zitadel_login_policy resource trows errors about terraform-provider-zitadel

[stebenz]

@jobcespedes
To error 1, this is correct behavior, as a resource managed with terraform was changed in some kind of way as that should not happen normally.
To error 2, this is also correct behavior, as terraform should only update resources if there are changed in them, which should never result in the "NotChanged" error, did you apply the exact same resource again with the terraform state of the first apply?

[jobcespedes]

Hi @stebenz,

1. To your first point: got it.
2. To your second point: No, No changes were made between first and second run of terraform apply. I ended up adding a lifecycle block the resource.

[stebenz]

Hi @jobcespedes
But with the lifecycle block, there should be no changes on the resource attributes that trigger the calling of the ZITADEL API and then result in the error as really nothing changed.
How is the change in the second apply displayed?

[vs-gtadeu]

I've just run into this issue:

│ Error: failed to update login policy: rpc error: code = FailedPrecondition desc = Errors.Org.LoginPolicy.NotChanged (Org-5M9vdd)
│ 
│   with zitadel_login_policy.default,
│   on organizations.tf line 58, in resource "zitadel_login_policy" "default":
│   58: resource "zitadel_login_policy" "default" {

For context: We already had successfully terraformed the zitadel_login_policy previously. This error happened after we ran Terraform again with a set of changes unrelated to the zitadel_login_policy resource that caused the error.

Keeping existing resource parameters untouched is something completely normal in the lifecycle of a Terraform project.

[vs-gtadeu]

I'd also like to counter-argument this statement:

To error 1, this is correct behavior, as a resource managed with terraform was changed in some kind of way as that should not happen normally.

I've never seen this behavior with other Terraform providers. Usually, providers just display a warning in the Terraform plan output indicating that something was changed outside of Terraform:

More info can be found here.