terraform fails reading queue properties for AzureRm Storage Account - Issuer Validation Failed (USGovernment Cloud)

[sladeedmonds]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Terraform (and AzureRM Provider) Version

Terraform 0.12.6
AzureRM Provider 1.32.1

Affected Resource(s)

Storage Accounts

• azurerm_storage_account

Terraform Configuration Files

resource "azurerm_storage_account" "storage_account_terraform" {
  name                      = "storagename"
  location                  = azurerm_resource_group.resource_group_terraform.location
  resource_group_name       = azurerm_resource_group.resource_group_terraform.name
  account_kind              = "Storage"
  account_tier              = "Standard"
  account_replication_type  = "LRS"
  enable_https_traffic_only = true

  network_rules {
    ip_rules = var.public_ip_region_list
  }

  tags = {
    Department  = "test"
    projectName = "test"
  }
}

Debug Output

Panic Output

Expected Behavior

Running terraform plan should not fail.

Actual Behavior

Running terraform plan fails with:

Error: Error reading queue properties for AzureRM Storage Account "storageaccount": queues.Client#SetServiceProperties: Failure responding to request: StatusCode=403 -- Original Error: autorest/azure: error response cannot be parsed: "\ufeffAuthenticationFailedServer failed to authenticate the request. Make sure the value of Authorization header is formed correctly including the signature.\nRequestId:8186b357-3003-00a2-7918-52d73f000000\nTime:2019-08-13T20:50:26.7292338ZIssuer validation failed. Issuer did not match." error: invalid character 'ï' looking for beginning of value

Steps to Reproduce

1. terraform plan

Important Factoids

Running in US Government Cloud

References

• Error reading queue properties for AzureRM Storage Account #3997
  Git 3997 is very similar, but not an identical error. As with 3997, I can downgrade to 1.31.0 to avoid the issue. If I update to 1.32.0, I get an error about advanced threat protection (due to it not being available in Gov), which is resolved with 1.32.1, but 1.32.1 triggers this issue.

• Error while creating storage account #3939
  As @tombuildsstuff pointed out, 3939 is a better match. Thanks!

[tombuildsstuff]

hi @sladeedmonds

Thanks for opening this issue :)

Taking a look through this appears to be a duplicate of #3939 - rather than having multiple issues open tracking the same thing I'm going to close this issue in favour of that one; would you mind subscribing to #3939 for updates?

Thanks!

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. If you feel I made an error 🤖 🙉 , please reach out to my human friends 👉 hashibot-feedback@hashicorp.com. Thanks!