Support for auto key rotation in azurerm_disk_encryption_set

[AliMBajwa]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

It's possible to create/update a disk encryption set with in the AZ CLI / Portal to automatically rotate keys. There isn't an option to do this via the terraform resource.

Note: I've already tried passing a versionless key ID and i get the following error:

Error: parsing "https://myExampleVault.vault.azure.net/keys/key-myExampleKey": expected a versioned ID but no version in " 
   with azurerm_disk_encryption_set.example_vm,
   on disk-encryption.tf line 5, in resource "azurerm_disk_encryption_set" "example_vm":
    5:   key_vault_key_id    = data.azurerm_key_vault_key.example_vm.versionless_id

New or Affected Resource(s)

• azurerm_disk_encryption_set
• data.azurerm_disk_encryption_set

Potential Terraform Configuration

resource "azurerm_disk_encryption_set" "example_vm" {
  name                = "disk-es-${var.virtual_machine_name}"
  resource_group_name = var.resource_group_name
  location            = var.location
  key_vault_key_id    = data.azurerm_key_vault_key.example_vm
  auto_key_rotation = true

  identity {
    type = "SystemAssigned"
  }
}

References

• #0000

[AliMBajwa]

Accidentally closed this - reopened immediately after. Sorry!

[johnfriedrich]

Looks this was added in #13747

[fcatacut]

Looks this was added in #13747

Correct, this was released in v2.82.0. This issue can be closed.

[AliMBajwa]

Thanks for letting me know on this thread.

For anyone who reads this: I've not confirmed myself it's been added and works (since I don't work on that particular project anymore where it was needed) I'm going off of what the 2 users above have said.

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.