No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

`Pulumi.Config` is for values you've set with `pulumi config` as part of your stack Pulumi.&lt;stack name&gt;.yaml file. It won't pick up env vars.

Just use the standard `System.Environment` class to get env vars set by your CI system.

Thanks <@U02J3T6A8LB>. So the `pulumi.&lt;stack-name&gt;.yml` file is used for non-secret environment specific things?

No, it's used for secrets - but afaik, doesn't fall back to getting things from the environment.

If using the automation api, you can also bypass pulumi config and use standard dotnet config sources, which could pick up config via environment variables too.

(That's what I do <https://github.com/gitfool/Pulumi.Dungeon/blob/0f972d2a26f4e043d033e0287ea301896ff7a52e/Cli/HostBuilderExtensions.cs#L25|here>)

&gt; for non-secret environment specific things? (edited)
As the others said you can put secrets in there (and if you tell pulumi it's a secret with --secret they will be encrypted). But it is it's own data source and has no relation to environment variables.

So how do you get secrets in there in CI/CD? Replace a placeholder in the workflow/pipeline or something else? :slightly_smiling_face:

Either get CI/CD to set it via `pulumi config` or don't read those secrets from the pulumi config but grab them out of the environment variable that CI put it in.

Right, that was what I was getting at :slightly_smiling_face: Thanks.

You can still call something like `pulumi.secret` (<https://www.pulumi.com/docs/reference/pkg/nodejs/pulumi/pulumi/#secret>) soon as you've read it from the environment so that pulumi then treats it as a secret

Thanks <@U02J3T6A8LB> I will give it a shot! :muscle:

I’ve used makefiles with shell scripts in the past to be able to pass these into your pulumi configuration.