This message was deleted.

So internally stack outputs are all basically just JSON blobs (the "4dabf18193072939515e22adb298388d" is pulumi encoding that it's a special JSON blob) so we lose all the typing information between stacks, which is why

requireOutput

just returns an

Output<any>

. But I think you should be able to type this as an

Output<string[]>

The issue here isn’t that the type information is lost - it’s that an output exported as

export data = ["some-string"]

Is being imported as

const data = stack.requireOutput("data");

console.log(data) // {string: "...", value: ["some-string"]}

Whereas the expected value of data should be

["some-string"]

That's because it's secret

So. Does that mean that for secrets we cannot convey the type information from stack A to stack B when using stack references?

Does that mean that for secrets we cannot convey the type information from stack A to stack B when using stack references?

As above we never get type information across stacks, its all just untyped JSON.

What would be the right way to pass this kind of secret from one stack to another to avoid this:

Output<string[]> should work here, if it's not that's a n SDK bug that we should go and look into.

That’s because it’s secret

I don’t understand why this makes any difference. I have never seen this behaviour when exporting any other kind of secret data, even other datatypes that are

string[]

- this is as if the JSON representation is getting transformed. Seems like a bug to me..

Yep. That's what I meant - sorry, English is not my native language.

but that the data itself is being mutated when compared to how it is exported from the source stack

That is by design when the value is secret. As I said under the hood this just a JSON blob so there needs to be some way to indicate what bits are secret, that's done by wrapping the value in an object with the special key "4dabf18193072939515e22adb298388d" and value "1b47061264138c4ac30d75fd1eb44270". What's not by design is that your seeing that mutation, the SDK layer should have picked that up and translated it into a Output<string[]>.

Thanks 🙏 Let us know if you need anything to help reproduce

hmm yeh I'm not having any luck reproducing this, if you can throw something minimal in a gist or something and send us an issue (github.com/pulumi/pulumi/issues) I'll have another look