OptionaldescriptionDoppler provider, authenticated in CI as the shared per-environment CI/CD
identity (doppler-<env>) by OIDC — see packages/temporal-cloud/pulumi.
That identity is workplace-admin-scoped, which is what lets this component
own a project outright: creating a project, creating its environments, and
writing its description are all admin-only operations. A collaborator
identity can write secrets and syncs and nothing else.
OptionalsecretsOverride the AWS Secrets Manager path the sync writes to. Defaults to
defaultSecretsManagerPath — cfx-deposit-api → /cfx/deposit-api/doppler
— which every service in this repo follows. Pass explicitly only for a
project whose slug and path disagree.
OptionalsecretsAWS region the synced secret lives in. Default us-west-2.
Project description, owned by this declaration: set it and the next apply writes it, omit it and the next apply CLEARS whatever the project has. There is no "leave it alone" — the field is managed or it is empty.