feat: enable_default_user is now set to true globally and true for regional overrides

Author: burythehammer

CHANGELOG.md

@@ -4,6 +4,13 @@ All notable changes to this project will be documented in this file.
 See updating [Changelog example here](https://keepachangelog.com/en/1.0.0/)
 
 
+# Unreleased
+
+## Changed
+- Reverted global/regional override rework from v2.7.3 due to regressions. Active-Active database global configuration behavior has been restored to v2.7.2 state. Transit Gateway improvements from v2.7.3 have been preserved.
+- `global_enable_default_user` now have a default override of `true`. This is due to technical limitations in the current Terraform SDK framework. If you wish to turn off the default user per region you have to explicitly do so.
+
+
 # 2.7.3 (6th November 2025)
 
 ## Changed

provider/rediscloud_active_active_database_block_public_endpoints_test.go

@@ -41,17 +41,20 @@ func TestAccActiveActiveSubscriptionDatabase_BlockPublicEndpoints(t *testing.T)
 					// Global source IPs should be explicitly set
 					resource.TestCheckResourceAttr(databaseResource, "global_source_ips.#", "1"),
 					resource.TestCheckTypeSetElemAttr(databaseResource, "global_source_ips.*", "192.168.0.0/16"),
+					resource.TestCheckResourceAttr(databaseResource, "global_enable_default_user", "true"),
 
 					// Override region 0 (us-east-2) has explicit override of source_ips
 					resource.TestCheckResourceAttr(databaseResource, "override_region.0.override_global_source_ips.#", "1"),
 					resource.TestCheckTypeSetElemAttr(databaseResource, "override_region.0.override_global_source_ips.*", "172.16.0.0/16"),
 					resource.TestCheckResourceAttr(databaseResource, "override_region.0.source_ips.#", "1"),
 					resource.TestCheckTypeSetElemAttr(databaseResource, "override_region.0.source_ips.*", "172.16.0.0/16"),
+					resource.TestCheckResourceAttr(databaseResource, "override_region.0.enable_default_user", "true"),
 
 					// Override region 1 (us-east-1) has no override, should inherit global
 					resource.TestCheckResourceAttr(databaseResource, "override_region.1.override_global_source_ips.#", "0"),
 					resource.TestCheckResourceAttr(databaseResource, "override_region.1.source_ips.#", "1"),
 					resource.TestCheckTypeSetElemAttr(databaseResource, "override_region.1.source_ips.*", "192.168.0.0/16"),
+					resource.TestCheckResourceAttr(databaseResource, "override_region.1.enable_default_user", "true"),
 
 					// Data source checks
 					resource.TestCheckResourceAttr(datasourceName, "name", subscriptionName),
@@ -71,11 +74,13 @@ func TestAccActiveActiveSubscriptionDatabase_BlockPublicEndpoints(t *testing.T)
 					// Global source IPs should be the same (explicitly set in testdata)
 					resource.TestCheckResourceAttr(databaseResource, "global_source_ips.#", "1"),
 					resource.TestCheckTypeSetElemAttr(databaseResource, "global_source_ips.*", "192.168.0.0/16"),
+					resource.TestCheckResourceAttr(databaseResource, "global_enable_default_user", "true"),
 					// Override regions should have the same overrides
 					resource.TestCheckResourceAttr(databaseResource, "override_region.0.override_global_source_ips.#", "1"),
 					resource.TestCheckTypeSetElemAttr(databaseResource, "override_region.0.override_global_source_ips.*", "172.16.0.0/16"),
 					resource.TestCheckResourceAttr(databaseResource, "override_region.0.source_ips.#", "1"),
 					resource.TestCheckTypeSetElemAttr(databaseResource, "override_region.0.source_ips.*", "172.16.0.0/16"),
+					resource.TestCheckResourceAttr(databaseResource, "override_region.0.enable_default_user", "true"),
 					// Data source checks after update
 					resource.TestCheckResourceAttr(datasourceName, "name", subscriptionName),
 					resource.TestCheckResourceAttr(datasourceName, "global_source_ips.#", "1"),

provider/rediscloud_active_active_database_test.go

@@ -182,6 +182,7 @@ func TestAccResourceRedisCloudActiveActiveDatabase_CRUDI(t *testing.T) {
 					resource.TestCheckResourceAttr(databaseResourceName, "global_alert.#", "0"),
 					resource.TestCheckResourceAttr(databaseResourceName, "global_modules.#", "1"),
 					resource.TestCheckResourceAttr(databaseResourceName, "global_modules.0", "RedisJSON"),
+					resource.TestCheckResourceAttr(databaseResourceName, "global_enable_default_user", "true"),
 
 					resource.TestCheckResourceAttr(databaseResourceName, "override_region.#", "1"),
 					resource.TestCheckResourceAttr(databaseResourceName, "override_region.0.name", "us-east-1"),
@@ -239,6 +240,7 @@ func TestAccResourceRedisCloudActiveActiveDatabase_optionalAttributes(t *testing
 				Config: fmt.Sprintf(testAccResourceRedisCloudActiveActiveDatabaseOptionalAttributes, subscriptionName, name, password, portNumber),
 				Check: resource.ComposeAggregateTestCheckFunc(
 					resource.TestCheckResourceAttr(resourceName, "port", strconv.Itoa(portNumber)),
+					resource.TestCheckResourceAttr(resourceName, "global_enable_default_user", "true"),
 				),
 			},
 		},

provider/rediscloud_active_active_subscription_test.go

@@ -199,6 +199,9 @@ func TestAccResourceRedisCloudActiveActiveSubscription_CRUDI(t *testing.T) {
 					resource.TestCheckResourceAttr(resourceName, "creation_plan.0.region.1.write_operations_per_second", "1000"),
 					resource.TestCheckResourceAttr(resourceName, "creation_plan.0.region.1.read_operations_per_second", "1000"),
 
+					// Check database enable_default_user settings
+					resource.TestCheckResourceAttr("rediscloud_active_active_subscription_database.example", "global_enable_default_user", "false"),
+
 					// also checks user has removed default user
 					//resource.TestCheckResourceAttr(resourceName, "regions.1.enable_default_user", "false"),
 

provider/resource_rediscloud_active_active_database.go

@@ -205,6 +205,7 @@ func resourceRedisCloudActiveActiveDatabase() *schema.Resource {
 				Description: "When 'true', enables connecting to the database with the 'default' user across all regions. Default: 'true'",
 				Type:        schema.TypeBool,
 				Optional:    true,
+			Default:     true,
 			},
 			"auto_minor_version_upgrade": {
 				Description: "When 'true', enables auto minor version upgrades for this database. Default: 'true'",
@@ -265,9 +266,10 @@ func resourceRedisCloudActiveActiveDatabase() *schema.Resource {
 							Optional:    true,
 						},
 						"enable_default_user": {
-							Description: "When 'true', enables connecting to the database with the 'default' user. If not set, the global setting will be used.",
+							Description: "When 'true', enables connecting to the database with the 'default' user. Default: 'true'",
 							Type:        schema.TypeBool,
 							Optional:    true,
+						Default:     true,
 						},
 						"remote_backup": {
 							Description: "An object that specifies the backup options for the database in this region",

provider/resource_rediscloud_active_active_subscription.go

@@ -4,16 +4,16 @@ import (
 	"bytes"
 	"context"
 	"fmt"
-	"github.com/RedisLabs/terraform-provider-rediscloud/provider/client"
-	"github.com/RedisLabs/terraform-provider-rediscloud/provider/pro"
-	"github.com/RedisLabs/terraform-provider-rediscloud/provider/utils"
 	"regexp"
 	"strconv"
 	"time"
 
 	"github.com/RedisLabs/rediscloud-go-api/redis"
 	"github.com/RedisLabs/rediscloud-go-api/service/maintenance"
 	"github.com/RedisLabs/rediscloud-go-api/service/subscriptions"
+	"github.com/RedisLabs/terraform-provider-rediscloud/provider/client"
+	"github.com/RedisLabs/terraform-provider-rediscloud/provider/pro"
+	"github.com/RedisLabs/terraform-provider-rediscloud/provider/utils"
 	"github.com/hashicorp/terraform-plugin-sdk/v2/diag"
 	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema"
 	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/validation"