hashicorp / terraform-provider-azurerm

Terraform provider for Azure Resource Manager
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs
Mozilla Public License 2.0
4.61k stars 4.65k forks source link

azurerm_kubernetes_cluster no longer supports custom_ca_trust_certificates_base64 #28145

Open robbo10 opened 2 days ago

robbo10 commented 2 days ago

Is there an existing issue for this?

Community Note

Terraform Version

1.7.5

AzureRM Provider Version

4.x

Affected Resource(s)/Data Source(s)

azurerm_kubernetes_cluster

Terraform Configuration Files

N/A

Debug Output/Panic Output

N/A

Expected Behaviour

No response

Actual Behaviour

No response

Steps to Reproduce

No response

Important Factoids

No response

References

We have our clusters configured to use Custom CA Trusts, per the Hashicorp docs this parameter is not available with 4.x versions of the provider, this was based on the request from Microsoft:

“In order to provide a more reliable experience when using the Azure Provider, Microsoft has requested that the AKS resource only use a stable API version. Starting in version 4.0 of the AzureRM provider, Microsoft and HashiCorp have agreed to switch to the AKS stable APIs. This means that some preview features that are exposed in 3.x will no longer be available in 4.x. The following properties will no longer be available in 4.x:”

We are currently using version 3.x of the provider and have no immediate need to upgrade the provider from 3.X -> 4.X, however as this is a potential showstopper in the future, can we get confirmation that once out of preview the feature will be available through a future terraform release and there will be no breaking changes therefore allowing it to continue to function as normal for customers

Would you have any timeline on when Custom CA Trusts will move out of preview? 😊

ms-henglu commented 12 hours ago

Hi @robbo10 ,

Thank you for taking time to report this issue.

I've confirmed with AKS service team that this feature will be stable around January 2025.