ESC

Yeah, that's not a bad spot. I'll create an issue right now. What's your GH username so I can tag you in the issue (if that's ok)?

JonParton - https://github.com/JonParton

Done: https://github.com/pulumi/registry/issues/6143