Circular dependency in `tfe_workspace` using execution_mode=agent and `tfe_agent_pool_allowed_workspaces`

Terraform Cloud/Enterprise version

Terraform Cloud

Terraform version

1.3.4

Terraform Configuration Files

resource "tfe_workspace" "example-workspace" {
  name               = "example"
  organization       = "example-org"
  allow_destroy_plan = false
  agent_pool_id      = tfe_agent_pool.org-agent-pool.id
  execution_mode     = "agent"
}

resource "tfe_agent_pool_allowed_workspaces" "example-agent-pool-scope" {
  agent_pool_id         = tfe_agent_pool.org-agent-pool.id
  allowed_workspace_ids = [tfe_workspace.example-workspace.id]
}

Debug Output

╷
│ Error: Error creating workspace example-workspace for organization example-org: invalid attribute
│ 
│ Agent pool workspace does not have access to use this agent pool
│ 
│   with tfe_workspace.example-workspace,
│   on workspaces.tf line 15, in resource "tfe_workspace" "example-workspace":
│   15: resource "tfe_workspace" "example-workspace" {

Expected Behavior

The workspace should be created with the intended agent pool as its execution mode.

Actual Behavior

Workspace cannot be created and configured accordingly. Agent pool id is required if execution_mode is set to agent.

Additional Context

Seen during new workspace creation. The desire in this configuration it to create and control which workspaces have access to which agent pools.

Possible solution: allow tfe_workspace to configure allowed workspaces for the target agent pool id if the caller has appropriate permissions.

hashicorp / terraform-provider-tfe