Terraform apply wipes out SSO configuration

[jsirianni]

If SSO is not managed by Terraform, the provider silently wipes out the SSO configuration. I had Google SSO configured and working. After modifying settings with terraform, my SSO configuration is missing. The TF plan output did not indicate it would be removed.

Im sure I need to include my SSO configuration in the TF resource; however, I would expect plan to show that the SSO configuration would be removed.

This output is an example of what I saw, when modifying RBAC using Terraform. the RBAC change is shown correctly, but SSO removal is not shown.

Terraform will perform the following actions:

  # akp_instance.redacted will be updated in-place
  ~ resource "akp_instance" "redacted" {
      ~ argocd_rbac_cm            = {
          ~ "policy.csv" = <<-EOT
                g, redacted, role:admin
                g, redacted, role:admin
                g, redacted role:admin
                g, redacted, role:admin
            EOT
            # (1 unchanged element hidden)
        }
        id                        = "redacted"
        name                      = "redacted"
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.