gravitational / teleport

The easiest, and most secure way to access and protect all of your infrastructure.
https://goteleport.com
GNU Affero General Public License v3.0
17.68k stars 1.77k forks source link

Don't require owner_grants or membership_requires when creating an access list via TF. #49271

Open benarent opened 6 days ago

benarent commented 6 days ago

Expected behavior:

When creating an Access List, we don't require membership_requires or owner_grants but when creating access lists via the Terraform provider. We require them.

Optional:

description (String) description is an optional plaintext description of the Access List. membership_requires (Attributes) membership_requires describes the requirements for a user to be a member of the Access List. For a membership to an Access List to be effective, the user must meet the requirements of Membership_requires and must be in the members list. (see below for nested schema) owner_grants (Attributes) owner_grants describes the access granted by owners to this Access List. (see below for nested schema)

Current behavior:

teleport_access_list.sre_team: Creating...
╷
│ Error: Error reading AccessList
│
│   with teleport_access_list.sre_team,
│   on teleport.tf line 1145, in resource "teleport_access_list" "sre_team":
│ 1145: resource "teleport_access_list" "sre_team" {
│
│ Can not convert *accesslist.AccessList to AccessList: membershipRequires is missing
╵

Bug details: