hi, is it possible to have set some sort of global config or secrets that can be reused across stacks and apps? In our case we have two common npm and gemfury tokens that we need in a lot places.

Currently no - short of compressing the whole group into a single collection that you manually decompres inside the Pulumi program. We've talked about the idea of "organization-level config" which would be available to all stacks in an organization. Does that sound like it's along the lines of what you are looking for?

yeah i think that’s along the lines of what i’m looking for.