docs: sync Terraform tutorial series to provider 3.17.1

[adela-bytebase]

Summary

Fix schema drift across all 8 parts of the Bytebase Terraform Provider tutorial series. The docs were written against older provider versions and several snippets no longer apply against 3.17.1 (invalid resources, removed fields, wrong CEL attribute names).

Changes by part

• Part 1 (environments) — provider version 3.8.6 → 3.17.1; unified DISABLE_COPY_DATA + DATA_SOURCE_QUERY into DATA_QUERY / query_data_policy; removed the non-existent checkers { required_issue_approval, required_status_checks { plan_check_enforcement } } block
• Part 3 (projects) — removed fields that no longer exist on bytebase_project (auto_enable_backup, allow_modify_statement, auto_resolve_issue); fixed notification_types to current Activity enum values
• Part 4 (general settings) — removed the non-existent bytebase_risk resource; rewrote approval_flow to current schema (flow.roles = [list] + source + CEL condition like "request.risk >= 100")
• Part 6 (users/groups) — migrated bytebase_user with type = "SERVICE_ACCOUNT" to separate bytebase_service_account + bytebase_workload_identity resources; dropped removed type field
• Part 7 (access control) — dropped parent = "workspaces/-" (fails validation; parent defaults to workspace); updated bindings to use serviceAccount: / workloadIdentity: member prefixes
• Part 8 (masking) — renamed MASKING_EXCEPTION → MASKING_EXEMPTION and nested fields; dropped deprecated actions; fixed classification schema (levels.level as Number, not levels.id); added resource. prefix to CEL conditions and fixed classification_level integer comparison

Test plan

• ./docs/check-links.sh passes
• Manually apply each Part's .tf snippet against a fresh Bytebase + provider 3.17.1 to confirm no schema errors
• Spot-check the rendered MDX on the preview deploy

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
bytebase-com	Ready	Preview, Comment	Apr 14, 2026 6:58pm

[Copilot]

Pull request overview

Updates the Bytebase Terraform Provider tutorial series to match provider v3.17.1 by removing/rewriting drifted schema fields and updating example snippets (resources, enums, and CEL attributes).

Changes:

• Update Part 1 environment examples to provider 3.17.1, simplify rollout policy, and migrate data protection policy to DATA_QUERY / query_data_policy.
• Update Part 4 general settings to the current approval flow schema (flow.roles + source + CEL condition) and remove the non-existent risk resource section.
• Update Parts 6–8 tutorials for the new identity model (service accounts + workload identities), IAM member prefixes, and masking exemption/classification schema changes.

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
docs/tutorials/manage-users-and-groups-with-terraform.mdx	Introduces bytebase_service_account + bytebase_workload_identity and updates the user-management narrative/snippets.
docs/tutorials/manage-projects-with-terraform.mdx	Updates bytebase_project example to current fields and notification enum values.
docs/tutorials/manage-general-settings-with-terraform.mdx	Rewrites approval flow section to current schema and removes risk-policy content.
docs/tutorials/manage-environments-with-terraform.mdx	Bumps provider version and updates rollout/data policies to current schema.
docs/tutorials/manage-database-access-control-with-terraform.mdx	Updates IAM dependencies and member prefixes for service accounts/workload identities.
docs/tutorials/manage-data-masking-with-terraform.mdx	Updates classification schema types, CEL conditions, and renames masking exception → exemption.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[mintlify]

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated (UTC)
bytebase-doc	🟢 Ready	View Preview	Apr 14, 2026, 6:49 PM

💡 Tip: Enable Workflows to automatically generate PRs for you.

[ecmadao]

There're many duplicate TF examples in different repos, maybe we can consider give a link to the https://github.com/bytebase/terraform-provider-bytebase/tree/main/tutorials?