Trying to manage a split-horizon dns setup having pulumi manage the private dns side of things. If I try to add/remove a VPC via Pulumi, I get back:

gcp:dns:ManagedZone (brinqa-net-private):
    error: 1 error occurred:
    	* updating urn:pulumi:brinqa-prod::brinqa-net-private::gcp:dns/managedZone:ManagedZone::brinqa-net-private: 1 error occurred:
    	* Error updating ManagedZone "projects/brinqa-prod/managedZones/brinqa-net-private": googleapi: Error 400: The field 'entity.managedZone.id' cannot be modified., immutableField

Why would Pulumi be trying to update/change the id field of the zone? The diff shows it only trying to update

privateVisibilityConfig.networks