ah right, so the issue is that

ignoreChanges

only works for properties defined in the code, not for what pulumi checks for state-sync