For reference, running the same job locally exhibits none of the above behaviors. We are following the practices outlined in https://www.pulumi.com/docs/guides/continuous-delivery/gitlab-ci/ with the exception that we are running our scripts directly in .gitlab-ci.yaml rather than calling an sh file.