Recreate catalog entities deleted outside Terraform

[ryanduffin]

When a cortex_catalog_entity is deleted outside Terraform, the plan now creates it again instead of failing with "not found".

Claude Details

Summary

• When an entity was deleted in the UI or through the API, Read returned the API's 404 as an error. Every plan that included the resource failed until someone recreated the entity by hand. terraform destroy failed in the same way.

Changes

• Read calls RemoveResource when the descriptor read returns cortex.ApiErrorNotFound, so Terraform plans a create. cortex_catalog_entity_openapi and cortex_integration_configuration already do this.
• Read also adds a warning that names the entity. The API answers 404 for an entity that the token cannot see too (entity visibility permissions, or team entities when the account does not allow them in the catalog API), and the response does not tell these cases apart. In those cases, the apply sends the configured descriptor and then fails on the read after the write, as before.
• Other read errors still fail the plan and keep the entity in state. The error now names the entity instead of the scaffold text "Unable to read example".
• The catalog fake can delete an entity or fail reads, and it answers unexpected requests with 500, so that a wrong route in a test is not read as a deleted entity.
• CHANGELOG entry.

Not in this PR

• Other resources (for example departments and scorecards) probably have the same gap.
• Delete still fails on a 404. Normal flows do not reach it, because the refresh before a destroy removes a missing entity first.

Test plan

• go test ./...: all packages pass.
  • TestUnitCatalogEntity_DeletedOutsideTerraform: the fake deletes the entity between two steps; the second plan must be a create, and the fake must store the entity again.
  • TestUnitCatalogEntity_DestroyAfterDeletedOutsideTerraform: destroy succeeds after an outside delete.
  • TestUnitCatalogEntity_ImportMissingEntity: import of a missing entity fails with Terraform's "Cannot import non-existent remote object".
  • TestUnitCatalogEntity_ReadErrorKeepsState: a 500 fails the plan with an error that names the entity, and a later plan is empty.
  • Mutation check: without the 404 branch, the first three tests fail.
• gofmt -l, go vet ./..., and golangci-lint run (v2.14.0): clean.
• make testacc: not run locally. CI runs it.

🤖 Generated with Claude Code