Has anyone used the

@pulumi/vault

provider yet by any chance? I am not finding good examples/documentation around this on retrieving secrets from Hashicorp Vault.

As I understand it, the provider is for managing Vault, not using it. You use it via their API, integrations with other tools and services, etc.

no you can indeed I just figured it out (in Typescript):

var mySecret = pulumi.output(vault.generic.getSecret({
    path: 'whatever/my-secret'
}));

Ah. You can also use Vault as your Pulumi secrets provider, and then Pulumi will get the values for you behind the scenes.

Any idea how to set that up? That sounds cleaner than what I am doing.