Skip to content

Instantly share code, notes, and snippets.

@brandonkal
Created December 11, 2019 18:31
Show Gist options
  • Save brandonkal/083692eb09f6774736e999a1382f5ac9 to your computer and use it in GitHub Desktop.
Save brandonkal/083692eb09f6774736e999a1382f5ac9 to your computer and use it in GitHub Desktop.
Demonstration of pulumi state with leaking secrets if the input is initially without pulumi.secret()
{
"version": 3,
"checkpoint": {
"stack": "crd",
"latest": {
"manifest": {
"time": "2019-12-11T18:27:29.414490536Z",
"magic": "1be485475e3351f07e1a191bcbcfde3428a4d0e3294f7e251ecc064f0fd8a04b",
"version": "v1.6.1"
},
"secrets_providers": {
"type": "passphrase",
"state": {
"salt": "v1:xVrZlu5fNg0=:v1:eh6l321Zq59jENRt:tuHijTd6vebB5+JYBS7rcToOIcmPVw=="
}
},
"resources": [
{
"urn": "urn:pulumi:crd::crd::pulumi:pulumi:Stack::crd-crd",
"custom": false,
"type": "pulumi:pulumi:Stack"
},
{
"urn": "urn:pulumi:crd::crd::pulumi:providers:kubernetes::default_1_4_0",
"custom": true,
"id": "b91a4eec-9175-4420-9aba-32a065883fc3",
"type": "pulumi:providers:kubernetes",
"inputs": {
"version": "1.4.0"
},
"outputs": {
"version": "1.4.0"
}
},
{
"urn": "urn:pulumi:crd::crd::kubernetes:core/v1:Secret::test-secret",
"custom": true,
"id": "default/test-secret-858iwljt",
"type": "kubernetes:core/v1:Secret",
"inputs": {
"apiVersion": "v1",
"kind": "Secret",
"metadata": {
"annotations": {
"pulumi.com/autonamed": "true"
},
"labels": {
"app.kubernetes.io/managed-by": "pulumi"
},
"name": "test-secret-858iwljt"
},
"stringData": {
"password": {
"4dabf18193072939515e22adb298388d": "1b47061264138c4ac30d75fd1eb44270",
"ciphertext": "v1:WwFg1wvYItY/HUsR:XY2JZMiU9vApx7y3o3OGNnapQavYB/1fRQWEfZs="
}
}
},
"outputs": {
"__initialApiVersion": "v1",
"__inputs": {
"apiVersion": "v1",
"kind": "Secret",
"metadata": {
"annotations": {
"pulumi.com/autonamed": "true"
},
"labels": {
"app.kubernetes.io/managed-by": "pulumi"
},
"name": "test-secret-858iwljt"
},
"stringData": {
"password": "supersecret"
}
},
"apiVersion": "v1",
"data": {
"4dabf18193072939515e22adb298388d": "1b47061264138c4ac30d75fd1eb44270",
"ciphertext": "v1:QD2l0T87eNwy7wB4:S6XZ8YCMddPvAAU/fX97uGR1n1V4WwvHj+wvnLbZJ8C68JwRFKNnrt4zjbwheHY="
},
"kind": "Secret",
"metadata": {
"annotations": {
"kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"v1\",\"kind\":\"Secret\",\"metadata\":{\"annotations\":{\"pulumi.com/autonamed\":\"true\"},\"labels\":{\"app.kubernetes.io/managed-by\":\"pulumi\"},\"name\":\"test-secret-858iwljt\"},\"stringData\":{\"password\":\"supersecret\"}}\n",
"pulumi.com/autonamed": "true"
},
"creationTimestamp": "2019-12-11T18:26:41Z",
"labels": {
"app.kubernetes.io/managed-by": "pulumi"
},
"name": "test-secret-858iwljt",
"namespace": "default",
"resourceVersion": "518270",
"selfLink": "/api/v1/namespaces/default/secrets/test-secret-858iwljt",
"uid": "4b024edd-2ffd-40b9-a262-ebd484dbeaf8"
},
"type": "Opaque"
},
"parent": "urn:pulumi:crd::crd::pulumi:pulumi:Stack::crd-crd",
"provider": "urn:pulumi:crd::crd::pulumi:providers:kubernetes::default_1_4_0::b91a4eec-9175-4420-9aba-32a065883fc3",
"propertyDependencies": {
"apiVersion": null,
"kind": null,
"stringData": null
},
"additionalSecretOutputs": [
"data",
"stringData"
]
}
]
}
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment