Setting up secrets providers for Pulumi

This example lives in the pulumi/examples repository. Check out just this directory to use it:

$ git clone --filter=blob:none --sparse https://github.com/pulumi/examples pulumi-examples
$ git -C pulumi-examples sparse-checkout set secrets-provider
$ cd pulumi-examples/secrets-provider

Pulumi supports secrets providers which allow you to encrypt the secrets you store in the Pulumi statefile.

This example shows how to set up the secrets provider for each cloud and walks through initializing your stack using the different secrets providers.

This directory contains one deployable Pulumi project per secrets provider:

• aws/ — encrypt secrets with AWS KMS.
• azure/ — encrypt secrets with Azure Key Vault.
• gcloud/ — encrypt secrets with Google Cloud KMS.
• vault/ — encrypt secrets with HashiCorp Vault.