provider

var ResourceDeleteOverrides = map[string]func(
	providerInstance *googleCloudProvider,
	res resources.CloudAPIResource,
	inputs, outputs map[string]interface{},
) error{
	"google-native:cloudkms/v1:CryptoKey": func(
		providerInstance *googleCloudProvider,
		res resources.CloudAPIResource,
		inputs, outputs map[string]interface{},
	) error {

		ctx := context.Background()
		clientkms, err := cloudkms.NewService(ctx, option.WithHTTPClient(providerInstance.client.HTTPClient()))
		if err != nil {
			return err
		}
		name := outputs["name"].(string)

		versionsClient := clientkms.Projects.Locations.KeyRings.CryptoKeys.CryptoKeyVersions
		versionsResponse, err := versionsClient.List(name).Do()
		if err != nil {
			return err
		}

		for _, version := range versionsResponse.CryptoKeyVersions {
			request := &cloudkms.DestroyCryptoKeyVersionRequest{}
			_, err = versionsClient.Destroy(version.Name, request).Do()
			if err != nil {
				return err
			}
		}

		if _, ok := outputs["rotationPeriod"]; ok {
			keyClient := clientkms.Projects.Locations.KeyRings.CryptoKeys
			_, err = keyClient.
				Patch(
					name,
					&cloudkms.CryptoKey{
						NullFields: []string{"rotationPeriod", "nextRotationTime"},
					}).
				UpdateMask("rotationPeriod,nextRotationTime").Do()
			if err != nil {
				return err
			}
		}

		return nil
	},
}