https://pulumi.com logo
o

orange-ghost-99337

01/12/2020, 11:17 AM
Hello there, is there a way to store certs in pulumi project without exposing a file with plaintext?
s

stocky-spoon-28903

01/12/2020, 12:38 PM
Hi @orange-ghost-99337! You could use a config item marked as secret for this.
pulumi config set -secret mycert “$(cat cert.pem)”
And then you can use a
Config
object to retrieve it as a string.
The dash in secret should be two dashes but iOS won’t let me type that 🙄
c

clever-sunset-76585

01/12/2020, 4:28 PM
Let me correct that for you 🙂. Here’s what @stocky-spoon-28903 meant to type
Copy code
pulumi config set --secret mycert "$(cat cert.pem)"
👍 1
o

orange-ghost-99337

01/13/2020, 2:53 AM
@stocky-spoon-28903 @clever-sunset-76585 great, thanks much
3 Views