opentelekomcloud / terraform-provider-opentelekomcloud

Terraform OpenTelekomCloud provider
https://registry.terraform.io/providers/opentelekomcloud/opentelekomcloud/latest
Mozilla Public License 2.0
85 stars 76 forks source link

API Error when patching OIDC identity protocol #2609

Closed chainmywallet closed 1 week ago

chainmywallet commented 1 month ago

I need to update the signing key every X days, so I have a pipeline which updates the opentelekomcloud_identity_protocol_v3 periodically, initially everything works, but when the signing_key changes, the API Error appears.

Terraform provider version

1.36.12

Affected Resource(s)

opentelekomcloud_identity_protocol_v3

Terraform Configuration Files

resource "opentelekomcloud_identity_protocol_v3" "protocol_dev" {
  protocol    = "oidc"
  provider_id = opentelekomcloud_identity_provider_v3.idp_dev.id
  mapping_id  = opentelekomcloud_identity_mapping_v3.mapping_idp_dev.id
  access_config {
    access_type            = "program_console"
    provider_url           = "https://dex.dev..."
    client_id              = "otc-dev-auth"
    authorization_endpoint = "https://dex.dev.../auth"
    scopes                 = ["openid", "email", "profile", "groups"]
    response_type          = "id_token"
    response_mode          = "fragment"
    signing_key = jsonencode(var.signing_key_dev)
  }
}

Debug Output/Panic Output

opentelekomcloud_identity_protocol_v3.protocol_sso: Modifying... [id=otc-sso-auth/oidc]
╷
│ Error: error updating access_config: Resource not found: [PUT https://iam.eu-de.otc.t-systems.com/v3.0/OS-FEDERATION/identity-providers/otc-prod-auth/oidc/openid-connect-config], error message: {"error_msg":"The API does not exist or has not been published in the environment","error_code":"APIGW.0101","request_id":"<REDUCTED>"}
│ 
│ 
│   with opentelekomcloud_identity_protocol_v3.protocol_prod,
│   on main.tf line 66, in resource "opentelekomcloud_identity_protocol_v3" "protocol_prod":
│   66: resource "opentelekomcloud_identity_protocol_v3" "protocol_prod" {
│ 
╵

Steps to Reproduce

  1. terraform apply

Expected Behavior

The signing_key should be updated

Actual Behavior

Receiving an API error that the PATCH endpoint doesn't exists

artem-lifshits commented 3 weeks ago

Hello @chainmywallet please check latest release.