Nevermind, this is a known bug: <https://github.com/pulumi/pulumi-kubernetes/issues/861>
m