From 2ecb4fc796c2d0b97c5ee2298c70b539b35f0488 Mon Sep 17 00:00:00 2001
From: Katie McLaughlin <katie@glasnt.com>
Date: Tue, 10 Dec 2024 11:07:53 +1100
Subject: [PATCH] fix: add deletion_protection to google workflow resources

---
 eventarc/workflows/main.tf      | 2 ++
 workflows/basic/main.tf         | 3 +++
 workflows/cloud_run_job/main.tf | 2 ++
 3 files changed, 7 insertions(+)

diff --git a/eventarc/workflows/main.tf b/eventarc/workflows/main.tf
index 1cd555b8d..02194e2d1 100644
--- a/eventarc/workflows/main.tf
+++ b/eventarc/workflows/main.tf
@@ -93,6 +93,8 @@ resource "google_workflows_workflow" "default" {
   region      = "us-central1"
   description = "Workflow that returns information about storage events"
 
+  deletion_protection = false # set to "true" in production
+
   # Note that $$ is needed for Terraform
   source_contents = <<EOF
   main:
diff --git a/workflows/basic/main.tf b/workflows/basic/main.tf
index fbcd3f06c..5d1c27477 100644
--- a/workflows/basic/main.tf
+++ b/workflows/basic/main.tf
@@ -43,6 +43,9 @@ resource "google_workflows_workflow" "default" {
   region          = "us-central1"
   description     = "A sample workflow"
   service_account = google_service_account.default.id
+
+  deletion_protection = false # set to "true" in production
+
   labels = {
     env = "test"
   }
diff --git a/workflows/cloud_run_job/main.tf b/workflows/cloud_run_job/main.tf
index 14e81eab7..df1a0a26f 100644
--- a/workflows/cloud_run_job/main.tf
+++ b/workflows/cloud_run_job/main.tf
@@ -158,6 +158,8 @@ resource "google_workflows_workflow" "default" {
   region      = "us-central1"
   description = "Workflow that routes a Cloud Storage event and executes a Cloud Run job"
 
+  deletion_protection = false # set to "true" in production
+
   # Note that $$ is needed for Terraform
   source_contents = <<EOF
   main: