hi, is it possible to have set some sort of global config or secrets that can be reused across stacks and apps? In our case we have two common npm and gemfury tokens that we need in a lot places.
09/14/2018, 10:50 PM
Currently no - short of compressing the whole group into a single collection that you manually decompres inside the Pulumi program.
We've talked about the idea of "organization-level config" which would be available to all stacks in an organization. Does that sound like it's along the lines of what you are looking for?
09/14/2018, 10:52 PM
yeah i think that’s along the lines of what i’m looking for.
those secrets are actually also stored encrypted on GCS and I can decrypt them via gcloud KMS keys. Wdyt if I simply use the google cloud kms node.js library to retrieve them at runtime when pulumi runs?