does anyone here install cert-manager with a clusterissuer with pulumi? i always get a failure on the first run:

kubernetes:<http://certmanager.k8s.io:ClusterIssuer|certmanager.k8s.io:ClusterIssuer> (letsencrypt-prod):
    error: Plan apply failed: resource letsencrypt-prod was not successfully created by the Kubernetes API server : Internal error occurred: failed calling webhook "<http://clusterissuers.admission.certmanager.k8s.io|clusterissuers.admission.certmanager.k8s.io>": the server is currently unable to handle the request

subsequent `up`s work