This message was deleted.

You need to

up

first, to apply the change, then remove it from your code to delete it.

up

is what is failing

Is it failing because it's trying to delete it?

I think

up

failed when I first set

protect=True

and now if I run

up

again it tries to delete it and fails. If I set

protect=False

and run

up

it also fails.

The error message may be helpful.

pulumi-python:dynamic:Resource (WriteSSHAuthorizedKeys):
    error: Preview failed: refusing to delete protected resource 'urn:pulumi:prod::tlayen-infrastructure::pulumi-python:dynamic:Resource::WriteSSHAuthorizedKeys'

  pulumi:pulumi:Stack (tlayen-infrastructure-prod):
    error: preview failed

perhaps that

preview failed

(whatever that means) is relevant.

Your protect=true worked. Your code is trying to delete the resource. You can't do that until after you have changed the protect opt to false. You can't do that at the same time as destroying it.

Damn ok. That is not very obvious. I had a bug in the previous version of my provider which means that this second time I run it it thinks it is different and wants to replace it. I'm going to have to put the bug back in just so I can remove the protected flag. There really ought to be a way to override that.

You can delete it manually and delete if from your state file...

Can I do that when using the Pulumi service backend?

Yes, you can use

pulumi state unprotect

and

pulumi state delete

to make Pulumi forget about the resource, and then you can delete it at your leisure. Then you can

up

again to create the new version.