Skip to content

fix: add create-before-destroy to dependent resource

What

  • Ensure any dependent resources also have the same lifecycle create_before_destroy = true setting
  • Bump Google providers to 6.3.0 so it includes one of my upstream PRs that allows us to disable the server TLS policy

Why

This seems to fix the cycle we're facing when disabling mTLS to the tune of:

│ Error: Cycle: module.external_lb[0].module.lb_http.google_compute_target_https_proxy.default[0], google_network_security_server_tls_policy.external_lb[0] (destroy), google_certificate_manager_trust_config.mtls[0] (destroy), module.external_lb[0].module.lb_http.google_compute_backend_service.default["default"], module.external_lb.module.lb_http.google_compute_url_map.default (expand), module.external_lb.module.lb_http.local.url_map (expand), module.external_lb.module.lb_http.google_compute_target_https_proxy.default (expand)

Tested successfully with the change in this MR: https://gitlab.com/gitlab-com/gl-infra/platform/runway/deployments/gsgl-dev-zh2ru5/-/jobs/7878807055

Edited by Gonzalo Servat

Merge request reports

Loading