[Bug]: vault_jwt_auth_backend would not change description 👻

[sielaq]

Terraform Core Version

1.6.2

Terraform Vault Provider Version

3.21.0

Vault Server Version

1.15.1

Affected Resource(s)

vault_jwt_auth_backend

Expected Behavior

with change of description the change should be visible in UI

Actual Behavior

terraform shows the diff, apply it without error but description is not changed overall in UI

Terraform Configuration Files

generate "provider" {
  path      = "provider.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<EOF
    provider "vault" {
      address = "https://vault.example.com"
      skip_child_token = true
    }
  EOF
}

Steps to Reproduce

create new auth path

resource "vault_jwt_auth_backend" "foo" {
  description              = "foo test"
  type                     = "oidc"
  path                     = "foo"
  oidc_discovery_url       = var.oidc_discovery_url
}

apply and make another change

resource "vault_jwt_auth_backend" "foo" {
  description              = "bar test"
  type                     = "oidc"
  path                     = "foo"
  oidc_discovery_url       = var.oidc_discovery_url
}

you should see

Terraform will perform the following actions:

  # vault_jwt_auth_backend.foo will be updated in-place
  ~ resource "vault_jwt_auth_backend" "foo" {
      ~ description            = "foo test" -> "bar test"
        id                     = "foo"
        # (12 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.
vault_jwt_auth_backend.foo: Modifying... [id=foo]
vault_jwt_auth_backend.foo: Modifications complete after 1s [id=foo]

Apply complete! Resources: 0 added, 1 changed, 0 destroyed.

Check Vault UI, /ui/vault/access/foo/configuration - the description is still the original one. Only recreation (destroying / creation) can change the description.

Would you like to implement a fix?

No