hunfabric/CURSED_KNOWLEDGE.md

Cursed Knowledge we have learned as a result of building Cloud Foundation Fabric

• 2025-10-23 Some service agents are not created upon API activation nor calling google_project_service_identity. Since we have no way of knowing if they exist, we avoid automatically granting their respective roles in the project module. The list of agents for which we do not perform automatic grants can be found in the tools/build_service_agents.py script.
• 2025-10-21 Type checking in ternaries requires both sides to have identical types. For objects, it means that they need to define the same fields. And sometimes null and tonumber(null) don't converge to a common type (citation needed)
• 2025-10-21 You can't call a provider function within brackets opentofu#3401
• 2025-10-21 Terraform dependency graph considers a variable or a local as one node in the graph [adrs/20251013-context-locals.md], you may resolve your dependency cycles by just rearranging your variables / locals.
• 2025-10-21 create_before_destory meta-argument is contagious, which means - any resource that any resource depending on CBD resource will also be marked as CBD. This hits hard, when affected resource is silently accepting creation with the same name, even if the object exists (google_storage_bucket_object, I'm looking at you)