This message was deleted.

sparse-intern-71089

06/29/2020, 6:21 PM

This message was deleted.

hundreds-musician-51496

06/29/2020, 6:32 PM

Your best bet is to use the

import

argument, I think. That way the secret becomes "managed". Pulumi's model doesn't work really well with conditional infrastructure.

hundreds-musician-51496

06/29/2020, 6:33 PM

https://www.pulumi.com/docs/guides/adopting/import/

hundreds-musician-51496

06/29/2020, 6:34 PM

Hmm, looking at your other message I think I'm asnwering a different question. I was assumign the secret already existed and was (currently) managed outside pulumi.

quiet-hairdresser-18834

06/29/2020, 6:34 PM

Nope. I want to create it once, then use it going forward on subsequent runs

hundreds-musician-51496

06/29/2020, 6:35 PM

Use the

random.RandomPassword

resource

hundreds-musician-51496

06/29/2020, 6:35 PM

https://www.pulumi.com/docs/reference/pkg/random/

hundreds-musician-51496

06/29/2020, 6:36 PM

Unlcear to me how to avoid plaintext in the state file with that tho 😞

hundreds-musician-51496

06/29/2020, 6:38 PM

Found this in an azure exmaple https://github.com/pulumi/examples/blob/master/azure-ts-msi-keyvault-rbac/index.ts#L24

quiet-hairdresser-18834

06/29/2020, 6:44 PM

That worked! Thanks so much

Open in Slack

Previous Next

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.