Is there any way to avoid the

k8s.helm.v3.Chart

resource recreating/updating resources every time, even though nothing has changed? Eg. the

ALB-intgress-controller

deployed using the

Chart

resource recreates the tls-secret every time and updates the

ALB-webhooks

when nothing has changed in the actual pulumi declaration of the resource

Use cert manager with it. Also, use Helm release instead of Helm chart.