I've got a situation I've not seen before; I'm trying to install linkerd with pulumi with the helm chart -- I'm passing in the certificates as secrets from the pulumi config and interpolating them in the

values

section of the

k8s.helm.v2.chart

resource The issue is that every-time I run a pulumi up it looks like the secret values are changing in k8s and the checksums on the deployments are changing; any thoughts as to why?

Helm had a mechanism of generating certificates that means when you use helm template, the cert changes in each run You can either generate the certs yourself using our tls provider or use ignoreChanges on those fields

I generated the certs myself and passed them in with the values fields, maybe for some reason the helm template isn't using my certificates?