Hi, I have two questions on best practices when using Pulumi:
1. What is the best way to create global resources that are shared between Stacks (dev, stage, live)? E.g. I want to setup a Container Registry with a cloud provider and use it in all stacks. Do I have to create a project for the shared components?
2. Since outputs are persisted in the Pulumi Cloud, is it possible to have the outputs encrypted when they contain generated secrets (when using
RandomString
from
@pulumi/random
)? Or do I have to forbear to do that and instead generate all secrets beforehand and add them to the config with
pulumi config --secret set ...
?