Am I translating the helm

--set-file key=myfile

install requirement correctly into pulumi speak?

const linkerdName = 'mesh'
const linkerdNamespaceName = 'linkerd'
const linkerdNamespace = new k8s.core.v1.Namespace(linkerdNamespaceName, {
  metadata: { name: linkerdNamespaceName, labels: { name: linkerdName } }
})

let aYearFromNow = new Date()
aYearFromNow.setFullYear(aYearFromNow.getFullYear() + 1)

const identityTrustAnchorsPEM: string = fs.readFileSync('ca/ca.crt', { encoding: 'utf8', flag: 'r' }).toString().trim()
const crtPEM: string = fs.readFileSync('ca/issuer.crt', { encoding: 'utf8', flag: 'r' }).toString().trim()
const keyPEM: string = fs.readFileSync('ca/issuer.key', { encoding: 'utf8', flag: 'r' }).toString().trim()

const linkerd = new k8s.helm.v3.Chart(linkerdName, {
  repo: "linkerd",
  chart: "linkerd2",
  namespace: linkerdNamespace.metadata.name, values: {
    global: {
      identityTrustAnchorsPEM
    },
    identity: {
      issuer: {
        tls: { crtPEM, keyPEM },
        crtExpiry: aYearFromNow.toDateString()
      }
    }
  }
})

On https://linkerd.io/2/tasks/install-helm/ they're asking for:

helm install linkerd2 \
  --set-file global.identityTrustAnchorsPEM=ca.crt \
  --set-file identity.issuer.tls.crtPEM=issuer.crt \
  --set-file identity.issuer.tls.keyPEM=issuer.key \
  --set identity.issuer.crtExpiry=$exp \
  linkerd/linkerd2

I'm getting this error from within the helm chart on

pulumi up

error: Running program '/home/paul/code/deposition/infra/haze' failed with an unhandled exception:
    Error: invocation of kubernetes:helm:template returned an error: failed to generate YAML for specified Helm chart: failed to create chart from template: execution error at (linkerd2/templates/sp-validator.yaml:129:12): Please provide the identity trust anchors