No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

you need to get admin provider kubeconfig

```containerservice.listManagedClusterAdminCredentials({
          resourceGroupName,
          resourceName
        });```

or you should enter `devicelogin` every single time

```public static getKubeconfig(
    clusterName: pulumi.Input&lt;string&gt;,
    resourceGroupName: pulumi.Input&lt;string&gt;
  ): pulumi.Output&lt;string&gt; {
    const creds = pulumi
      .all([clusterName, resourceGroupName])
      .apply(([resourceName, resourceGroupName]) =&gt; {
        return containerservice.listManagedClusterAdminCredentials({
          resourceGroupName,
          resourceName
        });
      });

    const encoded = creds.kubeconfigs[0].value;
    return encoded.apply(enc =&gt; Buffer.from(enc, 'base64').toString());
  }

  public static getProvider(
    name: pulumi.Input&lt;string&gt;,
    kubeconfig: pulumi.Input&lt;string&gt;,
    opts?: pulumi.ResourceOptions
  ): k8s.Provider {
    return new k8s.Provider(
      `${name}-k8s`,
      {
        kubeconfig,
        suppressDeprecationWarnings: true
      },
      opts
    );
  }```

then use output from getProvider inside each k8s resource