Merge pull request #13 from data-platform-hq/fix_tde_changes

owlleg6 · web-flow · commit 3b98d3c2c02c · 2023-09-26T12:55:19.000+03:00
fix: tde changes ignore
diff --git a/main.tf b/main.tf
@@ -19,6 +19,7 @@ resource "azurerm_mssql_server" "this" {
     ignore_changes = [
       administrator_login,
       administrator_login_password,
+      transparent_data_encryption_key_vault_key_id
     ]
   }
 
@@ -48,11 +49,6 @@ resource "azurerm_mssql_server_transparent_data_encryption" "this" {
   key_vault_key_id      = var.key_vault_key_id
   auto_rotation_enabled = var.auto_rotation_enabled
 
-  # When automated TDE Key rotation is enabled, it is required to ignore new Key id for state consistency. 
-  lifecycle {
-    ignore_changes = [key_vault_key_id]
-  }
-
   depends_on = [azurerm_key_vault_access_policy.tde_policy]
 }
 

Original file line number	Diff line number	Diff line change
`@@ -19,6 +19,7 @@ resource "azurerm_mssql_server" "this" {`
`19`	`19`	`ignore_changes = [`
`20`	`20`	`administrator_login,`
`21`	`21`	`administrator_login_password,`
	`22`	`+ transparent_data_encryption_key_vault_key_id`
`22`	`23`	`]`
`23`	`24`	`}`
`24`	`25`
`@@ -48,11 +49,6 @@ resource "azurerm_mssql_server_transparent_data_encryption" "this" {`
`48`	`49`	`key_vault_key_id = var.key_vault_key_id`
`49`	`50`	`auto_rotation_enabled = var.auto_rotation_enabled`
`50`	`51`
`51`		`- # When automated TDE Key rotation is enabled, it is required to ignore new Key id for state consistency.`
`52`		`- lifecycle {`
`53`		`- ignore_changes = [key_vault_key_id]`
`54`		`- }`
`55`		`-`
`56`	`52`	`depends_on = [azurerm_key_vault_access_policy.tde_policy]`
`57`	`53`	`}`
`58`	`54`