search

confluentinc / terraform-provider-confluent

Terraform Provider for Confluent
Apache License 2.0
118 stars 61 forks source link

Add byok_key to an old cluster instead of encryption_key #398

Closed petrkarytka closed 5 days ago

petrkarytka commented 6 days ago

We used an old version (<1.36.0) of the provider when deployed a couple of Confluent clusters initially.

There was the argument "encryption_key" up to the version 1.36.0 under the configuration block "dedicated". Later, in 1.36.0 a separate BYOK resource was introduced.

Is it possible to perform in-place update for the existing clusters by removing "encryption_key" from the code and adding the block "byok_key" that refers to a "confluent_byok_key" resource? We cannot reproduce it with a new temporary cluster to test before moving forward, the old argument is no longer available for new clusters according to the documentation:

Warning: At the moment, using encryption_key for creating Kafka clusters is not available. See this comment for more details.

I would appreciate any recommendations.

linouk23 commented 5 days ago

@petrkarytka thanks for creating this issue!

Unfortunately, in-place updates are not supported in TF because they are not supported at the API level.