Use the new {en,de}crypt endpoints in the Pulumi.com API to secure secret config values. The ciphertext for a secret config value is bound to the stack to which it applies and cannot be shared with other stacks (e.g. by copy/pasting it around in Pulumi.yaml). All secrets will need to be encrypted once per target stack. |
||
---|---|---|
.. | ||
cloud | ||
local | ||
state | ||
backend.go | ||
stack.go |