terraform-provider-rke: Provider produced inconsistent final plan

Just been hit with this:

# terraform apply

rke_cluster.cluster: Refreshing state... [id=server1]
local_file.client_cert: Refreshing state... [id=54cc9b061a432d3fee69464ef42c46aa083bf1ac]
local_file.ca_crt: Refreshing state... [id=f9a2dc701b64b84a59accb375ed2a441cc023985]
local_file.client_key: Refreshing state... [id=bf00257b95f9c5249c1fb2d302ed85da5b29e887]
local_file.kube_cluster_yaml: Refreshing state... [id=18473fc352fbffb624ab50599199a116260ab275]
local_file.client_cert: Destroying... [id=54cc9b061a432d3fee69464ef42c46aa083bf1ac]
local_file.kube_cluster_yaml: Destroying... [id=18473fc352fbffb624ab50599199a116260ab275]
local_file.client_cert: Destruction complete after 0s
local_file.kube_cluster_yaml: Destruction complete after 0s
rke_cluster.cluster: Modifying... [id=server1]
rke_cluster.cluster: Still modifying... [id=server1, 10s elapsed]
rke_cluster.cluster: Still modifying... [id=server1, 20s elapsed]
rke_cluster.cluster: Still modifying... [id=server1, 30s elapsed]
rke_cluster.cluster: Still modifying... [id=server1, 40s elapsed]
rke_cluster.cluster: Still modifying... [id=server1, 50s elapsed]
rke_cluster.cluster: Still modifying... [id=server1, 1m0s elapsed]
rke_cluster.cluster: Still modifying... [id=server1, 1m10s elapsed]
rke_cluster.cluster: Still modifying... [id=server1, 1m20s elapsed]
rke_cluster.cluster: Modifications complete after 1m23s [id=server1]
local_file.kube_cluster_yaml: Creating...
local_file.kube_cluster_yaml: Creation complete after 0s [id=8d9846133c708d432310e3212628cd7581a2adb9]

Error: Provider produced inconsistent final plan

When expanding the plan for local_file.client_cert to include new values
learned so far during apply, provider "local" produced an invalid new value
for .content: was cty.StringVal("-----BEGIN
CERTIFICATE-----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\nKCb2VPB/4C6Y0Ya1IHx+Jxa6D4ofUExJfWXBNqc=\n-----END
CERTIFICATE-----\n"), but now cty.StringVal("-----BEGIN
CERTIFICATE-----\nMIIC6TCCAdGgAwIBAgIIeboBJH1IGbgwDQYJKoZIhvcNAQELBQAwEjEQMA4GA1UE\nAxMHa3ViZS1jYTAeFw0xOTA2MTIxOTU1NTZaFw0yOTA2MTAxOTA0MzZaMC4xFzAV\nBgNVBAoTDnN5c3RlbTptYXN0ZXJzMRMwEQYDVQQDEwprdWJlLWFkbWluMIIBIjAN\nBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVBAMK+PmEpUqgxjeNx9/VRixPbL\nI91fLH91JxH589Rvjm6ItYOvg9Ce9jj7qgK19NuEGNW4CFNfGGK2NjcBWgc5eqO+\nyV81Rmv/lRshNIYVioa0NSP2tnDaTwNjCEYeeQjqDc1zUyhllJCSSlclukTyKxYo\nT9/yqZ6ORcvk591jUxCk14xR9MqVrCMB768226XVZ7ILJsTVdu7/Ht8DWq1JMK/X\niGO+wgYdjnj4Z2y2E2jJS/g28XX6uFmvTfd4jrMGHQXJlRIll6Y4jn5R3dVR0WFe\nr+keZyqS6NrZu2HqfMrlkeWxXsCBkiC895BZ1yZGOrc7EVpilWbDygC65QIDAQAB\noycwJTAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwDQYJKoZI\nhvcNAQELBQADggEBAEfysIkZOJAWoNjNMlZkUSbYltwn030bDI9kFmylVo0jrquD\n3TemAmhab63jhONXKciH0DfkuKlMdCIJ5Vfc7I82OzqHJnuEDry1IIkEjLd6H8Pa\nvLuzIYwYQu10wg1+/Q+aiH+8xQMS3p/2L9LAEv6ILRxm2UU/SYY8bWAIgtpM8xff\nQq8D2tKNUXQFWA2x9RmvYNCowtm6YAzpKUUXoQ1y69J7dvHpIzpY9DigrETpe41C\nS7A11fUqcI1DqBhPVwep9YvA0ZKepXZcbbb/YiEm9aw066LwowqsqDSpX4SMIdaW\nKGi60dTD8wKK+NvqC4NbQOsmjltUUmVqLkTCq4I=\n-----END
CERTIFICATE-----\n").

This is a bug in the provider, which should be reported in the provider's own
issue tracker.

After doing, again, terraform apply (without any changes):

local_file.ca_crt: Refreshing state... [id=f9a2dc701b64b84a59accb375ed2a441cc023985]
local_file.client_key: Refreshing state... [id=bf00257b95f9c5249c1fb2d302ed85da5b29e887]
local_file.kube_cluster_yaml: Refreshing state... [id=8d9846133c708d432310e3212628cd7581a2adb9]
local_file.client_cert: Creating...
local_file.client_cert: Creation complete after 0s [id=847884fdfb1f425a47195bca22133ce31dbb3478]

Apply complete! Resources: 1 added, 0 changed, 0 destroyed.

Before that, the plan was following:

-/+ resource "local_file" "client_cert" {
      ~ content  = <<~EOT # forces replacement
            -----BEGIN CERTIFICATE-----
          - MIIC6TCCAdGgAwIBAgIIZ5AbOm48o3UwDQYJKoZIhvcNAQELBQAwEjEQMA4GA1UE
          - AxMHa3ViZS1jYTAeFw0xOTA2MTIxOTU1NTZaFw0yOTA2MDkxOTU1NTZaMC4xFzAV
          + MIIC6TCCAdGgAwIBAgIIJ8yNqq6AYRgwDQYJKoZIhvcNAQELBQAwEjEQMA4GA1UE
          + AxMHa3ViZS1jYTAeFw0xOTA2MTIxOTU1NTZaFw0yOTA2MDkyMDM2MzBaMC4xFzAV
            BgNVBAoTDnN5c3RlbTptYXN0ZXJzMRMwEQYDVQQDEwprdWJlLWFkbWluMIIBIjAN
            BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVBAMK+PmEpUqgxjeNx9/VRixPbL
            I91fLH91JxH589Rvjm6ItYOvg9Ce9jj7qgK19NuEGNW4CFNfGGK2NjcBWgc5eqO+
            yV81Rmv/lRshNIYVioa0NSP2tnDaTwNjCEYeeQjqDc1zUyhllJCSSlclukTyKxYo
            T9/yqZ6ORcvk591jUxCk14xR9MqVrCMB768226XVZ7ILJsTVdu7/Ht8DWq1JMK/X
            iGO+wgYdjnj4Z2y2E2jJS/g28XX6uFmvTfd4jrMGHQXJlRIll6Y4jn5R3dVR0WFe
            r+keZyqS6NrZu2HqfMrlkeWxXsCBkiC895BZ1yZGOrc7EVpilWbDygC65QIDAQAB
            oycwJTAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwDQYJKoZI
          - hvcNAQELBQADggEBAHHymgpdsdFkK2GUpjoJXVdRRtrzNJbmGUxNfGbIbI1FfxTj
          - y6j1DBe99XJo+CpeLmG3TQ5YEFUNA+3a+xFEYTTh47B81dAlXh24AiT2ez+t9pE0
          - I7O2iIdxzvnZjHr184wh777noXftbxlj4gye5s9nDTKWDongZcNtRyMoyCuI3M1p
          - OH4Ptj/nNo36UuHdF4Y1V6pC0HYkyRaf8PxgRC3xFn1LML4S+5LyNKJNWZtToqaU
          - pU742Y0/An9jd9Z4yQSouRSHyba1cOwMgRwrLfAMfRs8zw4BmpAEuYBBwjDkmzHW
          - h7I/R7/GUlU7KAcEBhEgTQnek5eoP5T8qldw1yk=
          + hvcNAQELBQADggEBABrQSUcQ/60wY3iexKJ1VjvpH7kY094YYu/9y09XfgjIf0qC
          + EVzbv7kphm5+DS7DQt0XmpiizbuvuzN7a0xj/5ema6MZWQVJUBc16cKqg4oywhtM
          + v1/wZ+E0iRQs0bYgTV6ELEQ+LV7jj3cvpwsyKaP+cigByO6KdqylT67Ot/+AJ8Qw
          + oweD/qXZuJPSU1LJdXYqNanoX4dKfOUApEWhLxCfyfFFaalODvkPGN0c2EaS03RK
          + nR/OAfkZho1d8nSsCiRLRgSV1e3jU3KA58+lqd2fioNu9MV/x8WEGXEmFa2+2jR7
          + KCb2VPB/4C6Y0Ya1IHx+Jxa6D4ofUExJfWXBNqc=
            -----END CERTIFICATE-----
        EOT
        filename = "./../etc/certs/client_cert"
      ~ id       = "54cc9b061a432d3fee69464ef42c46aa083bf1ac" -> (known after apply)
    }

  # local_file.kube_cluster_yaml must be replaced
-/+ resource "local_file" "kube_cluster_yaml" {
      ~ content  = "apiVersion: v1\nkind: Config\nclusters:\n- cluster:\n    api-version: v1\n    certificate-authority-data: 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\n    server: \"https://server1:6443\"\n  name: \"clustername\"\ncontexts:\n- context:\n    cluster: \"clustername\"\n    user: \"kube-admin-clustername\"\n  name: \"clustername\"\ncurrent-context: \"clustername\"\nusers:\n- name: \"kube-admin-clustername\"\n  user:\n    client-certificate-data: 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\n    client-key-data: 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" -> (known after apply) # forces replacement
        filename = "../kube_config_cluster.yml"
      ~ id       = "18473fc352fbffb624ab50599199a116260ab275" -> (known after apply)
    }

  # rke_cluster.cluster will be updated in-place
  ~ resource "rke_cluster" "cluster" {
        addon_job_timeout         = 30
        api_server_url            = "https://server1:6443"
[...]
      ~ kube_config_yaml          = (sensitive value)
        kubernetes_version        = "v1.14.1-rancher1-2"
        prefix_path               = "/"
      ~ rke_cluster_yaml          = (sensitive value)
[...]
      ~ services_etcd {
            creation      = "1h"
            external_urls = []
            extra_args    = {
                "election-timeout"   = "5000"
                "heartbeat-interval" = "500"
            }
            extra_binds   = []
            extra_env     = []
            retention     = "3d"
            snapshot      = true

          + backup_config {
              + interval_hours = 2
              + retention      = 24

              + s3_backup_config {
                  + access_key  = (sensitive value)
                  + bucket_name = "masked"
                  + endpoint    = "masked"
                  + region      = "masked"
                  + secret_key  = (sensitive value)
                }
            }
        }
[...]

After kube_config_cluster.yml has been changed, here is diff:

diff kube_config_cluster.yml kube_config_cluster.yml-old
18c18
<     client-certificate-data: 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
---
>     client-certificate-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM2VENDQWRHZ0F3SUJBZ0lJSjh5TnFxNkFZUmd3RFFZSktvWklodmNOQVFFTEJRQXdFakVRTUE0R0ExVUUKQXhNSGEzVmlaUzFqWVRBZUZ3MHhPVEEyTVRJeE9UVTFOVFphRncweU9UQTJNRGt5TURNMk16QmFNQzR4RnpBVgpCZ05WQkFvVERuTjVjM1JsYlRwdFlYTjBaWEp6TVJNd0VRWURWUVFERXdwcmRXSmxMV0ZrYldsdU1JSUJJakFOCkJna3Foa2lHOXcwQkFRRUZBQU9DQVE4QU1JSUJDZ0tDQVFFQW5WQkFNSytQbUVwVXFneGplTng5L1ZSaXhQYkwKSTkxZkxIOTFKeEg1ODlSdmptNkl0WU92ZzlDZTlqajdxZ0sxOU51RUdOVzRDRk5mR0dLMk5qY0JXZ2M1ZXFPKwp5VjgxUm12L2xSc2hOSVlWaW9hME5TUDJ0bkRhVHdOakNFWWVlUWpxRGMxelV5aGxsSkNTU2xjbHVrVHlLeFlvClQ5L3lxWjZPUmN2azU5MWpVeENrMTR4UjlNcVZyQ01CNzY4MjI2WFZaN0lMSnNUVmR1Ny9IdDhEV3ExSk1LL1gKaUdPK3dnWWRqbmo0WjJ5MkUyakpTL2cyOFhYNnVGbXZUZmQ0anJNR0hRWEpsUklsbDZZNGpuNVIzZFZSMFdGZQpyK2tlWnlxUzZOclp1MkhxZk1ybGtlV3hYc0NCa2lDODk1QloxeVpHT3JjN0VWcGlsV2JEeWdDNjVRSURBUUFCCm95Y3dKVEFPQmdOVkhROEJBZjhFQkFNQ0JhQXdFd1lEVlIwbEJBd3dDZ1lJS3dZQkJRVUhBd0l3RFFZSktvWkkKaHZjTkFRRUxCUUFEZ2dFQkFCclFTVWNRLzYwd1kzaWV4S0oxVmp2cEg3a1kwOTRZWXUvOXkwOVhmZ2pJZjBxQwpFVnpidjdrcGhtNStEUzdEUXQwWG1waWl6YnV2dXpON2EweGovNWVtYTZNWldRVkpVQmMxNmNLcWc0b3l3aHRNCnYxL3daK0UwaVJRczBiWWdUVjZFTEVRK0xWN2pqM2N2cHdzeUthUCtjaWdCeU82S2RxeWxUNjdPdC8rQUo4UXcKb3dlRC9xWFp1SlBTVTFMSmRYWXFOYW5vWDRkS2ZPVUFwRVdoTHhDZnlmRkZhYWxPRHZrUEdOMGMyRWFTMDNSSwpuUi9PQWZrWmhvMWQ4blNzQ2lSTFJnU1YxZTNqVTNLQTU4K2xxZDJmaW9OdTlNVi94OFdFR1hFbUZhMisyalI3CktDYjJWUEIvNEM2WTBZYTFJSHgrSnhhNkQ0b2ZVRXhKZldYQk5xYz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=

Versions:

Terraform v0.12.1
+ provider.local v1.2.2
+ provider.rke v0.12.1

This is test cluster, thus I can send certs publicly.