No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

image.png

So i think this is because i'm using a dynamic secret name:

```envFrom.push({ secretRef: { name: secret.apply((s: k8s.core.v1.Secret) =&gt; s.metadata.name) } });```
When i hard code this to a static string, i get a proper diff on the container

<@URYL8E0AJ> I would be extremely surprised if this was a bug in the pulumi diff code. the diff logic itself is provided by a very well-tested diff library.

I bet it is the dependency. <@U84HBHXS8>?