Introduce conditional delete before replace for select resources

[t0yv0]

Consider introducing conditional delete-before-replace plans that would suggest to that Pulumi should delete first, and create later when replacing a resource when particular sensitive properties change.

Affected resources:

• google_compute_global_address
• google_compute_instance
• google_compute_vpn_tunnel
• google_project_iam_member
• google_service_account_iam_member

We tried enabling delete-before-replace as the default strategy for these resources but decided to revert his behavior as it may not be appropriate for all users, for example for the compute instance resource, delete-before-replace may reduce liveness/availability and are not ideal for every update, see:

• Adding in deleteBeforeReplace as default option, fixes #73 #2586
• Adding DeleteBeforeReplace for IAMMember, VPNTunnel, etc, fixes #190 #2588

Instead of doing that, the suggestion is to identify the specific properties that require this treatment, build the bridge support so allow specifying this behavior per-property, and rolling forward:

pulumi/pulumi-terraform-bridge#2605

References

#73
#190

[VenelinMartinov]

Do we know if all of these resource require a Conditional DeleteBeforeReplace? Would some of them be fine with unconditional DBR?

[t0yv0]

The task includes investigating which properties or resource-wide DBR is appropriate for each of these.