better-rainbow-14549
12/02/2019, 3:49 PMerror: decrypting secret value: failed to decrypt: incorrect passphrase, please set PULUMI_CONFIG_PASSPHRASE to the correct passphrase
it's almost as if the azure AKS resource doesn't respect the setting when it initially writes its state to the state file, then the next time round it's trying to decrypt it. i don't know how to test this hypothesis thoughpulumi stack select
now needs to have PULUMI_CONFIG_PASSPHRASE configured, it didn't before and our build pipeline didn't read one from the key store until just before pulumi update / preview
so what I was seeing was the first pass with no resources worked fine, but once resources with secrets had been created it failed on all subsequent build runs on the stack select step