This PR was marked as stale after 7 days of inactivity and will be closed after another 7 days of further inactivity. If this PR should be kept open, just add a comment, remove the stale label or push new commits to it.

@marceljk Done and thanks for the additional testing.

Keep in mind to set DisableCLIAuthFlow: true in the STACKIT CLI to avoid auth loops.

@jkroepke We just discussed the field DisableCLIAuthFlow: true in our team and we would prefer that we have to enable the CLIAuthFlow by setting it to true and that it is disabled by default.
This would avoid unexpected behavior for people who are not aware of the CLIAuthFlow and since you then have to enable the option, you automatically become aware of it.

Hi @marceljk

I would have a different sight on that:

On the Azure SDK, it's enabled by default. This at least guarantees that CLI authentication is always available, even for third-party programs like Prometheus, Terraform. And it's documented:
https://learn.microsoft.com/en-us/azure/developer/go/sdk/authentication/authentication-overview

The AWS SDK works in a similar way. An authenticated CLI is sufficient for the Terraform provider. That is great for local development where I can use a personal account to run terraform locally.

From an end-user perspective, I would assume that CLI authentication is enabled by default.

So I wound recommend that CLI Auth Flow is part of the Standard Credential Chain.

But I respect your decision and have changed it as requested.

Hi @jkroepke,

that's a good point that the CLI authentication is by default always available and even for third-party programs. We will discuss it again internal, what's the better option here and will come back to you.

This PR was marked as stale after 7 days of inactivity and will be closed after another 7 days of further inactivity. If this PR should be kept open, just add a comment, remove the stale label or push new commits to it.

Hi @jkroepke,
I just want to inform you, that we have still a look into this. I will inform you as soon as we have new information

This PR was marked as stale after 7 days of inactivity and will be closed after another 7 days of further inactivity. If this PR should be kept open, just add a comment, remove the stale label or push new commits to it.

Hello @jkroepke,

Thanks for your contribution! We really appreciated your contribution and this gave us some new input for our internal discussion and how we can implement this feature.
We decided, that we want to make also some changes in the CLI and add new commands for this purpose. So users would have better control if the CLI Auth flow is used or not and we gain more control over the used interface in the CLI.

We created a RFC stackitcloud/terraform-provider-stackit#880 with our target architecture of this feature. We would appreciate it, when you give us some feedback to it. When we implement this feature, we can also add you as reviewer if you like to.

With this newly defined architecture, I will close this PR.