Skip to content

mocktail: onboard to firebase-cloud (terraform + workflow)#35

Merged
poly-glot merged 1 commit into
mainfrom
feat/mocktail-onboarding
May 4, 2026
Merged

mocktail: onboard to firebase-cloud (terraform + workflow)#35
poly-glot merged 1 commit into
mainfrom
feat/mocktail-onboarding

Conversation

@poly-glot
Copy link
Copy Markdown
Owner

@poly-glot poly-glot commented May 4, 2026

Summary

  • Onboards mocktail (Angular SPA + Zig collab + Deno email-auth/AI) onto firebase-cloud-491613.
  • Adds shared TF vars unsplash_access_key + gemini_api_key (UNSPLASH_ACCESS_KEY, GEMINI_API_KEY in CI).
  • Inlines the Zig collab Cloud Run with all load-bearing flags from the self-kill spec; uses the standard cloud-run module for mocktail-email-auth.

Spec

mocktail/docs/superpowers/specs/2026-05-04-mocktail-firebase-cloud-onboarding-design.md

Test plan

  • Terraform plan posted as PR comment shows only adds + non-destructive updates (no replacements, no deletes).
  • After merge, terraform.yml apply step succeeds.
  • terraform output mocktail_wif_provider + mocktail_gcp_sa_email are non-empty.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 4, 2026

Terraform Plan success

Show Plan 
Acquiring state lock. This may take a few moments...
data.google_project.project: Reading...
module.project_setup.google_project_service.apis["firebasehosting.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/firebasehosting.googleapis.com]
module.project_setup.google_project_service.apis["run.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/run.googleapis.com]
module.project_setup.google_project_service.apis["cloudbilling.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/cloudbilling.googleapis.com]
module.project_setup.google_project_service.apis["cloudresourcemanager.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/cloudresourcemanager.googleapis.com]
module.project_setup.google_project_service.apis["street-view-image-backend.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/street-view-image-backend.googleapis.com]
module.project_setup.google_project_service.apis["identitytoolkit.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/identitytoolkit.googleapis.com]
module.project_setup.google_project_service.apis["firebaserules.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/firebaserules.googleapis.com]
module.project_setup.google_project_service.apis["secretmanager.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/secretmanager.googleapis.com]
module.project_setup.google_project_service.apis["iamcredentials.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/iamcredentials.googleapis.com]
data.google_project.project: Read complete after 0s [id=projects/firebase-cloud-491613]
module.project_setup.google_project_service.apis["dns.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/dns.googleapis.com]
module.project_setup.google_project_service.apis["cloudfunctions.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/cloudfunctions.googleapis.com]
module.project_setup.google_project_service.apis["bigquerydatatransfer.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/bigquerydatatransfer.googleapis.com]
module.project_setup.google_project_service.apis["pubsub.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/pubsub.googleapis.com]
module.project_setup.google_project_service.apis["storage.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/storage.googleapis.com]
module.project_setup.google_project_service.apis["cloudbuild.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/cloudbuild.googleapis.com]
module.project_setup.google_project_service.apis["firestore.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/firestore.googleapis.com]
module.project_setup.google_project_service.apis["firebasedatabase.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/firebasedatabase.googleapis.com]
module.project_setup.google_project_service.apis["maps-backend.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/maps-backend.googleapis.com]
module.project_setup.google_project_service.apis["artifactregistry.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/artifactregistry.googleapis.com]
module.project_setup.google_project_service.apis["serviceusage.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/serviceusage.googleapis.com]
module.project_setup.google_project_service.apis["compute.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/compute.googleapis.com]
module.project_setup.google_project_service.apis["eventarc.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/eventarc.googleapis.com]
module.project_setup.google_project_service.apis["maps-embed-backend.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/maps-embed-backend.googleapis.com]
module.project_setup.google_project_service.apis["bigquery.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/bigquery.googleapis.com]
module.project_setup.google_project_service.apis["cloudscheduler.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/cloudscheduler.googleapis.com]
module.project_setup.google_project_service.apis["aiplatform.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/aiplatform.googleapis.com]
module.project_setup.google_project_service.apis["firebase.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/firebase.googleapis.com]
module.project_setup.google_project_service.apis["apikeys.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/apikeys.googleapis.com]
module.project_setup.google_project_service.apis["iam.googleapis.com"]: Refreshing state... [id=firebase-cloud-491613/iam.googleapis.com]
module.project_setup.google_firebase_project.default: Refreshing state... [id=projects/firebase-cloud-491613]
module.project_setup.google_identity_platform_config.auth: Refreshing state... [id=projects/firebase-cloud-491613/config]
module.artifact_registry.google_artifact_registry_repository.docker: Refreshing state... [id=projects/firebase-cloud-491613/locations/europe-west2/repositories/firebase-cloud]
module.wif_pool.google_iam_workload_identity_pool.github: Refreshing state... [id=projects/firebase-cloud-491613/locations/global/workloadIdentityPools/github-actions-pool]
module.apps.google_secret_manager_secret.db_host: Refreshing state... [id=projects/firebase-cloud-491613/secrets/db-host]
module.apps.google_service_account.mysql_keepalive: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/mysql-keepalive@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.google_secret_manager_secret.mysql_app_catalog: Refreshing state... [id=projects/firebase-cloud-491613/secrets/mysql-app-catalog]
module.apps.module.crea8ivedesign_identity.google_service_account.runtime: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/crea8ivedesign-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.google_secret_manager_secret.openguessr_google_maps_api_key: Refreshing state... [id=projects/firebase-cloud-491613/secrets/openguessr-GOOGLE_MAPS_API_KEY]
module.apps.module.thehighlands_identity.google_service_account.runtime: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/thehighlands-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_identity.google_service_account.runtime: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/azadi-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.pakistan_2003_identity.google_service_account.ci_cd: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/pakistan-2003-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_hosting.google_firebase_hosting_site.default: Refreshing state... [id=projects/firebase-cloud-491613/sites/azadi]
module.apps.google_secret_manager_secret.db_pass: Refreshing state... [id=projects/firebase-cloud-491613/secrets/db-pass]
module.apps.google_secret_manager_secret.db_user: Refreshing state... [id=projects/firebase-cloud-491613/secrets/db-user]
module.apps.google_firebase_database_instance.openguessr: Refreshing state... [id=projects/firebase-cloud-491613/locations/europe-west1/instances/firebase-cloud-491613-default-rtdb]
module.apps.google_service_account.mysql_keepalive_scheduler: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/mysql-keepalive-scheduler@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.google_apikeys_key.openguessr_maps_web: Refreshing state... [id=projects/firebase-cloud-491613/locations/global/keys/openguessr-maps-web]
module.apps.module.amazing_landing_hosting.google_firebase_hosting_site.default: Refreshing state... [id=projects/firebase-cloud-491613/sites/amazing-landing]
module.apps.module.amazingcar_2003_hosting.google_firebase_hosting_site.default: Refreshing state... [id=projects/firebase-cloud-491613/sites/amazingcar-2003]
module.apps.module.thehighlands_identity.google_service_account.ci_cd: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/thehighlands-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_hosting.google_firebase_hosting_site.default: Refreshing state... [id=projects/firebase-cloud-491613/sites/hooklab]
module.apps.module.openguessr_identity.google_service_account.runtime: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/openguessr-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.amazing_landing_firestore.google_firestore_database.app: Refreshing state... [id=projects/firebase-cloud-491613/databases/amazing-landing]
module.apps.module.openguessr_identity.google_service_account.ci_cd: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/openguessr-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.pakistan_2003_hosting.google_firebase_hosting_site.default: Refreshing state... [id=projects/firebase-cloud-491613/sites/pakistan-2003]
module.apps.module.azadi_go_identity.google_service_account.ci_cd: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/azadi-go-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.shehryar_identity.google_service_account.runtime: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/shehryar-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.amazingcar_2003_identity.google_service_account.runtime: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/amazingcar-2003-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.amazing_landing_identity.google_service_account.runtime: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/amazing-landing-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.pakistan_2003_identity.google_service_account.runtime: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/pakistan-2003-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_identity.google_service_account.runtime: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/hooklab-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.shehryar_hosting.google_firebase_hosting_site.default: Refreshing state... [id=projects/firebase-cloud-491613/sites/shehryar]
module.apps.module.openguessr_hosting.google_firebase_hosting_site.default: Refreshing state... [id=projects/firebase-cloud-491613/sites/openguessr]
module.apps.module.crea8ivedesign_identity.google_service_account.ci_cd: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/crea8ivedesign-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.shehryar_db.google_secret_manager_secret.shells["user"]: Refreshing state... [id=projects/firebase-cloud-491613/secrets/shehryar-db-user]
module.apps.module.azadi_go_identity.google_service_account.runtime: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/azadi-go-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_go_hosting.google_firebase_hosting_site.default: Refreshing state... [id=projects/firebase-cloud-491613/sites/azadi-go]
module.apps.module.shehryar_db.google_secret_manager_secret.shells["name"]: Refreshing state... [id=projects/firebase-cloud-491613/secrets/shehryar-db-name]
module.apps.module.shehryar_db.google_secret_manager_secret.shells["pass"]: Refreshing state... [id=projects/firebase-cloud-491613/secrets/shehryar-db-pass]
module.apps.module.amazing_landing_identity.google_service_account.ci_cd: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/amazing-landing-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.amazingcar_2003_identity.google_service_account.ci_cd: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/amazingcar-2003-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.crea8ivedesign_hosting.google_firebase_hosting_site.default: Refreshing state... [id=projects/firebase-cloud-491613/sites/crea8ivedesign]
module.apps.module.shehryar_identity.google_service_account.ci_cd: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/shehryar-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_identity.google_service_account.ci_cd: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/hooklab-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_go_firestore.google_firestore_database.app: Refreshing state... [id=projects/firebase-cloud-491613/databases/azadi-go]
module.apps.module.thehighlands_hosting.google_firebase_hosting_site.default: Refreshing state... [id=projects/firebase-cloud-491613/sites/thehighlands]
module.apps.module.azadi_identity.google_service_account.ci_cd: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/azadi-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_firestore.google_firestore_database.app: Refreshing state... [id=projects/firebase-cloud-491613/databases/hooklab]
module.apps.google_secret_manager_secret_version.openguessr_google_maps_api_key: Refreshing state... [id=projects/563789376070/secrets/openguessr-GOOGLE_MAPS_API_KEY/versions/1]
module.apps.module.azadi_firestore.google_firestore_database.app: Refreshing state... [id=projects/firebase-cloud-491613/databases/azadi]
module.apps.google_secret_manager_secret_iam_member.personal_cloud_bootstrap_access["mysql-app-catalog"]: Refreshing state... [id=projects/firebase-cloud-491613/secrets/mysql-app-catalog/roles/secretmanager.secretAccessor/serviceAccount:personal-cloud-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.google_secret_manager_secret_iam_member.personal_cloud_bootstrap_access["oci-tf-aws-secret-access-key"]: Refreshing state... [id=projects/firebase-cloud-491613/secrets/oci-tf-aws-secret-access-key/roles/secretmanager.secretAccessor/serviceAccount:personal-cloud-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.google_secret_manager_secret_iam_member.personal_cloud_bootstrap_access["oci-tf-aws-access-key-id"]: Refreshing state... [id=projects/firebase-cloud-491613/secrets/oci-tf-aws-access-key-id/roles/secretmanager.secretAccessor/serviceAccount:personal-cloud-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.google_secret_manager_secret_iam_member.personal_cloud_bootstrap_access["db-admin-pass"]: Refreshing state... [id=projects/firebase-cloud-491613/secrets/db-admin-pass/roles/secretmanager.secretAccessor/serviceAccount:personal-cloud-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.google_secret_manager_secret_iam_member.personal_cloud_bootstrap_access["db-admin-user"]: Refreshing state... [id=projects/firebase-cloud-491613/secrets/db-admin-user/roles/secretmanager.secretAccessor/serviceAccount:personal-cloud-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.google_project_iam_member.mysql_keepalive_logging: Refreshing state... [id=firebase-cloud-491613/roles/logging.logWriter/serviceAccount:mysql-keepalive@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.google_project_iam_member.mysql_keepalive_secrets: Refreshing state... [id=firebase-cloud-491613/roles/secretmanager.secretAccessor/serviceAccount:mysql-keepalive@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.thehighlands_identity.google_project_iam_member.runtime_roles["roles/logging.logWriter"]: Refreshing state... [id=firebase-cloud-491613/roles/logging.logWriter/serviceAccount:thehighlands-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_identity.google_project_iam_member.runtime_roles["roles/datastore.user"]: Refreshing state... [id=firebase-cloud-491613/roles/datastore.user/serviceAccount:azadi-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_identity.google_project_iam_member.runtime_roles["roles/logging.logWriter"]: Refreshing state... [id=firebase-cloud-491613/roles/logging.logWriter/serviceAccount:azadi-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_identity.google_project_iam_member.runtime_roles["roles/secretmanager.secretAccessor"]: Refreshing state... [id=firebase-cloud-491613/roles/secretmanager.secretAccessor/serviceAccount:azadi-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_identity.google_project_iam_member.runtime_roles["roles/cloudtrace.agent"]: Refreshing state... [id=firebase-cloud-491613/roles/cloudtrace.agent/serviceAccount:azadi-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_identity.google_project_iam_member.runtime_roles["roles/monitoring.metricWriter"]: Refreshing state... [id=firebase-cloud-491613/roles/monitoring.metricWriter/serviceAccount:azadi-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.crea8ivedesign_identity.google_project_iam_member.runtime_roles["roles/logging.logWriter"]: Refreshing state... [id=firebase-cloud-491613/roles/logging.logWriter/serviceAccount:crea8ivedesign-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.pakistan_2003_identity.google_project_iam_member.ci_cd_roles["roles/firebase.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/firebase.admin/serviceAccount:pakistan-2003-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.pakistan_2003_identity.google_project_iam_member.ci_cd_roles["roles/serviceusage.serviceUsageConsumer"]: Refreshing state... [id=firebase-cloud-491613/roles/serviceusage.serviceUsageConsumer/serviceAccount:pakistan-2003-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.pakistan_2003_identity.google_project_iam_member.ci_cd_roles["roles/firebasehosting.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/firebasehosting.admin/serviceAccount:pakistan-2003-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.pakistan_2003_identity.google_project_iam_member.ci_cd_roles["roles/iam.serviceAccountUser"]: Refreshing state... [id=firebase-cloud-491613/roles/iam.serviceAccountUser/serviceAccount:pakistan-2003-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.thehighlands_identity.google_project_iam_member.ci_cd_roles["roles/serviceusage.serviceUsageConsumer"]: Refreshing state... [id=firebase-cloud-491613/roles/serviceusage.serviceUsageConsumer/serviceAccount:thehighlands-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.thehighlands_identity.google_project_iam_member.ci_cd_roles["roles/firebase.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/firebase.admin/serviceAccount:thehighlands-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.thehighlands_identity.google_project_iam_member.ci_cd_roles["roles/firebasehosting.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/firebasehosting.admin/serviceAccount:thehighlands-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.thehighlands_identity.google_project_iam_member.ci_cd_roles["roles/iam.serviceAccountUser"]: Refreshing state... [id=firebase-cloud-491613/roles/iam.serviceAccountUser/serviceAccount:thehighlands-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.openguessr_identity.google_project_iam_member.ci_cd_roles["roles/firebase.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/firebase.admin/serviceAccount:openguessr-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.openguessr_identity.google_project_iam_member.ci_cd_roles["roles/firebasehosting.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/firebasehosting.admin/serviceAccount:openguessr-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.openguessr_identity.google_project_iam_member.ci_cd_roles["roles/iam.serviceAccountUser"]: Refreshing state... [id=firebase-cloud-491613/roles/iam.serviceAccountUser/serviceAccount:openguessr-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.openguessr_identity.google_project_iam_member.ci_cd_roles["roles/cloudscheduler.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/cloudscheduler.admin/serviceAccount:openguessr-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.openguessr_identity.google_project_iam_member.ci_cd_roles["roles/artifactregistry.writer"]: Refreshing state... [id=firebase-cloud-491613/roles/artifactregistry.writer/serviceAccount:openguessr-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.openguessr_identity.google_project_iam_member.ci_cd_roles["roles/cloudbuild.builds.builder"]: Refreshing state... [id=firebase-cloud-491613/roles/cloudbuild.builds.builder/serviceAccount:openguessr-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.openguessr_identity.google_project_iam_member.ci_cd_roles["roles/serviceusage.serviceUsageConsumer"]: Refreshing state... [id=firebase-cloud-491613/roles/serviceusage.serviceUsageConsumer/serviceAccount:openguessr-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.openguessr_identity.google_project_iam_member.ci_cd_roles["roles/run.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/run.admin/serviceAccount:openguessr-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.openguessr_identity.google_project_iam_member.ci_cd_roles["roles/secretmanager.secretAccessor"]: Refreshing state... [id=firebase-cloud-491613/roles/secretmanager.secretAccessor/serviceAccount:openguessr-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.openguessr_identity.google_project_iam_member.runtime_roles["roles/firebasedatabase.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/firebasedatabase.admin/serviceAccount:openguessr-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.openguessr_identity.google_project_iam_member.runtime_roles["roles/firebaseauth.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/firebaseauth.admin/serviceAccount:openguessr-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.openguessr_identity.google_project_iam_member.runtime_roles["roles/secretmanager.secretAccessor"]: Refreshing state... [id=firebase-cloud-491613/roles/secretmanager.secretAccessor/serviceAccount:openguessr-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.openguessr_identity.google_project_iam_member.runtime_roles["roles/aiplatform.user"]: Refreshing state... [id=firebase-cloud-491613/roles/aiplatform.user/serviceAccount:openguessr-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.shehryar_identity.google_project_iam_member.runtime_roles["roles/cloudtrace.agent"]: Refreshing state... [id=firebase-cloud-491613/roles/cloudtrace.agent/serviceAccount:shehryar-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.shehryar_identity.google_project_iam_member.runtime_roles["roles/secretmanager.secretAccessor"]: Refreshing state... [id=firebase-cloud-491613/roles/secretmanager.secretAccessor/serviceAccount:shehryar-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.shehryar_identity.google_project_iam_member.runtime_roles["roles/monitoring.metricWriter"]: Refreshing state... [id=firebase-cloud-491613/roles/monitoring.metricWriter/serviceAccount:shehryar-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.shehryar_identity.google_project_iam_member.runtime_roles["roles/logging.logWriter"]: Refreshing state... [id=firebase-cloud-491613/roles/logging.logWriter/serviceAccount:shehryar-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_go_identity.google_project_iam_member.ci_cd_roles["roles/firebase.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/firebase.admin/serviceAccount:azadi-go-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_go_identity.google_project_iam_member.ci_cd_roles["roles/secretmanager.secretAccessor"]: Refreshing state... [id=firebase-cloud-491613/roles/secretmanager.secretAccessor/serviceAccount:azadi-go-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_go_identity.google_project_iam_member.ci_cd_roles["roles/run.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/run.admin/serviceAccount:azadi-go-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_go_identity.google_project_iam_member.ci_cd_roles["roles/iam.serviceAccountUser"]: Refreshing state... [id=firebase-cloud-491613/roles/iam.serviceAccountUser/serviceAccount:azadi-go-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_go_identity.google_project_iam_member.ci_cd_roles["roles/artifactregistry.writer"]: Refreshing state... [id=firebase-cloud-491613/roles/artifactregistry.writer/serviceAccount:azadi-go-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_go_identity.google_project_iam_member.ci_cd_roles["roles/cloudbuild.builds.builder"]: Refreshing state... [id=firebase-cloud-491613/roles/cloudbuild.builds.builder/serviceAccount:azadi-go-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_go_identity.google_project_iam_member.ci_cd_roles["roles/firebasehosting.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/firebasehosting.admin/serviceAccount:azadi-go-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_go_identity.google_project_iam_member.ci_cd_roles["roles/serviceusage.serviceUsageConsumer"]: Refreshing state... [id=firebase-cloud-491613/roles/serviceusage.serviceUsageConsumer/serviceAccount:azadi-go-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.amazingcar_2003_identity.google_project_iam_member.runtime_roles["roles/logging.logWriter"]: Refreshing state... [id=firebase-cloud-491613/roles/logging.logWriter/serviceAccount:amazingcar-2003-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.amazing_landing_identity.google_project_iam_member.runtime_roles["roles/logging.logWriter"]: Refreshing state... [id=firebase-cloud-491613/roles/logging.logWriter/serviceAccount:amazing-landing-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.amazing_landing_identity.google_project_iam_member.runtime_roles["roles/cloudtrace.agent"]: Refreshing state... [id=firebase-cloud-491613/roles/cloudtrace.agent/serviceAccount:amazing-landing-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.amazing_landing_identity.google_project_iam_member.runtime_roles["roles/monitoring.metricWriter"]: Refreshing state... [id=firebase-cloud-491613/roles/monitoring.metricWriter/serviceAccount:amazing-landing-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.amazing_landing_identity.google_project_iam_member.runtime_roles["roles/datastore.user"]: Refreshing state... [id=firebase-cloud-491613/roles/datastore.user/serviceAccount:amazing-landing-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.pakistan_2003_identity.google_project_iam_member.runtime_roles["roles/logging.logWriter"]: Refreshing state... [id=firebase-cloud-491613/roles/logging.logWriter/serviceAccount:pakistan-2003-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_identity.google_project_iam_member.runtime_roles["roles/bigquery.dataViewer"]: Refreshing state... [id=firebase-cloud-491613/roles/bigquery.dataViewer/serviceAccount:hooklab-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_identity.google_project_iam_member.runtime_roles["roles/aiplatform.user"]: Refreshing state... [id=firebase-cloud-491613/roles/aiplatform.user/serviceAccount:hooklab-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_identity.google_project_iam_member.runtime_roles["roles/datastore.user"]: Refreshing state... [id=firebase-cloud-491613/roles/datastore.user/serviceAccount:hooklab-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_identity.google_project_iam_member.runtime_roles["roles/monitoring.metricWriter"]: Refreshing state... [id=firebase-cloud-491613/roles/monitoring.metricWriter/serviceAccount:hooklab-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_identity.google_project_iam_member.runtime_roles["roles/bigquery.jobUser"]: Refreshing state... [id=firebase-cloud-491613/roles/bigquery.jobUser/serviceAccount:hooklab-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_identity.google_project_iam_member.runtime_roles["roles/secretmanager.secretAccessor"]: Refreshing state... [id=firebase-cloud-491613/roles/secretmanager.secretAccessor/serviceAccount:hooklab-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_identity.google_project_iam_member.runtime_roles["roles/cloudtrace.agent"]: Refreshing state... [id=firebase-cloud-491613/roles/cloudtrace.agent/serviceAccount:hooklab-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_identity.google_project_iam_member.runtime_roles["roles/firebaseauth.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/firebaseauth.admin/serviceAccount:hooklab-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_identity.google_project_iam_member.runtime_roles["roles/logging.logWriter"]: Refreshing state... [id=firebase-cloud-491613/roles/logging.logWriter/serviceAccount:hooklab-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.crea8ivedesign_identity.google_project_iam_member.ci_cd_roles["roles/serviceusage.serviceUsageConsumer"]: Refreshing state... [id=firebase-cloud-491613/roles/serviceusage.serviceUsageConsumer/serviceAccount:crea8ivedesign-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.crea8ivedesign_identity.google_project_iam_member.ci_cd_roles["roles/firebase.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/firebase.admin/serviceAccount:crea8ivedesign-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.crea8ivedesign_identity.google_project_iam_member.ci_cd_roles["roles/iam.serviceAccountUser"]: Refreshing state... [id=firebase-cloud-491613/roles/iam.serviceAccountUser/serviceAccount:crea8ivedesign-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.crea8ivedesign_identity.google_project_iam_member.ci_cd_roles["roles/firebasehosting.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/firebasehosting.admin/serviceAccount:crea8ivedesign-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_hosting.google_firebase_hosting_version.default: Refreshing state... [id=sites/hooklab/versions/8219e1e95f34a7a9]
module.apps.module.azadi_hosting.google_firebase_hosting_version.default: Refreshing state... [id=sites/azadi/versions/138e6657c33683e1]
module.apps.module.amazing_landing_hosting.google_firebase_hosting_version.default: Refreshing state... [id=sites/amazing-landing/versions/504f28d0d1e5a4b8]
module.apps.module.pakistan_2003_hosting.google_firebase_hosting_version.default: Refreshing state... [id=sites/pakistan-2003/versions/34a0caa4a770cec3]
module.apps.module.azadi_go_identity.google_project_iam_member.runtime_roles["roles/cloudtrace.agent"]: Refreshing state... [id=firebase-cloud-491613/roles/cloudtrace.agent/serviceAccount:azadi-go-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_go_identity.google_project_iam_member.runtime_roles["roles/datastore.user"]: Refreshing state... [id=firebase-cloud-491613/roles/datastore.user/serviceAccount:azadi-go-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_go_identity.google_project_iam_member.runtime_roles["roles/logging.logWriter"]: Refreshing state... [id=firebase-cloud-491613/roles/logging.logWriter/serviceAccount:azadi-go-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_go_identity.google_project_iam_member.runtime_roles["roles/monitoring.metricWriter"]: Refreshing state... [id=firebase-cloud-491613/roles/monitoring.metricWriter/serviceAccount:azadi-go-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_go_identity.google_project_iam_member.runtime_roles["roles/secretmanager.secretAccessor"]: Refreshing state... [id=firebase-cloud-491613/roles/secretmanager.secretAccessor/serviceAccount:azadi-go-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.amazingcar_2003_hosting.google_firebase_hosting_version.default: Refreshing state... [id=sites/amazingcar-2003/versions/dbb4eab80d297817]
module.apps.module.amazing_landing_identity.google_project_iam_member.ci_cd_roles["roles/artifactregistry.writer"]: Refreshing state... [id=firebase-cloud-491613/roles/artifactregistry.writer/serviceAccount:amazing-landing-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.amazing_landing_identity.google_project_iam_member.ci_cd_roles["roles/serviceusage.serviceUsageConsumer"]: Refreshing state... [id=firebase-cloud-491613/roles/serviceusage.serviceUsageConsumer/serviceAccount:amazing-landing-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.amazing_landing_identity.google_project_iam_member.ci_cd_roles["roles/iam.serviceAccountUser"]: Refreshing state... [id=firebase-cloud-491613/roles/iam.serviceAccountUser/serviceAccount:amazing-landing-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.amazing_landing_identity.google_project_iam_member.ci_cd_roles["roles/firebase.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/firebase.admin/serviceAccount:amazing-landing-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.amazing_landing_identity.google_project_iam_member.ci_cd_roles["roles/cloudbuild.builds.builder"]: Refreshing state... [id=firebase-cloud-491613/roles/cloudbuild.builds.builder/serviceAccount:amazing-landing-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.amazing_landing_identity.google_project_iam_member.ci_cd_roles["roles/secretmanager.secretAccessor"]: Refreshing state... [id=firebase-cloud-491613/roles/secretmanager.secretAccessor/serviceAccount:amazing-landing-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.amazing_landing_identity.google_project_iam_member.ci_cd_roles["roles/firebasehosting.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/firebasehosting.admin/serviceAccount:amazing-landing-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.amazing_landing_identity.google_project_iam_member.ci_cd_roles["roles/run.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/run.admin/serviceAccount:amazing-landing-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.amazingcar_2003_identity.google_project_iam_member.ci_cd_roles["roles/firebasehosting.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/firebasehosting.admin/serviceAccount:amazingcar-2003-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.amazingcar_2003_identity.google_project_iam_member.ci_cd_roles["roles/iam.serviceAccountUser"]: Refreshing state... [id=firebase-cloud-491613/roles/iam.serviceAccountUser/serviceAccount:amazingcar-2003-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.amazingcar_2003_identity.google_project_iam_member.ci_cd_roles["roles/serviceusage.serviceUsageConsumer"]: Refreshing state... [id=firebase-cloud-491613/roles/serviceusage.serviceUsageConsumer/serviceAccount:amazingcar-2003-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.amazingcar_2003_identity.google_project_iam_member.ci_cd_roles["roles/firebase.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/firebase.admin/serviceAccount:amazingcar-2003-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.shehryar_identity.google_project_iam_member.ci_cd_roles["roles/iam.serviceAccountUser"]: Refreshing state... [id=firebase-cloud-491613/roles/iam.serviceAccountUser/serviceAccount:shehryar-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.shehryar_identity.google_project_iam_member.ci_cd_roles["roles/run.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/run.admin/serviceAccount:shehryar-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.shehryar_identity.google_project_iam_member.ci_cd_roles["roles/serviceusage.serviceUsageConsumer"]: Refreshing state... [id=firebase-cloud-491613/roles/serviceusage.serviceUsageConsumer/serviceAccount:shehryar-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.shehryar_identity.google_project_iam_member.ci_cd_roles["roles/firebase.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/firebase.admin/serviceAccount:shehryar-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.shehryar_identity.google_project_iam_member.ci_cd_roles["roles/artifactregistry.writer"]: Refreshing state... [id=firebase-cloud-491613/roles/artifactregistry.writer/serviceAccount:shehryar-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.shehryar_identity.google_project_iam_member.ci_cd_roles["roles/firebasehosting.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/firebasehosting.admin/serviceAccount:shehryar-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_identity.google_project_iam_member.ci_cd_roles["roles/firebasehosting.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/firebasehosting.admin/serviceAccount:hooklab-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_identity.google_project_iam_member.ci_cd_roles["roles/cloudbuild.builds.builder"]: Refreshing state... [id=firebase-cloud-491613/roles/cloudbuild.builds.builder/serviceAccount:hooklab-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_identity.google_project_iam_member.ci_cd_roles["roles/artifactregistry.writer"]: Refreshing state... [id=firebase-cloud-491613/roles/artifactregistry.writer/serviceAccount:hooklab-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_identity.google_project_iam_member.ci_cd_roles["roles/run.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/run.admin/serviceAccount:hooklab-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_identity.google_project_iam_member.ci_cd_roles["roles/iam.serviceAccountUser"]: Refreshing state... [id=firebase-cloud-491613/roles/iam.serviceAccountUser/serviceAccount:hooklab-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_identity.google_project_iam_member.ci_cd_roles["roles/firebase.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/firebase.admin/serviceAccount:hooklab-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_identity.google_project_iam_member.ci_cd_roles["roles/serviceusage.serviceUsageConsumer"]: Refreshing state... [id=firebase-cloud-491613/roles/serviceusage.serviceUsageConsumer/serviceAccount:hooklab-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_identity.google_project_iam_member.ci_cd_roles["roles/secretmanager.secretAccessor"]: Refreshing state... [id=firebase-cloud-491613/roles/secretmanager.secretAccessor/serviceAccount:hooklab-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.shehryar_hosting.google_firebase_hosting_version.default: Refreshing state... [id=sites/shehryar/versions/553ed63f7949bd13]
module.apps.module.azadi_identity.google_project_iam_member.ci_cd_roles["roles/secretmanager.secretAccessor"]: Refreshing state... [id=firebase-cloud-491613/roles/secretmanager.secretAccessor/serviceAccount:azadi-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_identity.google_project_iam_member.ci_cd_roles["roles/serviceusage.serviceUsageConsumer"]: Refreshing state... [id=firebase-cloud-491613/roles/serviceusage.serviceUsageConsumer/serviceAccount:azadi-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_identity.google_project_iam_member.ci_cd_roles["roles/cloudbuild.builds.builder"]: Refreshing state... [id=firebase-cloud-491613/roles/cloudbuild.builds.builder/serviceAccount:azadi-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_identity.google_project_iam_member.ci_cd_roles["roles/artifactregistry.writer"]: Refreshing state... [id=firebase-cloud-491613/roles/artifactregistry.writer/serviceAccount:azadi-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_identity.google_project_iam_member.ci_cd_roles["roles/firebase.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/firebase.admin/serviceAccount:azadi-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_identity.google_project_iam_member.ci_cd_roles["roles/iam.serviceAccountUser"]: Refreshing state... [id=firebase-cloud-491613/roles/iam.serviceAccountUser/serviceAccount:azadi-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_identity.google_project_iam_member.ci_cd_roles["roles/run.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/run.admin/serviceAccount:azadi-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_identity.google_project_iam_member.ci_cd_roles["roles/firebasehosting.admin"]: Refreshing state... [id=firebase-cloud-491613/roles/firebasehosting.admin/serviceAccount:azadi-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.openguessr_hosting.google_firebase_hosting_version.default: Refreshing state... [id=sites/openguessr/versions/8b239311f164a5c6]
module.apps.module.azadi_go_hosting.google_firebase_hosting_version.default: Refreshing state... [id=sites/azadi-go/versions/18692f50ff84c654]
module.apps.module.crea8ivedesign_hosting.google_firebase_hosting_version.default: Refreshing state... [id=sites/crea8ivedesign/versions/8df08a71ad43d5fa]
module.apps.module.thehighlands_hosting.google_firebase_hosting_version.default: Refreshing state... [id=sites/thehighlands/versions/87b4233c5b3298ca]
module.apps.google_cloud_run_v2_job.mysql_keepalive: Refreshing state... [id=projects/firebase-cloud-491613/locations/europe-west2/jobs/mysql-keepalive]
module.apps.google_firebase_hosting_custom_domain.pakistan_2003: Refreshing state... [id=projects/firebase-cloud-491613/sites/pakistan-2003/customDomains/pakistan-2003.junaid.guru]
module.apps.google_firebase_hosting_custom_domain.amazingcar_2003: Refreshing state... [id=projects/firebase-cloud-491613/sites/amazingcar-2003/customDomains/amazingcar-2003.junaid.guru]
module.apps.google_secret_manager_secret_iam_member.shehryar_ci_db_read["db-host"]: Refreshing state... [id=projects/firebase-cloud-491613/secrets/db-host/roles/secretmanager.secretAccessor/serviceAccount:shehryar-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.google_secret_manager_secret_iam_member.shehryar_ci_db_read["shehryar-db-name"]: Refreshing state... [id=projects/firebase-cloud-491613/secrets/shehryar-db-name/roles/secretmanager.secretAccessor/serviceAccount:shehryar-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.google_secret_manager_secret_iam_member.shehryar_ci_db_read["shehryar-db-pass"]: Refreshing state... [id=projects/firebase-cloud-491613/secrets/shehryar-db-pass/roles/secretmanager.secretAccessor/serviceAccount:shehryar-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.google_secret_manager_secret_iam_member.shehryar_ci_db_read["shehryar-db-user"]: Refreshing state... [id=projects/firebase-cloud-491613/secrets/shehryar-db-user/roles/secretmanager.secretAccessor/serviceAccount:shehryar-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.google_firebase_hosting_custom_domain.shehryar: Refreshing state... [id=projects/firebase-cloud-491613/sites/shehryar/customDomains/shehryar.dev]
module.apps.google_firebase_hosting_custom_domain.crea8ivedesign: Refreshing state... [id=projects/firebase-cloud-491613/sites/crea8ivedesign/customDomains/crea8ivedesign.junaid.guru]
module.apps.google_firebase_hosting_custom_domain.thehighlands: Refreshing state... [id=projects/firebase-cloud-491613/sites/thehighlands/customDomains/thehighlands.junaid.guru]
module.apps.module.shehryar_db.google_secret_manager_secret_iam_member.db_host: Refreshing state... [id=projects/firebase-cloud-491613/secrets/db-host/roles/secretmanager.secretAccessor/serviceAccount:shehryar-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.shehryar_db.google_secret_manager_secret_iam_member.app_shells["name"]: Refreshing state... [id=projects/firebase-cloud-491613/secrets/shehryar-db-name/roles/secretmanager.secretAccessor/serviceAccount:shehryar-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.shehryar_db.google_secret_manager_secret_iam_member.app_shells["pass"]: Refreshing state... [id=projects/firebase-cloud-491613/secrets/shehryar-db-pass/roles/secretmanager.secretAccessor/serviceAccount:shehryar-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.shehryar_db.google_secret_manager_secret_iam_member.app_shells["user"]: Refreshing state... [id=projects/firebase-cloud-491613/secrets/shehryar-db-user/roles/secretmanager.secretAccessor/serviceAccount:shehryar-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_go_identity.google_iam_workload_identity_pool_provider.github: Refreshing state... [id=projects/firebase-cloud-491613/locations/global/workloadIdentityPools/github-actions-pool/providers/azadi-go-github]
module.apps.module.amazingcar_2003_identity.google_iam_workload_identity_pool_provider.github: Refreshing state... [id=projects/firebase-cloud-491613/locations/global/workloadIdentityPools/github-actions-pool/providers/amazingcar-2003-github]
module.apps.module.shehryar_identity.google_iam_workload_identity_pool_provider.github: Refreshing state... [id=projects/firebase-cloud-491613/locations/global/workloadIdentityPools/github-actions-pool/providers/shehryar-github]
module.apps.module.openguessr_identity.google_iam_workload_identity_pool_provider.github: Refreshing state... [id=projects/firebase-cloud-491613/locations/global/workloadIdentityPools/github-actions-pool/providers/openguessr-github]
module.apps.module.pakistan_2003_identity.google_iam_workload_identity_pool_provider.github: Refreshing state... [id=projects/firebase-cloud-491613/locations/global/workloadIdentityPools/github-actions-pool/providers/pakistan-2003-github]
module.apps.module.crea8ivedesign_identity.google_iam_workload_identity_pool_provider.github: Refreshing state... [id=projects/firebase-cloud-491613/locations/global/workloadIdentityPools/github-actions-pool/providers/crea8ivedesign-github]
module.apps.module.azadi_identity.google_iam_workload_identity_pool_provider.github: Refreshing state... [id=projects/firebase-cloud-491613/locations/global/workloadIdentityPools/github-actions-pool/providers/azadi-github]
module.apps.module.thehighlands_identity.google_iam_workload_identity_pool_provider.github: Refreshing state... [id=projects/firebase-cloud-491613/locations/global/workloadIdentityPools/github-actions-pool/providers/thehighlands-github]
module.apps.module.hooklab_identity.google_iam_workload_identity_pool_provider.github: Refreshing state... [id=projects/firebase-cloud-491613/locations/global/workloadIdentityPools/github-actions-pool/providers/hooklab-github]
module.apps.module.amazing_landing_identity.google_iam_workload_identity_pool_provider.github: Refreshing state... [id=projects/firebase-cloud-491613/locations/global/workloadIdentityPools/github-actions-pool/providers/amazing-landing-github]
module.apps.module.crea8ivedesign_identity.google_service_account_iam_member.wif_binding: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/crea8ivedesign-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com/roles/iam.workloadIdentityUser/principalSet://iam.googleapis.com/projects/563789376070/locations/global/workloadIdentityPools/github-actions-pool/attribute.repository/poly-glot/crea8ivedesign]
module.apps.module.pakistan_2003_identity.google_service_account_iam_member.wif_binding: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/pakistan-2003-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com/roles/iam.workloadIdentityUser/principalSet://iam.googleapis.com/projects/563789376070/locations/global/workloadIdentityPools/github-actions-pool/attribute.repository/poly-glot/pakistan-2003]
module.apps.module.openguessr_identity.google_service_account_iam_member.wif_binding: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/openguessr-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com/roles/iam.workloadIdentityUser/principalSet://iam.googleapis.com/projects/563789376070/locations/global/workloadIdentityPools/github-actions-pool/attribute.repository/poly-glot/openguessr]
module.apps.module.shehryar_identity.google_service_account_iam_member.wif_binding: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/shehryar-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com/roles/iam.workloadIdentityUser/principalSet://iam.googleapis.com/projects/563789376070/locations/global/workloadIdentityPools/github-actions-pool/attribute.repository/poly-glot/shehryar]
module.apps.module.azadi_go_identity.google_service_account_iam_member.wif_binding: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/azadi-go-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com/roles/iam.workloadIdentityUser/principalSet://iam.googleapis.com/projects/563789376070/locations/global/workloadIdentityPools/github-actions-pool/attribute.repository/poly-glot/azadi-go]
module.apps.module.azadi_identity.google_service_account_iam_member.wif_binding: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/azadi-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com/roles/iam.workloadIdentityUser/principalSet://iam.googleapis.com/projects/563789376070/locations/global/workloadIdentityPools/github-actions-pool/attribute.repository/poly-glot/azadi]
module.apps.module.hooklab_identity.google_service_account_iam_member.wif_binding: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/hooklab-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com/roles/iam.workloadIdentityUser/principalSet://iam.googleapis.com/projects/563789376070/locations/global/workloadIdentityPools/github-actions-pool/attribute.repository/poly-glot/hooklab]
module.apps.module.amazingcar_2003_identity.google_service_account_iam_member.wif_binding: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/amazingcar-2003-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com/roles/iam.workloadIdentityUser/principalSet://iam.googleapis.com/projects/563789376070/locations/global/workloadIdentityPools/github-actions-pool/attribute.repository/poly-glot/amazingcar-2003]
module.apps.module.thehighlands_identity.google_service_account_iam_member.wif_binding: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/thehighlands-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com/roles/iam.workloadIdentityUser/principalSet://iam.googleapis.com/projects/563789376070/locations/global/workloadIdentityPools/github-actions-pool/attribute.repository/poly-glot/thehighlands]
module.apps.module.amazing_landing_identity.google_service_account_iam_member.wif_binding: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/amazing-landing-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com/roles/iam.workloadIdentityUser/principalSet://iam.googleapis.com/projects/563789376070/locations/global/workloadIdentityPools/github-actions-pool/attribute.repository/poly-glot/amazing-landing]
module.apps.google_cloud_run_v2_job_iam_member.scheduler_invoker: Refreshing state... [id=projects/firebase-cloud-491613/locations/europe-west2/jobs/mysql-keepalive/roles/run.invoker/serviceAccount:mysql-keepalive-scheduler@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.google_secret_manager_secret_version.mysql_app_catalog: Refreshing state... [id=projects/563789376070/secrets/mysql-app-catalog/versions/1]
module.apps.google_cloud_run_v2_service.shehryar_api: Refreshing state... [id=projects/firebase-cloud-491613/locations/europe-west2/services/shehryar-api]
module.apps.google_secret_manager_secret_iam_member.openguessr_maps_key_cicd_admin: Refreshing state... [id=projects/firebase-cloud-491613/secrets/openguessr-GOOGLE_MAPS_API_KEY/roles/secretmanager.admin/serviceAccount:openguessr-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.google_secret_manager_secret_iam_member.openguessr_maps_key_runtime_access: Refreshing state... [id=projects/firebase-cloud-491613/secrets/openguessr-GOOGLE_MAPS_API_KEY/roles/secretmanager.secretAccessor/serviceAccount:openguessr-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.google_service_account_iam_member.openguessr_runtime_token_creator: Refreshing state... [id=projects/firebase-cloud-491613/serviceAccounts/openguessr-runtime@firebase-cloud-491613.iam.gserviceaccount.com/roles/iam.serviceAccountTokenCreator/serviceAccount:openguessr-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_bigquery.google_project_iam_member.vertex_user: Refreshing state... [id=firebase-cloud-491613/roles/aiplatform.user/serviceAccount:hooklab-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_bigquery.google_project_iam_member.bq_data_editor: Refreshing state... [id=firebase-cloud-491613/roles/bigquery.dataEditor/serviceAccount:hooklab-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.azadi_go_cloud_run.google_cloud_run_v2_service.default: Refreshing state... [id=projects/firebase-cloud-491613/locations/europe-west2/services/azadi-go-api]
module.apps.module.hooklab_bigquery.google_project_iam_member.bq_job_user: Refreshing state... [id=firebase-cloud-491613/roles/bigquery.jobUser/serviceAccount:hooklab-runtime@firebase-cloud-491613.iam.gserviceaccount.com]
module.apps.module.hooklab_bigquery.google_bigquery_dataset.app: Refreshing state... [id=projects/firebase-cloud-491613/datasets/hooklab]
module.apps.module.amazing_landing_cloud_run.google_cloud_run_v2_service.default: Refreshing state... [id=projects/firebase-cloud-491613/locations/europe-west2/services/amazing-landing-api]
module.apps.module.hooklab_cloud_run.google_cloud_run_v2_service.default: Refreshing state... [id=projects/firebase-cloud-491613/locations/europe-west2/services/hooklab-api]
module.apps.google_cloud_run_v2_service_iam_member.shehryar_api_public: Refreshing state... [id=projects/firebase-cloud-491613/locations/europe-west2/services/shehryar-api/roles/run.invoker/allUsers]
module.apps.module.azadi_cloud_run.google_cloud_run_v2_service.default: Refreshing state... [id=projects/firebase-cloud-491613/locations/europe-west2/services/azadi-api]
module.apps.module.hooklab_bigquery.google_bigquery_table.executions: Refreshing state... [id=projects/firebase-cloud-491613/datasets/hooklab/tables/executions]
module.apps.module.azadi_go_cloud_run.google_cloud_run_v2_service_iam_member.public[0]: Refreshing state... [id=projects/firebase-cloud-491613/locations/europe-west2/services/azadi-go-api/roles/run.invoker/allUsers]
module.apps.google_cloud_scheduler_job.mysql_keepalive: Refreshing state... [id=projects/firebase-cloud-491613/locations/europe-west2/jobs/mysql-keepalive-daily]
module.apps.module.amazing_landing_cloud_run.google_cloud_run_v2_service_iam_member.public[0]: Refreshing state... [id=projects/firebase-cloud-491613/locations/europe-west2/services/amazing-landing-api/roles/run.invoker/allUsers]
module.apps.module.hooklab_cloud_run.google_cloud_run_v2_service_iam_member.public[0]: Refreshing state... [id=projects/firebase-cloud-491613/locations/europe-west2/services/hooklab-api/roles/run.invoker/allUsers]
module.apps.module.azadi_cloud_run.google_cloud_run_v2_service_iam_member.public[0]: Refreshing state... [id=projects/firebase-cloud-491613/locations/europe-west2/services/azadi-api/roles/run.invoker/allUsers]
module.apps.module.hooklab_scheduler.google_cloud_scheduler_job.jobs["hooklab-aggregate"]: Refreshing state... [id=projects/firebase-cloud-491613/locations/europe-west2/jobs/hooklab-aggregate]
module.apps.module.hooklab_scheduler.google_cloud_scheduler_job.jobs["hooklab-cleanup"]: Refreshing state... [id=projects/firebase-cloud-491613/locations/europe-west2/jobs/hooklab-cleanup]
module.apps.module.azadi_scheduler.google_cloud_scheduler_job.jobs["azadi-settlement-cleanup"]: Refreshing state... [id=projects/firebase-cloud-491613/locations/europe-west2/jobs/azadi-settlement-cleanup]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create
  ~ update in-place
-/+ destroy and then create replacement
 <= read (data resources)

Terraform will perform the following actions:

  # module.apps.google_cloud_run_v2_service.mocktail will be created
  + resource "google_cloud_run_v2_service" "mocktail" {
      + conditions              = (known after apply)
      + create_time             = (known after apply)
      + creator                 = (known after apply)
      + delete_time             = (known after apply)
      + deletion_protection     = false
      + effective_annotations   = (known after apply)
      + effective_labels        = {
          + "goog-terraform-provisioned" = "true"
        }
      + etag                    = (known after apply)
      + expire_time             = (known after apply)
      + generation              = (known after apply)
      + id                      = (known after apply)
      + ingress                 = "INGRESS_TRAFFIC_ALL"
      + last_modifier           = (known after apply)
      + latest_created_revision = (known after apply)
      + latest_ready_revision   = (known after apply)
      + launch_stage            = (known after apply)
      + location                = "europe-west2"
      + name                    = "mocktail"
      + observed_generation     = (known after apply)
      + project                 = "firebase-cloud-491613"
      + reconciling             = (known after apply)
      + terminal_condition      = (known after apply)
      + terraform_labels        = {
          + "goog-terraform-provisioned" = "true"
        }
      + traffic_statuses        = (known after apply)
      + uid                     = (known after apply)
      + update_time             = (known after apply)
      + uri                     = (known after apply)
      + urls                    = (known after apply)

      + template {
          + execution_environment            = "EXECUTION_ENVIRONMENT_GEN2"
          + max_instance_request_concurrency = 1000
          + service_account                  = "mocktail-runtime@firebase-cloud-491613.iam.gserviceaccount.com"
          + timeout                          = "3600s"

          + containers {
              + build_info = (known after apply)
              + image      = "europe-west2-docker.pkg.dev/firebase-cloud-491613/firebase-cloud/mocktail:latest"

              + env {
                  + name  = "FIRESTORE_DB"
                  + value = "mocktail"
                }
              + env {
                  + name  = "FIRESTORE_USE_TLS"
                  + value = "true"
                }
              + env {
                  + name  = "FLUSH_MAX_INTERVAL_SECONDS"
                  + value = "600"
                }
              + env {
                  + name  = "FLUSH_QUIESCENCE_MILLIS"
                  + value = "5000"
                }
              + env {
                  + name  = "KEEPALIVE_SECONDS"
                  + value = "1800"
                }

              + ports {
                  + container_port = 8080
                  + name           = (known after apply)
                }

              + resources {
                  + cpu_idle          = false
                  + limits            = {
                      + "cpu"    = "1"
                      + "memory" = "256Mi"
                    }
                  + startup_cpu_boost = true
                }

              + startup_probe {
                  + failure_threshold     = 3
                  + initial_delay_seconds = 5
                  + period_seconds        = 10
                  + timeout_seconds       = 3

                  + http_get {
                      + path = "/healthz"
                      + port = (known after apply)
                    }
                }
            }

          + scaling {
              + max_instance_count = 1
              + min_instance_count = 0
            }
        }

      + traffic {
          + percent = 100
          + type    = "TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST"
        }
    }

  # module.apps.google_cloud_run_v2_service.shehryar_api will be updated in-place
  ~ resource "google_cloud_run_v2_service" "shehryar_api" {
      - client                  = "gcloud" -> null
      - client_version          = "564.0.0" -> null
        id                      = "projects/firebase-cloud-491613/locations/europe-west2/services/shehryar-api"
        name                    = "shehryar-api"
        # (33 unchanged attributes hidden)

      - scaling {
          - manual_instance_count = 0 -> null
          - min_instance_count    = 0 -> null
            # (1 unchanged attribute hidden)
        }

        # (2 unchanged blocks hidden)
    }

  # module.apps.google_cloud_run_v2_service_iam_member.mocktail_public will be created
  + resource "google_cloud_run_v2_service_iam_member" "mocktail_public" {
      + etag     = (known after apply)
      + id       = (known after apply)
      + location = "europe-west2"
      + member   = "allUsers"
      + name     = "mocktail"
      + project  = "firebase-cloud-491613"
      + role     = "roles/run.invoker"
    }

  # module.apps.google_firebase_hosting_custom_domain.mocktail will be created
  + resource "google_firebase_hosting_custom_domain" "mocktail" {
      + cert                  = (known after apply)
      + cert_preference       = (known after apply)
      + create_time           = (known after apply)
      + custom_domain         = "mocktail.junaid.guru"
      + delete_time           = (known after apply)
      + etag                  = (known after apply)
      + expire_time           = (known after apply)
      + host_state            = (known after apply)
      + id                    = (known after apply)
      + issues                = (known after apply)
      + name                  = (known after apply)
      + ownership_state       = (known after apply)
      + project               = "firebase-cloud-491613"
      + reconciling           = (known after apply)
      + required_dns_updates  = (known after apply)
      + site_id               = "mocktail"
      + update_time           = (known after apply)
      + wait_dns_verification = false
    }

  # module.project_setup.google_identity_platform_config.auth will be updated in-place
  ~ resource "google_identity_platform_config" "auth" {
        id                         = "projects/firebase-cloud-491613/config"
        name                       = "projects/563789376070/config"
        # (3 unchanged attributes hidden)

      - multi_tenant {
          - allow_tenants           = false -> null
            # (1 unchanged attribute hidden)
        }

      ~ sign_in {
            # (2 unchanged attributes hidden)

          - phone_number {
              - enabled            = false -> null
              - test_phone_numbers = {} -> null
            }

            # (2 unchanged blocks hidden)
        }

        # (4 unchanged blocks hidden)
    }

  # module.apps.module.amazing_landing_cloud_run.google_cloud_run_v2_service.default will be updated in-place
  ~ resource "google_cloud_run_v2_service" "default" {
      - client                  = "gcloud" -> null
      - client_version          = "564.0.0" -> null
        id                      = "projects/firebase-cloud-491613/locations/europe-west2/services/amazing-landing-api"
        name                    = "amazing-landing-api"
        # (33 unchanged attributes hidden)

      - scaling {
          - manual_instance_count = 0 -> null
          - min_instance_count    = 0 -> null
            # (1 unchanged attribute hidden)
        }

      ~ template {
          - revision                         = "amazing-landing-api-00015-jic" -> null
            # (9 unchanged attributes hidden)

            # (2 unchanged blocks hidden)
        }

        # (2 unchanged blocks hidden)
    }

  # module.apps.module.amazing_landing_hosting.google_firebase_hosting_version.default must be replaced
-/+ resource "google_firebase_hosting_version" "default" {
      ~ id         = "sites/amazing-landing/versions/504f28d0d1e5a4b8" -> (known after apply)
      ~ name       = "sites/amazing-landing/versions/504f28d0d1e5a4b8" -> (known after apply)
      ~ version_id = "504f28d0d1e5a4b8" -> (known after apply)
        # (1 unchanged attribute hidden)

      + config { # forces replacement
          + headers { # forces replacement
              + glob    = "**" # forces replacement
              + headers = { # forces replacement
                  + "Permissions-Policy"     = "geolocation=(), microphone=(), camera=()"
                  + "Referrer-Policy"        = "strict-origin-when-cross-origin"
                  + "X-Content-Type-Options" = "nosniff"
                  + "X-Frame-Options"        = "DENY"
                  + "X-XSS-Protection"       = "1; mode=block"
                }
            }
          + headers { # forces replacement
              + glob    = "**/*.@(js|css|svg|png|jpg|jpeg|gif|ico|woff2)" # forces replacement
              + headers = { # forces replacement
                  + "Cache-Control" = "public, max-age=31536000, immutable"
                }
            }
          + rewrites { # forces replacement
              + glob = "**" # forces replacement
              + path = "/index.html" # forces replacement
            }
        }
    }

  # module.apps.module.azadi_cloud_run.google_cloud_run_v2_service.default will be updated in-place
  ~ resource "google_cloud_run_v2_service" "default" {
        id                      = "projects/firebase-cloud-491613/locations/europe-west2/services/azadi-api"
        name                    = "azadi-api"
        # (35 unchanged attributes hidden)

      - scaling {
          - manual_instance_count = 0 -> null
          - min_instance_count    = 0 -> null
            # (1 unchanged attribute hidden)
        }

        # (3 unchanged blocks hidden)
    }

  # module.apps.module.azadi_go_cloud_run.google_cloud_run_v2_service.default will be updated in-place
  ~ resource "google_cloud_run_v2_service" "default" {
        id                      = "projects/firebase-cloud-491613/locations/europe-west2/services/azadi-go-api"
        name                    = "azadi-go-api"
        # (35 unchanged attributes hidden)

      - scaling {
          - manual_instance_count = 0 -> null
          - min_instance_count    = 0 -> null
            # (1 unchanged attribute hidden)
        }

        # (3 unchanged blocks hidden)
    }

  # module.apps.module.hooklab_cloud_run.google_cloud_run_v2_service.default will be updated in-place
  ~ resource "google_cloud_run_v2_service" "default" {
      - client                  = "gcloud" -> null
      - client_version          = "564.0.0" -> null
        id                      = "projects/firebase-cloud-491613/locations/europe-west2/services/hooklab-api"
        name                    = "hooklab-api"
        # (33 unchanged attributes hidden)

      - scaling {
          - manual_instance_count = 0 -> null
          - min_instance_count    = 0 -> null
            # (1 unchanged attribute hidden)
        }

        # (3 unchanged blocks hidden)
    }

  # module.apps.module.hooklab_hosting.google_firebase_hosting_version.default must be replaced
-/+ resource "google_firebase_hosting_version" "default" {
      ~ id         = "sites/hooklab/versions/8219e1e95f34a7a9" -> (known after apply)
      ~ name       = "sites/hooklab/versions/8219e1e95f34a7a9" -> (known after apply)
      ~ version_id = "8219e1e95f34a7a9" -> (known after apply)
        # (1 unchanged attribute hidden)

      + config { # forces replacement
          + headers { # forces replacement
              + glob    = "**" # forces replacement
              + headers = { # forces replacement
                  + "Permissions-Policy"     = "geolocation=(), microphone=(), camera=()"
                  + "Referrer-Policy"        = "strict-origin-when-cross-origin"
                  + "X-Content-Type-Options" = "nosniff"
                  + "X-Frame-Options"        = "DENY"
                  + "X-XSS-Protection"       = "1; mode=block"
                }
            }
          + headers { # forces replacement
              + glob    = "**/*.@(js|css|svg|png|jpg|jpeg|gif|ico|woff2)" # forces replacement
              + headers = { # forces replacement
                  + "Cache-Control" = "public, max-age=31536000, immutable"
                }
            }
          + rewrites { # forces replacement
              + glob = "**" # forces replacement
              + path = "/index.html" # forces replacement
            }
        }
    }

  # module.apps.module.mocktail_email_auth_cloud_run.google_cloud_run_v2_service.default will be created
  + resource "google_cloud_run_v2_service" "default" {
      + conditions              = (known after apply)
      + create_time             = (known after apply)
      + creator                 = (known after apply)
      + delete_time             = (known after apply)
      + deletion_protection     = false
      + effective_annotations   = (known after apply)
      + effective_labels        = {
          + "goog-terraform-provisioned" = "true"
        }
      + etag                    = (known after apply)
      + expire_time             = (known after apply)
      + generation              = (known after apply)
      + id                      = (known after apply)
      + ingress                 = (known after apply)
      + last_modifier           = (known after apply)
      + latest_created_revision = (known after apply)
      + latest_ready_revision   = (known after apply)
      + launch_stage            = (known after apply)
      + location                = "europe-west2"
      + name                    = "mocktail-email-auth"
      + observed_generation     = (known after apply)
      + project                 = "firebase-cloud-491613"
      + reconciling             = (known after apply)
      + terminal_condition      = (known after apply)
      + terraform_labels        = {
          + "goog-terraform-provisioned" = "true"
        }
      + traffic_statuses        = (known after apply)
      + uid                     = (known after apply)
      + update_time             = (known after apply)
      + uri                     = (known after apply)
      + urls                    = (known after apply)

      + template {
          + execution_environment            = "EXECUTION_ENVIRONMENT_GEN2"
          + max_instance_request_concurrency = (known after apply)
          + service_account                  = "mocktail-runtime@firebase-cloud-491613.iam.gserviceaccount.com"
          + timeout                          = "300s"

          + containers {
              + build_info = (known after apply)
              + image      = "europe-west2-docker.pkg.dev/firebase-cloud-491613/firebase-cloud/mocktail-email-auth:latest"

              + env {
                  # At least one attribute in this block is (or was) sensitive,
                  # so its contents will not be displayed.
                }
              + env {
                  # At least one attribute in this block is (or was) sensitive,
                  # so its contents will not be displayed.
                }
              + env {
                  # At least one attribute in this block is (or was) sensitive,
                  # so its contents will not be displayed.
                }
              + env {
                  # At least one attribute in this block is (or was) sensitive,
                  # so its contents will not be displayed.
                }
              + env {
                  # At least one attribute in this block is (or was) sensitive,
                  # so its contents will not be displayed.
                }
              + env {
                  # At least one attribute in this block is (or was) sensitive,
                  # so its contents will not be displayed.
                }
              + env {
                  # At least one attribute in this block is (or was) sensitive,
                  # so its contents will not be displayed.
                }

              + liveness_probe {
                  + failure_threshold     = 3
                  + initial_delay_seconds = 0
                  + period_seconds        = 30
                  + timeout_seconds       = 3

                  + http_get {
                      + path = "/healthz"
                      + port = (known after apply)
                    }
                }

              + ports (known after apply)

              + resources {
                  + cpu_idle          = true
                  + limits            = {
                      + "cpu"    = "1"
                      + "memory" = "512Mi"
                    }
                  + startup_cpu_boost = true
                }

              + startup_probe {
                  + failure_threshold     = 3
                  + initial_delay_seconds = 5
                  + period_seconds        = 10
                  + timeout_seconds       = 3

                  + http_get {
                      + path = "/healthz"
                      + port = (known after apply)
                    }
                }
            }

          + scaling {
              + max_instance_count = 10
              + min_instance_count = 0
            }
        }

      + traffic {
          + percent = 100
          + type    = "TRAFFIC_TARGET_ALLOCATION_TYPE_LATEST"
        }
    }

  # module.apps.module.mocktail_email_auth_cloud_run.google_cloud_run_v2_service_iam_member.public[0] will be created
  + resource "google_cloud_run_v2_service_iam_member" "public" {
      + etag     = (known after apply)
      + id       = (known after apply)
      + location = "europe-west2"
      + member   = "allUsers"
      + name     = "mocktail-email-auth"
      + project  = "firebase-cloud-491613"
      + role     = "roles/run.invoker"
    }

  # module.apps.module.mocktail_firestore.google_firestore_database.app will be created
  + resource "google_firestore_database" "app" {
      + app_engine_integration_mode       = (known after apply)
      + concurrency_mode                  = (known after apply)
      + create_time                       = (known after apply)
      + database_edition                  = (known after apply)
      + delete_protection_state           = (known after apply)
      + deletion_policy                   = "ABANDON"
      + earliest_version_time             = (known after apply)
      + etag                              = (known after apply)
      + id                                = (known after apply)
      + key_prefix                        = (known after apply)
      + location_id                       = "europe-west2"
      + name                              = "mocktail"
      + point_in_time_recovery_enablement = "POINT_IN_TIME_RECOVERY_DISABLED"
      + project                           = "firebase-cloud-491613"
      + type                              = "FIRESTORE_NATIVE"
      + uid                               = (known after apply)
      + update_time                       = (known after apply)
      + version_retention_period          = (known after apply)
    }

  # module.apps.module.mocktail_hosting.google_firebase_hosting_site.default will be created
  + resource "google_firebase_hosting_site" "default" {
      + default_url = (known after apply)
      + id          = (known after apply)
      + name        = (known after apply)
      + project     = "firebase-cloud-491613"
      + site_id     = "mocktail"
      + type        = (known after apply)
    }

  # module.apps.module.mocktail_hosting.google_firebase_hosting_version.default will be created
  + resource "google_firebase_hosting_version" "default" {
      + id         = (known after apply)
      + name       = (known after apply)
      + site_id    = "mocktail"
      + version_id = (known after apply)

      + config {
          + headers {
              + glob    = "**"
              + headers = {
                  + "Permissions-Policy"     = "geolocation=(), microphone=(), camera=()"
                  + "Referrer-Policy"        = "strict-origin-when-cross-origin"
                  + "X-Content-Type-Options" = "nosniff"
                  + "X-Frame-Options"        = "DENY"
                  + "X-XSS-Protection"       = "1; mode=block"
                }
            }
          + headers {
              + glob    = "**/*.@(js|css|svg|png|jpg|jpeg|gif|ico|woff2)"
              + headers = {
                  + "Cache-Control" = "public, max-age=31536000, immutable"
                }
            }
          + rewrites {
              + glob = "**"
              + path = "/index.html"
            }
        }
    }

  # module.apps.module.mocktail_identity.google_iam_workload_identity_pool_provider.github will be created
  + resource "google_iam_workload_identity_pool_provider" "github" {
      + attribute_condition                = "assertion.repository == 'poly-glot/mocktail'"
      + attribute_mapping                  = {
          + "attribute.actor"      = "assertion.actor"
          + "attribute.ref"        = "assertion.ref"
          + "attribute.repository" = "assertion.repository"
          + "google.subject"       = "assertion.sub"
        }
      + display_name                       = "mocktail GitHub OIDC"
      + id                                 = (known after apply)
      + name                               = (known after apply)
      + project                            = "firebase-cloud-491613"
      + state                              = (known after apply)
      + workload_identity_pool_id          = "github-actions-pool"
      + workload_identity_pool_provider_id = "mocktail-github"

      + oidc {
          + issuer_uri = "https://token.actions.githubusercontent.com"
        }
    }

  # module.apps.module.mocktail_identity.google_project_iam_member.ci_cd_roles["roles/artifactregistry.writer"] will be created
  + resource "google_project_iam_member" "ci_cd_roles" {
      + etag    = (known after apply)
      + id      = (known after apply)
      + member  = "serviceAccount:mocktail-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com"
      + project = "firebase-cloud-491613"
      + role    = "roles/artifactregistry.writer"
    }

  # module.apps.module.mocktail_identity.google_project_iam_member.ci_cd_roles["roles/cloudbuild.builds.builder"] will be created
  + resource "google_project_iam_member" "ci_cd_roles" {
      + etag    = (known after apply)
      + id      = (known after apply)
      + member  = "serviceAccount:mocktail-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com"
      + project = "firebase-cloud-491613"
      + role    = "roles/cloudbuild.builds.builder"
    }

  # module.apps.module.mocktail_identity.google_project_iam_member.ci_cd_roles["roles/firebase.admin"] will be created
  + resource "google_project_iam_member" "ci_cd_roles" {
      + etag    = (known after apply)
      + id      = (known after apply)
      + member  = "serviceAccount:mocktail-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com"
      + project = "firebase-cloud-491613"
      + role    = "roles/firebase.admin"
    }

  # module.apps.module.mocktail_identity.google_project_iam_member.ci_cd_roles["roles/firebasehosting.admin"] will be created
  + resource "google_project_iam_member" "ci_cd_roles" {
      + etag    = (known after apply)
      + id      = (known after apply)
      + member  = "serviceAccount:mocktail-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com"
      + project = "firebase-cloud-491613"
      + role    = "roles/firebasehosting.admin"
    }

  # module.apps.module.mocktail_identity.google_project_iam_member.ci_cd_roles["roles/iam.serviceAccountUser"] will be created
  + resource "google_project_iam_member" "ci_cd_roles" {
      + etag    = (known after apply)
      + id      = (known after apply)
      + member  = "serviceAccount:mocktail-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com"
      + project = "firebase-cloud-491613"
      + role    = "roles/iam.serviceAccountUser"
    }

  # module.apps.module.mocktail_identity.google_project_iam_member.ci_cd_roles["roles/run.admin"] will be created
  + resource "google_project_iam_member" "ci_cd_roles" {
      + etag    = (known after apply)
      + id      = (known after apply)
      + member  = "serviceAccount:mocktail-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com"
      + project = "firebase-cloud-491613"
      + role    = "roles/run.admin"
    }

  # module.apps.module.mocktail_identity.google_project_iam_member.ci_cd_roles["roles/secretmanager.secretAccessor"] will be created
  + resource "google_project_iam_member" "ci_cd_roles" {
      + etag    = (known after apply)
      + id      = (known after apply)
      + member  = "serviceAccount:mocktail-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com"
      + project = "firebase-cloud-491613"
      + role    = "roles/secretmanager.secretAccessor"
    }

  # module.apps.module.mocktail_identity.google_project_iam_member.ci_cd_roles["roles/serviceusage.serviceUsageConsumer"] will be created
  + resource "google_project_iam_member" "ci_cd_roles" {
      + etag    = (known after apply)
      + id      = (known after apply)
      + member  = "serviceAccount:mocktail-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com"
      + project = "firebase-cloud-491613"
      + role    = "roles/serviceusage.serviceUsageConsumer"
    }

  # module.apps.module.mocktail_identity.google_project_iam_member.runtime_roles["roles/cloudtrace.agent"] will be created
  + resource "google_project_iam_member" "runtime_roles" {
      + etag    = (known after apply)
      + id      = (known after apply)
      + member  = "serviceAccount:mocktail-runtime@firebase-cloud-491613.iam.gserviceaccount.com"
      + project = "firebase-cloud-491613"
      + role    = "roles/cloudtrace.agent"
    }

  # module.apps.module.mocktail_identity.google_project_iam_member.runtime_roles["roles/datastore.user"] will be created
  + resource "google_project_iam_member" "runtime_roles" {
      + etag    = (known after apply)
      + id      = (known after apply)
      + member  = "serviceAccount:mocktail-runtime@firebase-cloud-491613.iam.gserviceaccount.com"
      + project = "firebase-cloud-491613"
      + role    = "roles/datastore.user"
    }

  # module.apps.module.mocktail_identity.google_project_iam_member.runtime_roles["roles/firebaseauth.admin"] will be created
  + resource "google_project_iam_member" "runtime_roles" {
      + etag    = (known after apply)
      + id      = (known after apply)
      + member  = "serviceAccount:mocktail-runtime@firebase-cloud-491613.iam.gserviceaccount.com"
      + project = "firebase-cloud-491613"
      + role    = "roles/firebaseauth.admin"
    }

  # module.apps.module.mocktail_identity.google_project_iam_member.runtime_roles["roles/iam.serviceAccountTokenCreator"] will be created
  + resource "google_project_iam_member" "runtime_roles" {
      + etag    = (known after apply)
      + id      = (known after apply)
      + member  = "serviceAccount:mocktail-runtime@firebase-cloud-491613.iam.gserviceaccount.com"
      + project = "firebase-cloud-491613"
      + role    = "roles/iam.serviceAccountTokenCreator"
    }

  # module.apps.module.mocktail_identity.google_project_iam_member.runtime_roles["roles/logging.logWriter"] will be created
  + resource "google_project_iam_member" "runtime_roles" {
      + etag    = (known after apply)
      + id      = (known after apply)
      + member  = "serviceAccount:mocktail-runtime@firebase-cloud-491613.iam.gserviceaccount.com"
      + project = "firebase-cloud-491613"
      + role    = "roles/logging.logWriter"
    }

  # module.apps.module.mocktail_identity.google_project_iam_member.runtime_roles["roles/monitoring.metricWriter"] will be created
  + resource "google_project_iam_member" "runtime_roles" {
      + etag    = (known after apply)
      + id      = (known after apply)
      + member  = "serviceAccount:mocktail-runtime@firebase-cloud-491613.iam.gserviceaccount.com"
      + project = "firebase-cloud-491613"
      + role    = "roles/monitoring.metricWriter"
    }

  # module.apps.module.mocktail_identity.google_project_iam_member.runtime_roles["roles/secretmanager.secretAccessor"] will be created
  + resource "google_project_iam_member" "runtime_roles" {
      + etag    = (known after apply)
      + id      = (known after apply)
      + member  = "serviceAccount:mocktail-runtime@firebase-cloud-491613.iam.gserviceaccount.com"
      + project = "firebase-cloud-491613"
      + role    = "roles/secretmanager.secretAccessor"
    }

  # module.apps.module.mocktail_identity.google_service_account.ci_cd will be created
  + resource "google_service_account" "ci_cd" {
      + account_id   = "mocktail-ci-cd"
      + description  = "CI/CD SA for poly-glot/mocktail"
      + disabled     = false
      + display_name = "mocktail GitHub Actions CI/CD"
      + email        = "mocktail-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com"
      + id           = (known after apply)
      + member       = "serviceAccount:mocktail-ci-cd@firebase-cloud-491613.iam.gserviceaccount.com"
      + name         = (known after apply)
      + project      = "firebase-cloud-491613"
      + unique_id    = (known after apply)
    }

  # module.apps.module.mocktail_identity.google_service_account.runtime will be created
  + resource "google_service_account" "runtime" {
      + account_id   = "mocktail-runtime"
      + description  = "Runtime identity for mocktail on Cloud Run"
      + disabled     = false
      + display_name = "mocktail Cloud Run Runtime"
      + email        = "mocktail-runtime@firebase-cloud-491613.iam.gserviceaccount.com"
      + id           = (known after apply)
      + member       = "serviceAccount:mocktail-runtime@firebase-cloud-491613.iam.gserviceaccount.com"
      + name         = (known after apply)
      + project      = "firebase-cloud-491613"
      + unique_id    = (known after apply)
    }

  # module.apps.module.mocktail_identity.google_service_account_iam_member.wif_binding will be created
  + resource "google_service_account_iam_member" "wif_binding" {
      + etag               = (known after apply)
      + id                 = (known after apply)
      + member             = "principalSet://iam.googleapis.com/projects/563789376070/locations/global/workloadIdentityPools/github-actions-pool/attribute.repository/poly-glot/mocktail"
      + role               = "roles/iam.workloadIdentityUser"
      + service_account_id = (known after apply)
    }

  # module.apps.module.openguessr_hosting.google_firebase_hosting_version.default must be replaced
-/+ resource "google_firebase_hosting_version" "default" {
      ~ id         = "sites/openguessr/versions/8b239311f164a5c6" -> (known after apply)
      ~ name       = "sites/openguessr/versions/8b239311f164a5c6" -> (known after apply)
      ~ version_id = "8b239311f164a5c6" -> (known after apply)
        # (1 unchanged attribute hidden)

      + config { # forces replacement
          + headers { # forces replacement
              + glob    = "**" # forces replacement
              + headers = { # forces replacement
                  + "Permissions-Policy"     = "geolocation=(), microphone=(), camera=()"
                  + "Referrer-Policy"        = "strict-origin-when-cross-origin"
                  + "X-Content-Type-Options" = "nosniff"
                  + "X-Frame-Options"        = "DENY"
                  + "X-XSS-Protection"       = "1; mode=block"
                }
            }
          + headers { # forces replacement
              + glob    = "**/*.@(js|css|svg|png|jpg|jpeg|gif|ico|woff2)" # forces replacement
              + headers = { # forces replacement
                  + "Cache-Control" = "public, max-age=31536000, immutable"
                }
            }
          + rewrites { # forces replacement
              + glob = "**" # forces replacement
              + path = "/index.html" # forces replacement
            }
        }
    }

  # module.apps.module.shehryar_db.data.google_secret_manager_secret.db_host will be read during apply
  # (depends on a resource or a module with changes pending)
 <= data "google_secret_manager_secret" "db_host" {
      + annotations           = (known after apply)
      + create_time           = (known after apply)
      + deletion_protection   = (known after apply)
      + effective_annotations = (known after apply)
      + effective_labels      = (known after apply)
      + expire_time           = (known after apply)
      + id                    = (known after apply)
      + labels                = (known after apply)
      + name                  = (known after apply)
      + project               = "firebase-cloud-491613"
      + replication           = (known after apply)
      + rotation              = (known after apply)
      + secret_id             = "db-host"
      + tags                  = (known after apply)
      + terraform_labels      = (known after apply)
      + topics                = (known after apply)
      + ttl                   = (known after apply)
      + version_aliases       = (known after apply)
      + version_destroy_ttl   = (known after apply)
    }

  # module.apps.module.shehryar_hosting.google_firebase_hosting_version.default must be replaced
-/+ resource "google_firebase_hosting_version" "default" {
      ~ id         = "sites/shehryar/versions/553ed63f7949bd13" -> (known after apply)
      ~ name       = "sites/shehryar/versions/553ed63f7949bd13" -> (known after apply)
      ~ version_id = "553ed63f7949bd13" -> (known after apply)
        # (1 unchanged attribute hidden)

      + config { # forces replacement
          + headers { # forces replacement
              + glob    = "**" # forces replacement
              + headers = { # forces replacement
                  + "Permissions-Policy"     = "geolocation=(), microphone=(), camera=()"
                  + "Referrer-Policy"        = "strict-origin-when-cross-origin"
                  + "X-Content-Type-Options" = "nosniff"
                  + "X-Frame-Options"        = "DENY"
                  + "X-XSS-Protection"       = "1; mode=block"
                }
            }
          + headers { # forces replacement
              + glob    = "**/*.@(js|css|svg|png|jpg|jpeg|gif|ico|woff2)" # forces replacement
              + headers = { # forces replacement
                  + "Cache-Control" = "public, max-age=31536000, immutable"
                }
            }
          + rewrites { # forces replacement
              + glob = "**" # forces replacement
              + path = "/index.html" # forces replacement
            }
        }
    }

Plan: 31 to add, 6 to change, 4 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to: tfplan

To perform exactly these actions, run the following command to apply:
    terraform apply "tfplan"

Triggered by @poly-glot, commit 23c3d71985288fe811c45924f0d2ad3a538f9db6

@poly-glot poly-glot merged commit 5e50913 into main May 4, 2026
2 checks passed
@poly-glot poly-glot deleted the feat/mocktail-onboarding branch May 4, 2026 20:50
@poly-glot poly-glot mentioned this pull request May 4, 2026
Merged
2 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@poly-glot