How can I tell which of changes causes resource replace?

+-gcp:container/cluster:Cluster: (replace) 🔒
        [id=gke01-london]
        [urn=urn:pulumi:gke01-london::gcp-gke::gcp:container/cluster:Cluster::gke01-london]
        [provider=urn:pulumi:gke01-london::gcp-gke::pulumi:providers:gcp::default_1_0_0_beta_1::1a4df25a-af6f-4fda-80df-2c8bd047655a]
      + authenticatorGroupsConfig: {
          + securityGroup: "gke-security-groups@$corp"
        }
      + maintenancePolicy        : {
          + dailyMaintenanceWindow: {
              + startTime : "01:00"
            }
        }
      + podSecurityPolicyConfig  : {
          + enabled   : true
        }