What's the right way to import a gke managed certificate? I have been trying

new k8s.apiextensions.CustomResource("service-dev-certificate", {
    apiVersion: "<http://networking.gke.io/v1beta1|networking.gke.io/v1beta1>",
    kind: "ManagedCertificate",
    metadata: {
        labels: {
            app: "networking",
            stage: "service-dev",
        },
        namespace: "namespace",
        name: "service-dev-certificate",
    },
    spec: {
        domains: ["<http://service-dev.example.com|service-dev.example.com>"]
    },
}, { provider: k8sProvider, import: "service-dev-certificate" })

but that doesn't seem to find it

yes, run it like

TF_LOG=DEBUG pulumi up -v=10

hm that doesn't seem to make the output different

sorry,forgot to add

--logtostderr

, so it should be:

TF_LOG=DEBUG pulumi up -v=10 --logtostderr

figured this out btw the correct import id is:

namespace/name

instead of just

name