nothing in the config should be dynamic

Can you share the diff it is proposing? Note that you can use generally use

ignoreChanges

to work around this if needed.

another way is to add whatever cloud provider adds to a resource as a resource arg in your pulumi

yeah, just realized it's adding a

project_id

label that my updates kept trying to remove. thought I'd checked that when I first looked into this a month or so back.