Remove bad AUTH_NONE default for GKE Istio Config

Signed-off-by: Modular Magician <magic-modules@google.com>
hashicorp · Jun 10, 2019 · 994a9c3 · 994a9c3
1 parent 4fe1a4e
commit 994a9c3
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 4 deletions.
diff --git a/google-beta/resource_container_cluster.go b/google-beta/resource_container_cluster.go
@@ -214,10 +214,11 @@ func resourceContainerCluster() *schema.Resource {
 										Optional: true,
 									},
 									"auth": {
-										Type:         schema.TypeString,
-										Default:      "AUTH_NONE",
-										Optional:     true,
-										ValidateFunc: validation.StringInSlice([]string{"AUTH_NONE", "AUTH_MUTUAL_TLS"}, false),
+										Type:     schema.TypeString,
+										Optional: true,
+										// We can't use a Terraform-level default because it won't be true when the block is disabled: true
+										DiffSuppressFunc: emptyOrDefaultStringSuppress("AUTH_NONE"),
+										ValidateFunc:     validation.StringInSlice([]string{"AUTH_NONE", "AUTH_MUTUAL_TLS"}, false),
 									},
 								},
 							},

diff --git a/google-beta/resource_container_cluster_test.go b/google-beta/resource_container_cluster_test.go
@@ -2147,6 +2147,7 @@ resource "google_container_cluster" "with_istio_enabled" {
 	addons_config {
 		istio_config {
 			disabled = false
+			auth     = "AUTH_NONE"
 		}
 	}
 }`, clusterName)