Use case: add a few rules to already existing

system:heapster

ClusterRole. Workaround: remove the role before running

pulumi up

.

Currently no - this requires the ability to “adopt” the resources into Pulumi so you can drive it to a desired state with your Pulumi program. That’s something that is in active development now and will be available soon. Cc @microscopic-florist-22719 who can link you to issues to track with details.

Nice, thanks!

https://github.com/pulumi/pulumi/issues/1635 for reference