Resource(iam): secret_key always empty

[juchom]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

This already happened in this issue : #1490

Terraform Version

OpenTofu v1.9.0
on windows_amd64
+ provider registry.opentofu.org/scaleway/scaleway v2.51.0

Affected Resource(s)

• scaleway_iam_api_key

Terraform Configuration Files

# IAM Application
resource "scaleway_iam_application" "app" {
  name = "${var.naming_prefix}-app"
}

# IAM ApiKey
resource "scaleway_iam_api_key" "app_key" {
  application_id = scaleway_iam_application.app.id
}

output "app_secret_key" {
  description = "IAM App secret key"
  value       = scaleway_iam_api_key.app_key.secret_key
  sensitive   = true
}

Debug Output

Panic Output

Expected Behavior

The output should be populated

Actual Behavior

If I set something in app_secret_key and then set back scaleway_iam_api_key.app_key.secret_key

here is the plan

Changes to Outputs:
  - app_secret_key = (sensitive value) -> null

Steps to Reproduce

1. terraform apply

the app_secret_key does not exist in outputs

Important Factoids

References

• #0000

[juchom]

I dig a bit more in the code, I'm not sure if this is the problem, but when reading the resource, the secret_key is not set

terraform-provider-scaleway/internal/services/iam/api_key.go

Lines 113 to 148 in d41bded

	func resourceIamAPIKeyRead(ctx context.Context, d *schema.ResourceData, m interface{}) diag.Diagnostics {
	api := NewAPI(m)
	res, err := api.GetAPIKey(&iam.GetAPIKeyRequest{
	AccessKey: d.Id(),
	}, scw.WithContext(ctx))
	if err != nil {
	if httperrors.Is404(err) {
	d.SetId("")
	return nil
	}
	return diag.FromErr(err)
	}
	_ = d.Set("description", res.Description)
	_ = d.Set("created_at", types.FlattenTime(res.CreatedAt))
	_ = d.Set("updated_at", types.FlattenTime(res.UpdatedAt))
	_ = d.Set("expires_at", types.FlattenTime(res.ExpiresAt))
	_ = d.Set("access_key", res.AccessKey)
	if res.ApplicationID != nil {
	_ = d.Set("application_id", res.ApplicationID)
	}
	if res.UserID != nil {
	_ = d.Set("user_id", res.UserID)
	}
	_ = d.Set("editable", res.Editable)
	_ = d.Set("creation_ip", res.CreationIP)
	_ = d.Set("default_project_id", res.DefaultProjectID)
	return nil
	}

[juchom]

Ok, just forget about it. There is no issue with the provider.

I don't have the secret_key, because I was importing this resource.