Joe Duffy

We should consider refreshing by default in 4.0: https://github.com/pulumi/pulumi/issues/2247

For consideration in 4.0: https://github.com/pulumi/pulumi/issues/7376#issuecomment-981980774

I believe we decided to hold off on non-compute cloud resources like this for a bit.

/cc @CyrusNajmabadi @lukehoban

It's just an entirely different cost model; cache != persistent store, and I wouldn't suggest that one could or should replace the other. I also think there's a product marketing...

Unless I am mistaken, we block this from happening now. So, rather than being a credential leak, the docs example simply does not work. (Which is not great, but better...

I've renamed the title; it sounded like we were leaking secrets, but in fact, this is more of a feature request to enable dynamic providers to capture them securely. It...

I agree, that’s more explicit, and even if we do something magic with closure capture, would be a good foundation to have. I don’t offhand know why that doesn’t work....

I didn’t entirely follow. What I had in mind is enabling: ``` const t = new Config().getSecret(“apiToken”); ``` from within your dynamic provider code. Today that doesn’t work but it...

Makes sense. That third one is important because it means my claim that the secret could retain its secret nature by doing it this way is incorrect. No matter what,...