It looks I'm not getting the way Pulumi Command executes. I have the following snippet

cleanup-addons:
    type: command:local:Command
    properties:
      interpreter: ["/bin/bash", "-c"]
      environment:
        KUBECONFIG_DATA: "${cluster.kubeconfigJson}"
        AWS_PROFILE: my-profile
      update: "true" # Do nothing on updates.
      create: |
        kubectl --kubeconfig <(echo "$KUBECONFIG_DATA") delete -n kube-system deployments/coredns daemonset/aws-node daemonset/kube-proxy
    options:
      dependsOn:
        - ${cluster}

I would expect the

kubectl delete

command to only run one time but it runs on every

pulumi up

which fails because the add-ons are gone. I do not want the command to run after that initial step as I redeploy the add-ons by hand. What am I missing?