Pat Gavlin

> Is that something that's current possible with ESC? And if not, is that something that's potentially planned for the future? It's not currently possible, but it is something we're...

My first impression is that I like the use of `_` to indicate visibility: it's simple and though its meaning may not be immediately obvious, it's easy to learn and...

> I think you could potentially reserve the _ behavior for top level keys which should preclude that from ever happening That kind of specialization makes me slightly uncomfortable, but...

We will be taking the following approach for our first cut: We will provide a simple, Docker-style approach to versioning that lays the foundations we will need for a more...

This is done. Blog post is here: https://www.pulumi.com/blog/esc-versioning-launch/

Generally that error indicates that the provided service account token is invalid. We need to do a better job of surfacing that error. Have you checked to ensure that your...

> My point was that providers would always be explicit as they are immediately bound. Only other simple templates would support implicit binding. To me this seems like it has...

> We’re considering adding a notion of “context” that can be referenced - I wonder if there’s a way to leverage that for these scenarios - instead of changing the...

> A similar thing happened to me previously, not with expired creds but with changing my AWS configuration. I switched from having a hardcoded aws:profile in the config to using...

> In the expired STS token case, no Interesting. Typically what we've seen in scenarios like this is encrypted credentials ending up in the statefile that then get reused by...