Add allowed_email_sans field to write and update functions of vault_cert_auth_backend_role

[jseuren-exonet]

#282 introduced many missing optional parameters in vault_cert_auth_backend_role, but missed validating and reading the allowed_email_sans field in the certAuthResourceUpdate and certAuthResourceWrite functions. Terraform currently correctly reads and plans for updating allowed_email_sans, but never actually does it.

For example, locally I have defined a set of emails that are added to the allowed_common_names parameter and allowed_email_sans. Only allowed_common_names is created/updated. allowed_email_sans is not.

locals {
  allowed_emails = ['a@b.example', 'b@b.example']
}
resource "vault_cert_auth_backend_role" "employee-cert-auth" { 
  # other stuff defined here
  allowed_common_names = locals.allowed_emails
  allowed_email_sans   = locals.allowed_emails
}

Community Note

• Please vote on this pull request by adding a 👍 reaction to the original pull request comment to help the community and maintainers prioritize this request
• Please do not leave "+1" comments, they generate extra noise for pull request followers and do not help prioritize the request

Release note for CHANGELOG:

Add allowed_email_sans field to write and update functions of vault_cert_auth_backend_role so that allowed_email_sans is actually created and updated.

Output from acceptance testing:

$ make testacc TESTARGS='-run=TestAccXXX'
I did not run this.

[hashicorp-cla]

All committers have signed the CLA.

[fairclothjm]

Thanks!