google_cloud_identity_group.initial_group_config flag triggers recreate of existing groups

[ajlake]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request.
• Please do not leave +1 or me too comments, they generate extra noise for issue followers and do not help prioritize the request.
• If you are interested in working on this issue or have submitted a pull request, please leave a comment.
• If an issue is assigned to the modular-magician user, it is either in the process of being autogenerated, or is planned to be autogenerated soon. If an issue is assigned to a user, that user is claiming responsibility for the issue. If an issue is assigned to hashibot, a community member has claimed the issue already.

Terraform Version

0.14.6

Affected Resource(s)

• google_cloud_identity_group

Terraform Configuration Files

resource "google_cloud_identity_group" "my_group" {
  parent = "customers/${var.customer_id}"

  display_name = "My Group"

  group_key {
    id = "my_group@domain.com"
  }

  labels = {
    "cloudidentity.googleapis.com/groups.discussion_forum" = ""
  }
}

Expected Behavior

No-op. This destructive behavior is really unfriendly and leads to operational surprises and problems. initial group config should have no bearing on existing groups.

Actual Behavior

Groups were destroyed and re-created as described in #9035

google_cloud_identity_group.my_group must be replaced
...
+ initial_group_config = "EMPTY" # forces replacement

Steps to Reproduce

1. Create my_group using provider version <= 3.66.1
2. Plan/apply using provider version >= 3.67.0

Observe create/destroy of group.

References

• Add support for InitialGroupConfig to google_cloud_identity_group #9035

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.