Not in pravo: what to use instead

pravo has no workspaces, no -target and no provisioners. The same holds for the other features in the table below. Each row gives the replacement. The reference has a lookup page, Not in pravo.

Absent features

The replacements for the first three rows are run below. The lookup of every command is in Command map, and every construct is in Construct matrix.

Check the table

A command or a flag that does not exist is refused before the specification loads.

Error: unknown command "workspace" for "pravo"
Error: unknown command "taint" for "pravo"
Error: unknown command "refresh" for "pravo"
Error: unknown command "console" for "pravo"
Error: unknown command "graph" for "pravo"
Error: unknown command "test" for "pravo"

Error: unknown flag: --target
Error: unknown flag: --parallelism
Error: unknown flag: --lock
Error: unknown flag: --var
Error: unknown flag: --var-file
Error: unknown flag: --input
Error: unknown flag: --refresh-only

A field that does not exist is refused when the specification evaluates. This root declares one resource.

package check

import rnd "pravo.dev/providers/hashicorp/random"

$random: rnd.#Provider

pet: $random.#Resource.random_pet & {
	length: 1
	$lifecycle: replace_triggered_by: ["x"]
}

Error: evaluating ./check:
pet.$lifecycle.replace_triggered_by: field not allowed:
    ./check/main.cue:9:14

Environments without workspaces

The environment is a field. The tag -t env=prod sets it, a constraint limits it, and the state path follows it.

package env

import (
	"pravo.dev/pravo"
	rnd "pravo.dev/providers/hashicorp/random"
	loc "pravo.dev/providers/hashicorp/local"
)

$random: rnd.#Provider
$local:  loc.#Provider

$settings: pravo.#Settings & {state: path: "state/\(env)"}

env: *"dev" | "staging" | "prod" @tag(env)

_sizes: {dev: 1, staging: 2, prod: 3}

pet: $random.#Resource.random_pet & {length: _sizes[env]}

note: $local.#Resource.local_file & {
	filename: "out/\(env).txt"
	content:  "\(pet.id)\n"
}

Apply complete! Resources: 2 added, 0 changed, 0 destroyed. [txn <txn>]
Apply complete! Resources: 2 added, 0 changed, 0 destroyed. [txn <txn>]
dev
prod

Each environment has its own state directory, and a name outside the three is refused:

Error: evaluating ./env:
env: conflicting values "dev" and "qa":
env: conflicting values "prod" and "qa":
env: conflicting values "staging" and "qa":

The state subcommands take -t, and read the state of the environment that the tag selects:

// pet (provider registry.opentofu.org/hashicorp/random v<version> as random, schema version 0, revision 1)

Targeting without -target

A plan reaches the resources that a change reaches and skips the rest. A saved plan applies in parts with --only.

package target

import rnd "pravo.dev/providers/hashicorp/random"

$random: rnd.#Provider

a: $random.#Resource.random_pet & {length: 1}
b: $random.#Resource.random_pet & {length: 1}
c: $random.#Resource.random_pet & {length: 1}

Apply complete! Resources: 3 added, 0 changed, 0 destroyed. [txn <txn>]

Change a and b, and leave c:

package target

import rnd "pravo.dev/providers/hashicorp/random"

$random: rnd.#Provider

a: $random.#Resource.random_pet & {length: 2}
b: $random.#Resource.random_pet & {length: 2}
c: $random.#Resource.random_pet & {length: 1}

  # a (random_pet) must be replaced
  # b (random_pet) must be replaced
Plan: 2 to add, 0 to change, 2 to destroy.
Graph: planned 2 of 3, 1 unchanged and skipped, 2 refreshed, 1 not read.
Apply complete! Resources: 1 added, 0 changed, 1 destroyed. [txn <txn>]
1 change remains in part.plan; apply with "pravo apply part.plan".
  # b (random_pet) must be replaced
Plan: 1 to add, 0 to change, 1 to destroy.

The plan skips c. The apply of a leaves the change to b in the file part.plan. A policy named with --policy judges the saved plan as a whole, and not the selection.

Commands without provisioners

A command is a resource. A shell provider runs it, and its result is an attribute that other resources can read. This root records an id, then appends it to a file.

package shell

import (
	nul "pravo.dev/providers/hashicorp/null:null_"
	sh "pravo.dev/providers/scottwinkler/shell"
)

$null:  nul.#Provider
$shell: sh.#Provider

host: $null.#Resource.null_resource & {triggers: version: "1"}

hosts: $shell.#Resource.shell_script & {
	lifecycle_commands: [{
		create: "echo \(host.id) >> hosts.txt"
		delete: "true"
	}]
}

Apply complete! Resources: 2 added, 0 changed, 0 destroyed. [txn <txn>]
1

The package hashicorp/null is imported with a suffix, :null_, because null is a CUE keyword. The command ran at apply, once. hosts depends on host, because the command refers to host.id.

State that does not carry over

The conversion copies resources, data sources, their attributes, the provider's private data, the dependencies and the output values with their sensitive mark. It does not carry the rest.

The warnings and the refusals are shown with their messages in Pitfalls.

Recap

• Each absent feature has a replacement. A tag replaces a workspace, scoped plans and --only replace -target, a resource replaces a provisioner.
• A command or flag that does not exist is refused with unknown command or unknown flag. A field that does not exist is refused when the specification evaluates.
• The conversion warns about taint and deposed objects, and skips the records of the built-in provider. It drops the lineage and the check results. It keeps the sensitive mark of outputs.

Next: M11 After the migration rewrites the faithful translation in the idiom of CUE, in separate commits.