const teleport = new k8s.helm.v3.Chart(
  teleportAppName,
  {
    chart: "teleport-kube-agent",
    version: "13.4.14",
    namespace: config.clusterSvcsNamespaceName,
    fetchOpts: {
      repo: "<https://charts.releases.teleport.dev>",
    },
    values: {
      roles: "kube,db",
      authToken: "xxxx",
      proxyAddr: "xxxxx.teleport.sh:443",
      kubeClusterName: config.stackName,
      labels: {
        "teleport.internal/resource-id": "xxxxx",
      },
      enterprise: true,
      updater: {
        enabled: true,
        releaseChannel: "stable/cloud",
      },
      highAvailability: {
        replicaCount: 2,
        podDisruptionBudget: {
          enabled: true,
          minAvailable: 1,
        },
      },
      awsDatabases: [{
        types: ["rds"],
        regions: ["eu-west-2"],
        tags: {
          "*": "*",
        },
      }],
      annotations: {
        serviceAccount: {
          "<http://eks.amazonaws.com/role-arn|eks.amazonaws.com/role-arn>": config.oidcProviderRoleArn,
        },
      },
    },
    transformations: [
      (obj: any) => {
        if (
          (obj.type === "Deployment" && obj.metadata.name === "teleport-agent-updater") ||
            (obj.kind === "StatefulSet" && obj.metadata.name === "teleport-agent")) {
          console.log(`Ignoring changes to ${obj.type} ${obj.metadata.name}`);
          return {
            props: obj.props,
            opts: pulumi.mergeOptions(obj.kind, { ignoreChanges: ['spec.template.spec.containers[*].image'] }),
          };
        }
        console.log(obj);
        return undefined;
      },
    ],
  },
  {
    provider: provider,
    ignoreChanges: ["spec.template.spec.containers[*].image"],
  }
);

opts