terraform-provider-docker VS terraform-plugin-sdk

... and if you're an opinionated person, like me, and you value consolidated infrastructure atomicity as a whole along side locks for everything. You'd port cherry-picked helm charts as terraform modules with k2tf, and build every docker container from scratch, with forced layer invalidation to perform security updates for every image, using the docker and kubernetes providers respectively.

For the docker management, we are going to use terraform module kreuzwerker/docker. It provides us an opportunity to build and upload docker image to a docker repository.

Communication is crucial; that's why we want to keep it public, even if we receive private requests through other channels such as @gophers/terraform-provider-docker in Slack. We encourage engineers to open an issue or use the recently released discussions feature from GitHub. The code of conduct helped us set the etiquette guidelines, how we want to work together, and which tone and politeness we expect.

Reference : Plugin Development url references

> We're coming up on 10000 resources in our main Terraform repository and while there is definitely some friction, it's overall much better than having to hit the cloud API's to gather each of those states which would probably take at least an order of magnitude longer.

I don't think that's necessary true. Most cloud API's actually can return hundreds of records with 1 API calls, e.g. https://docs.aws.amazon.com/elasticloadbalancing/latest/APIR... has a maximum page size of 400.

If I manage the cloud resources via some custom tools and/or with some ansible-fu, I can decide to batch the API calls when it makes sense.

With terraform, it is not possible to do so (https://github.com/hashicorp/terraform-plugin-sdk/issues/66, https://github.com/hashicorp/terraform-provider-aws/issues/2...).

While it would be nice for Terraform to find duplicate resource blocks prior to the apply, it's impossible for it to do this without knowledge of the underlying provider being used. As an example, in AWS you could have multiple aws_instance resource blocks with identical attributes and it would be a perfectly acceptable situation (you'd probably be better off with an ASG, but I digress). The real issue here is that the Azure API is not returning an error when the duplicate resource group is being created. The parent feature request mentions other situations, some resulting in errors (preferred/acceptable), others resulting in duplicate resources. However, none are as potentially dangerous as a resource group since it can contain any number of other resources.

Currently, we are working on an internal refactoring to clean up code from the past years, even before we started the maintainership. Due to the upgrade to terraform-sdk-v2, we have new abilities for logging, debugging, and testing in isolation. Also, tools for the generation of documentation will simplify the process and keep it up-to-date. But first of all, we want to fix the reported bugs and clarify if they are still present after the update. We also plan to add support for running docker behind a jump host and provision docker containers. Our most aspiring goal is to come close to the docker CLI as possible. To achieve this, we plan to review which code we can reuse and integrate. For example, this has already been happened in the past to allow the converging possibility for docker services. We plan to add the generation of the changelog as we enforce already conventional commits from angular. After talking about the path towards milestone 3.0, we wrap it up with the conclusion.

Thank you for pointing that out u/tgulacsi I changed the type to Int and the panic issue was resolved; however, preferably I would like to use what the API definition states which is int64, but if I understood correctly, there is no native way of doing without conversion according to this GitHub Issue, which seems to be more of Terraform limitation than anything.

This particular situation is interesting because I can't think of any situation where it would be valid for Create to return a real null without also indicating an error, and so in theory the SDK itself could catch that situation and report it to you using SDK terminology instead, perhaps even directing you to make sure you called d.SetId. It could be worth sharing this experience as an issue in the Terraform SDK repository so that the team which works on the SDK can consider whether it's possible for the SDK to give you better feedback in this situation, rather than just returning the invalid result to Terraform Core to check.

I did some more work on this and it seems [1] is the way to go, because it indeed prevents an explosion of resources (and as a result lots of duplication in the documentation). Secondly, there are explicit provisions in the terraform plugin SDK to handle sets of fields which are conflicting with others, so mistakes are handled even at terraform init.