The issue here is (I think) that clusterSg & nodeSg are type of Output of Output. Is here anyway that we can flat the nested Output?

Check the workaround mentioned here, seems identical/similar: https://github.com/pulumi/pulumi/issues/6073