error updating Vault cluster when trying to increase tier size

[brizzbuzz]

Terraform Version and Provider Version

Terraform version: 1.3.0
HCP provider version: 0.43.0

Affected Resource(s)

• hcp_vault_cluster

Terraform Configuration Files

resource "hcp_hvn" "omit" {
  hvn_id         = "omit"
  cloud_provider = "aws"
  region         = "us-east-1"
  cidr_block     = "omit"
}

resource "hcp_vault_cluster" "omit" {
  cluster_id      = "omit"
  hvn_id          = hcp_hvn.omit.hvn_id
  public_endpoint = true
  tier = "starter_small" // Changed this from empty (dev) to starter_small
}

resource "hcp_vault_cluster_admin_token" "omit" {
  cluster_id = hcp_vault_cluster.omit.cluster_id
}

Debug Output

╷
│ Error: error updating Vault cluster (omit): [PATCH /vault/2020-11-25/organizations/{cluster.location.organization_id}/projects/{cluster.location.project_id}/clusters/{cluster.id}][403] Update default &{Code:7 Details:[] Error: Message:}
│
│ with module.hcp.hcp_vault_cluster.omit,
│ on modules/hcp/hcp.tf line 8, in resource "hcp_vault_cluster" "omit":
│ 8: resource "hcp_vault_cluster" "omit" {
│
╵

Panic Output

Steps to Reproduce

1. terraform apply

Expected Behavior

Actual Behavior

Important Factoids

References

• #0000

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

[itsjaspermilan]

Hey @unredundant 👋🏽 I noticed that you received a 403 in your error message. After checking with our Vault team, I can confirm that upgrading the tier of a Vault cluster is only available to admins for the account. Are you able to retry using an admin account?

[brizzbuzz]

Oh... yea the the HCP access/secret pair I generated is a contributor, not an admin. Good call 👍

[iniinikoski]

Ouch... Sorry for commenting a closed issue but, just bumped into this as well - and was puzzled what's happening. Please @paraspraj document this down into the the resource that changing the tier will require an "admin". This will bite to people for sure...

[itsjaspermilan]

Thanks for the suggestion @iniinikoski! You should see these changes once the next release of the Terraform Provider comes out 👍🏽
#400