This message was deleted.

sparse-intern-71089

03/26/2021, 2:44 PM

This message was deleted.

better-shampoo-48884

03/26/2021, 3:31 PM

Could try automation? define one stack, then use that as an overlay/default for others.

better-shampoo-48884

03/26/2021, 3:33 PM

i.e. maintain 12 stacks but have them all be executed from one place with one config (possibly in paralell depending on how things work out)

enough-truck-34175

03/26/2021, 5:38 PM

I like the idea of the overlay, but I’m wondering how to handle encrypting secrets. If the default production stack has secrets, it wouldn’t work with the overlay because the secrets will have a different

encryptedkey

. Am I understanding this correctly?

better-shampoo-48884

03/26/2021, 5:48 PM

well, that's true.

better-shampoo-48884

03/26/2021, 5:50 PM

though, technically, with automation you could handle your secrets manually.

better-shampoo-48884

03/26/2021, 5:50 PM

i.e. directly interface with vault or keyvault or whatever it might be during your exectution

👍 1

enough-truck-34175

03/26/2021, 9:19 PM

I ended up using this package to merge yaml files. https://github.com/miracl/conflate

Copy code

filename := "Pulumi.esus-k8s-play-5-a.yaml"

c, err := conflate.FromFiles(filename, "Pulumi.play.yaml")

overlay, err := c.MarshalYAML()

ioutil.WriteFile(filename, overlay, 0644)

I’m using the same

encryptkey

for both stacks, so the overlay doesn’t affect the secrets.

enough-truck-34175

03/26/2021, 9:21 PM

And that happens before pulumi

run()

better-shampoo-48884

03/27/2021, 6:29 AM

that's awesome 😄

13 Views

Open in Slack

Previous Next

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.