Force clear members if iam_binding doesn't find a binding for the giv…

…en role
GoogleCloudPlatform · Oct 16, 2019 · 1c59431 · 1c59431
1 parent bb4342d
commit 1c59431
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/third_party/terraform/resources/resource_iam_binding.go.erb b/third_party/terraform/resources/resource_iam_binding.go.erb
@@ -107,6 +107,7 @@ func resourceIamBindingRead(newUpdaterFunc newResourceIamUpdaterFunc) schema.Rea
 		if binding == nil {
 			log.Printf("[DEBUG]: Binding for role %q not found in policy for %s, assuming it has no members.", eBinding.Role, updater.DescribeResource())
 			d.Set("role", eBinding.Role)
+			d.Set("members", nil)
 			return nil
 		} else {
 			d.Set("role", binding.Role)