I’m using helm and I tried to pass the values i set there with

pulumi.ToSecret

and it is still saved to the state as plaintext @gorgeous-egg-16927

data

and

stringData

should be marked as secret by default, so I’d expect it to be encrypted in the pulumi state. Can you file an issue if that’s not what you’re seeing?

yeah they were presented as plain text in the state, I will file it right away