big-magazine-43532
06/22/2022, 10:24 PMpulumi config -s uat --config-file target-accounts/Pulumi.uat.yaml set project:dbPassword value --secret
. When I run pulumi config -s uat --config-file target-accounts/Pulumi.uat.yaml --show-secrets
the secret is successfully decrypted. However, when someone else (another human and our pipeline) runs the second command they get this error:
error: failed to decrypt encrypted configuration value 'project:dbPassword': [400] Message authentication failed
This can occur when a secret is copied from one stack to another. Encryption of secrets is done per-stack and
it is not possible to share an encrypted configuration value across stacks
Can anyone suggest what may be wrong?billowy-army-68599
06/22/2022, 10:26 PMbig-magazine-43532
06/22/2022, 10:28 PM<http://app.pulumi.com|app.pulumi.com>
-s uta
which makes the stack explicitly the same.billowy-army-68599
06/22/2022, 10:29 PMbig-magazine-43532
06/22/2022, 10:30 PMbillowy-army-68599
06/22/2022, 10:31 PMpulumi stack ls
from both placespulumi stack ls
NAME LAST UPDATE RESOURCE COUNT URL
demo/dev 4 weeks ago 0 <https://app.pulumi.com/demo/demo-aws-ts-webserver/dev>
demo/dev-pedwards n/a n/a <https://app.pulumi.com/demo/demo-aws-ts-webserver/dev-pedwards>
demo/dev-piers 1 month ago 0 <https://app.pulumi.com/demo/demo-aws-ts-webserver/dev-piers>
demo/dev-tushar 9 months ago 0 <https://app.pulumi.com/demo/demo-aws-ts-webserver/dev-tushar>
demo/integration 4 months ago 0 <https://app.pulumi.com/demo/demo-aws-ts-webserver/integration>
demo/lbriggs* 2 weeks ago 28 <https://app.pulumi.com/demo/demo-aws-ts-webserver/lbriggs>
demo/prod 1 year ago 0 <https://app.pulumi.com/demo/demo-aws-ts-webserver/prod>
demo/staging 3 days ago 0 <https://app.pulumi.com/demo/demo-aws-ts-webserver/staging>
Both stacks should have the same org name prefixing them, like thisbig-magazine-43532
06/22/2022, 10:33 PMuat
and an org/uat
. I am going to try encrypting with -s org/uat
and see if that helps.billowy-army-68599
06/22/2022, 10:35 PMbig-magazine-43532
06/22/2022, 10:37 PMbillowy-army-68599
06/22/2022, 10:37 PM