OK. I've hit an interesting snag. When GKE releases a new nodeVersion/masterVersion - this causes the dynamic provider to be "replaced" - in-turn replacing all resources that use it 😮

Yeah, you’re seeing https://github.com/pulumi/pulumi/issues/3301 We’re working to improve the previews, but in general, Pulumi is conservative about what will change, so that’s the worst case scenario you’re seeing.