Is there any way to stop pulumi from detecting that the resources have changed? In https://github.com/banzaicloud/banzai-charts/tree/master/vault-secrets-webhook, every time I run pulumi up it wants to make changes because it’s generating the cert and such new.

Does

ignoreChanges

do what you need? https://www.pulumi.com/docs/reference/programming-model/#ignorechanges

No idea since there are no examples on how this works 😞

It lets you set specific properties to ignore from the diff checking essentially.