https://pulumi.com logo
b

best-lifeguard-91445

05/18/2020, 4:25 PM
How do you guys manage environment variables within your stacks? For example, I need to store a connection string to a database. Is this a good candidate for encrypted secrets? https://www.pulumi.com/docs/intro/concepts/config/#secrets
c

chilly-hairdresser-56259

05/18/2020, 4:48 PM
We are still in the beginning phases of using Pulumi, but we have been storing non-secret level environment variables within the pulumi config, As far as secrets we have yet to get their, my assumption the direction we would take also would being using Pulumi Secret Management.
f

famous-jelly-72366

05/18/2020, 5:34 PM
we're using mozilla sops
l

limited-rainbow-51650

05/18/2020, 5:37 PM
@famous-jelly-72366 that might be a good candidate to integrate as a core Pulumi secrets provider. I didn’t know this one, but for other readers, here is the link: https://github.com/mozilla/sops
@broad-dog-22463 ^
b

broad-dog-22463

05/18/2020, 5:39 PM
I'd suggest opening an issue and seeing what can be done - for information we use https://github.com/google/go-cloud for our secrets provider
so if that library supports it, then it's possible to do
7 Views