`location` for `google_certificate_manager_dns_authorization` data source does not actually default to `global`

[lacop11]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request.
• Please do not leave +1 or me too comments, they generate extra noise for issue followers and do not help prioritize the request.
• If you are interested in working on this issue or have submitted a pull request, please leave a comment.
• If an issue is assigned to a user, that user is claiming responsibility for the issue.
• Customers working with a Google Technical Account Manager or Customer Engineer can ask them to reach out internally to expedite investigation and resolution of this issue.

Terraform Version & Provider Version(s)

Terraform v1.13.3
on darwin_arm64

• provider registry.terraform.io/hashicorp/google v7.12.0

Affected Resource(s)

google_certificate_manager_dns_authorization

Terraform Configuration

data "google_certificate_manager_dns_authorization" "some_domain" {
  project  = "some-project"
  name     = "dns-auth-some-domain"
  domain   = "some-domain.com"
  //  location = "global"
}

Debug Output

No response

Expected Behavior

Docs state:

location - (Optional) The Certificate Manager location. If not specified, "global" is used.

So this should work without location

Actual Behavior

Fails with empty URL component:

│ Error: Error when reading or editing CertificateManagerDnsAuthorization "projects/some-project/locations//dnsAuthorizations/dns-auth-some-domain": googleapi: Error 400: Malformed name: 'projects/some-project/locations//dnsAuthorizations/dns-auth-some-domain'
│ Details:
│ [
│ {
│ "@type": "type.googleapis.com/google.rpc.BadRequest",
│ "fieldViolations": [
│ {
│ "description": "URL path has empty component",
│ "field": "projects/some-project/locations//dnsAuthorizations/dns-auth-some-domain"
│ }
│ ]
│ }
│ ]

Steps to reproduce

1. terraform apply

Important Factoids

Works after adding location = "global". Looks like just the handling of default value is broken.

References

No response

[ggtisc]

Hi @lacop11

When you created google_certificate_manager_dns_authorization, was the location set to global? or did you not define it?

[lacop11]

You mean the resource itself? It's global but I did not set it explicitly, only doing:

resource "google_certificate_manager_dns_authorization" "some_domain" {
  name = "dns-auth-some-domain"
  // dns_name is FQDN with trailing dot which is not allowed here, remove it.
  domain =  trimsuffix(google_dns_managed_zone.some_domain.dns_name, ".")
}

https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/certificate_manager_dns_authorization states location defaults to global and that appears to work just fine.

But https://registry.terraform.io/providers/hashicorp/google/latest/docs/data-sources/certificate_manager_dns_authorization says the same thing and there it does not work.

I had a quick look at the code and it seems like it's set up here properly: https://github.com/hashicorp/terraform-provider-google/blob/main/google/services/certificatemanager/resource_certificate_manager_dns_authorization.go#L156
And then referenced here: https://github.com/hashicorp/terraform-provider-google/blob/main/google/services/certificatemanager/data_source_google_certificate_manager_dns_authorization.go#L43

But for whatever reason it formats like the value is missing / empty string.