No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

What version of the k8s provider are you using? The `ClusterRoleBinding` resource should have aliases defined so that it shouldn’t require a replacement to update that resource.

you can use the transforms option to helm charts: <https://www.pulumi.com/docs/reference/pkg/nodejs/pulumi/kubernetes/helm/v2/#ChartOpts-transformations>

I'm trying to understand why it thinks it needs replacing

<@U013P1DHT8T> - how do you mean.  Use it to alias certain items?

<@UDEJ1F5SQ> just tagging to tie in our private conversation

Just to close the loop on this, the following transformation solves this issue:
```transformations: [
    (obj: any, opts: pulumi.CustomResourceOptions) =&gt; {
        if (obj.kind === "ClusterRoleBinding" &amp;&amp; obj.metadata.name == "metrics-server:system:auth-delegator") {
            opts.aliases = [
                {name: "kube-system/metrics-server:system:auth-delegator"},
            ];
        }
    },
]```