Skip to content

Commit

Permalink
Merge pull request #13 from data-platform-hq/fix_tde_changes
Browse files Browse the repository at this point in the history
fix: tde changes ignore
  • Loading branch information
owlleg6 authored Sep 26, 2023
2 parents af73a9a + d3b4e24 commit 3b98d3c
Showing 1 changed file with 1 addition and 5 deletions.
6 changes: 1 addition & 5 deletions main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,7 @@ resource "azurerm_mssql_server" "this" {
ignore_changes = [
administrator_login,
administrator_login_password,
transparent_data_encryption_key_vault_key_id
]
}

Expand Down Expand Up @@ -48,11 +49,6 @@ resource "azurerm_mssql_server_transparent_data_encryption" "this" {
key_vault_key_id = var.key_vault_key_id
auto_rotation_enabled = var.auto_rotation_enabled

# When automated TDE Key rotation is enabled, it is required to ignore new Key id for state consistency.
lifecycle {
ignore_changes = [key_vault_key_id]
}

depends_on = [azurerm_key_vault_access_policy.tde_policy]
}

Expand Down

0 comments on commit 3b98d3c

Please sign in to comment.