juju_access_offer tries to remove admin access

[amandahla]

Description

After applying a resource change, the juju_access_offer tries to remove admin access (added by default while creating an offer).

# module.postgresql.juju_access_offer.postgresql_to_operator will be updated in-place
  ~ resource "juju_access_offer" "postgresql_to_operator" {
      - admin     = [
          - "des-database",
        ] -> null
        id        = "admin/des-database.postgresql"
        # (2 unchanged attributes hidden)
    }

$ juju show-offer postgresql --format json|jq
{
  "microk8s-localhost:admin/des-database.postgresql": {
    "description": "Charm to operate the PostgreSQL database on Kubernetes clusters\n",
    "access": "admin",
    "endpoints": {
      "database": {
        "interface": "postgresql_client",
        "role": "provider"
      }
    },
    "users": {
      "admin": {
        "display-name": "admin",
        "access": "admin"
      },
      "des-application": {
        "access": "consume"
      },
      "des-database": {
        "access": "admin"
      },
      "everyone@external": {
        "access": "read"
      }
    }
  }
}

Workaround

Add the user defined in provider (the one that will create the offer) as admin in the plan:

resource "juju_access_offer" "postgresql_to_operator" {
  offer_url = juju_offer.postgresql.url
  consume   = [var.juju_offer_user]
  admin     = ["des-database"]
}

Urgency

Casually reporting

Terraform Juju Provider version

0.16.0

Terraform version

1.7.4

Juju version

3.6.2

Terraform Configuration(s)

https://github.com/amandahla/cmr-terraform-test/tree/main

Reproduce / Test

https://github.com/amandahla/cmr-terraform-test/tree/main

Debug/Panic Output

Notes & References

No response