quick-fall-21011
01/13/2022, 8:29 AMpulumi up --stack dev
I accidentally targeted another cluster since my local context was pointing not to dev
. Thinking ahead and hoping to avoid this, storing the kubeconfig
in pulumi config seems like a good move (as described https://www.pulumi.com/registry/packages/kubernetes/installation-configuration/), though I'm not comfortable setting that in plain text and committing to source control. Does the kubernetes provider allow reading the kubernetes:kubeconfig
as a secret?prehistoric-activity-61023
01/13/2022, 9:16 AMopts
kubernetes:kubeconfig
as a secret? I haven’t tested that but it might actually work.pulumi set
command with --secret
flag and see if it works out of the box with the default k8s provider 🙂echoing-dinner-19531
01/13/2022, 10:29 AMquick-fall-21011
01/13/2022, 11:12 AMin circle-ci I use contexts to set theso it selects the correct cluster depending on the branch I commit toKUBECONFIG