Add detect tool for unlinked tmpl (#13802)

Author: iyabchen

.github/workflows/unit-test-mmv1.yml

@@ -42,6 +42,32 @@ jobs:
           if [[ -n "$tmpls" ]]; then
             go run main.go version-guard --file-list $tmpls
           fi
+  unused-template-check:
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.2
+        with:
+          path: repo
+          fetch-depth: 0
+      - name: Merge base branch
+        id: pull_request
+        run: |
+          cd repo
+          git config user.name "modular-magician"
+          git config user.email "[email protected]"
+          git fetch origin ${{ github.base_ref }} # Fetch the base branch
+          git merge --no-ff origin/${{ github.base_ref }} # Merge with the base branch
+      - name: Check new product templates are linked
+        id: new_templates
+        run: |
+          cd repo/tools/template-check
+          newtmplfiles=$(git diff --name-only --diff-filter=A origin/${{ github.base_ref }} HEAD -- ../../mmv1 | grep .tmpl | sed 's=^=../../=g')
+          if [ ! -z "$newtmplfiles" ]; then
+            newtmplfiles=${newtmplfiles//$'\n'/,}
+            echo $newtmplfiles
+            go run main.go unused-tmpl --file-list $newtmplfiles
+          fi
   lint-yaml:
     runs-on: ubuntu-22.04
     steps:

tools/template-check/cmd/root.go

@@ -22,6 +22,7 @@ func newRootCmd() (*cobra.Command, *rootOptions, error) {
 		SilenceErrors: true,
 	}
 	cmd.AddCommand(newversionGuardCmd(o))
+	cmd.AddCommand(newUnusedTmplCmd(o))
 	return cmd, o, nil
 }
 

tools/template-check/cmd/testdata/resource1.yaml

@@ -0,0 +1,61 @@
+# Copyright 2024 Google Inc.
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+---
+name: 'AppEngineService'
+description: |
+  Only used to generate IAM resources
+# This resource is only used to generate IAM resources. They do not correspond to real
+# GCP resources, and should not be used to generate anything other than IAM support.
+exclude_resource: true
+docs:
+id_format: 'projects/{{project}}/iap_web/appengine-{{appId}}/services/{{service}}'
+base_url: 'projects/{{project}}/iap_web/appengine-{{appId}}/services/{{service}}'
+self_link: 'projects/{{project}}/iap_web/appengine-{{appId}}/services/{{service}}'
+import_format:
+  - 'projects/{{project}}/iap_web/appengine-{{appId}}/services/{{service}}'
+  - '{{service}}'
+timeouts:
+  insert_minutes: 20
+  update_minutes: 20
+  delete_minutes: 20
+iam_policy:
+  method_name_separator: ':'
+  parent_resource_type: 'google_app_engine_standard_app_version'
+  fetch_iam_policy_verb: 'POST'
+  allowed_iam_role: 'roles/iap.httpsResourceAccessor'
+  parent_resource_attribute: 'service'
+  test_project_name: 'tf-test'
+  iam_conditions_request_type: 'REQUEST_BODY'
+  example_config_body: 'templates/terraform/iam/example_config_body/app_engine_service.tf.tmpl'
+custom_code:
+exclude_tgc: true
+examples:
+  - name: 'iap_app_engine_service'
+    primary_resource_id: 'version'
+    primary_resource_name: 'context["project_id"], "default"'
+    test_env_vars:
+      org_id: 'ORG_ID'
+      billing_account: 'BILLING_ACCT'
+    # https://github.com/hashicorp/terraform-provider-google/issues/18936
+    exclude_test: true
+parameters:
+properties:
+  - name: 'appId'
+    type: String
+    description: Id of the App Engine application.
+    required: true
+  - name: 'service'
+    type: String
+    description: Service id of the App Engine application
+    required: true