Add support for ephemeral resources

[xocasdashdash]

Hi!

In order to support ephemeral resources I think Clickhouse needs to support "write only" endpoints

https://registry.terraform.io/providers/hashicorp/random/latest/docs/ephemeral-resources/password

Here's a gist with an example:
https://gist.github.com/bschaatsbergen/cec07997d0d187d8e8c7889af96a8c45

[whites11]

@xocasdashdash could you please explain what you desire to use this feature for?

[xocasdashdash]

I want to be able to generate a random password with the random provider, hash it, pass it to Clickhouse service on creation and not commit it to the state in any way.

The example shows how it works with the aws_db_instance

[whites11]

OK thanks for the clarification.
I'll raise this as a feature request to the team, but can't promise this will end up in our roadmap.

[whites11]

Just realised this requires terraform sdk v2, so this request is blocked by the upgrade to sdk v2 (internal ticket https://github.com/ClickHouse/sre/issues/221)

[whites11]

Just realised this requires terraform sdk v2, so this request is blocked by the upgrade to sdk v2 (internal ticket ClickHouse/sre#221)

scratch that, I was wrong about this.

[whites11]

To support this, we need to up the requirement for minimum terraform version to 1.10, which was released november, 2024.