ibm_scc_instance_settings incorrect plan to change

[kierramarie]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Terraform CLI and Terraform IBM Provider Version

Affected Resource(s)

• ibm_scc_instance_settings

Terraform Configuration Files

Please include all Terraform configurations required to reproduce the bug. Bug reports without a functional reproduction may be closed without investigation.

https://github.com/terraform-ibm-modules/terraform-ibm-scc/blob/main/examples/basic/main.tf
Then add

en_instance_crn                   = # Event Notifications Instance CRN
en_source_name                    = # Same Event Notifications Instance Name

to security_and_compliance_center module.

Debug Output

https://gist.github.com/kierramarie/a8e72887cb8e411adcadf751b44313bb

Panic Output

Expected Behavior

A terraform apply should be run and no changes needed.

Actual Behavior

Plan: 0 to add, 1 to change, 0 to destroy. scc_instance_settings is planned to change when nothing in the terraform has changed.

Steps to Reproduce

1. Deploy resources - terraform apply
2. Run terraform apply again

Important Factoids

References

• #0000

[kierramarie]

a simpler example to reproduce bug:

provider "ibm" {
  ibmcloud_api_key = "XX"
  region           = local.region
}

terraform {
  required_version = ">= 1.9.0"
  required_providers {
    ibm = {
      source  = "IBM-Cloud/ibm"
      version = "1.71.2"
    }
  }
}

module "resource_group" {
  source                       = "terraform-ibm-modules/resource-group/ibm"
  version                      = "1.1.6"
  resource_group_name          = "test-rg"
}

resource "ibm_resource_instance" "scc_instance" {
  name              = "test-scc"
  service           = "compliance"
  plan              = "security-compliance-center-standard-plan"
  location          = "us-south"
  resource_group_id = module.resource_group.resource_group_id
}

resource "ibm_scc_instance_settings" "scc_instance_settings" {
  instance_id = resource.ibm_resource_instance.scc_instance.guid
  event_notifications {
    instance_crn       = # event notifications crn
    source_name        = "compliance"
  }
  object_storage {}
}

Output:

Terraform will perform the following actions:

  # ibm_scc_instance_settings.scc_instance_settings will be updated in-place
  ~ resource "ibm_scc_instance_settings" "scc_instance_settings" {
        id          = "..."
        # (1 unchanged attribute hidden)

      ~ event_notifications {
          + instance_crn       = "crn:v1:bluemix:public:event-notifications:us-south::::"
            # (4 unchanged attributes hidden)
        }

        # (1 unchanged block hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

[kierramarie]

Error in api used in the provider was found. Reference to corresponding issue: https://github.ibm.com/project-fortress/pm/issues/19432