Where can I find documentation on the full list of go native provider tags? https://github.com/pulumi/pulumi-command/blob/master/provider/pkg/provider/remote/copy.go#L37 a sub-sub-field is a password, and so my entire object becomes a secret, so it forces a replace even if nothing changes. I imagine the secret gets re-encrypted every time, hence the diff triggering on

pulumi up

then I ran into: https://www.pulumi.com/docs/iac/concepts/options/additionalsecretoutputs/ (but I'd need the opposite of it, i.e.: disable a secret—is that possible? So that the diff engine sees the value has not changed) or maybe I'm using https://www.pulumi.com/docs/iac/concepts/options/ignorechanges/ wrong I have a "cluster" resource with "nodes" in it, and I do something like:

new Cluster(`cluster-${clusterConfig.name}`, clusterArgs, {
  provider: pvecluster,
  ignoreChanges: ["nodes[*].connection"]
})

but I'm not sure of the syntax; any examples? the native go provider structs look something like this:

type Cluster struct {
	pulumi.CustomResourceState

	Name   pulumi.StringOutput `pulumi:"name"`
	Nodes  []Node              `pulumi:"nodes"`
	Status pulumi.StringOutput `pulumi:"status"`
}

type Node struct {
	Host       string      `pulumi:"host"`
	Connection *Connection `pulumi:"connection"`
}

type Connection struct {
	Host           string  `pulumi:"host"`
	User           *string `pulumi:"user,optional"`
	PrivateKey     string  `pulumi:"privateKey" provider:"secret"`
	PrivateKeyPass string  `pulumi:"privateKeyPass,optional" provider:"secret"`
	Port           *int    `pulumi:"port,optional"`
}

I’m not sure there’s exhaustive documentation on the struct tags, unfortunately. But there’s docs on the `infer` package which is used to generate the provider from Go structs. The actual tag handling is in ParseTag which shows that the supported tags at the moment are •

pulumi:name

•

pulumi:optional

•

provider:secret

•

provider:replaceOnChanges

•

provider:type=…