Hi all, I have the

haproxy/kubernetes-ingress

installed from the helm chart with

export const loadBalancer = new k8s.helm.v3.Chart(
    "kubernetes-ingress",
    {
        chart: "kubernetes-ingress",
        version: "1.28.1",
        fetchOpts: {
            repo: "<https://haproxytech.github.io/helm-charts>",
        },
        values: {
            controller: {
                service: {
                    type: "LoadBalancer",
                },
            },
        },
        namespace: ingressNs.metadata.name,
    },
    { provider: cluster.k8sProvider },
);

And now on every

pulumi up

it wants to change the metadata from

[secret]

to a new object, like this:

~ [13]: {
                    apiVersion: "v1"
                    data      : [secret]
                  ~ id        : "haproxy/kubernetes-ingress-default-cert" => output<string>
                    kind      : "Secret"
                  - metadata  : [secret]
                  + metadata  : {
                      + annotations: {
                          + <http://helm.sh/hook|helm.sh/hook>              : "pre-install"
                          + <http://helm.sh/hook-delete-policy|helm.sh/hook-delete-policy>: "before-hook-creation"
                        }
                      + labels     : {
                          + <http://app.kubernetes.io/instance|app.kubernetes.io/instance>  : "kubernetes-ingress"
                          + <http://app.kubernetes.io/managed-by|app.kubernetes.io/managed-by>: "pulumi"
                          + <http://app.kubernetes.io/name|app.kubernetes.io/name>      : "kubernetes-ingress"
                          + <http://app.kubernetes.io/version|app.kubernetes.io/version>   : "1.9.3"
                          + <http://helm.sh/chart|helm.sh/chart>               : "kubernetes-ingress-1.28.1"
                        }
                      + name       : "kubernetes-ingress-default-cert"
                      + namespace  : "haproxy"
                    }
                    type      : "<http://kubernetes.io/tls|kubernetes.io/tls>"
                    urn       : "urn:pulumi:dev::danube::kubernetes:<http://helm.sh/v3:Chart$kubernetes:core/v1:Secret::haproxy/kubernetes-ingress-default-cert|helm.sh/v3:Chart$kubernetes:core/v1:Secret::haproxy/kubernetes-ingress-default-cert>"
                }
        ]

How can I tell that

id

and

metadata

did not have changed? Thanks in advance