This is how I'm doing 4:

output := chart.GetResource("v1/Service", "onepassword-connect", Namespace).ApplyT(
			func(r interface{}) (pulumi.StringPtrOutput, error) {
				return r.(*corev1.Service).Spec.ClusterIP(), nil
			},
		).(pulumi.AnyOutput)
clusterIP := pulumi.StringPtrOutput{OutputState: output.OutputState}

Ah OK. Sorry I missed this was actually querying k8s api. I'm new to pulumi.