azurerm_cosmosdb_account add minimal_tls_version

[rizkybiz]

Test Output

make acctests SERVICE='cosmos' TESTARGS='-run=TestAccCosmosDBAccount_MinimalTlsVersion' TESTTIMEOUT='60m'
==> Checking that code complies with gofmt requirements...
==> Checking that Custom Timeouts are used...
==> Checking that acceptance test packages are used...
TF_ACC=1 go test -v ./internal/services/cosmos -run=TestAccCosmosDBAccount_MinimalTlsVersion -timeout 60m -ldflags="-X=github.com/hashicorp/terraform-provider-azurerm/version.ProviderVersion=acc"
=== RUN   TestAccCosmosDBAccount_MinimalTlsVersion
=== PAUSE TestAccCosmosDBAccount_MinimalTlsVersion
=== CONT  TestAccCosmosDBAccount_MinimalTlsVersion
--- PASS: TestAccCosmosDBAccount_MinimalTlsVersion (723.97s)
PASS
ok      github.com/hashicorp/terraform-provider-azurerm/internal/services/cosmos        730.340s

fixes #21295

[neil-yechenwei]

CosmosDB Service team confirmed that there is a known issue that the default value of minimalTlsVersion of the source CosmosDB Account returned by service API is Tls12 but the default value of minimalTlsVersion of the restored CosmosDB Account returned by service API is Tls when it isn't set in the request payload. I assume that
it should be consolidated on a single default value. So service team is still investigating this issue.

Note: TestAccCosmosDBAccount_restoreCreateMode would fail once this PR is applied.

[jackofallops]

HI @rizkybiz - Thanks for this PR. Unfortunately, as noted in an earlier PR here #24615 (comment) this property has an upstream API issue which we are working with MSFT to resolve. Due to this ongoing work with the service team, I'm going to close this for now and we can take a look again when the upstream issue is resolved.
Thanks again!

[katbyte]

Hey @rizkybiz - While there is an underlaying API bug this is something i think we can work around by in the create function once we’ve restored the CosmosDB account we can do an update on the other values (e.g. tls) to ensure they match the configuration

[katbyte]

should we be specifying a default value here? or making it computed?

[katbyte]

how come we need this? shouldn't the allowed values match the constant?

[github-actions]

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active contributions.
If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.