3.7.4¶
Release Date: June 8, 2026
🐛 Bug Fixes¶
Terraform Modules¶
Rescue Pre-#742 OTEL SP Role Assignments 🛡️¶
Module: identity
Adds moved blocks that redirect the old otel_header_np[0] / otel_header_prod[0] addresses to the _sp slot, preserving existing Service Principal OTEL header Key Vault role assignments in-place for workspaces that haven't applied since #742.
Without this fix, workspaces still tracking an SP assignment at the old address would plan a ForceNew on the next apply — destroying the working SP assignment unnecessarily before creating the new UAMI assignment.
Behaviour by workspace state:
| Workspace state | Result |
|---|---|
| SP at old root address (pre-#742) | Renamed to _sp in-place — no Azure change; UAMI created fresh |
| SP at old module address | Renamed to _sp in-place — no Azure change; UAMI created fresh |
Already at _uami / _sp (post-#770) |
from address absent from state — blocks don't fire |
Affected files:
src/terraform/saif-resources/modules/identity/moved.tf— recreated with_spdestinationssrc/terraform/saif-web-service/moved.tfsrc/terraform/saif-event-subscriber-service/moved.tfsrc/terraform/saif-api-service/moved.tfsrc/smithy/infra/bot/moved.tf
Remove Stale depends_on from OTEL SP Resources 🧹¶
Module: identity
Removes the depends_on guard from otel_header_np_sp and otel_header_prod_sp that was added to prevent a 409 race condition. The moved blocks above eliminate the scenario the guard was protecting against, making it unnecessary.
🔄 Breaking Changes¶
None in this release ✅
📋 Additional Notes¶
- Total commits: 2
- Files changed: 6
- Contributors: Emmitt Johnson
Support¶
- 📧 Teams Support Channel: Support