Support for "syncing" or "pushing" to external systems about esc

[EronWright]

Another idea: sync with GitHub Environments, e.g. by pushing secrets. A benefit is to link ESC environments with protection rules, as described here. For example, allowing the release/* branches to access a particular ESC environment.

[dirien]

@MMartyn the PR (external-secrets/external-secrets#2997) is merged!

I do not know their release cycle but expect it soon to be GA! 😍

[cleverguy25]

Added to epic https://github.com/pulumi/pulumi-service/issues/18145

[EronWright]

A good use case may be to sync into Kubernetes Secrets and ConfigMaps. Maybe the Pulumi Kubernetes Operator could implement this by providing an API. e.g.

kind: SecretSource
metadata:
  namespace: shopping
spec:
  environment: shopping-service-staging
  secretName: shopping-service

[gunta]

Looking forward to this.

At least we can expect to sync ESC secrets to GitHub Actions in a secure way.

[MMartyn]

Was going to suggest adding this to ESO but I see Engin beat me to it already :)