before I dive into RBAC for K8s - are we still basically applying in-line YAML? Or is there a different abstraction in Pulumi?

@orange-tailor-85423 Do you mean to ask if the Pulumi Kubernetes API is the same as the core Kubernetes API (for which you’d write YAML)? Yes, pretty much.

that's what I feared 🙂

@orange-tailor-85423 You don’t have to, you can always write your own API, but we by default don’t obscure the core Kubernetes API