This message was deleted.

sparse-intern-71089

05/10/2022, 1:47 PM

This message was deleted.

millions-furniture-75402

05/10/2022, 1:48 PM

In the

opts

for the resource declaration:

Copy code

{ additionalSecretOutputs: ["secretString"] },

bland-lawyer-98859

05/10/2022, 2:54 PM

Oh thanks for your answer.

bland-lawyer-98859

05/10/2022, 2:58 PM

But it didn't work : Pulumi code :

Copy code

aws.secretsmanager.SecretVersion(
f"aws_secretversion_{secret_name}",
secret_id=secret.id,            secret_string=json.dumps(secret_value),             opts=ResourceOptions(additional_secret_outputs=["secretString"]))

(I've tried with "secret_string" instead of secretString, same situation) Pulumi preview :

Copy code

aws:secretsmanager/secretVersion:SecretVersion: (create)
        [urn=urn:pulumi:dev::snowflake::aws:secretsmanager/secretVersion:SecretVersion::aws_secretversion_snowflake/user/dev_usr_finops_api]
        [provider=urn:pulumi:dev::snowflake::pulumi:providers:aws::default_4_38_1::04da6b54-80e4-46f7-96ec-b56ff0331ba9]
        secretId    : output<string>
        secretString: (json) {
            password         : "3BY,&LwsG__\\=)0/MUch[Te=J)zh[5"
            username         : "TEST"
        }

Am i missing something ?

echoing-dinner-19531

05/10/2022, 4:14 PM

That looks like a bug, can you raise an issue at github.com/pulumi/pulumi so we can track that? Setting additional secret outputs should be sufficient to get that masked as [secret]

👍 1

bland-lawyer-98859

05/11/2022, 8:27 AM

Thanks @echoing-dinner-19531, I opened an issue : https://github.com/pulumi/pulumi/issues/9581

3 Views

Open in Slack

Previous Next

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.