https://pulumi.com logo
#general
Title
# general
b

better-rainbow-14549

12/02/2019, 3:49 PM
i'm still getting this when running a stack the second time for an AKS cluster
Copy code
error: decrypting secret value: failed to decrypt: incorrect passphrase, please set PULUMI_CONFIG_PASSPHRASE to the correct passphrase
it's almost as if the azure AKS resource doesn't respect the setting when it initially writes its state to the state file, then the next time round it's trying to decrypt it. i don't know how to test this hypothesis though
Ok I finally pinned down what's changed.
pulumi stack select
now needs to have PULUMI_CONFIG_PASSPHRASE configured, it didn't before and our build pipeline didn't read one from the key store until just before pulumi update / preview so what I was seeing was the first pass with no resources worked fine, but once resources with secrets had been created it failed on all subsequent build runs on the stack select step