This message was deleted.

sparse-intern-71089

02/14/2022, 10:22 PM

This message was deleted.

little-cartoon-10569

02/14/2022, 10:27 PM

It's the result property, which is a secret output. You can pass it to another Pulumi resource that requires an input. If you want to see it on the command like, you export it in the normal way, then call

pulumi stack --show-secrets

gentle-piano-19726

02/14/2022, 10:27 PM

ah that flag is what I didn't know thanks

👍 1

gentle-piano-19726

02/14/2022, 10:27 PM

Can that be achieved in the ui as well?

little-cartoon-10569

02/14/2022, 10:27 PM

The Pulumi app / service? Don't know, never tried 🤔

gentle-piano-19726

02/14/2022, 10:28 PM

Yeah the hosted pulumi app/service, in there now and it doesn't seem so

gentle-piano-19726

02/14/2022, 10:28 PM

cli only access is fine for me

👍 1

bored-table-20691

02/14/2022, 10:28 PM

@gentle-piano-19726 it can’t - the Service doesn’t have access to your encryption keys that the secret is encrypted with.

gentle-piano-19726

02/14/2022, 10:29 PM

@bored-table-20691 hm, I never setup encryption keys––where would those be coming from?

little-cartoon-10569

02/14/2022, 10:29 PM

Pulumi.yaml 🙂

gentle-piano-19726

02/14/2022, 10:30 PM

hm, not sure I follow

little-cartoon-10569

02/14/2022, 10:30 PM

You've got the default one based on your login then.

gentle-piano-19726

02/14/2022, 10:30 PM

my login to... pulumi? Or is this AWS based?

little-cartoon-10569

02/14/2022, 10:30 PM

You can set up an explicit secrets provider at the project level, but the default is to use the Pulumi backend, the Service.

bored-table-20691

02/14/2022, 10:31 PM

gentle-piano-19726

02/14/2022, 10:31 PM

I'm logged in

Copy code

❯ p login
Logged in to <http://pulumi.com|pulumi.com> as jasonkuhrt (<https://app.pulumi.com/jasonkuhrt>)

gentle-piano-19726

02/14/2022, 10:31 PM

How is this supposed to work in a team setting?

little-cartoon-10569

02/14/2022, 10:31 PM

Generally you should use an organization. The secret manager can be at that level.

little-cartoon-10569

02/14/2022, 10:32 PM

Stacks are per account, so using a personal account for deploying makes things very hard to managed in a team context.

bored-table-20691

02/14/2022, 10:32 PM

https://www.pulumi.com/docs/intro/concepts/secrets/

👍 1

gentle-piano-19726

02/14/2022, 10:32 PM

Ok, I am using an org (trial) already so that's one step

little-cartoon-10569

02/14/2022, 10:32 PM

That's your secrets provider then.

gentle-piano-19726

02/14/2022, 10:32 PM

gentle-piano-19726

02/14/2022, 10:33 PM

so everyone that has access to the org can work with the secrets IIUC?

bored-table-20691

02/14/2022, 10:46 PM

Yes

3 Views

Open in Slack

Previous Next

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.