No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

For those of you using GCP, how are you handling config/secrets by environment? Are you using Secret Manager, Pulumi ESC, some other tool?

Hi. I work for Pulumi in Customer Success (for transparency).

FYI, if cost is a concern, unencrypted values do not incur charges in ESC. IDK about Google Secrets Manager pricing, but I do know that encrypted values in ESC (`fn::secret`) are cheaper than AWS Secrets Manager.

Thanks Josh. It looks like with ESC it syncs to Google secrets manager. So you actually have it in two places 

Yes, you can go either way, depending on where you want the source of truth. However, if you need secrets for workloads, we have ways to make ESC the source of truth: the ESC SDK, or the ESC External Secrets Operator for K8s.