Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Absence of password change possibility via terraform provider #71

Closed
skolenkin opened this issue Dec 14, 2020 · 0 comments
Closed

Absence of password change possibility via terraform provider #71

skolenkin opened this issue Dec 14, 2020 · 0 comments
Assignees

Comments

@skolenkin
Copy link

Absence of password change possibility via terraform provider:

resource "boundary_account" "users_acct" {
  for_each       = var.users
  name           = each.key
  description    = "User account for ${each.key}"
  type           = "password"
  login_name     = lower(each.key)
  password       = "PASSWORD"
  auth_method_id = boundary_auth_method.password.id
}
terraform init
Initializing the backend...
Initializing provider plugins...
- Reusing previous version of hashicorp/boundary from the dependency lock file
- Installing hashicorp/boundary v0.1.0...
- Installed hashicorp/boundary v0.1.0 (signed by HashiCorp)
Terraform has been successfully initialized!

The current implementation does not support password change for user. But it can be needed for securing access, password rotation, adding labels to this user item.
Any manual changes of the password will lead to the impossibility to manage infrastructure.

If deploy users via terraform and after that change password we can't run terraform apply again

Do you want to perform these actions?
  Terraform will perform the actions described above.
  Only 'yes' will be accepted to approve.

  Enter a value: yes

boundary_scope.global: Modifying... [id=global]
boundary_account.users_acct["stas"]: Modifying... [id=apw_W9eDoz9D2r]
boundary_account.users_acct["skole"]: Modifying... [id=apw_DFqi233aUN]
boundary_scope.global: Modifications complete after 0s [id=global]

Error: error updating account: {"status":400, "code":"InvalidArgument", "message":"No valid fields included in the update mask.", "details":{"request_fields":[{"name":"update_mask", "description":"No valid fields provided in the update mask."}]}}

Error: error updating account: {"status":400, "code":"InvalidArgument", "message":"No valid fields included in the update mask.", "details":{"request_fields":[{"name":"update_mask", "description":"No valid fields provided in the update mask."}]}}
@malnick malnick self-assigned this Jan 4, 2021
@louisruch louisruch transferred this issue from hashicorp/boundary Jan 15, 2021
@louisruch louisruch self-assigned this Jan 16, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants