Skip to content

fix(zone_dnssec): add UseStateForUnknown to computed fields#6866

Open
argeas wants to merge 1 commit intocloudflare:mainfrom
argeas:fix/zone-dnssec-phantom-diffs
Open

fix(zone_dnssec): add UseStateForUnknown to computed fields#6866
argeas wants to merge 1 commit intocloudflare:mainfrom
argeas:fix/zone-dnssec-phantom-diffs

Conversation

@argeas
Copy link

@argeas argeas commented Mar 3, 2026

Summary

  • Computed fields (algorithm, digest, digest_algorithm, digest_type, ds, flags, key_tag, key_type, public_key) were missing `UseStateForUnknown()` plan
    modifiers
  • This caused phantom diffs showing `"value" -> (known after apply)` on every `terraform plan` even when nothing changed
  • Added `UseStateForUnknown()` to all stable computed fields (excluded `modified_on` as it legitimately changes)

Test plan

  • Run `terraform plan` on an existing zone with DNSSEC enabled — should show no changes
  • Enable DNSSEC on a new zone — computed fields should populate correctly after apply
  • Subsequent `terraform plan` should show no phantom diffs"

…t phantom diffs

Computed fields (algorithm, digest, digest_algorithm, digest_type, ds,
flags, key_tag, key_type, public_key) were missing UseStateForUnknown()
plan modifiers, causing Terraform to show "value" -> (known after apply)
on every plan even when nothing changed.
@argeas argeas requested a review from a team as a code owner March 3, 2026 14:01
@argeas argeas changed the title fix(zone_dnssec): add UseStateForUnknown to computed fields to preven… fix(zone_dnssec): add UseStateForUnknown to computed fields Mar 3, 2026
@vaishakdinesh
Copy link
Member

vaishakdinesh commented Mar 4, 2026

@argeas What issue are you seeing with this resource? Is there an open github issue?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants