Rotating Secret Providers
Blog post from Pulumi
The v2.8.0 release of Pulumi introduces a feature allowing users to change the secrets manager associated with their stacks, enabling them to rotate or migrate secrets providers as needed. This update includes a command to change the secrets provider for an existing stack, ensuring re-encryption of configuration values and migration of secrets within the state file. Additionally, users can now create new stacks based on existing configurations, with options to specify a new secrets provider or copy configurations between stacks programmatically. This functionality streamlines managing infrastructure as code, offering flexibility in handling secrets and stack configurations. Pulumi remains an open-source tool, encouraging community engagement through various platforms.