Enhance examples to use precondition checks

mmv1/templates/terraform/examples/firebase_app_check_app_attest_config_full.tf.erb

@@ -1,21 +1,28 @@
 resource "google_firebase_apple_app" "default" {
-  project = "<%= ctx[:test_env_vars]['project_id'] %>"
+  project      = "<%= ctx[:test_env_vars]['project_id'] %>"
   display_name = "Apple app"
-  bundle_id = "<%= ctx[:vars]['bundle_id'] %>"
-  team_id = "<%= ctx[:vars]['team_id'] %>"
+  bundle_id    = "<%= ctx[:vars]['bundle_id'] %>"
+  team_id      = "<%= ctx[:vars]['team_id'] %>"
 }
 
 # It takes a while for App Check to recognize the new app
 # If your app already exists, you don't have to wait 30 seconds.
 resource "time_sleep" "wait_30s" {
-  depends_on = [google_firebase_apple_app.default]
+  depends_on      = [google_firebase_apple_app.default]
   create_duration = "30s"
 }
 
 resource "google_firebase_app_check_app_attest_config" "default" {
-  project = "<%= ctx[:test_env_vars]['project_id'] %>"
-  app_id = google_firebase_apple_app.default.app_id
+  project   = "<%= ctx[:test_env_vars]['project_id'] %>"
+  app_id    = google_firebase_apple_app.default.app_id
   token_ttl = "<%= ctx[:vars]['token_ttl'] %>"
 
   depends_on = [time_sleep.wait_30s]
-}
+
+  lifecycle {
+    precondition {
+      condition     = google_firebase_apple_app.default.team_id != ""
+      error_message = "Provide a Team ID on the Apple App to use App Check"
+    }
+  }
+}

mmv1/templates/terraform/examples/firebase_app_check_app_attest_config_minimal.tf.erb

@@ -1,20 +1,27 @@
 resource "google_firebase_apple_app" "default" {
-  project = "<%= ctx[:test_env_vars]['project_id'] %>"
+  project      = "<%= ctx[:test_env_vars]['project_id'] %>"
   display_name = "Apple app"
-  bundle_id = "<%= ctx[:vars]['bundle_id'] %>"
-  team_id = "<%= ctx[:vars]['team_id'] %>"
+  bundle_id    = "<%= ctx[:vars]['bundle_id'] %>"
+  team_id      = "<%= ctx[:vars]['team_id'] %>"
 }
 
 # It takes a while for App Check to recognize the new app
 # If your app already exists, you don't have to wait 30 seconds.
 resource "time_sleep" "wait_30s" {
-  depends_on = [google_firebase_apple_app.default]
+  depends_on      = [google_firebase_apple_app.default]
   create_duration = "30s"
 }
 
 resource "google_firebase_app_check_app_attest_config" "default" {
   project = "<%= ctx[:test_env_vars]['project_id'] %>"
-  app_id = google_firebase_apple_app.default.app_id
+  app_id  = google_firebase_apple_app.default.app_id
 
   depends_on = [time_sleep.wait_30s]
-}
+
+  lifecycle {
+    precondition {
+      condition     = google_firebase_apple_app.default.team_id != ""
+      error_message = "Provide a Team ID on the Apple App to use App Check"
+    }
+  }
+}

mmv1/templates/terraform/examples/firebase_app_check_play_integrity_config_full.tf.erb

@@ -14,9 +14,16 @@ resource "time_sleep" "wait_30s" {
 }
 
 resource "google_firebase_app_check_play_integrity_config" "default" {
-  project = "<%= ctx[:test_env_vars]['project_id'] %>"
-  app_id = google_firebase_android_app.default.app_id
+  project   = "<%= ctx[:test_env_vars]['project_id'] %>"
+  app_id    = google_firebase_android_app.default.app_id
   token_ttl = "<%= ctx[:vars]['token_ttl'] %>"
 
   depends_on = [time_sleep.wait_30s]
-}
+
+  lifecycle {
+    precondition {
+      condition     = length(google_firebase_android_app.default.sha256_hashes) > 0
+      error_message = "Provide a SHA-256 certificate on the Android App to use App Check"
+    }
+  }
+}

mmv1/templates/terraform/examples/firebase_app_check_play_integrity_config_minimal.tf.erb

@@ -18,4 +18,11 @@ resource "google_firebase_app_check_play_integrity_config" "default" {
   app_id  = google_firebase_android_app.default.app_id
 
   depends_on = [time_sleep.wait_30s]
+
+  lifecycle {
+    precondition {
+      condition     = length(google_firebase_android_app.default.sha256_hashes) > 0
+      error_message = "Provide a SHA-256 certificate on the Android App to use App Check"
+    }
+  }
 }