Passing credentials to a Pulumi dynamic provider

index.ts

import * as splunk from "./splunk"

async function getSecretValue(): Promise<string> {
    return "abcd"
}

getSecretValue().then(secret => {
    splunk.setAuth(secret);
    new splunk.SavedSearch("foo", {});
});

splunk.ts

import * as pulumi from "@pulumi/pulumi"

let auth: string | undefined;
export function setAuth(secret: string) {
    auth = secret;
}

export interface SavedSearchInput { }

const provider: pulumi.dynamic.ResourceProvider = {
    async create(): Promise<pulumi.dynamic.CreateResult> {
        console.log(auth);
        return { id: "id", outs: {} }
    },
    async delete() {
        console.log(auth);
    },
}

export class SavedSearch extends pulumi.dynamic.Resource {
    public readonly name: pulumi.Output<string>;

    constructor(name: string, props: SavedSearchInput, opts?: pulumi.CustomResourceOptions) {
        super(provider, name, props, opts);
    }
}