In fact, the problem seems to be that

bcrypt

creates a different hash on every

pulumi up

which means my Kubernetes secret is deleted and replace on every run