No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

I would use pulumi to put the password in AWS Parameter Store first and then I would have my app refer to that in the container definition

sorry I use ECS with Parameter Store but it looks like with EKS you can do something very similar with Secrets Manager: <https://aws.amazon.com/blogs/security/how-to-use-aws-secrets-configuration-provider-with-kubernetes-secrets-store-csi-driver/>

And pulumi can manage secrets manager: <https://www.pulumi.com/docs/reference/pkg/aws/secretsmanager/>

Can you mount a volume/secret during Druid deployment?

You could get EKS pulumi stack secret using the <https://www.pulumi.com/docs/reference/pkg/dotnet/Pulumi/Pulumi.StackReference.html|Stack Reference> from a secondary project or within the same stack/project.

Then create a k8s secret <https://www.pulumi.com/docs/reference/pkg/kubernetes/core/v1/secret/>