docs(tutorials): sync tutorial .tf files with provider 3.17.1 (#186)

Author: adela-bytebase

tutorials/1-3-env-policy-data.tf

@@ -0,0 +1,13 @@
+# Restrict SQL Editor data access on production
+resource "bytebase_policy" "query_data_policy_prod" {
+  depends_on = [bytebase_setting.environments]
+  parent     = bytebase_setting.environments.environment_setting[0].environment[1].name
+  type       = "DATA_QUERY"
+
+  query_data_policy {
+    maximum_result_rows     = 1000
+    disable_copy_data       = true
+    disable_export          = true
+    allow_admin_data_source = false
+  }
+}

tutorials/3-projects.tf

@@ -6,7 +6,6 @@ resource "bytebase_project" "project-one" {
   resource_id = "project-one"
   title       = "Project One"
 
-  auto_enable_backup          = false
   enforce_sql_review          = true
   require_issue_approval      = true
   require_plan_check_no_error = false

tutorials/7-1-workspace-iam.tf

@@ -16,6 +16,9 @@ resource "bytebase_iam_policy" "workspace_iam" {
       role = "roles/workspaceAdmin"
       members = [
         format("user:%s", bytebase_user.workspace_admin.email),
+        # Keep the Terraform-running service account as Workspace Admin so
+        # subsequent `terraform apply` runs retain full permissions.
+        format("serviceAccount:%s", bytebase_service_account.tf_service_account.email),
       ]
     }
 
@@ -24,7 +27,6 @@ resource "bytebase_iam_policy" "workspace_iam" {
       members = [
         format("user:%s", bytebase_user.workspace_dba1.email),
         format("user:%s", bytebase_user.workspace_dba2.email),
-        format("serviceAccount:%s", bytebase_service_account.tf_service_account.email),
         format("workloadIdentity:%s", bytebase_workload_identity.github_ci.email),
       ]
     }

tutorials/8-3-global-data-masking.tf

@@ -26,7 +26,7 @@ resource "bytebase_policy" "global_masking_policy" {
     }
 
     rules {
-      condition     = "classification_level in [\"2\"]"
+      condition     = "resource.classification_level == 2"
       id            = "classification-level-2"
       semantic_type = "full-mask"
       title = "Full Mask for Classification Level 2"