Hi GitLab team, We would like to highlight a bug that appears to occur on `gitlab_project` creation on `gitlab.com` in the Terraform provider `18.11.0` ``` Terraform v1.14.9 on linux_amd64 + provider registry.terraform.io/gitlabhq/gitlab v18.11.0 ... Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: + create Terraform will perform the following actions: # module.team_projects["coates/innovation/coates-cli"].gitlab_branch_protection.default_branch will be created + resource "gitlab_branch_protection" "default_branch" { + allow_force_push = false + branch = "main" + branch_protection_id = (known after apply) + code_owner_approval_required = true + id = (known after apply) + merge_access_level = "developer" + project = (known after apply) + push_access_level = "no one" + unprotect_access_level = "maintainer" } # module.team_projects["coates/innovation/coates-cli"].gitlab_project.project will be created + resource "gitlab_project" "project" { + allow_merge_on_skipped_pipeline = (known after apply) + allow_pipeline_trigger_approve_deployment = (known after apply) + analytics_access_level = (known after apply) + archive_on_destroy = true + archived = false + auto_cancel_pending_pipelines = "enabled" + auto_devops_deploy_strategy = (known after apply) + auto_devops_enabled = false + auto_duo_code_review_enabled = (known after apply) + autoclose_referenced_issues = (known after apply) + avatar_hash = (known after apply) + avatar_url = (known after apply) + build_git_strategy = (known after apply) + build_timeout = (known after apply) + builds_access_level = (known after apply) + ci_config_path = ".gitlab-ci.yml" + ci_default_git_depth = 0 + ci_delete_pipelines_in_seconds = (known after apply) + ci_forward_deployment_enabled = false + ci_forward_deployment_rollback_allowed = (known after apply) + ci_id_token_sub_claim_components = (known after apply) + ci_pipeline_variables_minimum_override_role = (known after apply) + ci_push_repository_for_job_token_allowed = (known after apply) + ci_restrict_pipeline_cancellation_role = (known after apply) + ci_separated_caches = (known after apply) + container_registry_access_level = (known after apply) + container_registry_enabled = (known after apply) + default_branch = (known after apply) + description = "Self-service CLI for developers to perform GitLab operations through Terraform GitOps workflow" + emails_enabled = true + empty_repo = (known after apply) + environments_access_level = (known after apply) + feature_flags_access_level = (known after apply) + forking_access_level = (known after apply) + group_runners_enabled = (known after apply) + http_url_to_repo = (known after apply) + id = (known after apply) + import_url = (sensitive value) + infrastructure_access_level = (known after apply) + issues_access_level = "private" + issues_enabled = (known after apply) + keep_latest_artifact = (known after apply) + lfs_enabled = false + max_artifacts_size = (known after apply) + merge_method = "ff" + merge_pipelines_enabled = (known after apply) + merge_request_title_regex = (known after apply) + merge_request_title_regex_description = (known after apply) + merge_requests_access_level = (known after apply) + merge_requests_enabled = (known after apply) + merge_trains_enabled = (known after apply) + merge_trains_skip_train_allowed = (known after apply) + mirror = (known after apply) + mirror_overwrites_diverged_branches = (known after apply) + mirror_trigger_builds = (known after apply) + model_experiments_access_level = (known after apply) + model_registry_access_level = (known after apply) + monitor_access_level = (known after apply) + name = "coates-cli" + namespace_id = 131320470 + only_allow_merge_if_all_discussions_are_resolved = (known after apply) + only_allow_merge_if_pipeline_succeeds = false + only_mirror_protected_branches = (known after apply) + packages_enabled = (known after apply) + pages_access_level = "private" + path = "coates-cli" + path_with_namespace = (known after apply) + pipelines_enabled = (known after apply) + pre_receive_secret_detection_enabled = (known after apply) + prevent_merge_without_jira_issue = (known after apply) + printing_merge_request_link_enabled = (known after apply) + public_builds = (known after apply) + public_jobs = (known after apply) + releases_access_level = (known after apply) + remove_source_branch_after_merge = (known after apply) + repository_access_level = (known after apply) + repository_storage = (known after apply) + request_access_enabled = true + requirements_access_level = (known after apply) + resource_group_default_process_mode = (known after apply) + restrict_user_defined_variables = (known after apply) + runners_token = (sensitive value) + security_and_compliance_access_level = (known after apply) + shared_runners_enabled = false + snippets_access_level = (known after apply) + snippets_enabled = (known after apply) + squash_option = "default_on" + ssh_url_to_repo = (known after apply) + tags = (known after apply) + topics = (known after apply) + visibility_level = "private" + web_url = (known after apply) + wiki_access_level = "private" + wiki_enabled = (known after apply) + container_expiration_policy (known after apply) + push_rules (known after apply) } # module.team_projects["coates/innovation/coates-cli"].gitlab_project_approval_rule.default_branch_approvals will be created + resource "gitlab_project_approval_rule" "default_branch_approvals" { + applies_to_all_protected_branches = false + approvals_required = 0 + disable_importing_default_any_approver_rule_on_create = false + id = (known after apply) + name = (known after apply) + project = (known after apply) + report_type = (known after apply) + rule_type = (known after apply) } Plan: 3 to add, 0 to change, 0 to destroy. module.team_projects["coates/innovation/coates-cli"].gitlab_project.project: Creating... ╷ │ Warning: Resource targeting is in effect │ │ You are creating a plan with the -target option, which means that the │ result of this plan may not represent all of the changes requested by the │ current configuration. │ │ The -target option is not for routine use, and is provided only for │ exceptional situations such as recovering from errors or mistakes, or when │ Terraform specifically suggests to use it as part of an error message. ╵ ╷ │ Warning: Applied changes may be incomplete │ │ The plan was created with the -target option in effect, so some changes │ requested in the configuration may have been ignored and the output values │ may not be fully updated. Run the following command to verify that no other │ changes are pending: │ terraform plan │ │ Note that the -target option is not suitable for routine use, and is │ provided only for exceptional situations such as recovering from errors or │ mistakes, or when Terraform specifically suggests to use it as part of an │ error message. ╵ ╷ │ Error: Request cancelled │ │ The plugin6.(*GRPCProvider).ApplyResourceChange request was cancelled. ╵ Stack trace from the terraform-provider-gitlab_v18.11.0 plugin: panic: runtime error: invalid memory address or nil pointer dereference [signal SIGSEGV: segmentation violation code=0x1 addr=0x8 pc=0x1289e55] goroutine 66 [running]: gitlab.com/gitlab-org/terraform-provider-gitlab/internal/provider/sdk.resourceGitlabProjectCreate({0x1b2ab90, 0x2d1070f4c620}, 0x2d1070c35b00, {0x19544a0, 0x2d107093ac08}) gitlab.com/gitlab-org/terraform-provider-gitlab/internal/provider/sdk/resource_gitlab_project.go:1255 +0x1a95 github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema.(*Resource).create(0x2d1070ce8500, {0x1b2aae8, 0x2d10711a9890}, 0x2d1070c35b00, {0x19544a0, 0x2d107093ac08}) github.com/hashicorp/terraform-plugin-sdk/v2@v2.40.0/helper/schema/resource.go:849 +0x119 github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema.(*Resource).Apply(0x2d1070ce8500, {0x1b2aae8, 0x2d10711a9890}, 0x2d10711ac680, 0x2d1070c359e0, {0x19544a0, 0x2d107093ac08}) github.com/hashicorp/terraform-plugin-sdk/v2@v2.40.0/helper/schema/resource.go:980 +0xafd github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema.(*GRPCProviderServer).ApplyResourceChange(0x2d1070a339b0, {0x1b2aae8?, 0x2d10711a95f0?}, 0x2d1070a75900) github.com/hashicorp/terraform-plugin-sdk/v2@v2.40.0/helper/schema/grpc_provider.go:1500 +0x10c9 github.com/hashicorp/terraform-plugin-mux/tf5to6server.v5tov6Server.ApplyResourceChange({{0x1b67a20?, 0x2d1070a339b0?}}, {0x1b2aae8, 0x2d10711a95f0}, 0x0?) github.com/hashicorp/terraform-plugin-mux@v0.23.0/tf5to6server/tf5to6server.go:40 +0x54 github.com/hashicorp/terraform-plugin-mux/tf6muxserver.(*muxServer).ApplyResourceChange(0x2d1070c34990, {0x1b2aae8?, 0x2d10711a8e10?}, 0x2d1070a74fa0) github.com/hashicorp/terraform-plugin-mux@v0.23.0/tf6muxserver/mux_server_ApplyResourceChange.go:36 +0x18d github.com/hashicorp/terraform-plugin-go/tfprotov6/tf6server.(*server).ApplyResourceChange(0x2d1070c828c0, {0x1b2aae8?, 0x2d10711a81e0?}, 0x2d1070bce180) github.com/hashicorp/terraform-plugin-go@v0.31.0/tfprotov6/tf6server/server.go:945 +0x3b9 github.com/hashicorp/terraform-plugin-go/tfprotov6/internal/tfplugin6._Provider_ApplyResourceChange_Handler({0x19e23c0, 0x2d1070c828c0}, {0x1b2aae8, 0x2d10711a81e0}, 0x2d1070bce080, 0x0) github.com/hashicorp/terraform-plugin-go@v0.31.0/tfprotov6/internal/tfplugin6/tfplugin6_grpc.pb.go:961 +0x1a6 google.golang.org/grpc.(*Server).processUnaryRPC(0x2d1070c32908, {0x1b2aae8, 0x2d10711a8150}, 0x2d1070d0a1a0, 0x2d1070a77c20, 0x2a0c328, 0x0) google.golang.org/grpc@v1.79.2/server.go:1426 +0x11d2 google.golang.org/grpc.(*Server).handleStream(0x2d1070c32908, {0x1b2b8d8, 0x2d1070d0a340}, 0x2d1070d0a1a0) google.golang.org/grpc@v1.79.2/server.go:1830 +0xdc6 google.golang.org/grpc.(*Server).serveStreams.func2.1() google.golang.org/grpc@v1.79.2/server.go:1061 +0x7f created by google.golang.org/grpc.(*Server).serveStreams.func2 in goroutine 29 google.golang.org/grpc@v1.79.2/server.go:1072 +0x11d Error: The terraform-provider-gitlab_v18.11.0 plugin crashed! This is always indicative of a bug within the plugin. It would be immensely helpful if you could report the crash with the plugin's maintainers so that it can be fixed. The output above should help diagnose the issue. ``` The first time we create the `gitlab_project` resource, the Provider appears to expect an attribute that it discovers is `nil` and then bombs out with ``` panic: runtime error: invalid memory address or nil pointer ``` (as shown in the logs above). We then find the project has successfully been created in gitlab.com but then on retry of `terraform apply` of the same code, it fails to detect the project it created and instead errors with `{name: [has already been taken]}`. As a workaround we have resorted to running this pipeline twice in our pipeline, with an `import` block to force it to detect projects that it has already created but didn't save in state: ``` ############################################################################### # Keep this un-comment-able for now in case we encounter the error: # # "400 {message: {name: [has already been taken]}, {path: [has already been taken]}, {project_namespace.name: [has already been taken]}}" ############################################################################### import { for_each = [ for p in data.gitlab_projects.coates_projects.projects : { id = p.id name = p.name path_with_namespace = p.path_with_namespace } if !contains([ "coates/coates-group-admin/terraform-gitlab", "coates/devops/temporary/tools-gitlab-self-hosted-dependency-mapper", "coates/devops/aws-gitlab-runners", "coates/devops/packer-gitlab-runners", "coates/devops/packer-gitlab-docker", ], p.path_with_namespace) ] id = each.value.id to = module.team_projects["${each.value.path_with_namespace}"].gitlab_project.project } ``` It appears that it is simply a case of an expected attribute the Golang based provider is expecting, but is finding `nil`. Thanks Michael