Does Pulumi have a Vault Provider?
# general
c
Does Pulumi have a Vault Provider?
s
Not yet - though if you want to read secrets you can of course use a node library for it without specifically needing a provider!
c
Yeah that's what I figured the answer would be 😄
s
What operations do you need?
c
Well yeah just reading secrets
Actually maybe also writing them
Like if I provision a CloudSQL instance I'd want to store the credentials in Vault
s
So you could do that in the
apply
of the output
And because a valid part of the sum type of
Input<T>
is
Promise<T>
the secrets you read will even work with other resources without
await
etc!
c
Does
.apply
only run once? If I do
pulumi up
multiple times where there are no changes but I run it anyway, would the
apply
not run and therefore keep writing to Vault?
s
No, the apply will run every time
Vault has compare and swap operations though
c
Ah