Empty pem_certificates field on google_privateca_certificate

[keithmattix]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request.
• Please do not leave +1 or me too comments, they generate extra noise for issue followers and do not help prioritize the request.
• If you are interested in working on this issue or have submitted a pull request, please leave a comment.
• If an issue is assigned to the modular-magician user, it is either in the process of being autogenerated, or is planned to be autogenerated soon. If an issue is assigned to a user, that user is claiming responsibility for the issue. If an issue is assigned to hashibot, a community member has claimed the issue already.

Terraform Version

Terraform v1.1.4

Affected Resource(s)

• google_privateca_certificate

Terraform Configuration Files

resource "google_privateca_certificate" "sign-intermediate-csr" {
  pool = "my-pool"
  location = "us-central1"
  certificate_authority = "my-root-ca"
  project = "my-project"
  lifetime = "157680000s"
  name = "my-csr"
  
  pem_csr = vault_pki_secret_backend_intermediate_cert_request.intermediate-csr.csr
}

Debug Output

Using Terraform Cloud at the moment

Panic Output

Expected Behavior

The pem_certificates field on a google_privateca_certificate should contain the entire certificate chain

Actual Behavior

The pem_certificates field is an empty list

Steps to Reproduce

Create any google_privateca_certificate and check TF state; the pem_certificates field will be empty

Important Factoids

• I'm 99% sure this issue is because the REST API reference is incorrect. The code looks for a key of pemCertificates when the REST docs indicate a key name of pemCertificateChain. This is preventing Terraform users from accessing the full CA chain for Google CAS resources.

References

• GCP Certificate Authority Service support #7657 (comment)

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

[mitj04]

b/216472740