No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

The TLS provider allows you to do this.
<https://www.pulumi.com/docs/intro/cloud-providers/tls/>

<@U01RARQ13EC> Thank you!
That solves my problem, but I am still curious what the Pulumi team thought how Secrets would work programmatically?

You can mark stack outputs as secret, so that you can access them later.

<https://www.pulumi.com/docs/intro/concepts/secrets/#programmatically-creating-secrets>

Good point. Note that the `tls.PrivateKey.privateKeyPem` is already marked as a secret and stored encrypted in the Pulumi state.

<@UDEJ1F5SQ> That’s not the same behaviour.
I want to fetch a secret under a key if it exists, or generate it.