Hi, i have created a new stack with:

pulumi stack init dev --secrets-provider="gcpkms://<redacted>"

and in my code I have:

var config = new Config();

and later in code in an env var definition:

Value = config.RequireSecret("dev-db-connection-string")

and when i try pulumi up i still get:

Missing Required configuration variable 'projectName:dev-db-connection-string'

`please set a value using the command `pulumi config set projectName:dev-db-connection-string <value>`` the secret in GCP is called obviously

dev-db-connection-string

what am I missing?

You are using Pulumi Config, which reads from the stack config file

great, thanks!

I don't think there is an example of this particular resource on any oss repo. But at the lower in the page there is the

getSecretVersion

function, which gets a secret that already exists.

finally got it to work with

Value = Output.Create(Pulumi.Gcp.SecretManager.GetSecretVersion.InvokeAsync(new Pulumi.Gcp.SecretManager.GetSecretVersionArgs
                                   {
                                       Secret = "projects/<some_id>/secrets/<secret_name>"
                                   })).Apply(x => x.SecretData)

Oh, right.... I should have asked which language you are using and pointed to the specific docs