https://pulumi.com logo
b

brave-angle-33257

02/12/2019, 10:47 PM
does pulumi have the concept of project secrets rather than stack-only secrets?
creating some azure K8s clusters, and i want all of them to use the same SPN credentials, which are secrets
i'd like to not enter the same ones into 3-4 stacks if possible
Copy code
name: aks-backend
runtime: nodejs
description: A minimal TypeScript Pulumi program
template:
  config:
    aws:region:
      description: The AWS region to deploy into
      default: us-west-2
i see that my default Pulumi.yaml has that, but i cant seem to figure out how to view or add to the template.config
(that's copied from another aws stack), but that would be great if i could put azure secrets at the top level in Pulum.yaml and read them from all stacks
g

gentle-diamond-70147

02/13/2019, 12:41 AM
Project-wide secrets (and config) are not currently supported, no.
Could you open a feature request at https://github.com/pulumi/pulumi?
b

brave-angle-33257

02/13/2019, 1:53 AM
g

gentle-diamond-70147

02/13/2019, 2:03 AM
Thanks! 🙌