[変更] メンテナンスウィンドウを設定

[xpadev-net]

月〜金の深夜26:00から翌07:00をメンテナンス範囲に設定しました

[github-actions]

terraform/basic

Terraform Format and Style 🖌success

Terraform Plan 📖success

Show Plan

```terraform Acquiring state lock. This may take a few moments... google_compute_network.default: Refreshing state... [id=projects/mitou-jr/global/networks/default] google_pubsub_topic.default: Refreshing state... [id=projects/mitou-jr/topics/mattermost-alert] google_monitoring_notification_channel.email: Refreshing state... [id=projects/mitou-jr/notificationChannels/12221508552024516705] google_storage_bucket.gcs-tf-basic: Refreshing state... [id=mitou-jr-tf-basic] google_kms_key_ring.primary-keyring: Refreshing state... [id=projects/mitou-jr/locations/asia-northeast1/keyRings/primary-keyring] google_compute_managed_ssl_certificate.default: Refreshing state... [id=projects/mitou-jr/global/sslCertificates/primary-cert] google_monitoring_notification_channel.default: Refreshing state... [id=projects/mitou-jr/notificationChannels/5741651829358921573] google_storage_bucket.secrets: Refreshing state... [id=mitou-jr-secret] google_sql_database_instance.primary: Refreshing state... [id=primary] google_compute_health_check.http-health-check: Refreshing state... [id=projects/mitou-jr/global/healthChecks/http-health-check] google_compute_global_address.lb-address: Refreshing state... [id=projects/mitou-jr/global/addresses/lb-address] google_storage_bucket.gcs-tf-iam: Refreshing state... [id=mitou-jr-tf-iam] google_storage_bucket.default: Refreshing state... [id=mitou-jr] google_dns_managed_zone.primary-zone: Refreshing state... [id=projects/mitou-jr/managedZones/mattermost-dnszone] google_monitoring_uptime_check_config.https_check: Refreshing state... [id=projects/mitou-jr/uptimeCheckConfigs/10816343371595221599] google_compute_backend_service.default: Refreshing state... [id=projects/mitou-jr/global/backendServices/backend-service] google_compute_firewall.allow-hc: Refreshing state... [id=projects/mitou-jr/global/firewalls/allow-hc] google_compute_firewall.default: Refreshing state... [id=projects/mitou-jr/global/firewalls/allow-egress] google_compute_subnetwork.default: Refreshing state... [id=projects/mitou-jr/regions/asia-northeast1/subnetworks/main-subnet] google_compute_firewall.ssh: Refreshing state... [id=projects/mitou-jr/global/firewalls/allow-ssh] google_compute_firewall.allow-mattertmost: Refreshing state... [id=projects/mitou-jr/global/firewalls/allow-mattermost] google_compute_url_map.default: Refreshing state... [id=projects/mitou-jr/global/urlMaps/urlmap] google_dns_record_set.primary-a-record: Refreshing state... [id=projects/mitou-jr/managedZones/mattermost-dnszone/rrsets/mattermost.jr.mitou.org./A] google_monitoring_alert_policy.https_check_alert: Refreshing state... [id=projects/mitou-jr/alertPolicies/21376706582861365] google_compute_target_https_proxy.default: Refreshing state... [id=projects/mitou-jr/global/targetHttpsProxies/primary-https-proxy] google_compute_global_forwarding_rule.google_compute_forwarding_rule: Refreshing state... [id=projects/mitou-jr/global/forwardingRules/l7-forwarding-rule] google_kms_crypto_key.primary-key: Refreshing state... [id=projects/mitou-jr/locations/asia-northeast1/keyRings/primary-keyring/cryptoKeys/primary-key] google_container_cluster.primary: Refreshing state... [id=projects/mitou-jr/locations/asia-northeast1/clusters/primary-cluster]

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the
last "terraform apply":

google_container_cluster.primary has been changed

~ resource "google_container_cluster" "primary" {
id = "projects/mitou-jr/locations/asia-northeast1/clusters/primary-cluster"
~ master_version = "1.26.5-gke.1200" -> "1.29.7-gke.1104000"
name = "primary-cluster"
~ node_version = "1.26.5-gke.1200" -> "1.29.7-gke.1104000"
# (23 unchanged attributes hidden)

  ~ node_pool {
        name                        = "nap-v4ripvaw"
      ~ version                     = "1.26.5-gke.1200" -> "1.29.7-gke.1104000"
        # (6 unchanged attributes hidden)




        # (4 unchanged blocks hidden)
    }

  + private_cluster_config {
      + enable_private_endpoint = false
      + enable_private_nodes    = false
      + private_endpoint        = "10.10.10.62"
      + public_endpoint         = "34.84.41.237"

      + master_global_access_config {
          + enabled = false
        }
    }



    # (13 unchanged blocks hidden)
}

google_compute_subnetwork.default has been changed

~ resource "google_compute_subnetwork" "default" {
id = "projects/mitou-jr/regions/asia-northeast1/subnetworks/main-subnet"
name = "main-subnet"
~ private_ip_google_access = false -> true
# (11 unchanged attributes hidden)
}

google_compute_managed_ssl_certificate.default has been changed

~ resource "google_compute_managed_ssl_certificate" "default" {
~ expire_time = "2023-09-17T23:40:40.000-07:00" -> "2024-10-18T11:54:40.000-07:00"
id = "projects/mitou-jr/global/sslCertificates/primary-cert"
name = "primary-cert"
# (6 unchanged attributes hidden)

    # (1 unchanged block hidden)
}

google_sql_database_instance.primary has been deleted

• resource "google_sql_database_instance" "primary" {

  • connection_name = "mitou-jr:asia-northeast1:primary" -> null

  • database_version = "POSTGRES_11" -> null

  • deletion_protection = true -> null

  • first_ip_address = "35.187.209.37" -> null

  • id = "primary" -> null

  • ip_address = [

    • {
      • ip_address = "35.187.209.37"
      • time_to_retire = ""
      • type = "PRIMARY"
        },
    • {
      • ip_address = "34.146.119.19"
      • time_to_retire = ""
      • type = "OUTGOING"
        },
        ] -> null

  • name = "primary" -> null

  • project = "mitou-jr" -> null

  • public_ip_address = "35.187.209.37" -> null

  • region = "asia-northeast1" -> null

  • self_link = "https://sqladmin.googleapis.com/sql/v1beta4/projects/mitou-jr/instances/primary" -> null

  • server_ca_cert = [

    • {
      • cert = <<-EOT
        -----BEGIN CERTIFICATE-----
        MIIDfzCCAmegAwIBAgIBADANBgkqhkiG9w0BAQsFADB3MS0wKwYDVQQuEyQwNzFl
        M2MwMS0wYTQwLTQ2M2ItODllOC0xMmU1NzdjZGFjYWExIzAhBgNVBAMTGkdvb2ds
        ZSBDbG91ZCBTUUwgU2VydmVyIENBMRQwEgYDVQQKEwtHb29nbGUsIEluYzELMAkG
        A1UEBhMCVVMwHhcNMjExMTI2MTUxNjI5WhcNMzExMTI0MTUxNzI5WjB3MS0wKwYD
        VQQuEyQwNzFlM2MwMS0wYTQwLTQ2M2ItODllOC0xMmU1NzdjZGFjYWExIzAhBgNV
        BAMTGkdvb2dsZSBDbG91ZCBTUUwgU2VydmVyIENBMRQwEgYDVQQKEwtHb29nbGUs
        IEluYzELMAkGA1UEBhMCVVMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
        AQCsFRB2xbK6+cBjYTG7FujkYiHxy4+qViTPkaNW3k0Xqgpz5t95/SJr2rkPaC+e
        xJMd6o+/vdo6skCcqKgD4jrvbO6zbfcB5SWR8n2XMNiEiqddqq/9lnZSbc5ygSzA
        g0gfe+gIIP6aM2qd3Ndb/aK0LkfTqPz5VLf71oDkbLO3ThiorlHCJUCFdAzmOlDH
        C2Zcy6++rirVUiBMfqqnfYbDnjNxn7GLVb4QjDxiW8EK8H+IjZdY41DndUh9la6x
        A441ddrveI80nQKku5C076o2tp/8izsiK13d/KnztcaFuLRQxJNj/wwtVuATK34o
        FwDoEU5iDwIu4B7L3SyOC/ZRAgMBAAGjFjAUMBIGA1UdEwEB/wQIMAYBAf8CAQAw
        DQYJKoZIhvcNAQELBQADggEBAJn4tc4Dfo9JavLG4YukfRmjAgKqd1Dbta2zkh9R
        bquOyfrIZ/m/0pUJw0pEh0k6f5F5j0iNXGOqEWQ1J4ns0pJMAwuk084DAHlFQ7Ii
        uD3nGg0Os05Gu51lAYwBQESZuvHurZJ84EGTRvnbpTDR1VyUaG0EVciil1tggaF0
        +5qhZqvMmxGXJuJtESayTBTCLV4lPlhkoC/n+6EWuEmqnH94Eqq7LdiJ9XcJS69m
        fFNSm7pONHPmRCXuZ/Vl83e1Fe4r5dFSDa6d/PeujGiTDiKgsd5kaM38dwosuHJe
        5Di3/fL9P23uNj6kwyOZlojU21oHluHOSeAjqZa0Y+aPjp4=
        -----END CERTIFICATE-----
        EOT
      • common_name = "C=US,O=Google\, Inc,CN=Google Cloud SQL Server CA,dnQualifier=071e3c01-0a40-463b-89e8-12e577cdacaa"
      • create_time = "2021-11-26T15:16:29.904Z"
      • expiration_time = "2031-11-24T15:17:29.904Z"
      • sha1_fingerprint = "97c4fe530b9ac3f2860996ed903c2cf8975a9cae"
        },
        ] -> null

  • service_account_email_address = "[email protected]" -> null

  • settings {

    • activation_policy = "ALWAYS" -> null

    • availability_type = "ZONAL" -> null

    • disk_autoresize = true -> null

    • disk_autoresize_limit = 0 -> null

    • disk_size = 10 -> null

    • disk_type = "PD_SSD" -> null

    • pricing_plan = "PER_USE" -> null

    • tier = "db-f1-micro" -> null

    • user_labels = {} -> null

    • version = 134 -> null

    • backup_configuration {

      • binary_log_enabled = false -> null

      • enabled = true -> null

      • location = "asia-northeast1" -> null

      • point_in_time_recovery_enabled = false -> null

      • start_time = "03:00" -> null

      • transaction_log_retention_days = 3 -> null

      • backup_retention_settings {

        • retained_backups = 3 -> null
        • retention_unit = "COUNT" -> null
          }
          }

    • ip_configuration {

      • ipv4_enabled = true -> null

      • require_ssl = false -> null

      • authorized_networks {

        • name = "anonymous_allow" -> null
        • value = "0.0.0.0/0" -> null
          }
          }

    • location_preference {

      • zone = "asia-northeast1-a" -> null
        }
        }
        }

google_kms_crypto_key.primary-key has been changed

~ resource "google_kms_crypto_key" "primary-key" {
~ destroy_scheduled_duration = "86400s" -> "2592000s"
id = "projects/mitou-jr/locations/asia-northeast1/keyRings/primary-keyring/cryptoKeys/primary-key"
name = "primary-key"
# (5 unchanged attributes hidden)

    # (1 unchanged block hidden)
}

google_compute_url_map.default has been changed

~ resource "google_compute_url_map" "default" {
~ fingerprint = "z44lRc7jl98=" -> "UEMFqxUsNvo="
id = "projects/mitou-jr/global/urlMaps/urlmap"
name = "urlmap"
# (6 unchanged attributes hidden)

    # (2 unchanged blocks hidden)
}

Unless you have made equivalent changes to your configuration, or ignored the
relevant attributes using ignore_changes, the following plan may include
actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:

• create
  ~ update in-place

Terraform will perform the following actions:

google_compute_subnetwork.default will be updated in-place

~ resource "google_compute_subnetwork" "default" {
id = "projects/mitou-jr/regions/asia-northeast1/subnetworks/main-subnet"
name = "main-subnet"
- private_ip_google_access = true -> null
# (11 unchanged attributes hidden)
}

google_container_cluster.primary will be updated in-place

~ resource "google_container_cluster" "primary" {
id = "projects/mitou-jr/locations/asia-northeast1/clusters/primary-cluster"
name = "primary-cluster"
# (25 unchanged attributes hidden)

  + maintenance_policy {

      + recurring_window {
          + end_time   = "2019-01-01T22:00:00Z"
          + recurrence = "FREQ=WEEKLY;BYDAY=MO,TU,WE,TH,FR"
          + start_time = "2019-01-01T17:00:00Z"
        }
    }









    # (15 unchanged blocks hidden)
}

google_sql_database_instance.primary will be created

• resource "google_sql_database_instance" "primary" {

  • connection_name = (known after apply)

  • database_version = "POSTGRES_11"

  • deletion_protection = true

  • first_ip_address = (known after apply)

  • id = (known after apply)

  • ip_address = (known after apply)

  • master_instance_name = (known after apply)

  • name = "primary"

  • private_ip_address = (known after apply)

  • project = (known after apply)

  • public_ip_address = (known after apply)

  • region = "asia-northeast1"

  • self_link = (known after apply)

  • server_ca_cert = (known after apply)

  • service_account_email_address = (known after apply)

  • replica_configuration {

    • ca_certificate = (known after apply)
    • client_certificate = (known after apply)
    • client_key = (known after apply)
    • connect_retry_interval = (known after apply)
    • dump_file_path = (known after apply)
    • failover_target = (known after apply)
    • master_heartbeat_period = (known after apply)
    • password = (sensitive value)
    • ssl_cipher = (known after apply)
    • username = (known after apply)
    • verify_server_certificate = (known after apply)
      }

  • settings {

    • activation_policy = "ALWAYS"

    • availability_type = "ZONAL"

    • disk_autoresize = true

    • disk_autoresize_limit = 0

    • disk_size = (known after apply)

    • disk_type = "PD_SSD"

    • pricing_plan = "PER_USE"

    • tier = "db-f1-micro"

    • user_labels = (known after apply)

    • version = (known after apply)

    • backup_configuration {

      • enabled = true

      • location = "asia-northeast1"

      • start_time = "03:00"

      • transaction_log_retention_days = 3

      • backup_retention_settings {

        • retained_backups = 3
        • retention_unit = "COUNT"
          }
          }

    • ip_configuration {

      • ipv4_enabled = (known after apply)

      • private_network = (known after apply)

      • require_ssl = (known after apply)

      • authorized_networks {

        • expiration_time = (known after apply)
        • name = (known after apply)
        • value = (known after apply)
          }
          }

    • location_preference {

      • follow_gae_application = (known after apply)
      • zone = (known after apply)
        }
        }
        }

Plan: 1 to add, 2 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Note: You didn't use the -out option to save this plan, so Terraform can't
guarantee to take exactly these actions if you run "terraform apply" now.

</details>