Skip to content

[Bug]: vault_ldap_auth_backend field description does not update in state #2597

@tylerohlsen

Description

@tylerohlsen

Terraform Core Version

1.13.1

Terraform Vault Provider Version

5.2.1

Vault Server Version

1.19.8

Affected Resource(s)

resource vault_ldap_auth_backend

Expected Behavior

When the existing resource does not have a description (currently null in the state) and applying a configuration that sets the description, that description should be applied to the resource and updated in the terraform state. Subsequent terraform plan and apply should no longer show any pending changes to apply.

Actual Behavior

The description field still shows as null in the terraform state after applying. Subsequent plan and apply still show that description will be set/added.

Relevant Error/Panic Output Snippet

Terraform Configuration Files

resource "vault_ldap_auth_backend" "ldap_auth" {
  path            = "ldap_auth_mycompany"
  description     = "Test auth mount for LDAP to MyCompany"
  url             = var.environment.kerberos["kerberos_auth_mycompany"].ldap_servers
  insecure_tls    = true
  binddn          = var.environment.kerberos["kerberos_auth_mycompany"].ldap_binddn
  bindpass        = data.aws_secretsmanager_secret_version.ldap_secrets["kerberos_auth_mycompany"].secret_string
  userdn          = var.environment.kerberos["kerberos_auth_mycompany"].ldap_userdn
  userattr        = "sAMAccountName"
  userfilter      = var.environment.kerberos["kerberos_auth_mycompany"].ldap_userfilter
  discoverdn      = false
  deny_null_bind  = true
  groupdn         = var.environment.kerberos["kerberos_auth_mycompany"].ldap_groupdn
  groupattr       = "name"
  groupfilter     = "(&(objectClass=group)(member:1.2.840.113556.1.4.1941:={{.UserDN}}))"
  max_page_size   = 0
}

Steps to Reproduce

  1. Apply the configuration above (without the description field) to create the resource with no description
  2. Add the description field
  3. Apply
  4. Apply or plan again - notice description is still showing as a field to add

Debug Output

No response

Panic Output

No response

Important Factoids

No response

References

No response

Would you like to implement a fix?

None

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions