Skip to content

Conversation

dsa0x
Copy link
Member

@dsa0x dsa0x commented Oct 2, 2025

This adds a validation for the resource identity, checking that the identity must not change during the PlanResourceChange, ReadResource, and ApplyResourceChange RPCs. Any change to the identity should be within the UpgradeResourceIdentity RPC, which always precedes the aforementioned ones.

Target Release

1.15.x

Rollback Plan

  • If a change needs to be reverted, we will roll out an update to the code within 7 days.

Changes to Security Controls

Are there any changes to security controls (access controls, encryption, logging) in this pull request? If so, explain.

CHANGELOG entry

  • This change is user-facing and I added a changelog entry.
  • This change is not user-facing.

@dsa0x dsa0x added the no-changelog-needed Add this to your PR if the change does not require a changelog entry label Oct 2, 2025
@dsa0x dsa0x changed the title query: validate identity change when schema does not query: validate identity did not change when schema version does not change Oct 2, 2025
@dsa0x dsa0x marked this pull request as ready for review October 2, 2025 13:08
@dsa0x dsa0x requested a review from a team as a code owner October 2, 2025 13:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
no-changelog-needed Add this to your PR if the change does not require a changelog entry
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant