-
Notifications
You must be signed in to change notification settings - Fork 1.7k
FAQ
Resources in the provider tend to match up with the resource name in the REST API for a product. The Provider Documentation lists all resources available in the most recent version of the provider.
Note that not all GCP functionality makes sense to be added to Terraform. For something to make sense, it must:
- have an associated REST API: To add it to the google or google-beta provider, that API must be publicly-accessible.
- be able to be represented declaratively and idempotently: Long-lived infrastructure is a good fit for Terraform. Short-lived jobs are not, as it's not clear what the intent is if applied multiple times.
Google provider releases are made every week on Monday close to EOD in Pacific time, unless there are extenuating circumstances.
You can monitor the release pages for the appropriate provider (google (GA) or google-beta) to determine if a weekly release cut is made, or a specific feature is included. We do not provide tracking bugs as part of our release process, nor tracking for individual features' release.
We cut our release branch on Tuesday nights, and release the following Monday. This means that any code change that is merged on a Monday or Tuesday will be released the following Monday, and any change that is merged W-F will be released the Monday after.
If you want to use beta provider, provider = google-beta
should be set explicitly on every resource, even if you’ve only defined a google-beta
provider block or you've already added the beta provider in the required_providers
block.
Please refer to Google Provider Versions for more detailed information.
id
is an identifier for the project with the format projects/{{project}}
, while project_id
is the real project ID with the format {{project}}
.
project_id
should be used as the project
argument in your configuration, as all resources should be able to accept the {{project}}
format for the project
field.
Currently the process to update the Go version requires multiple PRs, across more than one repository.
Below we describe the PRs to prepare, and then there's a section describing how these should be merged.
1) Update Dockerfiles in GoogleCloudPlatform/magic-modules
- Create a new branch in GoogleCloudPlatform/magic-modules
- Edit
.ci/containers/build-environment/Dockerfile
to reference the new Go version - Edit
.ci/containers/go-plus/Dockerfile
to reference the new Go version - If there are newer Dockerfiles not mentioned here inspect them too!
- Commit those changes, and open a PR containing only changes to the Dockerfiles.
Don't merge this PR yet, see the section on merge order below.
Example diffs expected in this step from this past example:
-FROM golang:1.20-bullseye AS builder
+FROM golang:1.21-bullseye AS builder
2) Updates to CI, GHAs and other code in GoogleCloudPlatform/magic-modules
This step could be separated out to be CI & GHA and 'everything else', but it's ok to do them all in one PR.
The third PR will update the code that uses the containers made from the Dockerfiles above:
- Create a new branch in GoogleCloudPlatform/magic-modules
- Update the go.mo, go.sum, and .go-version files in the TPG and TPGB downstream repos
- Update go.mod in your local clone of hashicorp/terraform-provider-google to contain the new Go version
- Run
go mod tidy
in the project root to update go.sum - Copy the contents of the updated
go.mod
file intommv1/third_party/terraform/go.mod.erb
in magic-modules. Ensure<% autogen_exception -%>
is still at the top of the file afterwards. - Copy the contents of the updated
go.sum
file intommv1/third_party/terraform/go.sum
in magic-modules. - Edit
mmv1/third_party/terraform/.go-version
to contain the new Go version. Note: this file impacts the release process and also controls the Go version used in TeamCity to test the provider.
- Update the GitHub Action workflows and other CI files in GoogleCloudPlatform/magic-modules used to test and build the providers
- This is a case where using a search feature in an IDE will help a lot.
- See this commit for a list of files, though this will fall out of date with time : https://github.com/GoogleCloudPlatform/magic-modules/pull/10169/commits/ce4773b8b3e946523c5cca1ce14112b1567dddcc
- Update other tools that run in CI and in PR checks that need to be kept in sync with the Go version used by the provider
- For every folder in the tools folder:
- Update go.mod to contain the new Go version
- If there is a go.sum file in that folder, also run
go mod tidy
- For every folder in the tools folder:
- After completing the above, perform some cautionary global searches in the codebase for the old Go version string.
- Commit all your changes from the above steps, and open a PR
Don't merge this PR yet, see the section on merge order below.
3) Updates to go.mod files not controlled by GoogleCloudPlatform/magic-modules : GoogleCloudPlatform/terraform-google-conversion
We need a PR to update go.mod and go.sum in terraform-google-conversion:
- Create a new branch in GoogleCloudPlatform/terraform-google-conversion or your fork
- Edit the go.mod file to include the new Go version
- Run
go mod tidy
to update the go.sum file, given the new Go version - Commit those changes using conventional commits, e.g.
chore: update to Go 1.21
.
Don't merge this PR yet, see the section on merge order below.
This PR is necessary because the go.mod and go.sum files of TGC aren't controlled by magic-modules. See this issue for details: https://github.com/hashicorp/terraform-provider-google/issues/17480
4) Updates to go.mod files not controlled by GoogleCloudPlatform/magic-modules : EAP and any other downstreams from Magic Modules
I don't know details about these repositories and any quirks in how their go.mod and Go versions are managed. These PRs are likely to be in the same class as the TGC PR above.
Merge order
Ask everyone to pause making merges to main in GoogleCloudPlatform/magic-modules. This is important because any PR unrelated to the Go version upgrade that is merged at the same time as the PRs above can experience a mismatch between the container images it's using and other code used by its Cloud Build runs.
An approach to handle this could be to pre-arrange a merge window of ~30 minutes that is shared with the wider team.
Once you're confident that no other merges will occur, follow these steps:
- Merge the first PR (1) to update Dockerfiles.
- Wait for the new images to be published:
- You can find information about this process by looking at Checks running on your merge commit from (1) on main. Cloud Build pipelines triggered by your merge will show images being built and published.
- Alternatively, wait for a new image version to be listed in Container Registry.
- Once new images are published and automatically tagged as
latest
you can continue. - Merge the PR that updates go.mod in TGC (2).
- Similarly, merge other PRs updating the EAP provider and other downstreams.
- Merge the PR updating everything besides Dockerfiles into main in magic-modules (3).
- Automation triggered by merging (3) will use code from downstreams when performing syncs. This is why we perform direct updates to downstreams before this merge.
Monitor the CI triggered by merging (3) and make sure it gets through all steps that sync with the downstreams.
Afterwards it would be good to monitor merging of the next PR to ensure everything behaves as expected.