Channels
announcements
automation-api
aws
azure
blog-posts
built-with-pulumi
cloudengineering
cloudengineering-support
content-share
contribex
contribute
docs
dotnet
finops
general
getting-started
gitlab
golang
google-cloud
hackathon-03-19-2020
hacktoberfest
install
java
jobs
kubernetes
learn-pulumi-events
linen
localstack
multi-language-hackathon
office-hours
oracle-cloud-infrastructure
package-authoring
pulumi-ai
pulumi-cdk
pulumi-cloud
pulumi-crosscode
pulumi-deployments
pulumi-kubernetes-operator
pulumiverse
python
registry
status
testingtesting123
testingtesting321
typescript
welcome
workshops
yaml
Title
c
colossal-australia-65039
05/20/2021, 11:58 PMI thought Pulumi was supposed to properly recognize cloud provider secrets and encrypt them in preview/state. Or am I wrong about that? This TS code will show the value in plaintext in a preview:
import { getSecretVersion, getSecret } from "@pulumi/aws/secretsmanager"
getSecret({ name: "somesecret" }).then((s) => getSecretVersion({ secretId: s.arn }).then((sv) => sv.secretString))l
little-cartoon-10569
05/21/2021, 12:04 AMI see Promises there, not Outputs...?
Pulumi hides exported secret Outputs. You can break this in your code, by doing things like writing values to the console from within an apply().
👍 1
Note the note here: https://www.pulumi.com/docs/intro/concepts/secrets/#how-secrets-relate-to-outputs
👍 1
c
colossal-australia-65039
05/21/2021, 12:08 AMPulumi hides exported secret Outputs.aha thanks edit: got it working, thanks again!
👍 1