Hey all, is there a way to write/store a secret pr...
# generalc
cool-dress-96114
11/22/2022, 5:56 PMHey all, is there a way to write/store a secret programatically during the execution of a program?
I want to generate a secret (in this case I want to store a base64 encoded private key), but I don’t see anything on the context/config interfaces. I’m guessing it has to do with execution lifecycle and how that would resolve the dependency order or operations, and was wondering if anyone has any suggestions.
f
fierce-ability-58936
11/22/2022, 8:32 PMWill that work https://www.pulumi.com/registry/packages/random/api-docs/randompassword/ ? Or you need something different? Do you want to generate the secret with Pulumi and store it?
c
cool-dress-96114
11/22/2022, 9:24 PMThat will not work. As I said, I’m generating a private key that I want to then save / use later.
cool-dress-96114
11/22/2022, 9:25 PMPreferably with the Pulumi config system since it has built in encryption, but if not I can look to use some other external store.
f
fierce-ability-58936
11/22/2022, 9:27 PMThis then? https://www.pulumi.com/docs/intro/concepts/secrets/#secrets
Copy code
pulumi config set --secret dbPassword S3cr37c
cool-dress-96114
11/22/2022, 10:32 PMProgramatically during the execution of a pulumi program.
cool-dress-96114
11/22/2022, 10:32 PM Copy code
By reading a secret from configuration using Config.get_secret or Config.require_secret.Config.set_secretf
fierce-ability-58936
11/23/2022, 12:39 AMI'm not sure if this concept is possible! You're running your Pulumi program based on the config so you can't really change it within the program.
Unless you do that somewhat externally https://pkg.go.dev/github.com/pulumi/pulumi/sdk/v3/go/auto#LocalWorkspace.SetConfig
c
cool-dress-96114
11/23/2022, 12:49 AMiiiinteresting, I didn’t find this while searching earlier. Thanks, I’ll look into this
2 Views