Failing to create sub account user

PJHRobles commented 1 year ago

Confirmation

[X] My issue isn't already found on the issue tracker.
[X] I have replicated my issue using the latest version of the provider and it is still present.

Terraform and Imperva provider version

Terraform v1.3.4
on linux_amd64

Your version of Terraform is out of date! The latest version
is 1.3.9. You can update by downloading from https://www.terraform.io/downloads.html

Initializing provider plugins...
- Finding imperva/incapsula versions matching "> 3.0.0, < 4.0.0"...
- Using imperva/incapsula v3.15.2 from the shared cache directory

Affected resource(s)

incapsula_account_user

Terraform configuration files

resource "incapsula_account_user" "sub_account_user_test" {
  account_id = REDACTED
  email      = "any@example.com" // already created user
  role_ids = [
    REDACTED, // already existing role
  ]

  depends_on = [
    incapsula_account_role.roles,
    incapsula_account_user.main_users,
  ]
}

Debug output

-

Panic output

No response

Expected output

Changes are applied

Actual output

Getting a 403 which does not make sense because the API user has the appropriate permissions

│ Error: Error status code 403 from Incapsula service when adding User <REDACTED TEST EMAIL>: <html style="height:100%"><head><META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><
meta name="viewport" content="initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"></head><body style="margin:0px;height:100%"><iframe id="main-iframe" src="/_Incapsula_Resource?CWUDNSAI=23&xinfo=6-5244929-0%2
0NNNN%20RT%281677820769017%2020%29%20q%280%200%20-1%20-1%29%20r%280%20-1%29%20B15%2812%2c1955667%2c0%29%20U6&incident_id=1221000310030282200-23848750883866566&edet=15&cinfo=0c000000ceec&rpinfo=0&mth=POST" frameborder=0 width="100%" heigh
t="100%" marginheight="0px" marginwidth="0px">Request unsuccessful. Incapsula incident ID: 1221000310030282200-23848750883866566</iframe></body></html>                                                                                      │                                                                                                                                                                                                                                            
│   with incapsula_account_user.sub_account_user_test,
│   on main.tf line 76, in resource "incapsula_account_user" "sub_account_user_test":
│   76: resource "incapsula_account_user" "sub_account_user_test" {

Steps to reproduce

plan and apply

Additional factoids

There is no problem creating the root account user
I am able create the sub account user from the portal and import it into the tfstate. Then plan and apply works which means there is no problem when we just need to update the roles for a user as long as the user already exists
I am using an API key from an admin user, I have also tried creating an API key from my user which has administrator access (and can do the stuff manually via portal)
Previously, this was working before when we used a custom provider which were hitting the V1 API endpoints but we switched to the latest version yesterday because we kept getting 500s recently

References

No response

krikui commented 1 year ago

Hi PJHRobles

The fix will be deployed shortly during the day. Please re-try in a couple of days and let us know in case you still see the issue.

https://support.imperva.com/

Thanks.

PJHRobles commented 1 year ago

Looks like it's working now. Closing this issue

ermusthofa commented 1 year ago

hi @krikui , is the fix already been deployed ?

I notice @PJHRobles issue has already solved, not sure if this is related. but I got similar issue with his similar environment setup (provider version 3.15.2)

krikui commented 1 year ago

Hello, Yes the issue is resolved and the fix was deployed.

Thank you.

On Thu, 9 Mar 2023, 12:03 er.musthofa @.***> wrote:

hi @krikui https://github.com/krikui , is the fix already been deployed ?

I notice @PJHRobles https://github.com/PJHRobles issue has already solved, not sure if this is related. but I got similar issue with his similar environment setup (provider version 3.15.2)

— Reply to this email directly, view it on GitHub https://github.com/imperva/terraform-provider-incapsula/issues/298#issuecomment-1461709509, or unsubscribe https://github.com/notifications/unsubscribe-auth/AB567JXZHWZBGFJ2VV3RTWTW3GTG3ANCNFSM6AAAAAAVOFRGLY . You are receiving this because you were mentioned.Message ID: @.***>

imperva / terraform-provider-incapsula