Good morning! what is the best way to configure a container environment with pulumi? Obviously it will contain secrets so it cant be committed to git, is there a way to persist the config and then pass it to the container? Also, on a code level, how can I "mass" pass the variables without creating them one by one in the code?

Morning @sparse-butcher-73713 - you are actually able to commit secrets to git if you put them inside the config:

pulumi config set <key> <value> -- secret

whoah - so pulumi will encrypt them? with the pulumi key or the configured provider?

by default, it'll be a key configured by pulumi, but you can encrypt them with an aws kms key, google cloud key or azure kms key when you create the stack https://www.pulumi.com/blog/peace-of-mind-with-cloud-secret-providers/

Ok got it

you'd need something like this: https://www.pulumi.com/docs/intro/concepts/config/#structured-configuration

mmm yes, interesting - use a JsonObject