https://pulumi.com logo
Join Slack
Powered by
Hi there. Currently new to Pulumi, and as a test I...
# golang
t
Hi there. Currently new to Pulumi, and as a test I am converting our current infra to use Pulumi with Claude and I was curious about the secret management with Pulumi cloud in general. We use doppler for all of our secrets, does Pulumi Cloud work with doppler at all?
e
ESC works with doppler, e.g. https://www.pulumi.com/docs/esc/integrations/dynamic-secrets/doppler-secrets/ But for the IaC side state is encrypted via keys from the SASS, via a passphrase, or via KMS. https://www.pulumi.com/docs/iac/concepts/secrets/
t
Thanks, so if i use pulumi cli is thee anything i need to do besides hooking up OIDC?
e
Using pulumi cloud? That'll pretty much be it. It'll encrypt all the secrets in the state using a key tied to the stack.
t
like pulumi up
e
yeh during a pulumi up. If there's any secrets to be stored in the state they'll be encrypted by pulumi.
t
ok ccccccoooooool
i have 2 more questionss
1 sec
1. I need guidance on how to redo our current deploying process via git workflows. Currently whenever you push to a staging branch, github runner pushes that build to 1 single server that had a docker compose setup and hosted everything from db, frontend, backend, etc a. how would my team push new code now? 2. i have a new devops git repo, and then we have our main app monorepo. Is this a way to do infra now? I've seen a few ways but i am lost now.
for the record, i imported our staging env so i can teardown it down so that we can now seperate everything on AWS.
my goal is a new env with scaling
e
I'm not really up to date on how details of how people are doing git workflows these days, but I'd think the process could be similar to before even if now everything is aws hosted rather than all just running in local docker. Can still have a staging branch, just have the server run 
pulumi up
rather than docker compose. Probably worth asking in #C84L4E3N1 for tips on this as it's not really Go specific.
t
well, our pulumi project is using go :P
and also im not stuck to just git workflows..i just want a way to deploy now
what do you do these days?
to deploy that is
e
No idea 😆 I don't touch live services, I build CLIs
t
haha ok
e
thus #C84L4E3N1, I don't think there will be much Go specific about the suggestions
t
also, plz consider adding Rust support my fave lang
e
There's an issue for it, and I think someone from the community is trying to build it
Open in Slack
PreviousNext
Powered by