When applying changes to juju_kubernetes_cloud, provider provider["registry.terraform.io/juju/juju"] produced an unexpected new value: .kubernetes_config: inconsistent values for sensitive attribute.

[mcarvalhor]

Description

We're getting this error when using resource juju_kubernetes_cloud.

This is the plan:

  # juju_kubernetes_cloud.cluster_k8s_cloud will be updated in-place
  ~ resource "juju_kubernetes_cloud" "cluster_k8s_cloud" {
        id                = "k8s-stg-is-iam:k8s-stg-is-iam"
      ~ kubernetes_config = (sensitive value)
        name              = "k8s-stg-is-iam"
        # (1 unchanged attribute hidden)
    }

This is the error message:

juju_kubernetes_cloud.cluster_k8s_cloud: Modifying... [id=k8s-stg-is-iam:k8s-stg-is-iam]
╷
│ Error: Provider produced inconsistent result after apply
│ 
│ When applying changes to juju_kubernetes_cloud.cluster_k8s_cloud, provider "provider[\"registry.terraform.io/juju/juju\"]" produced an unexpected new value: .kubernetes_config:
│ inconsistent values for sensitive attribute.
│ 
│ This is a bug in the provider, which should be reported in the provider's own issue tracker.

The value for "kubernetes_config" has changed, but looks like we can't change it for the cloud.

Urgency

Annoying bug in our test suite

Terraform Juju Provider version

v0.15.1

Terraform version

v1.10.5-dev

Juju version

v3.6.1

Terraform Configuration(s)

data "vault_generic_secret" "kubeconfig" {
#  depends_on = [
#    module.canonical_k8s
#  ]
  path = "secret/prodstack6/managed/kubernetes/k8s-stg-is-iam"
}

resource "juju_kubernetes_cloud" "cluster_k8s_cloud" {
  name              = "k8s-stg-is-iam"
  kubernetes_config = base64decode(data.vault_generic_secret.kubeconfig.data["kubeconfig_b64"])
}

Reproduce / Test

terraform init && terraform apply

Debug/Panic Output

`terraform apply` output:
- https://pastebin.canonical.com/p/85WkTk7pFv/

Terraform Trace Logs:
- https://private-fileshare.canonical.com/~mcarvalhor/2025-02-04_terraform-provider-kubernetes_config-inconsistent-values-for-sensitive-attribute/.t7o3Emcakka3nMzBc/trace.log

Notes & References

No response

[SimoneDutto]

Hi @mcarvalhor, thank you for reporting the issue.
I've managed to reproduce the bug you've filed locally and I am working on a fix, I'll update you as soon as I have any news.