azurerm_search_service create/update fails to update because on invalid properties

[vamshisiram]

Is there an existing issue for this?

• I have searched the existing issues

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment and review the contribution guide to help.

Terraform Version

1.4.6

AzureRM Provider Version

3.57.0

Affected Resource(s)/Data Source(s)

azurerm_search_service

Terraform Configuration Files

resource "azurerm_search_service" "search_service" {
  name                          = "srch-test"
  resource_group_name           = "rg-test"
  location                      = "northcentralus"
  sku                           = var.sku
  replica_count                 = var.replica_count
  partition_count               = lower(var.sku) == "basic" ? 1 : var.partition_count
  public_network_access_enabled = false
  local_authentication_enabled  = true
}

Debug Output/Panic Output

Error: updating Search Service (Subscription: "a3f35929-499d-49ee-a21d-0fbc494461b3" Resource Group Name: "rg-openai-001" Search Service Name: "srch-idpaidev-001"): performing CreateOrUpdate: unexpected status 400 with error: BadRequest: Request body cannot contain the following invalid Properties : privateEndpointConnections,provisioningState,sharedPrivateLinkResources,status,statusDetails. Please refer to https://learn.microsoft.com/en-us/rest/api/searchmanagement/management-api-versions for a list of allowed properties

Expected Behaviour

expect the search service local auth to be enabled.

Actual Behaviour

Error: updating Search Service (Subscription: "a3f35929-499d-49ee-a21d-0fbc494461b3" Resource Group Name: "rg-openai-001" Search Service Name: "srch-idpaidev-001"): performing CreateOrUpdate: unexpected status 400 with error: BadRequest: Request body cannot contain the following invalid Properties : privateEndpointConnections,provisioningState,sharedPrivateLinkResources,status,statusDetails. Please refer to https://learn.microsoft.com/en-us/rest/api/searchmanagement/management-api-versions for a list of allowed properties

Steps to Reproduce

1. Create a search service first with local auth set to false.
2. then change the local auth to true. and apply.

Important Factoids

No response

References

No response

[neil-yechenwei]

Thanks for raising this issue. Seems I can't reproduce this issue with the latest azurerm provider and below tf config that is similar with yours. Could you try latest azurerm provider and below tf config to see if the issue still exists? Thanks.

tf config:

provider "azurerm" {
  features {}
}

resource "azurerm_resource_group" "test" {
  name     = "acctestRG-search-test01"
  location = "westeurope"
}

resource "azurerm_search_service" "test" {
  name                          = "acctestsearchservicetest01"
  resource_group_name           = azurerm_resource_group.test.name
  location                      = azurerm_resource_group.test.location
  sku                           = "standard"
  replica_count                 = 2
  partition_count               = 3
  public_network_access_enabled = false
  local_authentication_enabled  = false
}

[vamshisiram]

Hi Neil, Yes, i tried with latest azurerm provider version and it still exists. Get Outlook for iOS<https://aka.ms/o0ukef>

…

________________________________ From: Neil Ye ***@***.***> Sent: Thursday, January 25, 2024 4:48:01 AM To: hashicorp/terraform-provider-azurerm ***@***.***> Cc: vamshisiram ***@***.***>; Author ***@***.***> Subject: Re: [hashicorp/terraform-provider-azurerm] azurerm_search_service create/update fails to update because on invalid properties (Issue #24623) Thanks for raising this issue. Seems I can't reproduce this issue with the latest azurerm provider and below tf config that is similar with yours. Could you try latest azurerm provider and below tf config to see if the issue still exists? Thanks. tf config: provider "azurerm" { features {} } resource "azurerm_resource_group" "test" { name = "acctestRG-search-test01" location = "westeurope" } resource "azurerm_search_service" "test" { name = "acctestsearchservicetest01" resource_group_name = azurerm_resource_group.test.name location = azurerm_resource_group.test.location sku = "standard" replica_count = 2 partition_count = 3 public_network_access_enabled = false local_authentication_enabled = false } image.png (view on web)<https://github.com/hashicorp/terraform-provider-azurerm/assets/19754191/251bf967-8cc9-46fd-9a55-f8afbe748200> image.png (view on web)<https://github.com/hashicorp/terraform-provider-azurerm/assets/19754191/d74c3ee4-f9f5-49e6-b7dc-e59864954fdb> — Reply to this email directly, view it on GitHub<#24623 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AVU36WTBHEY2Z5BQYC2XBNLYQJIADAVCNFSM6AAAAABCJLKAKCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSMJQGEZTGOJXHA>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[acranefei]

I'm having the same issue. I was able to deploy previously with no issue, but now it's throwing this error.

[math280h]

I'm having the same issue. I was able to deploy previously with no issue, but now it's throwing this error.

Same here (Only updating semantic_search_sku)

[noiserockfiend]

Same issue. Unable to make any changes to Search services.

[leiter-jakab]

I'm also encountering this issue. You can find my configuration below. I'm using a private endpoint and configure to use both API keys and RBAC for access.

resource "azurerm_search_service" "ais-search" {
  name                = "ais-${local.workload}-search-${var.environment}"
  resource_group_name = data.azurerm_resource_group.rg-base.name
  location            = data.azurerm_resource_group.rg-base.location
  sku                 = "basic"

  public_network_access_enabled = false
  local_authentication_enabled  = false

  identity {
    type = "SystemAssigned"
  }
  
  tags = local.tags
}

resource "azurerm_private_dns_zone" "dns-search" {
  name                = "privatelink.${local.ai_search_domain}"
  resource_group_name = data.azurerm_resource_group.rg-base.name
  
  tags = local.tags
}

resource "azurerm_private_dns_zone_virtual_network_link" "dns-vnet-link-search-base" {
  name                  = "dns-vnet-link-${local.workload}-search-${var.environment}"
  resource_group_name   = data.azurerm_resource_group.rg-base.name
  private_dns_zone_name = azurerm_private_dns_zone.dns-search.name
  virtual_network_id    = data.azurerm_virtual_network.vnet-base.id

  tags = local.tags
}

resource "azurerm_private_endpoint" "pe-search" {
  name                = "pe-${local.workload}-search-${var.environment}"
  location            = data.azurerm_resource_group.rg-base.location
  resource_group_name = data.azurerm_resource_group.rg-base.name
  subnet_id           = azurerm_subnet.snet-private-endpoints.id

  custom_network_interface_name = "nic-${local.workload}-search-${var.environment}"

  private_service_connection {
    name                           = "psc-${local.workload}-search-${var.environment}"
    private_connection_resource_id = azurerm_search_service.ais-search.id
    subresource_names              = ["searchService"]
    is_manual_connection           = false
  }

  private_dns_zone_group {
    name                 = "dns-zg-${local.workload}-search-${var.environment}"
    private_dns_zone_ids = [azurerm_private_dns_zone.dns-search.id]
  }

  tags = local.tags
}

resource "azurerm_monitor_diagnostic_setting" "ds_search" {
  name                       = "ds-${local.workload}-search-${var.environment}"
  target_resource_id         = azurerm_search_service.ais-search.id
  log_analytics_workspace_id = data.azurerm_log_analytics_workspace.law-base.id

  enabled_log {
    category = "OperationLogs"
  }

  metric {
    category = "AllMetrics"
    enabled  = false
  }
}

[fonts1215]

Same, just update authentication_failure_mode to "http403", also use private endpoint for connection

[user81017012]

it seems that updating anything in the resource causes this
the issue doesnt seem to be present in some older versions; like 3.53.0

[narisada014]

I've encountered the same issue with AzureRM version 3.90.0. The issue occurred just by adding the semantic_search_sku property.

[fonts1215]

Maybe Microsoft changed some API, and now for each change inside the Azuresearch (apply for terraform) we have this problem

[user81017012]

it seems that updating anything in the resource causes this the issue doesnt seem to be present in some older versions; like 3.53.0

The issue seems to have started from version 3.54.0(and i can see alot of updates were added to azure search on this version) and doesnt seem to be solved in recent provider versions

For the moment i just added an ignore changes on all for this resource so that it works :/ hopefully it gets fixed soon

[gjednaszewski]

I'm seeing this on 3.83.0 trying to update a tag value on the azure search resource

[WodansSon]

I suspect that something has changed on the service side. Our nightly acceptance tests had a 100% passing rate until January 31, 2024, where some of our test cases started failing with the exact same error message as mentioned above. I will reach out to the service team to see if anything was pushed to production in that timeframe.

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.