hashicorp / terraform-provider-vault

Terraform Vault provider
https://www.terraform.io/docs/providers/vault/
Mozilla Public License 2.0
457 stars 536 forks source link

vault_pki_secret_backend_cert shows as change on plan everytime when I use auto_renew even though expiry is not met #2117

Open varun-vijayagopal opened 8 months ago

varun-vijayagopal commented 8 months ago

Description

vault_pki_secret_backend_cert shows as change on plan everytime when I use auto_renew even though expiry is not met

resource "vault_pki_secret_backend_cert" "app" { for_each = module.virtual-machine.linux_vm_private_ips backend = var.vault_path name = var.vault_role ttl = "1440h" auto_renew = true min_seconds_remaining = 604800 common_name = each.key }

Expecation is it shouldn't show as a change when I trigger plan again until expiration is <= min_seconds_remaining

Also noticed that in state file below attribute for vault_pki_secret_backend_cert "expiration": 0, as zero all the time

Have used 3.23.0. vault provider

Any help would be appreciated

References

NA

Would you like to implement a fix?

No