Do not require replace for everything

Author: helenjw

internal/provider/resource_tfe_aws_oidc_configuration.go

@@ -70,9 +70,6 @@ func (r *resourceTFEAWSOIDCConfiguration) Schema(_ context.Context, _ resource.S
 			"role_arn": schema.StringAttribute{
 				Description: "The AWS ARN of your role.",
 				Required:    true,
-				PlanModifiers: []planmodifier.String{
-					stringplanmodifier.RequiresReplace(),
-				},
 			},
 			"organization": schema.StringAttribute{
 				Description: "Name of the organization to which the TFE AWS OIDC configuration belongs.",

internal/provider/resource_tfe_azure_oidc_configuration.go

@@ -72,23 +72,14 @@ func (r *resourceTFEAzureOIDCConfiguration) Schema(_ context.Context, _ resource
 			"client_id": schema.StringAttribute{
 				Description: "The Client (or Application) ID of your Entra ID application.",
 				Required:    true,
-				PlanModifiers: []planmodifier.String{
-					stringplanmodifier.RequiresReplace(),
-				},
 			},
 			"subscription_id": schema.StringAttribute{
 				Description: "The ID of your Azure subscription.",
 				Required:    true,
-				PlanModifiers: []planmodifier.String{
-					stringplanmodifier.RequiresReplace(),
-				},
 			},
 			"tenant_id": schema.StringAttribute{
 				Description: "The Tenant (or Directory) ID of your Entra ID application.",
 				Required:    true,
-				PlanModifiers: []planmodifier.String{
-					stringplanmodifier.RequiresReplace(),
-				},
 			},
 			"organization": schema.StringAttribute{
 				Description: "Name of the organization to which the TFE Azure OIDC configuration belongs.",

internal/provider/resource_tfe_gcp_oidc_configuration.go

@@ -72,23 +72,14 @@ func (r *resourceTFEGCPOIDCConfiguration) Schema(_ context.Context, _ resource.S
 			"service_account_email": schema.StringAttribute{
 				Description: "The email of your GCP service account, with permissions to encrypt and decrypt using a Cloud KMS key.",
 				Required:    true,
-				PlanModifiers: []planmodifier.String{
-					stringplanmodifier.RequiresReplace(),
-				},
 			},
 			"project_number": schema.StringAttribute{
 				Description: "The GCP Project containing the workload provider and service account.",
 				Required:    true,
-				PlanModifiers: []planmodifier.String{
-					stringplanmodifier.RequiresReplace(),
-				},
 			},
 			"workload_provider_name": schema.StringAttribute{
 				Description: "The fully qualified workload provider path.",
 				Required:    true,
-				PlanModifiers: []planmodifier.String{
-					stringplanmodifier.RequiresReplace(),
-				},
 			},
 			"organization": schema.StringAttribute{
 				Description: "Name of the organization to which the TFE GCP OIDC configuration belongs.",

internal/provider/resource_tfe_vault_oidc_configuration.go

@@ -8,6 +8,7 @@ import (
 	"errors"
 	"fmt"
 	"github.com/hashicorp/terraform-plugin-framework/path"
+	"github.com/hashicorp/terraform-plugin-framework/resource/schema/stringdefault"
 
 	tfe "github.com/hashicorp/go-tfe"
 	"github.com/hashicorp/terraform-plugin-framework/resource"
@@ -74,37 +75,25 @@ func (r *resourceTFEVaultOIDCConfiguration) Schema(_ context.Context, _ resource
 			"address": schema.StringAttribute{
 				Description: "The full address of your Vault instance.",
 				Required:    true,
-				PlanModifiers: []planmodifier.String{
-					stringplanmodifier.RequiresReplace(),
-				},
 			},
 			"role_name": schema.StringAttribute{
 				Description: "The name of a role in your Vault JWT auth path, with permission to encrypt and decrypt with a Transit secrets engine key.",
 				Required:    true,
-				PlanModifiers: []planmodifier.String{
-					stringplanmodifier.RequiresReplace(),
-				},
 			},
 			"namespace": schema.StringAttribute{
 				Description: "The namespace your JWT auth path is mounted in.",
 				Required:    true,
-				PlanModifiers: []planmodifier.String{
-					stringplanmodifier.RequiresReplace(),
-				},
 			},
 			"auth_path": schema.StringAttribute{
 				Description: `The mounting path of JWT auth path of JWT auth. Defaults to "jwt".`,
 				Required:    true,
-				PlanModifiers: []planmodifier.String{
-					stringplanmodifier.RequiresReplace(),
-				},
+				Default:     stringdefault.StaticString("jwt"),
 			},
 			"encoded_cacert": schema.StringAttribute{
 				Description: "A base64 encoded certificate which can be used to authenticate your Vault certificate. Only needed for self-hosted Vault Enterprise instances with a self-signed certificate.",
 				Optional:    true,
-				PlanModifiers: []planmodifier.String{
-					stringplanmodifier.RequiresReplace(),
-				},
+				Computed:    true,
+				Default:     stringdefault.StaticString(""),
 			},
 			"organization": schema.StringAttribute{
 				Description: "Name of the organization to which the TFE Vault OIDC configuration belongs.",