Terraform-provider-google: Need `abandon_on_delete` behavior for SQL User due to bug in GCP postgres delete behavior.

Created on 29 Oct 2020  ·  27Comments  ·  Source: hashicorp/terraform-provider-google

Hello I am having an issue. I'm setting up a gcp cloud sql instance. I reset the postgres user password, but when destroying the infra, it tries to delete the postgres user.
Error: Error, failed to deleteuser postgres in instance clair-indexer-main-8be49086:

resource "google_sql_database_instance" "indexer" { 
    name = "clair-indexer-${local.clair_suffix}"
    database_version = "POSTGRES_11"
    deletion_protection = false

    depends_on = [google_service_networking_connection.private_vpc_connection]


    settings {
        tier = "db-g1-small"
        disk_autoresize = true
        ip_configuration {
            private_network = data.google_compute_network.default.id
        }
    }
}

resource "google_sql_user" "indexer" { 
    name = "postgres"
    instance = google_sql_database_instance.indexer.name
    password = "clair"
}

(password is not sensitive, this is throw away)
can i tell terraform to not even try to delete that sql user?
it'll be deleted on its own when the database instance is removed.

enhancement sizS
Source
picture ldelossa

Most helpful comment

All right - we will go ahead and plan to implement that solution. We'll triage this at our meeting next Monday, I expect that it will be prioritized, and we will have this to you as soon as we can.

picture ndmckinley on 3 Nov 2020
🎉3

All 27 comments

@ldelossa what versions of your Terraform and the provider? Can you post the full debug log?

edwardmedia picture edwardmedia on 29 Oct 2020

Terraform v0.13.4

Your version of Terraform is out of date! The latest version
is 0.13.5. You can update by downloading from https://www.terraform.io/downloads.html

Using google cloud provider.

log attached.

ldelossa picture ldelossa on 30 Oct 2020

log.txt

ldelossa picture ldelossa on 30 Oct 2020

@ldelossa it appears your issue has been addressed in https://github.com/hashicorp/terraform-provider-google/issues/7209
Close it then. Free free to reopen it if you want to continue the investigation

edwardmedia picture edwardmedia on 30 Oct 2020

@edward2a I reviewed #7209 but wouldn't the solution be to just have terraform not attempt the deletion of the user at all? If the instance is deleted in the UI it will automatically delete any users in that database instance as well.

ldelossa picture ldelossa on 30 Oct 2020

Or rather, can we attempt that solution to see if it works some how?

ldelossa picture ldelossa on 30 Oct 2020

@edwardmedia can we please re-open this. @ZPascal

I simply went into my TF state file and removed the "google_sql_user" block from the terraform state. The api calls then deleted the database instance and deleted the user with it. Notice there is no need to explicitly delete the user resource. 

❮ GOOGLE_APPLICATION_CREDENTIALS=/home/ldelossa/git/redhat/quay-terraform/terraform-service.json terraform destroy
var.clair_tag
  The git commit hash, branch, or tag used to build and deploy Clair v4.

  Enter a value: x

var.id
  A unique identifier differentiating deployments of the same tag.

  Enter a value: y

data.google_dns_managed_zone.quay-devel: Refreshing state...
data.google_compute_network.default: Refreshing state... [id=projects/quay-devel/global/networks/default]
google_compute_global_address.private_ip_address: Refreshing state... [id=projects/quay-devel/global/addresses/clair-indexer-main-8be49086-db]
google_service_networking_connection.private_vpc_connection: Refreshing state... [id=projects%2Fquay-devel%2Fglobal%2Fnetworks%2Fdefault:servicenetworking.googleapis.com]
google_sql_database_instance.indexer: Refreshing state... [id=clair-indexer-main-8be49086]

An execution plan has been generated and is shown below.
Resource actions are indicated with the following symbols:
  - destroy

Terraform will perform the following actions:

  # google_compute_global_address.private_ip_address will be destroyed
  - resource "google_compute_global_address" "private_ip_address" {
      - address            = "10.92.0.0" -> null
      - address_type       = "INTERNAL" -> null
      - creation_timestamp = "2020-10-29T12:28:57.369-07:00" -> null

      - name               = "clair-indexer-main-8be49086-db" -> null

      - prefix_length      = 16 -> null
      - project            = "quay-devel" -> null
      - purpose            = "VPC_PEERING" -> null
      - self_link          = "https://www.googleapis.com/compute/v1/projects/quay-devel/global/addresses/clair-indexer-main-8be49086-db" -> null
    }

  # google_service_networking_connection.private_vpc_connection will be destroyed
  - resource "google_service_networking_connection" "private_vpc_connection" {
      - id                      = "projects%2Fquay-devel%2Fglobal%2Fnetworks%2Fdefault:servicenetworking.googleapis.com" -> null
      - network                 = "projects/quay-devel/global/networks/default" -> null
      - peering                 = "servicenetworking-googleapis-com" -> null
      - reserved_peering_ranges = [
          - "clair-indexer-main-8be49086-db",
        ] -> null
      - service                 = "servicenetworking.googleapis.com" -> null
    }

  # google_sql_database_instance.indexer will be destroyed
  - resource "google_sql_database_instance" "indexer" {
      - connection_name               = "quay-devel:us-central1:clair-indexer-main-8be49086" -> null
      - database_version              = "POSTGRES_11" -> null
      - deletion_protection           = false -> null

      - id                            = "clair-indexer-main-8be49086" -> null
      - ip_address                    = [
          - {

              - time_to_retire = ""
              - type           = "PRIMARY"
            },
          - {

              - time_to_retire = ""
              - type           = "PRIVATE"
            },
        ] -> null
      - name                          = "clair-indexer-main-8be49086" -> null

      - project                       = "quay-devel" -> null

      - region                        = "us-central1" -> null

      - server_ca_cert                = [
          - {
              - cert             = <<~EOT
                    -----BEGIN CERTIFICATE-----
                    -----END CERTIFICATE-----
                EOT
              - create_time      = "2020-10-29T19:31:58.928Z"
              - expiration_time  = "2030-10-27T19:32:58.928Z"
              - sha1_fingerprint = "71525db75265241c47742cdb632c84e685bac79d"
            },
        ] -> null
      - service_account_email_address = "[email protected]" -> null

      - settings {
          - activation_policy           = "ALWAYS" -> null
          - authorized_gae_applications = [] -> null
          - crash_safe_replication      = false -> null
          - disk_autoresize             = true -> null
          - disk_size                   = 10 -> null
          - disk_type                   = "PD_SSD" -> null
          - pricing_plan                = "PER_USE" -> null
          - replication_type            = "SYNCHRONOUS" -> null
          - tier                        = "db-g1-small" -> null
          - user_labels                 = {} -> null
          - version                     = 5 -> null

          - backup_configuration {
              - binary_log_enabled             = false -> null
              - enabled                        = false -> null
              - point_in_time_recovery_enabled = false -> null
              - start_time                     = "07:00" -> null
            }

          - ip_configuration {
              - ipv4_enabled    = true -> null
              - private_network = "projects/quay-devel/global/networks/default" -> null
              - require_ssl     = false -> null
            }

          - location_preference {
              - zone = "us-central1-f" -> null
            }
        }
    }

Plan: 0 to add, 0 to change, 3 to destroy.

Do you really want to destroy all resources?
  Terraform will destroy all your managed infrastructure, as shown above.
  There is no undo. Only 'yes' will be accepted to confirm.

  Enter a value: yes

google_sql_database_instance.indexer: Destroying... [id=clair-indexer-main-8be49086]
google_sql_database_instance.indexer: Still destroying... [id=clair-indexer-main-8be49086, 10s elapsed]
google_sql_database_instance.indexer: Still destroying... [id=clair-indexer-main-8be49086, 20s elapsed]
google_sql_database_instance.indexer: Still destroying... [id=clair-indexer-main-8be49086, 30s elapsed]
google_sql_database_instance.indexer: Still destroying... [id=clair-indexer-main-8be49086, 40s elapsed]
google_sql_database_instance.indexer: Still destroying... [id=clair-indexer-main-8be49086, 50s elapsed]
google_sql_database_instance.indexer: Still destroying... [id=clair-indexer-main-8be49086, 1m0s elapsed]
google_sql_database_instance.indexer: Still destroying... [id=clair-indexer-main-8be49086, 1m10s elapsed]
google_sql_database_instance.indexer: Still destroying... [id=clair-indexer-main-8be49086, 1m20s elapsed]
google_sql_database_instance.indexer: Destruction complete after 1m22s
google_service_networking_connection.private_vpc_connection: Destroying... [id=projects%2Fquay-devel%2Fglobal%2Fnetworks%2Fdefault:servicenetworking.googleapis.com]
google_service_networking_connection.private_vpc_connection: Still destroying... [id=projects%2Fquay-devel%2Fglobal%2Fnetwor...fault:servicenetworking.googleapis.com, 10s elapsed]
google_service_networking_connection.private_vpc_connection: Still destroying... [id=projects%2Fquay-devel%2Fglobal%2Fnetwor...fault:servicenetworking.googleapis.com, 20s elapsed]
google_service_networking_connection.private_vpc_connection: Still destroying... [id=projects%2Fquay-devel%2Fglobal%2Fnetwor...fault:servicenetworking.googleapis.com, 30s elapsed]
google_service_networking_connection.private_vpc_connection: Destruction complete after 32s
google_compute_global_address.private_ip_address: Destroying... [id=projects/quay-devel/global/addresses/clair-indexer-main-8be49086-db]
google_compute_global_address.private_ip_address: Still destroying... [id=projects/quay-devel/global/addresses/clair-indexer-main-8be49086-db, 10s elapsed]
google_compute_global_address.private_ip_address: Destruction complete after 12s

Destroy complete! Resources: 3 destroyed.

can we please update terraform to not delete the google_sql_user resource? It will always cause this error. Terraform should only delete the database instance. The user is implicitly bound to that database instance and will be gracefully deleted as well.

ldelossa picture ldelossa on 30 Oct 2020

Can you please @ZPascal read who you send the message to before you submit?

On Fri, 30 Oct 2020, 13:42 Louis DeLosSantos, notifications@github.com
wrote:

@edward2a https://github.com/edward2a can we please re-open this.
@ZPascal https://github.com/ZPascal

I simply went into my TF state file and removed the "google_sql_user"
block from the terraform state. The only api call then deleted the database
instance and deleted the user with it.

❮ GOOGLE_APPLICATION_CREDENTIALS=/home/ldelossa/git/redhat/quay-terraform/terraform-service.json terraform destroy

var.clair_tag

The git commit hash, branch, or tag used to build and deploy Clair v4.

Enter a value: x

var.id

A unique identifier differentiating deployments of the same tag.

Enter a value: y

data.google_dns_managed_zone.quay-devel: Refreshing state...

data.google_compute_network.default: Refreshing state... [id=projects/quay-devel/global/networks/default]

google_compute_global_address.private_ip_address: Refreshing state... [id=projects/quay-devel/global/addresses/clair-indexer-main-8be49086-db]

google_service_networking_connection.private_vpc_connection: Refreshing state... [id=projects%2Fquay-devel%2Fglobal%2Fnetworks%2Fdefault:servicenetworking.googleapis.com]

google_sql_database_instance.indexer: Refreshing state... [id=clair-indexer-main-8be49086]

An execution plan has been generated and is shown below.

Resource actions are indicated with the following symbols:

  • destroy

Terraform will perform the following actions:

# google_compute_global_address.private_ip_address will be destroyed

  • resource "google_compute_global_address" "private_ip_address" {

    • address = "10.92.0.0" -> null

    • address_type = "INTERNAL" -> null

    • creation_timestamp = "2020-10-29T12:28:57.369-07:00" -> null

    • id = "projects/quay-devel/global/addresses/clair-indexer-main-8be49086-db" -> null

    • name = "clair-indexer-main-8be49086-db" -> null

    • network = "https://www.googleapis.com/compute/v1/projects/quay-devel/global/networks/default" -> null

    • prefix_length = 16 -> null

    • project = "quay-devel" -> null

    • purpose = "VPC_PEERING" -> null

    • self_link = "https://www.googleapis.com/compute/v1/projects/quay-devel/global/addresses/clair-indexer-main-8be49086-db" -> null

    }

    google_service_networking_connection.private_vpc_connection will be destroyed


  • resource "google_service_networking_connection" "private_vpc_connection" {

    • id = "projects%2Fquay-devel%2Fglobal%2Fnetworks%2Fdefault:servicenetworking.googleapis.com" -> null

    • network = "projects/quay-devel/global/networks/default" -> null

    • peering = "servicenetworking-googleapis-com" -> null

    • reserved_peering_ranges = [

      • "clair-indexer-main-8be49086-db",

      ] -> null


    • service = "servicenetworking.googleapis.com" -> null



    }

    google_sql_database_instance.indexer will be destroyed


  • resource "google_sql_database_instance" "indexer" {

    • connection_name = "quay-devel:us-central1:clair-indexer-main-8be49086" -> null

    • database_version = "POSTGRES_11" -> null

    • deletion_protection = false -> null

    • first_ip_address = "34.123.124.98" -> null

    • id = "clair-indexer-main-8be49086" -> null

    • ip_address = [

      • {

        • ip_address = "34.123.124.98"

        • time_to_retire = ""

        • type = "PRIMARY"

        },

      • {

        • ip_address = "10.92.0.3"

        • time_to_retire = ""

        • type = "PRIVATE"

        },



      ] -> null

    • name = "clair-indexer-main-8be49086" -> null

    • private_ip_address = "10.92.0.3" -> null

    • project = "quay-devel" -> null

    • public_ip_address = "34.123.124.98" -> null

    • region = "us-central1" -> null

    • self_link = "https://sqladmin.googleapis.com/sql/v1beta4/projects/quay-devel/instances/clair-indexer-main-8be49086" -> null

    • server_ca_cert = [

      • {

        • cert = <<~EOT

          -----BEGIN CERTIFICATE-----

MIIDfzCCAmegAwIBAgIBADANBgkqhkiG9w0BAQsFADB3MS0wKwYDVQQuEyQ4MmU2

MjY5MC0xMmRiLTRiNzAtOTdkYy0xMTUzNGQwMzYyOTkxIzAhBgNVBAMTGkdvb2ds

ZSBDbG91ZCBTUUwgU2VydmVyIENBMRQwEgYDVQQKEwtHb29nbGUsIEluYzELMAkG

A1UEBhMCVVMwHhcNMjAxMDI5MTkzMTU4WhcNMzAxMDI3MTkzMjU4WjB3MS0wKwYD

VQQuEyQ4MmU2MjY5MC0xMmRiLTRiNzAtOTdkYy0xMTUzNGQwMzYyOTkxIzAhBgNV

BAMTGkdvb2dsZSBDbG91ZCBTUUwgU2VydmVyIENBMRQwEgYDVQQKEwtHb29nbGUs

IEluYzELMAkGA1UEBhMCVVMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB

AQDSHE1V5J10KmdKXQrsf5FtGnNXb7ajQwOzZ2AIw+i3FLMezSoUkWLY3Lq83c4I

/i2eMCmXU99ofY4chnryzTqeADnKzwHou5CPlHVzJl5ql4ao5Y0QTtmjqBVLaYsE

l5CImS6X1GCrpWP6tYfkDO5cX9oVrpxFFY4+NdE3VWD12zoUlfDiZIs0GhxS5SHP

cnI4jw9rTdR7WFINXFywz4JmmlfkJ2feGSawoFbJbtnXfiuNNG9Q9zLJdQ+oFArP

oSVgqwyAaH5H5qrbJnn6w6I7IMAo6ngdVhZgGzGb3IFWSOlDoJUugdPsZevX0t2B

578uAswG0fK/Wba2Yg9Pd5nZAgMBAAGjFjAUMBIGA1UdEwEB/wQIMAYBAf8CAQAw

DQYJKoZIhvcNAQELBQADggEBALU+dwzr31L5F430emBSBWh+mZI7YI3YYBGRdUqr

NI+9XX/5LI65rzJyAxyOoCt5htVeBNmZUnZ7bX/t///O2j7/Be69ZamG2MZ587zt

7r6cPCL8c3FnStSsBGC0KvU5YZx+HMp05GL2jOXlQUaz2nYR5wD9zNgpad/3DiQf

VsrqTdrql5lhO3gdORK8t6yKp/sds/ryP6C3rdJrTwk/F13y6iC11ZRABNbmvegi

h/PR/pZgvcRj+1EdBB7ptETTqGxv7KBiKNh8yxZBvDytU5bO/W5UbKSuq5eEIixf

camA4DH+ioFvTW7uS8Dh5IpshSkPwn2DB8kyJuIpdUCMFfE=

-----END CERTIFICATE-----

          EOT

        • common_name = "C=US,O=Google\, Inc,CN=Google Cloud SQL Server CA,dnQualifier=82e62690-12db-4b70-97dc-11534d036299"

        • create_time = "2020-10-29T19:31:58.928Z"

        • expiration_time = "2030-10-27T19:32:58.928Z"

        • sha1_fingerprint = "71525db75265241c47742cdb632c84e685bac79d"

        },



      ] -> null

    • service_account_email_address = "[email protected]" -> null

    • settings {

      • activation_policy = "ALWAYS" -> null

      • authorized_gae_applications = [] -> null

      • crash_safe_replication = false -> null

      • disk_autoresize = true -> null

      • disk_size = 10 -> null

      • disk_type = "PD_SSD" -> null

      • pricing_plan = "PER_USE" -> null

      • replication_type = "SYNCHRONOUS" -> null

      • tier = "db-g1-small" -> null

      • user_labels = {} -> null

      • version = 5 -> null

      • backup_configuration {

        • binary_log_enabled = false -> null

        • enabled = false -> null

        • point_in_time_recovery_enabled = false -> null

        • start_time = "07:00" -> null

        }

      • ip_configuration {

        • ipv4_enabled = true -> null

        • private_network = "projects/quay-devel/global/networks/default" -> null

        • require_ssl = false -> null

        }

      • location_preference {

        • zone = "us-central1-f" -> null

        }







      }





    }


Plan: 0 to add, 0 to change, 3 to destroy.

Do you really want to destroy all resources?

Terraform will destroy all your managed infrastructure, as shown above.

There is no undo. Only 'yes' will be accepted to confirm.

Enter a value: yes

google_sql_database_instance.indexer: Destroying... [id=clair-indexer-main-8be49086]

google_sql_database_instance.indexer: Still destroying... [id=clair-indexer-main-8be49086, 10s elapsed]

google_sql_database_instance.indexer: Still destroying... [id=clair-indexer-main-8be49086, 20s elapsed]

google_sql_database_instance.indexer: Still destroying... [id=clair-indexer-main-8be49086, 30s elapsed]

google_sql_database_instance.indexer: Still destroying... [id=clair-indexer-main-8be49086, 40s elapsed]

google_sql_database_instance.indexer: Still destroying... [id=clair-indexer-main-8be49086, 50s elapsed]

google_sql_database_instance.indexer: Still destroying... [id=clair-indexer-main-8be49086, 1m0s elapsed]

google_sql_database_instance.indexer: Still destroying... [id=clair-indexer-main-8be49086, 1m10s elapsed]

google_sql_database_instance.indexer: Still destroying... [id=clair-indexer-main-8be49086, 1m20s elapsed]

google_sql_database_instance.indexer: Destruction complete after 1m22s

google_service_networking_connection.private_vpc_connection: Destroying... [id=projects%2Fquay-devel%2Fglobal%2Fnetworks%2Fdefault:servicenetworking.googleapis.com]

google_service_networking_connection.private_vpc_connection: Still destroying... [id=projects%2Fquay-devel%2Fglobal%2Fnetwor...fault:servicenetworking.googleapis.com, 10s elapsed]

google_service_networking_connection.private_vpc_connection: Still destroying... [id=projects%2Fquay-devel%2Fglobal%2Fnetwor...fault:servicenetworking.googleapis.com, 20s elapsed]

google_service_networking_connection.private_vpc_connection: Still destroying... [id=projects%2Fquay-devel%2Fglobal%2Fnetwor...fault:servicenetworking.googleapis.com, 30s elapsed]

google_service_networking_connection.private_vpc_connection: Destruction complete after 32s

google_compute_global_address.private_ip_address: Destroying... [id=projects/quay-devel/global/addresses/clair-indexer-main-8be49086-db]

google_compute_global_address.private_ip_address: Still destroying... [id=projects/quay-devel/global/addresses/clair-indexer-main-8be49086-db, 10s elapsed]

google_compute_global_address.private_ip_address: Destruction complete after 12s

Destroy complete! Resources: 3 destroyed.

can we please update terraform to not delete the google_sql_user
resource? It will always cause this error. Terraform should only delete
the database instance. The user is implicitly bound to that database
instance and will be gracefully deleted as well.

—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/hashicorp/terraform-provider-google/issues/7677#issuecomment-719559531,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AGFN3V3POBRGMJK4J7QPODLSNK7FDANCNFSM4TEIDUEA
.

edward2a picture edward2a on 30 Oct 2020

Sorry Eduardo, that was my fault not ZPascal's

ldelossa picture ldelossa on 30 Oct 2020

No worries, have a nice Friday!

On Fri, 30 Oct 2020, 16:27 Louis DeLosSantos, notifications@github.com
wrote:

Sorry Eduardo, that was my fault not ZPascal's

—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/hashicorp/terraform-provider-google/issues/7677#issuecomment-719654736,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AGFN3V5ILT2CJDV6Q77YKPTSNLSNJANCNFSM4TEIDUEA
.

edward2a picture edward2a on 30 Oct 2020

@edwardmedia can we re-open please?

ldelossa picture ldelossa on 30 Oct 2020

@ldelossa Thank you for notifying us and pointing out your solution. I hope @edwardmedia opens the issue again.

I have opened a Feature Request at GCP and was informed that there is also the possibility to delete users separately via an API call.

ZPascal picture ZPascal on 31 Oct 2020

The need to perform a separate api call outside of terraform defeats my use case of integrated terraform into a public Quay/Clair builder i am working on. The point is to have terraform automate the process of creation and removal.

ldelossa picture ldelossa on 31 Oct 2020

I completely understand that and I would prefer not to place a call outside Terraform. I see Terraform as a central unit that should be able to create and clean up databases etc. Furthermore, the other Terraform plugins (Alicloud, AWS, Azure) offer this functionality and you can use these interfaces to create and clean up the necessary resources. I actually expect that the GCP plugin has the same functionality. I hope @edwardmedia will open the issue again. Possibly @c2thorn or @ndmckinley can be support in this issue?

ZPascal picture ZPascal on 31 Oct 2020

@ldelossa @ZPascal

Unfortunately, no, we can't do that in the provider. The ideal state would be "do not delete the user if the instance is about to be deleted as well", but Terraform does not allow us to modify the plan based on what is happening to other resources.

It would also be okay if we fixed the underlying issue, which is that deletions of postgres users are fraught - they require an admin to have revoked all permissions for the user to be deleted. In an ideal world, we could run those revocations from Terraform, but Terraform doesn't have credentials to run arbitrary SQL commands (like revoke all from) on your SQL instances.

The only obviously viable option would be to completely eliminate user deletions, so that users are never deleted but simply removed from state. We might control that behavior through a switch like deletion_protection (but with the opposite effect). Would that solve your problem? If you needed to add a boolean to your config, something like abandon_on_delete = true?

ndmckinley picture ndmckinley on 2 Nov 2020

@ndmckinley

I think thats the perfect solution. Simply having a flag which removes the sql user from the terraform destroy plan, the exact opposite of "deletion_protection" would solve the issue in a (IMO) flexible and elegant way.

If for some reason you do not want the behavior you could simply not use the flag.

ldelossa picture ldelossa on 2 Nov 2020

All right - we will go ahead and plan to implement that solution. We'll triage this at our meeting next Monday, I expect that it will be prioritized, and we will have this to you as soon as we can.

ndmckinley picture ndmckinley on 3 Nov 2020
🎉3

@ndmckinley That sounds very good and looks like a great solution. Thank you very much for your support.

ZPascal picture ZPascal on 3 Nov 2020

I think there's precedent elsewhere for a field called deletion_policy, so you could write:

deletion_policy = "ABANDON"
rileykarson picture rileykarson on 9 Nov 2020

Thanks for taking this on so promptly! Will a new release of the provider be required? Thinking about how I can test this out.

ldelossa picture ldelossa on 16 Nov 2020

Yep! We do release cuts every Wednesday for release the subsequent Monday, so this should be out a week from today. You can also try building from head by cloning the repo into your $GOROOT at master, then running "make" in that directory, then re-running terraform init in your terraform directory. Upgrading after that can be a little finicky, though, and I can't find good documentation about how to do it, so you may not want to go that route.

ndmckinley picture ndmckinley on 16 Nov 2020

Thanks for the heads up, I can afford to be patient on this one, so I'll wait for the release. :)

ldelossa picture ldelossa on 16 Nov 2020

@ndmckinley

Am I to expect this to be released today?

ldelossa picture ldelossa on 23 Nov 2020

Not @ndmckinley, but yes. 3.49.0 changelog is here: https://github.com/hashicorp/terraform-provider-google/blob/release-3.49.0/CHANGELOG.md

rileykarson picture rileykarson on 23 Nov 2020

thanks a lot @rileykarson appreciated.

ldelossa picture ldelossa on 23 Nov 2020

This worked great. 

Removing build infrastructure. Terraform logs will follow...
data.google_dns_managed_zone.quay-devel: Refreshing state... [id=projects/quay-devel/managedZones/quay-devel-openshift]
data.google_compute_network.default: Refreshing state... [id=projects/quay-devel/global/networks/default]
google_compute_health_check.indexer: Refreshing state... [id=projects/quay-devel/global/healthChecks/clair-indexer-main-cd9cbf46-http]
google_compute_instance_template.indexer: Refreshing state... [id=projects/quay-devel/global/instanceTemplates/clair-indexers-main-cd9cbf46]
google_compute_global_address.private_ip_address: Refreshing state... [id=projects/quay-devel/global/addresses/clair-indexer-main-cd9cbf46-db]
google_service_networking_connection.private_vpc_connection: Refreshing state... [id=projects%2Fquay-devel%2Fglobal%2Fnetworks%2Fdefault:servicenetworking.googleapis.com]
google_sql_database_instance.indexer: Refreshing state... [id=clair-indexer-main-cd9cbf46]
google_sql_user.indexer: Refreshing state... [id=postgres//clair-indexer-main-cd9cbf46]
google_dns_record_set.clair-indexer-db-internal: Refreshing state... [id=quay-devel-openshift/clair-indexer-main-cd9cbf46-db.quayteam.org./A]
google_dns_record_set.clair-indexer-db-external: Refreshing state... [id=quay-devel-openshift/clair-indexer-main-cd9cbf46-db-external.quayteam.org./A]
google_compute_region_instance_group_manager.indexer: Refreshing state... [id=projects/quay-devel/regions/us-central1/instanceGroupManagers/clair-indexers-main-cd9cbf46]
google_compute_backend_service.indexers-external: Refreshing state... [id=projects/quay-devel/global/backendServices/clair-indexers-main-cd9cbf46]
google_compute_url_map.clair-external: Refreshing state... [id=projects/quay-devel/global/urlMaps/clair-main-cd9cbf46]
google_compute_target_http_proxy.clair-external: Refreshing state... [id=projects/quay-devel/global/targetHttpProxies/clair-main-cd9cbf46]
google_compute_global_forwarding_rule.clair-external: Refreshing state... [id=projects/quay-devel/global/forwardingRules/clair-main-cd9cbf46]
google_dns_record_set.clair-external: Refreshing state... [id=quay-devel-openshift/clair-main-cd9cbf46.quayteam.org./A]
google_dns_record_set.clair-indexer-db-internal: Destroying... [id=quay-devel-openshift/clair-indexer-main-cd9cbf46-db.quayteam.org./A]
google_dns_record_set.clair-indexer-db-external: Destroying... [id=quay-devel-openshift/clair-indexer-main-cd9cbf46-db-external.quayteam.org./A]
google_sql_user.indexer: Destroying... [id=postgres//clair-indexer-main-cd9cbf46]
google_dns_record_set.clair-external: Destroying... [id=quay-devel-openshift/clair-main-cd9cbf46.quayteam.org./A]
google_sql_user.indexer: Destruction complete after 0s
google_dns_record_set.clair-external: Destruction complete after 2s
google_compute_global_forwarding_rule.clair-external: Destroying... [id=projects/quay-devel/global/forwardingRules/clair-main-cd9cbf46]
google_dns_record_set.clair-indexer-db-external: Destruction complete after 2s
google_dns_record_set.clair-indexer-db-internal: Destruction complete after 3s
google_compute_global_forwarding_rule.clair-external: Still destroying... [id=projects/quay-devel/global/forwardingRules/clair-main-cd9cbf46, 10s elapsed]
google_compute_global_forwarding_rule.clair-external: Destruction complete after 11s
google_compute_target_http_proxy.clair-external: Destroying... [id=projects/quay-devel/global/targetHttpProxies/clair-main-cd9cbf46]
google_compute_target_http_proxy.clair-external: Still destroying... [id=projects/quay-devel/global/targetHttpProxies/clair-main-cd9cbf46, 10s elapsed]
google_compute_target_http_proxy.clair-external: Destruction complete after 10s
google_compute_url_map.clair-external: Destroying... [id=projects/quay-devel/global/urlMaps/clair-main-cd9cbf46]
google_compute_url_map.clair-external: Still destroying... [id=projects/quay-devel/global/urlMaps/clair-main-cd9cbf46, 10s elapsed]
google_compute_url_map.clair-external: Destruction complete after 12s
google_compute_backend_service.indexers-external: Destroying... [id=projects/quay-devel/global/backendServices/clair-indexers-main-cd9cbf46]
google_compute_backend_service.indexers-external: Still destroying... [id=projects/quay-devel/global/backendServices/clair-indexers-main-cd9cbf46, 10s elapsed]
google_compute_backend_service.indexers-external: Destruction complete after 10s
google_compute_region_instance_group_manager.indexer: Destroying... [id=projects/quay-devel/regions/us-central1/instanceGroupManagers/clair-indexers-main-cd9cbf46]
google_compute_health_check.indexer: Destroying... [id=projects/quay-devel/global/healthChecks/clair-indexer-main-cd9cbf46-http]
google_compute_health_check.indexer: Still destroying... [id=projects/quay-devel/global/healthChecks/clair-indexer-main-cd9cbf46-http, 10s elapsed]
google_compute_region_instance_group_manager.indexer: Still destroying... [id=projects/quay-devel/regions/us-central1...pManagers/clair-indexers-main-cd9cbf46, 10s elapsed]
google_compute_health_check.indexer: Destruction complete after 12s
google_compute_region_instance_group_manager.indexer: Still destroying... [id=projects/quay-devel/regions/us-central1...pManagers/clair-indexers-main-cd9cbf46, 20s elapsed]
google_compute_region_instance_group_manager.indexer: Still destroying... [id=projects/quay-devel/regions/us-central1...pManagers/clair-indexers-main-cd9cbf46, 30s elapsed]
google_compute_region_instance_group_manager.indexer: Still destroying... [id=projects/quay-devel/regions/us-central1...pManagers/clair-indexers-main-cd9cbf46, 40s elapsed]
google_compute_region_instance_group_manager.indexer: Still destroying... [id=projects/quay-devel/regions/us-central1...pManagers/clair-indexers-main-cd9cbf46, 50s elapsed]
google_compute_region_instance_group_manager.indexer: Still destroying... [id=projects/quay-devel/regions/us-central1...pManagers/clair-indexers-main-cd9cbf46, 1m0s elapsed]
google_compute_region_instance_group_manager.indexer: Still destroying... [id=projects/quay-devel/regions/us-central1...pManagers/clair-indexers-main-cd9cbf46, 1m10s elapsed]
google_compute_region_instance_group_manager.indexer: Still destroying... [id=projects/quay-devel/regions/us-central1...pManagers/clair-indexers-main-cd9cbf46, 1m20s elapsed]
google_compute_region_instance_group_manager.indexer: Still destroying... [id=projects/quay-devel/regions/us-central1...pManagers/clair-indexers-main-cd9cbf46, 1m30s elapsed]
google_compute_region_instance_group_manager.indexer: Still destroying... [id=projects/quay-devel/regions/us-central1...pManagers/clair-indexers-main-cd9cbf46, 1m40s elapsed]
google_compute_region_instance_group_manager.indexer: Still destroying... [id=projects/quay-devel/regions/us-central1...pManagers/clair-indexers-main-cd9cbf46, 1m50s elapsed]
google_compute_region_instance_group_manager.indexer: Still destroying... [id=projects/quay-devel/regions/us-central1...pManagers/clair-indexers-main-cd9cbf46, 2m0s elapsed]
google_compute_region_instance_group_manager.indexer: Still destroying... [id=projects/quay-devel/regions/us-central1...pManagers/clair-indexers-main-cd9cbf46, 2m10s elapsed]
google_compute_region_instance_group_manager.indexer: Still destroying... [id=projects/quay-devel/regions/us-central1...pManagers/clair-indexers-main-cd9cbf46, 2m20s elapsed]
google_compute_region_instance_group_manager.indexer: Destruction complete after 2m24s
google_compute_instance_template.indexer: Destroying... [id=projects/quay-devel/global/instanceTemplates/clair-indexers-main-cd9cbf46]
google_sql_database_instance.indexer: Destroying... [id=clair-indexer-main-cd9cbf46]
google_compute_instance_template.indexer: Still destroying... [id=projects/quay-devel/global/instanceTemplates/clair-indexers-main-cd9cbf46, 10s elapsed]
google_sql_database_instance.indexer: Still destroying... [id=clair-indexer-main-cd9cbf46, 10s elapsed]
google_compute_instance_template.indexer: Destruction complete after 11s
google_sql_database_instance.indexer: Still destroying... [id=clair-indexer-main-cd9cbf46, 20s elapsed]
google_sql_database_instance.indexer: Still destroying... [id=clair-indexer-main-cd9cbf46, 30s elapsed]
google_sql_database_instance.indexer: Still destroying... [id=clair-indexer-main-cd9cbf46, 40s elapsed]
google_sql_database_instance.indexer: Still destroying... [id=clair-indexer-main-cd9cbf46, 50s elapsed]
google_sql_database_instance.indexer: Still destroying... [id=clair-indexer-main-cd9cbf46, 1m0s elapsed]
google_sql_database_instance.indexer: Still destroying... [id=clair-indexer-main-cd9cbf46, 1m10s elapsed]
google_sql_database_instance.indexer: Still destroying... [id=clair-indexer-main-cd9cbf46, 1m20s elapsed]
google_sql_database_instance.indexer: Destruction complete after 1m23s
google_service_networking_connection.private_vpc_connection: Destroying... [id=projects%2Fquay-devel%2Fglobal%2Fnetworks%2Fdefault:servicenetworking.googleapis.com]
google_service_networking_connection.private_vpc_connection: Still destroying... [id=projects%2Fquay-devel%2Fglobal%2Fnetwor...fault:servicenetworking.googleapis.com, 10s elapsed]
google_service_networking_connection.private_vpc_connection: Still destroying... [id=projects%2Fquay-devel%2Fglobal%2Fnetwor...fault:servicenetworking.googleapis.com, 20s elapsed]
google_service_networking_connection.private_vpc_connection: Destruction complete after 21s
google_compute_global_address.private_ip_address: Destroying... [id=projects/quay-devel/global/addresses/clair-indexer-main-cd9cbf46-db]
google_compute_global_address.private_ip_address: Still destroying... [id=projects/quay-devel/global/addresses/clair-indexer-main-cd9cbf46-db, 10s elapsed]
google_compute_global_address.private_ip_address: Destruction complete after 11s

Destroy complete! Resources: 14 destroyed.

thanks for the quick turn around on this solution!

ldelossa picture ldelossa on 24 Nov 2020
👍1

I'm going to lock this issue because it has been closed for _30 days_ ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. If you feel I made an error 🤖 🙉 , please reach out to my human friends 👉 [email protected]. Thanks!

hashibot[bot] picture hashibot[bot] on 17 Dec 2020
Was this page helpful?
0 / 5 - 0 ratings

Related issues

Zhann picture Zhann  ·  3Comments
sho-abe picture sho-abe  ·  3Comments
pdecat picture pdecat  ·  3Comments
geojaz picture geojaz  ·  3Comments
jcanseco picture jcanseco  ·  3Comments