How do you guys manage environment variables within your stacks?
For example, I need to store a connection string to a database. Is this a good candidate for encrypted secrets?
https://www.pulumi.com/docs/intro/concepts/config/#secrets
c
chilly-hairdresser-56259
05/18/2020, 4:48 PM
We are still in the beginning phases of using Pulumi, but we have been storing non-secret level environment variables within the pulumi config, As far as secrets we have yet to get their, my assumption the direction we would take also would being using Pulumi Secret Management.
f
famous-jelly-72366
05/18/2020, 5:34 PM
we're using mozilla sops
l
limited-rainbow-51650
05/18/2020, 5:37 PM
@famous-jelly-72366 that might be a good candidate to integrate as a core Pulumi secrets provider.
I didn’t know this one, but for other readers, here is the link: https://github.com/mozilla/sops
@broad-dog-22463 ^
b
broad-dog-22463
05/18/2020, 5:39 PM
I'd suggest opening an issue and seeing what can be done - for information we use https://github.com/google/go-cloud for our secrets provider
so if that library supports it, then it's possible to do