Pulumi Secrets Fail to Decrypt After a Stack Moves from the Local Backend to Pulumi Cloud
A stack prototyped with pulumi login --local encrypts secrets with a key held by the local file backend. When that stack is adopted under Pulumi Cloud, the existing ciphertext stays bound to the original key material, so secret reads and deployments fail until each value is re-encrypted under the new backend's key. Two documented constraints frame the decisi
pulumi