No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

`Buffer.from(sk as string).toString("base64")` works, but I’m wondering if there are other idiomatic way to do this.

Not yet, AFAIK. Would you mind adding it to the <https://github.com/pulumi/pulumi-kubernetesx/blob/0cfb083680e47e5a35d756bbd5dafdc129d303c8/nodejs/kubernetesx/kx.ts#L455|pulumi-kubernetesx> repo? Just found out you can directly <https://www.pulumi.com/docs/reference/pkg/nodejs/pulumi/kubernetesx/#Secret|get there from the documentation> (just click on the header).

Oh, if so I’d like to use the current approach instead of introducing another package.

<https://www.pulumi.com/docs/reference/pkg/nodejs/pulumi/kubernetes/core/v1/#Secret-stringData>

```const testSecrets = new k8s.core.v1.Secret("test", {
    type: "Opaque",
    stringData: {
        "client-secret": "hello",
    },
});```
creates something like (simplified)
```apiVersion: v1
data:
  client-secret: aGVsbG8=
kind: Secret
metadata:
  name: test
type: Opaque```

This would make the string non-secret in pulumi?

Its no different from the way you're doing it now other than lets Pulumi do the base64 encoding, rather than doing it manually