Unable to set Primary Auth Method resource

[djdta]

Hi there,

Thank you for opening an issue. Please note that we try to keep the Terraform issue tracker reserved for bug reports and feature requests. For general usage questions, please see: https://www.terraform.io/community.html.

Terraform Version

Run terraform -v to show the version. If you are not running the latest version of Terraform, please upgrade because your issue may have already been fixed.

terraform v1.0.0

Affected Resource(s)

Please list the resources as a list, for example:

• boundary_auth_method (Resource)

If this issue appears to affect multiple resources, it may be an issue with Terraform's core, so please mention this.

Terraform Configuration Files

# Copy-paste your Terraform configurations here - for large Terraform configs,
# please use a service like Dropbox and share a link to the ZIP file. For
# security, you can also encrypt the files using our GPG public key.

resource "boundary_auth_method" "password" {
  scope_id = boundary_scope.org.id
  type     = "password"
}

Debug Output

Please provider a link to a GitHub Gist containing the complete debug output: https://www.terraform.io/docs/internals/debugging.html. Please do NOT paste the debug output in the issue; just paste a link to the Gist.

Panic Output

If Terraform produced a panic, please provide a link to a GitHub Gist containing the output of the crash.log.

Expected Behavior

What should have happened?

Resouce should have the ability to make auth primary in the org created.

Actual Behavior

What actually happened?

You have to set this manually in boundary UI

Steps to Reproduce

Please list the steps required to reproduce the issue, for example:

1. terraform apply
2. Yes to approve
3. Once deployed check to see if this has set to primary

Important Factoids

Are there anything atypical about your accounts that we should know? For example: Running in EC2 Classic? Custom version of OpenStack? Tight ACLs?
N/A

References

Are there any other GitHub issues (open or closed) or Pull Requests that should be linked here? For example:

• GH-1234

There is no open issue currently

[malnick]

Thanks for opening this @djdta - can you provide your complete terraform configuration for this and any applicable errors returned during the TF run?

[djdta]

Thank you for your response.

As requested here is the code below

# resource "boundary_scope" "org" {
#   scope_id    = "global"
#   name        = "testing"
#   description = "Organization scope"

#   auto_create_admin_role   = true
#   auto_create_default_role = true
# }

# resource "boundary_auth_method" "password" {
#   scope_id = boundary_scope.org.id
#   type     = "password"
# }

This code above does deploy without any problem, it just you cannot set this as primary

[stellarsquall]

I've been able to replicate this issue using the LDAP auth method.

If the auth method is set as primary on initial creation, then Terraform is able to update its status correctly. But if the auth method is updated to primary on a subsequent run then Boundary does not update it to primary, even though the run succeeds. Setting the auth method to primary must then be done using the CLI or UI.