Initial commit

Author: eriksw

.terraform-version

@@ -0,0 +1 @@
+0.12.24

README.md

@@ -0,0 +1,9 @@
+# tf-performance-issue-test
+
+This repository contains a Terraform workspace that exacerbates a performance
+issue.
+
+The resources of the real workspace this is based upon have been replaced with
+`null_resource` resources that use a harmless `local-exec` provisioner command
+to allow for easier investigation of the graph-related performance issues
+separate from the provider/cloud interactions.

bucket.tf

@@ -0,0 +1,70 @@
+locals {
+  buckets = [
+    "aaron",
+    "amparo",
+    "arturo",
+    "bill",
+    "billy",
+    "cathy",
+    "charlene",
+    "david",
+    "elsie",
+    "erica",
+    "ernestine",
+    "fannie",
+    "frederic",
+    "gary",
+    "george",
+    "gerald",
+    "homer",
+    "jaimie",
+    "jay",
+    "john",
+    "joseph",
+    "lynn",
+    "maria",
+    "matthew",
+    "patricia",
+    "patrick",
+    "paula",
+    "peggy",
+    "philip",
+    "roberta",
+    "thomas",
+  ]
+}
+
+# Stand-in for google_storage_bucket
+resource "null_resource" "bucket" {
+  for_each = {
+    for pair in setproduct(local.developers, local.buckets) : "${pair[0]}__${pair[1]}" => {
+      developer = pair[0]
+      bucket    = pair[1]
+    }
+  }
+
+  provisioner "local-exec" {
+    command = "echo ${each.value.developer} ${each.value.bucket} ${random_id.bucket_name[each.key].hex} in project ${null_resource.project[each.value.developer].id}"
+  }
+
+  depends_on = [
+    null_resource.project_service,
+  ]
+}
+
+resource "random_id" "bucket_name" {
+  for_each = {
+    for pair in setproduct(local.developers, local.buckets) : "${pair[0]}__${pair[1]}" => {
+      developer = pair[0]
+      bucket    = pair[1]
+    }
+  }
+
+  byte_length = 4
+  prefix      = "${each.value.bucket}-"
+
+  keepers = {
+    developer = each.value.developer
+    bucket    = each.value.bucket
+  }
+}

configuration.tf

@@ -0,0 +1,19 @@
+locals {
+  configurations = { for name in local.developers : name => jsonencode({
+    service_account = null_resource.service_account[name].id
+    project         = null_resource.project[name].id
+    signing_key     = null_resource.signing_key_version[name].id
+    buckets = {
+      for b in local.buckets : b => null_resource.bucket["${name}__${b}"].id
+    }
+  }) }
+}
+
+# Stand-in for google_storage_bucket_object
+resource "null_resource" "configuration_file_output" {
+  for_each = local.developers
+
+  provisioner "local-exec" {
+    command = "echo ${each.value} ${sha256(local.configurations[each.value])}"
+  }
+}

iam.tf

@@ -0,0 +1,29 @@
+/*
+data "google_iam_policy" "project_iam_policy" {
+  for_each = local.developers
+
+  binding {
+    role = "roles/owner"
+
+    members = [
+      "serviceAccount:${null_resource.service_account[each.value].id}@bar.com",
+    ]
+  }
+}
+*/
+
+locals {
+  # Stand-in for google_iam_policy
+  project_iam_policy = { for n in local.developers : n => jsonencode({
+    foo = "serviceAccount:${null_resource.service_account[n].id}@bar.com"
+  }) }
+}
+
+# Stand-in for google_project_iam_policy
+resource "null_resource" "project_iam_policy" {
+  for_each = local.developers
+
+  provisioner "local-exec" {
+    command = "echo ${null_resource.project[each.value].id} ${sha256(local.project_iam_policy[each.value])}"
+  }
+}

main.tf

@@ -0,0 +1,35 @@
+locals {
+  developers = toset([for username in local.developer_usernames : lower(username)])
+
+  developer_usernames = toset([
+    "andrea",
+    "arthur",
+    "bettyann",
+    "bobby",
+    "dean",
+    "debra",
+    "dennis",
+    "edward",
+    "elvin",
+    "ernest",
+    "frank",
+    "iris",
+    "irma",
+    "jerry",
+    "jo",
+    "john",
+    "lucas",
+    "matthew",
+    "michael",
+    "patrice",
+    "pauline",
+    "pedro",
+    "ricardo",
+    "rose",
+    "ruth",
+    "sandra",
+    "shane",
+    "teddy",
+    "wesley",
+  ])
+}

project.tf

@@ -0,0 +1,14 @@
+# Stand-in for google_project
+resource "null_resource" "project" {
+  for_each = local.developers
+
+  provisioner "local-exec" {
+    command = "echo ${each.value} ${random_id.project_id[each.value].hex}"
+  }
+}
+
+resource "random_id" "project_id" {
+  for_each    = local.developers
+  prefix      = "xy-dev-"
+  byte_length = 4
+}

project_service.tf

@@ -0,0 +1,22 @@
+locals {
+  services = [
+    "cloudkms.googleapis.com",
+    "iam.googleapis.com",
+    "iamcredentials.googleapis.com",
+    "storage-api.googleapis.com",
+  ]
+}
+
+# Stand-in for google_project_service
+resource "null_resource" "project_service" {
+  for_each = {
+    for pair in setproduct(local.developers, local.services) : "${pair[0]}__${pair[1]}" => {
+      developer = pair[0]
+      service   = pair[1]
+    }
+  }
+
+  provisioner "local-exec" {
+    command = "echo ${null_resource.project[each.value.developer].id} ${each.value.service}"
+  }
+}

providers.tf

@@ -0,0 +1,13 @@
+/*
+provider "google" {
+  version = "~> 3.14"
+}
+*/
+
+provider "null" {
+  version = "~> 2.1"
+}
+
+provider "random" {
+  version = "~> 2.2"
+}

service_account.tf

@@ -0,0 +1,8 @@
+# Stand-in for google_service_account
+resource "null_resource" "service_account" {
+  for_each = local.developers
+
+  provisioner "local-exec" {
+    command = "echo ${null_resource.project[each.value].id}"
+  }
+}