10/01/2021, 1:37 PM
Is there a way to tell if my automation program is correctly using Azure Key Vault as the secret provider? I've set this up as below and it doesn't error, but when I run the app and it creates the config file it does not contain the "secretsprovider" and "encryptedkey" values that I would expect to see, just the "encryptionsalt" value, which leads me to think it is still using the local provider.
var stackArgs = new LocalProgramArgs(stackName, $"{_workingDir}/{projectName}");
stackArgs.SecretsProvider = "<azurekeyvault://>";
var stack = await  LocalWorkspace.CreateOrSelectStackAsync(stackArgs);
So I checked the state file and confirmed that it is still using passphrase, so any ideas why it is not using my key vault?
and as usual it was down to user error. I had left an environment variable with PULUMI_CONFIG_PASSPHRASE set.