tls_cert_request causes refresh to fail

[hashibot]

This issue was originally opened by @RichardKnop as hashicorp/terraform#8782. It was migrated here as part of the provider split. The original body of the issue is below.

---

Related to hashicorp/terraform#7821 (which is closed although the development version is still broken)

Refreshing state of tls_cert_request fails with error message.

This issue makes using tls_cert_request very problematic at the moment (having to pass -refresh=false to plan and apply is the only way to work around this).

Terraform Version

Terraform v0.7.4-dev (291f2985354454749e3e6da586c1ecd5d245c181)

Affected Resource(s)

• tls_cert_request

Debug Output

Error refreshing state: 7 error(s) occurred:

* tls_cert_request.registry: no PEM block found in private_key_pem
* tls_cert_request.client.0: no PEM block found in private_key_pem
* tls_cert_request.client.1: no PEM block found in private_key_pem
* tls_cert_request.client_server.0: no PEM block found in private_key_pem
* tls_cert_request.client_server.1: no PEM block found in private_key_pem
* tls_cert_request.server.0: no PEM block found in private_key_pem
* tls_cert_request.server.1: no PEM block found in private_key_pem

Expected Behavior

Terraform plan and/or apply should not fail with tls_cert_request resource. Otherwise this means tls_cert_request can only be used by passing -refresh=false flag around.

Refresh is effectively not possible when you have this resource in your manifests.

Actual Behavior

Terraform plan and apply fails during the refresh phase with the error message.

Steps to Reproduce

1. Initial terraform apply with tls_cert_request resource
2. terraform plan / terraform refresh / terraform apply all broken (during the refresh step)

[SpencerBrown]

I cannot reproduce this issue with Terraform 0.10.7. @RichardKnop can you check to see if this works for you now?

[SpencerBrown]

@apparentlymart Can you please close this issue? It was reported and fixed before the provider split. Original issue, fixed by this PR. I have also tested it myself.

[apparentlymart]

Oh, cool... thanks for testing, @SpencerBrown. Indeed I will close this.

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.