Skip to content

chore(terraform): preserve live Cloud SQL binlog flag - #709

Merged
jjcc123312 merged 1 commit into
mainfrom
codex/preserve-cloudsql-binlog-flag
Aug 13, 2026
Merged

chore(terraform): preserve live Cloud SQL binlog flag#709
jjcc123312 merged 1 commit into
mainfrom
codex/preserve-cloudsql-binlog-flag

Conversation

@jjcc123312

Copy link
Copy Markdown

Problem / evidence

A refreshing production Terraform plan proposed removing the live Cloud SQL flag log_bin_trust_function_creators=on. gcloud sql instances describe newapi-mysql confirms the flag is active alongside the declared database settings, and the instance is RUNNABLE with a 216 GB disk and the expected tier.

Scope / design

Declare the existing flag in the Cloud SQL module so Terraform preserves current production behavior instead of removing it during an unrelated apply.

Impact / risks

This is desired-state alignment only: production already has the exact value. No database restart, failover, replacement, or immediate infrastructure apply is required. Removing this flag could break function/trigger creation under binary logging, so preserving it is the conservative choice.

Validation

  • terraform fmt
  • terraform validate
  • Fresh local production plan no longer contains a Cloud SQL update
  • Plan remains 0 destroy, with no Cloud SQL or secret replacement

Deployment recommendation

  • Router deploy: not required
  • Other deploy targets: Terraform desired state only; no production apply needed for this PR
  • Risk / validation: retain the live flag and verify future full plans remain free of Cloud SQL changes

@jjcc123312
jjcc123312 merged commit 066bd66 into main Aug 13, 2026
2 checks passed
@jjcc123312
jjcc123312 deleted the codex/preserve-cloudsql-binlog-flag branch August 13, 2026 09:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant