Support update/reset of AKS RBAC AAD profile

[landro]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Terraform (and AzureRM Provider) Version

Terraform v0.12.3
provider.azurerm v1.31.0

Affected Resource(s)

• azurerm_kubernetes_cluster

Terraform Configuration Files

    azure_active_directory {
      server_app_id     = "new_server_app_id"
      server_app_secret = "new_server_app_secret"
      client_app_id     = "new_client_app_id"
    }

Expected Behavior

RBAC AAD profile should have been reset / replaced in place, and not trigger cluster recreation. Azure added support for this recently (see reference below).

Actual Behavior

Triggers cluster recreation

Steps to Reproduce

Modify azure_active_directory profile and run apply

References

Similar issue related to updating cluster service principal: #3375

https://github.com/terraform-providers/terraform-provider-azurerm/blob/63baf1a89eeb8305756713c3e3437d1f09fbac46/vendor/github.com/Azure/azure-sdk-for-go/services/containerservice/mgmt/2019-02-01/containerservice/managedclusters.go#L895

[ghost]

This has been released in version 1.42.0 of the provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading. As an example:

provider "azurerm" {
    version = "~> 1.42.0"
}
# ... other configuration ...

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. If you feel I made an error 🤖 🙉 , please reach out to my human friends 👉 hashibot-feedback@hashicorp.com. Thanks!