Add option to prompt and mask value when using `--secret` for `pulumi env`

pulumi / esc

Pulumi ESC (Environments, Secrets, and Configuration) for cloud applications and infrastructure.

https://www.pulumi.com/product/esc/

Apache License 2.0

216 stars 7 forks source link

Add option to prompt and mask value when using `--secret` for `pulumi env` #340

Open desteves opened 3 months ago

desteves commented 3 months ago

Hello!

Vote on this issue by adding a 👍 reaction
If you want to implement this feature, comment to let us know (we'll work with you on design, scheduling, etc.)

Issue details

pulumi env set test key --secret expects the secret value to be passed as an argument. This is not optimal, as it's saved in the terminal history as plain-text, etc. Instead, consider adding a prompt/mask experience similar to that of pulumi config set key --secret.

Affected area/feature

tgummerer commented 3 months ago

Thanks for the suggestion, this sounds like a good idea indeed! I'm going to transfer this over to the pulumi/esc repo, as the underlying command lives there.

cleverguy25 commented 2 months ago

Added to epic https://github.com/pulumi/pulumi-service/issues/18145