diff --git a/services/pulumi/niployments/Pulumi.development.yaml b/services/pulumi/niployments/Pulumi.development.yaml
new file mode 100644
index 0000000..75be346
--- /dev/null
+++ b/services/pulumi/niployments/Pulumi.development.yaml
@@ -0,0 +1 @@
+encryptionsalt: v1:0NsGBm3D7Kk=:v1:2wg0URErHSlppn9v:SuxWBUSeQWT//98givIZvx+7ye19CQ==
diff --git a/services/pulumi/niployments/Pulumi.production.yaml b/services/pulumi/niployments/Pulumi.production.yaml
new file mode 100644
index 0000000..cb99cc0
--- /dev/null
+++ b/services/pulumi/niployments/Pulumi.production.yaml
@@ -0,0 +1 @@
+encryptionsalt: v1:EJ9KJm5XZxI=:v1:mM6v3sfEo91wnwwa:2D6KD4QQdVUx8fzdWXHNtRhxGmmbyw==
diff --git a/services/pulumi/niployments/resources/keel/values.yaml b/services/pulumi/niployments/assets/keel/values.yaml
similarity index 99%
rename from services/pulumi/niployments/resources/keel/values.yaml
rename to services/pulumi/niployments/assets/keel/values.yaml
index 44ac298..4e3997e 100644
--- a/services/pulumi/niployments/resources/keel/values.yaml
+++ b/services/pulumi/niployments/assets/keel/values.yaml
@@ -8,8 +8,7 @@ image:
   pullPolicy: Always
 
 # Image pull secrets
-imagePullSecrets:
-  - harbor-pull-secret
+imagePullSecrets: []
 
 # Enable insecure registries
 insecureRegistry: false
diff --git a/services/pulumi/niployments/resources/nfs-provisioner/values.yaml b/services/pulumi/niployments/assets/nfs-provisioner/values.yaml
similarity index 97%
rename from services/pulumi/niployments/resources/nfs-provisioner/values.yaml
rename to services/pulumi/niployments/assets/nfs-provisioner/values.yaml
index 28138a7..52c2c14 100644
--- a/services/pulumi/niployments/resources/nfs-provisioner/values.yaml
+++ b/services/pulumi/niployments/assets/nfs-provisioner/values.yaml
@@ -55,7 +55,8 @@ storageClass:
   volumeBindingMode: Immediate
 
   # Storage class annotations
-  annotations: {}
+  annotations:
+    niployments/make-pulumi-happy: "idk-why"
 
 leaderElection:
   # When set to false leader election will be disabled
diff --git a/services/pulumi/niployments/resources/keel/charts.ts b/services/pulumi/niployments/resources/keel/charts.ts
index b40bc3f..8a144b5 100644
--- a/services/pulumi/niployments/resources/keel/charts.ts
+++ b/services/pulumi/niployments/resources/keel/charts.ts
@@ -1,3 +1,4 @@
+import * as pulumi from "@pulumi/pulumi";
 import * as k8s from "@pulumi/kubernetes";
 
 const namespace = new k8s.core.v1.Namespace("keel-namespace", {
@@ -13,5 +14,5 @@ export const chart = new k8s.helm.v4.Chart("keel-chart", {
   repositoryOpts: {
     repo: "https://charts.keel.sh",
   },
-  valueYamlFiles: ["./values.yaml"],
+  valueYamlFiles: [new pulumi.asset.FileAsset("./assets/keel/values.yaml")],
 });
diff --git a/services/pulumi/niployments/resources/nfs-provisioner/charts.ts b/services/pulumi/niployments/resources/nfs-provisioner/charts.ts
index 5b5e731..da269f2 100644
--- a/services/pulumi/niployments/resources/nfs-provisioner/charts.ts
+++ b/services/pulumi/niployments/resources/nfs-provisioner/charts.ts
@@ -1,3 +1,4 @@
+import * as pulumi from "@pulumi/pulumi";
 import * as k8s from "@pulumi/kubernetes";
 
 const namespace = new k8s.core.v1.Namespace("nfs-provisioner-namespace", {
@@ -13,5 +14,7 @@ export const chart = new k8s.helm.v4.Chart("nfs-provisioner-chart", {
   repositoryOpts: {
     repo: "https://kubernetes-sigs.github.io/nfs-subdir-external-provisioner",
   },
-  valueYamlFiles: ["./values.yaml"],
+  valueYamlFiles: [
+    new pulumi.asset.FileAsset("./assets/nfs-provisioner/values.yaml"),
+  ],
 });