just got pulumi to create a new AKS cluster... deploy a service... create an ip... get a lets-encrypt certificate and it all works. pulumi's awesome!