ER: upgrade terraform 1.3.0 to later 1.6 to allow for PBR policy based routing - workaround is to gcloud the api

[obriensystems]

Check 1.7.x before a later 1.7 (Oct 2023 build)

shadow terraform-google-modules/terraform-example-foundation#1141
terraform-google-modules/terraform-example-foundation#1183

Start with gcloud version in https://cloud.google.com/vpc/docs/use-policy-based-routes#gcloud
and https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/network_connectivity_policy_based_route

TL;DR

check at least 1.5.4
see

The version of terraform run internally has issues with lack of support for later APIs
https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/0-bootstrap/Dockerfile#L18

ARG TERRAFORM_VERSION=1.3.0

We need support for PBR - Policy Based Routing

check 1.6.x for inclusion of GoogleCloudPlatform/magic-modules#9320 late october 2023
https://releases.hashicorp.com/terraform/

https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/network_connectivity_policy_based_route

https://cloud.google.com/network-connectivity/docs/reference/networkconnectivity/rest/v1/projects.locations.global.policyBasedRoutes
https://cloud.google.com/vpc/docs/use-policy-based-routes#api
hashicorp/terraform-provider-google#15414
GoogleCloudPlatform/magic-modules#9320
terraform-google-modules/docs-examples#579
https://cloud.google.com/vpc/docs/use-policy-based-routes#create-within-vpc

without PBR we dont have PBMM microsegmentation
https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/0-bootstrap/Dockerfile#L18
GoogleCloudPlatform/pubsec-declarative-toolkit#854
https://cloud.google.com/vpc/docs/policy-based-routes
https://medium.com/google-cloud/why-policy-based-routing-is-a-game-changer-f4c6a7badccb
https://codelabs.developers.google.com/codelabs/cloudnet-pbr#0
https://cloud.google.com/vpc/docs/use-policy-based-routes#create-within-vpc
During the upgrade check for instances of OPTIONAL

References
hashicorp/terraform-provider-google#16217 (comment)

[fmichaelobrien]

see

• https://github.com/terraform-google-modules/terraform-google-network/tree/master/modules/network-firewall-policy
• Add securityProfileGroup and tlsInspect in firewall policy Rule hashicorp/terraform-provider-google#17030

[fmichaelobrien]

b/321386368

[github-actions]

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days