This message was deleted.

What version of the k8s provider are you using? The

ClusterRoleBinding

resource should have aliases defined so that it shouldn’t require a replacement to update that resource.

you can use the transforms option to helm charts: https://www.pulumi.com/docs/reference/pkg/nodejs/pulumi/kubernetes/helm/v2/#ChartOpts-transformations

@gorgeous-egg-16927 2.2.2

Just to close the loop on this, the following transformation solves this issue:

transformations: [
    (obj: any, opts: pulumi.CustomResourceOptions) => {
        if (obj.kind === "ClusterRoleBinding" && obj.metadata.name == "metrics-server:system:auth-delegator") {
            opts.aliases = [
                {name: "kube-system/metrics-server:system:auth-delegator"},
            ];
        }
    },
]