Detect drifts between the manifest and its live Kubernetes resources

[chotiwat]

Description

This PR aims to address #1095 by performing a dry-run, server-side apply of the manifest during planning, which allows Terraform to detect any changes to the Kubernetes resources managed by the Helm release.

Mini Changelog

• Introduce a new resources attribute which tracks Kubernetes resources managed by the deployed Helm release
  • The attribute is a map of resource key to resource JSON string.
  • Fields managed by kube-controller-manager or updated via subresource APIs (e.g. /status and /scale) are removed to avoid perpetual drifts.
  • Sensitive values are redacted like in the manifest attribute.
  • Fields like uid, creationTimestamp, resourceVersion, and managedFields are scrubbed to prevent the inconsistent final plan issue.
• Generate a new version of resources during planning using a dry-run, server-side apply for diffing
• Add acceptance tests to confirm that Kubernetes resources are reconciled when they are modified or deleted

Acceptance tests

• Have you added an acceptance test for the functionality being added?

Release Note

Release note for CHANGELOG:

`resource/helm_release`: add `resources` map attribute to allow drift detection against live kubernetes resources [GH-1095](https://github.com/hashicorp/terraform-provider-helm/issues/1095)

References

#1095
#1239

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

[hashicorp-cla-app]

All committers have signed the CLA.

[hashicorp-cla-app]

Thank you for your submission! We require that all contributors sign our Contributor License Agreement ("CLA") before we can accept the contribution. Read and sign the agreement

Learn more about why HashiCorp requires a CLA and what the CLA includes

_{Have you signed the CLA already but the status is still pending? Recheck it.}

[zifeo]

@BBBmau is there a way we could get your review on that one 🙏 ?

[sheneska]

Hi @chotiwat, thanks for the changes. Could you please add a change log?

[chotiwat]

@sheneska done

[sheneska]

Hi @chotiwat , thank you for your proposed changes! We are currently working on migrating from the SDK to framework plugin, once this is completed we can proceed with reviewing this PR.