👋 i m wondering if there's a way to lock stack configs? i.e make them immutable somehow? right now they're evaluated at runtime I suppose if they could be part of the stack, then i could simply

ignoreChanges

or something like that - hope that makes sense

Are permissions for running an "up" changes not sufficient?

care to elaborate? not sure what permissions you re referring to

I'm not 100% sure but I think you can configure your permissions in an organization in pulumi cloud https://www.pulumi.com/docs/pulumi-cloud/access-management/teams/

oh right, no that wont work in my case, it's more about having settings exposed in my stack file (

pulumi config set

) that should never change.. for instance, that could be a boolean that derives a lot of input in my program so instead of ignoring the change on all the "children" of my stack config, i'd rather make it impossible to change it - i got an idea i need to explore, i ll share if that's not too ugly 😄

I believe stacks can reference other stacks so there is that

Sure can but that's a single stack here