Right, the issue here is if replica count changes and the image is generated as:

<http://amazonaws.com/my-repo-e2fe830:latest|amazonaws.com/my-repo-e2fe830:latest>

each time. The newer pods will run a new image if Docker failed to understand that there is no need for a new “image push” - that’s not on Pulumi though. That can happen for loads of reasons, e.g poorly made Dockerfile, etc.