No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

does this only provide the key to encrypt the secrets and the secrets are/should be still kept by pulumi?

You are using Pulumi Config, which reads from the stack config file

If you want to get the secrets from GCP: <https://www.pulumi.com/docs/reference/pkg/nodejs/pulumi/gcp/secretmanager/#getSecretVersion|https://www.pulumi.com/docs/reference/pkg/nodejs/pulumi/gcp/secretmanager/#getSecretVersion>

<@USC68LB3J> is there perhaps somewhere an example how this is used in C#

What I mean - is there a way to read existing secrets in GCP from Pulumi? All I see is ways to create a new secret..

I don't think there is an example of this particular resource on any oss repo. But at the lower in the page there is the `getSecretVersion`  function, which gets a secret that already exists.

finally got it to work with
```Value = Output.Create(Pulumi.Gcp.SecretManager.GetSecretVersion.InvokeAsync(new Pulumi.Gcp.SecretManager.GetSecretVersionArgs
                                   {
                                       Secret = "projects/&lt;some_id&gt;/secrets/&lt;secret_name&gt;"
                                   })).Apply(x =&gt; x.SecretData)```


Oh, right.... I should have asked which language you are using and pointed to the specific docs