you could write a dynamic provider that calls out to kubectl, then you have control over what gets done for create / update / delete operations too