Pulumi PCL config blocks mark values as secrets

Introduced 2026-03-04 · score 0.95

HOW TO USE IT

When a PCL config value should be read as a secret, set `secret = true` in its `config` block; Pulumi v3.225.0 includes program generation support for Go, Node, and Python.

WHY THIS HELPS

Generate Go, Node, or Python Pulumi code from PCL that reads a configuration value as a secret.

REQUIREMENTS AND LIMITATIONS

• Version: v3.225.0
• secret: Boolean indicating whether the config value should be read as a secret; set to `true`.
• Prerequisite: The conformance test supplies the config value `aNumber` as a secure value.
• The supplied note describes program generation support for Go, Node, and Python.

FIRST-PARTY EVIDENCE

• https://github.com/pulumi/pulumi/releases/tag/v3.225.0
• https://github.com/pulumi/pulumi/pull/22066
• https://raw.githubusercontent.com/pulumi/pulumi/v3.225.0/pkg/testing/pulumi-test-language/tests/testdata/l1-config-secret/main.pp
• https://raw.githubusercontent.com/pulumi/pulumi/v3.225.0/pkg/codegen/pcl/config.go
• https://raw.githubusercontent.com/pulumi/pulumi/v3.225.0/pkg/testing/pulumi-test-language/tests/l1_config_secret.go

Check the installed version and the source before using it. Entry JSON

Report a problem with this card