Hello!

• Vote on this issue by adding a 👍 reaction
• If you want to implement this feature, comment to let us know (we'll work with you on design, scheduling, etc.)

Issue details

Related to #498

We use AWS ECS with the pulumi docker provider like so:

const creds = aws.ecr.getAuthorizationToken({
  registryId: accountId,
})

export const dockerProvider = new docker.Provider("docker-provider", {
  registryAuth: [
    {
      username: creds.apply((c) => c.userName),
      password: creds.apply((c) => c.password),
      address: creds.apply((c) => c.proxyEndpoint),
    },
  ],
});

Because the password changes every time, and the entire registryAuth object is a secret, pulumi up shows a change on every run. Not sure if there's a way to work around this, but it would be great to be able to ignore the password changes (which is what I believe is actually changing each time, where the address and username are static)