neil-yechenwei
commented
4 days ago Thanks for raising this issue. Seems I can't reproduce with below steps. Could you try below tfconfig to see if the issue still exists? If my steps is not expected, please correct me. Thanks.
First apply with tf config:
provider "azurerm" {
features {}
}
resource "azurerm_resource_group" "test" {
name = "acctestRG-cosmos-test03"
location = "eastus"
}
resource "azurerm_cosmosdb_account" "test" {
name = "acctest-ca-test03"
location = azurerm_resource_group.test.location
resource_group_name = azurerm_resource_group.test.name
offer_type = "Standard"
kind = "GlobalDocumentDB"
default_identity_type = "FirstPartyIdentity"
consistency_policy {
consistency_level = "Eventual"
}
geo_location {
location = azurerm_resource_group.test.location
failover_priority = 0
}
}Second apply with tf config:
provider "azurerm" {
features {}
}
resource "azurerm_resource_group" "test" {
name = "acctestRG-cosmos-test03"
location = "eastus"
}
resource "azurerm_user_assigned_identity" "test" {
resource_group_name = azurerm_resource_group.test.name
location = azurerm_resource_group.test.location
name = "acctest-user-test03"
}
resource "azurerm_cosmosdb_account" "test" {
name = "acctest-ca-test03"
location = azurerm_resource_group.test.location
resource_group_name = azurerm_resource_group.test.name
offer_type = "Standard"
kind = "GlobalDocumentDB"
default_identity_type = join("=", ["UserAssignedIdentity", azurerm_user_assigned_identity.test.id])
identity {
type = "UserAssigned"
identity_ids = [azurerm_user_assigned_identity.test.id]
}
consistency_policy {
consistency_level = "Eventual"
}
geo_location {
location = azurerm_resource_group.test.location
failover_priority = 0
}
}
nerddtvg
Is there an existing issue for this?
Community Note
Terraform Version
1.7.5
AzureRM Provider Version
3.117.0, 4.11.0
Affected Resource(s)/Data Source(s)
azurerm_cosmosdb_account
Terraform Configuration Files
Debug Output/Panic Output
Expected Behaviour
The User Assigned Managed Identity should be applied first, then DefaultIdentity applied second to make it effective.
Actual Behaviour
400 Bad Error Response
Steps to Reproduce
FirstPartyIdentity(default value)default_identityterraform applyfailsImportant Factoids
No response
References
Default Identity is applied first: https://github.com/hashicorp/terraform-provider-azurerm/blob/main/internal/services/cosmos/cosmosdb_account_resource.go#L1134-L1146
UMI is applied second, DefaultIdentity is fixed up: https://github.com/hashicorp/terraform-provider-azurerm/blob/main/internal/services/cosmos/cosmosdb_account_resource.go#L1301-L1330
Original Issue: #22466