How to use managementPolicies: ["Observe"] in vault_identity_entity

[karthikaskannan]

Hi Team,

I want to get the entity_id of an existing entity in vault using alias_mount_accessor and alias_name. I can achieve this in terraform using data source. Similarly how can I get the entity id by using managementPolicies: ["Observe"] as mentioned in this docs.

[jaylevin]

I don't think this is possible because Crossplane observe-only resources currently have some missing feature parity with Terraform's data source. Currently it is mandatory to provide the crossplane.io/external-name annotation to import an observe-only resource. Since the external name of these resources is a random ID generated by Vault, there's no way to import the observe-only resource without first knowing the external name.

There is an open issue to improve this feature in Crossplane: crossplane/crossplane#4141

[ytsarev]

Until it is implemented in core Crossplane you can use provider-terraform based workaround with data sources, please see examples below

• https://github.com/upbound/provider-terraform/tree/main/examples/observe-only-composition
• https://github.com/upbound/provider-terraform/tree/main/examples/importer

[jaylevin]

Until it is implemented in core Crossplane you can use provider-terraform based workaround with data sources, please see examples below

• https://github.com/upbound/provider-terraform/tree/main/examples/observe-only-composition
• https://github.com/upbound/provider-terraform/tree/main/examples/importer

Thank you @ytsarev ! I did not know this was possible.