It depends on how your secrets are setup with Pulumi. If they’re recreated on modification, then yes - workloads will be rescheduled with the changes (because the secret name will change).
If not, then the workloads will need to be restarted manually as configmaps and secret changes do not cause a pod to be recreated