When working with secrets, is it by design that if you use

export const myOutput = myConfig.get("secretProperty")

that the output isn't a secret? The behavior is strange since when you run the program it seems looks like it is a secret, but when you do

pulumi stack output

it isn't. If I use

getSecret

it works as intended. Why do we need both

get

and

getSecret

? I would be more than happy if pulumi just dealt with it so I don't have to think about if it is a secret or not when working with it .

no, this sounds like a bug, could you file an issue with a repro

@billowy-army-68599 https://github.com/pulumi/pulumi/issues/8503

I don't think this is a bug and that for it to be treated as a secret you need to use

getSecret

. It's documented over in the secrets docs. So I think this would be considered an enhancement if you would like the

pulumi just dealt with it so I don't have to think about if it is a secret or not

behavior.