add forcenew to a pair of pem (#7896) (#14521)

Signed-off-by: Modular Magician <[email protected]> Co-authored-by: Edward Sun <[email protected]>
hashicorp · May 8, 2023 · 320e80c · 320e80c
1 parent e15f28a
commit 320e80c
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/.changelog/7896.txt b/.changelog/7896.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+certificatemanager: fixed an issue where `self_managed.pem_certificate` and `self_managed.pem_certificate` can't be updated on `google_certificate_manager_certificate`
+```
diff --git a/google/resource_certificate_manager_certificate.go b/google/resource_certificate_manager_certificate.go
@@ -208,6 +208,7 @@ certificates before they expire remains the user's responsibility.`,
 							Type:       schema.TypeString,
 							Optional:   true,
 							Deprecated: "Deprecated in favor of `pem_certificate`",
+							ForceNew:   true,
 							Description: `**Deprecated** The certificate chain in PEM-encoded form.
 
 Leaf certificate comes first, followed by intermediate ones if any.`,
@@ -217,6 +218,7 @@ Leaf certificate comes first, followed by intermediate ones if any.`,
 						"pem_certificate": {
 							Type:     schema.TypeString,
 							Optional: true,
+							ForceNew: true,
 							Description: `The certificate chain in PEM-encoded form.
 
 Leaf certificate comes first, followed by intermediate ones if any.`,
@@ -225,6 +227,7 @@ Leaf certificate comes first, followed by intermediate ones if any.`,
 						"pem_private_key": {
 							Type:         schema.TypeString,
 							Optional:     true,
+							ForceNew:     true,
 							Description:  `The private key of the leaf certificate in PEM-encoded form.`,
 							Sensitive:    true,
 							ExactlyOneOf: []string{"self_managed.0.private_key_pem", "self_managed.0.pem_private_key"},
@@ -233,6 +236,7 @@ Leaf certificate comes first, followed by intermediate ones if any.`,
 							Type:         schema.TypeString,
 							Optional:     true,
 							Deprecated:   "Deprecated in favor of `pem_private_key`",
+							ForceNew:     true,
 							Description:  `**Deprecated** The private key of the leaf certificate in PEM-encoded form.`,
 							Sensitive:    true,
 							ExactlyOneOf: []string{"self_managed.0.private_key_pem", "self_managed.0.pem_private_key"},