$Env:ARM_SUBSCRIPTION_ID = $subscriptionId
$Env:AR...
# azureb
better-rainbow-14549
03/31/2020, 1:18 PM$Env:ARM_SUBSCRIPTION_ID = $subscriptionId
$Env:ARM_TENANT_ID = $tenantId;
$Env:ARM_CLIENT_ID = $pulumiClientId;
$Env:ARM_CLIENT_SECRET = $pulumiPassword;
$Env:PULUMI_CONFIG_PASSPHRASE = $pulumiConfigPassword;
m
mammoth-train-70005
03/31/2020, 1:30 PMAlso the Config Passphrase seems only for Secrets I created, not for secrets which set on the azure resources. I found cleartext Azure SQL Admin Passoword, and cleartext connectionnStrings to Blob Storage.
b
better-rainbow-14549
03/31/2020, 1:31 PMyeah sorry ignore hte last line i meant to just spam the ARM_ ones which control how terraform interacts with the azure api
better-rainbow-14549
03/31/2020, 1:32 PMwe've had the same issue with secrets going into state and came to the same conclusion that it was better secured on our own terms
3 Views