This message was deleted.

I posted the question on StackOverflow as well, since I ran out of ideas. https://stackoverflow.com/questions/67227208/in-pulumi-when-defining-a-gcp-cloudbuild-trigger-what-do-i-use-as-kmskeyname-f Maybe the code sample there helps to give context, for anybody curious that worked with secrets in the past.