Hi! I am learning Pulumi while setting up my home lab. Right now I've ran into what appears to be a pretty water tight secrets management. I am using the TLS module to create a SSH key pair, and for now I need to export the private key to file in order to actually use it. If this were a production environment I would be using a proper secrets engine to create and store this, but in my home lab I really just want to either write the key to file or print it as an output. Is there any way I can get the decrypted value?

If you export the secret as a stack output, you can do something like this:

pulumi stack output mongo_password --show-secrets

https://www.pulumi.com/learn/building-with-pulumi/secrets/

Nice! Thanks, that was exactly what I was hoping.