Use ESC for secrets

blampe · blampe · commit a7be9faab76e · 2025-09-17T10:39:49.000-07:00
diff --git a/.ci-mgmt.yaml b/.ci-mgmt.yaml
@@ -6,6 +6,8 @@ publishRegistry: false
 providerVersion: github.com/pulumi/pulumi-provider-boilerplate/provider.Version
 parallel: 3
 sdkModuleDir: sdk/go/pulumi-provider-boilerplate
-# For some reason this is required. If it's omitted all of the env keys get duplicated.
-envOverride:
+esc:
+  enabled: true
+  environment: imports/github-secrets
+env:
   FOO: BAR
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -25,6 +25,10 @@ env:
   DOTNETVERSION: "8.0.x"
   JAVAVERSION: "11"
   FOO: BAR
+  PULUMI_API: https://api.pulumi-staging.io
+  PULUMI_GO_DEP_ROOT: ${{ github.workspace }}/..
+  PULUMI_LOCAL_NUGET: ${{ github.workspace }}/nuget
+  TF_APPEND_USER_AGENT: pulumi
 
 jobs:
   prerequisites:
diff --git a/.github/workflows/command-dispatch.yml b/.github/workflows/command-dispatch.yml
@@ -2,6 +2,10 @@
 
 env:
   FOO: BAR
+  PULUMI_API: https://api.pulumi-staging.io
+  PULUMI_GO_DEP_ROOT: ${{ github.workspace }}/..
+  PULUMI_LOCAL_NUGET: ${{ github.workspace }}/nuget
+  TF_APPEND_USER_AGENT: pulumi
 
 jobs:
   command-dispatch-for-testing:
diff --git a/.github/workflows/prerelease.yml b/.github/workflows/prerelease.yml
@@ -16,6 +16,10 @@ env:
   DOTNETVERSION: "8.0.x"
   JAVAVERSION: "11"
   FOO: BAR
+  PULUMI_API: https://api.pulumi-staging.io
+  PULUMI_GO_DEP_ROOT: ${{ github.workspace }}/..
+  PULUMI_LOCAL_NUGET: ${{ github.workspace }}/nuget
+  TF_APPEND_USER_AGENT: pulumi
   IS_PRERELEASE: true
 
 jobs:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -17,6 +17,10 @@ env:
   DOTNETVERSION: "8.0.x"
   JAVAVERSION: "11"
   FOO: BAR
+  PULUMI_API: https://api.pulumi-staging.io
+  PULUMI_GO_DEP_ROOT: ${{ github.workspace }}/..
+  PULUMI_LOCAL_NUGET: ${{ github.workspace }}/nuget
+  TF_APPEND_USER_AGENT: pulumi
 
 jobs:
   prerequisites:
diff --git a/.github/workflows/run-acceptance-tests.yml b/.github/workflows/run-acceptance-tests.yml
@@ -20,6 +20,10 @@ env:
   DOTNETVERSION: "8.0.x"
   JAVAVERSION: "11"
   FOO: BAR
+  PULUMI_API: https://api.pulumi-staging.io
+  PULUMI_GO_DEP_ROOT: ${{ github.workspace }}/..
+  PULUMI_LOCAL_NUGET: ${{ github.workspace }}/nuget
+  TF_APPEND_USER_AGENT: pulumi
   PR_COMMIT_SHA: ${{ github.event.client_payload.pull_request.head.sha }}
 jobs:
   comment-notification:
diff --git a/.github/workflows/weekly-pulumi-update.yml b/.github/workflows/weekly-pulumi-update.yml
@@ -17,6 +17,10 @@ env:
   DOTNETVERSION: "8.0.x"
   JAVAVERSION: "11"
   FOO: BAR
+  PULUMI_API: https://api.pulumi-staging.io
+  PULUMI_GO_DEP_ROOT: ${{ github.workspace }}/..
+  PULUMI_LOCAL_NUGET: ${{ github.workspace }}/nuget
+  TF_APPEND_USER_AGENT: pulumi
 
 jobs:
   weekly-pulumi-update:
