narrow-vegetable-60985
06/07/2022, 3:14 PMPulumi.<stack>.yaml
With regular config values (unencrypted) this works well.
Motivation: remove a requirement to set up Pulumi tool locally just for secrets management and rely on Git/CD workflow.
I’ve tried to encrypt data with Google KMS, but it gives me a binary output. So I can’t put this output to Pulumi.<stack>.yaml
billowy-army-68599
06/07/2022, 3:23 PMpulumi stack init --secrets-provider="<gcpkms://projects/><p>/locations/<l>/keyRings/<r>/cryptoKeys/<k>"
then set the config value using pulumi config set --secret
it'll set the value in your stack confignarrow-vegetable-60985
06/07/2022, 4:00 PM