Skip to content

Conversation

@spgreenberg
Copy link
Contributor

Changes proposed in this pull request:

This PR upgrades the terraform provider from the cloudfoundry-community version, which leverages v2 of the CF API, with the cloudfoundry version, that leverages V3 of the CF API.

This is a PR of the final state of the .tf files. This branch contains interim commits used to remove the old resources from the state file then import the resources under the new provider. After merging the PR, the branch will be manually restored and used to upgrade staging and production.

The staging upgrade may require additional changes as the test_cdn is not implemented in dev and therefore could not be tested.

count = var.iaas_stack_name == "development" ? 0 : 1

Additionally:

  • The upgrade process is not implemented as a concourse job or task. The provider versions do not have resource parity. The upgrade is achieved via a temporary script with a manual statefile intervention to deal with a non-importable resource. The script will be deleted after the upgrades are complete. https://github.com/cloud-gov/deploy-cf/blob/cf-provider-v3/terraform/scripts/update-provider.sh

  • Each environment will be updated individually. Production will be scheduled with the maintenance engineer.

  • This update should not result in any changes to the infrastructure (only terraform state).

  • The terraform plan and apply jobs in concourse are paused for each environment and will be unpaused when the state has been updated with no changes detected.

security considerations

None

cweibel and others added 9 commits April 11, 2025 11:30
Adding CF URL for service_guid call
chore: update minimum recommended CF version
…#963)

Bumps the pip group with 1 update in the /ci/test-space-egress directory: [h11](https://github.com/python-hyper/h11).


Updates `h11` from 0.12.0 to 0.16.0
- [Commits](python-hyper/h11@v0.12.0...v0.16.0)

---
updated-dependencies:
- dependency-name: h11
  dependency-version: 0.16.0
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* update opensearch-ci-cf-read-only UAA client to have cloud_controller.global_auditor scope and authority

* remove unnecessary scopes
Adding sandbox-bot-user to CF UAA
@spgreenberg spgreenberg requested a review from a team as a code owner May 1, 2025 20:25
@spgreenberg spgreenberg closed this May 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants