Column Mask Inconsistency

[eric-pinkham-rw]

Hey There,

I'm getting an inconsistent result error for column masks:

Error: Provider produced inconsistent result after apply

When applying changes to galaxy_policy.my_mask, provider
"provider[\"registry.terraform.io/starburstdata/galaxy\"]" produced an
unexpected new value: .scopes[0].column_mask_ids[0]: was
cty.StringVal("cm-6140303107"), but now cty.StringVal("cm-3492789762").

This is a bug in the provider, which should be reported in the provider's own
issue tracker.

Error: Provider produced inconsistent result after apply

When applying changes to galaxy_policy.my_mask, provider
"provider[\"registry.terraform.io/starburstdata/galaxy\"]" produced an
unexpected new value: .scopes[0].column_mask_ids[1]: was
cty.StringVal("cm-3492789762"), but now cty.StringVal("cm-6140303107").

This is a bug in the provider, which should be reported in the provider's own
issue tracker.

The policies and masks work as intended, but this error surfaces on every apply.

Here's my obfuscated TF config for these masks:

locals {
  # Built-in masks: Galaxy applies "hash" for varchar columns and "null" for all other types.
  builtin_hash_mask_id = one([for m in data.galaxy_column_masks.all.result : m.column_mask_id if m.name == "hash"])
  builtin_null_mask_id = one([for m in data.galaxy_column_masks.all.result : m.column_mask_id if m.name == "null"])
}

resource "galaxy_policy" "my_mask" {
  name        = "my_mask"
  description = "mask cols with my tag"
  predicate   = "has_tag(my_tag)"
  role_id     = galaxy_role.my_role.role_id

  scopes = [
    {
      entity_id       = "*"
      entity_kind     = "Column"
      schema_name     = "*"
      table_name      = "*"
      column_name     = "*"
      column_mask_ids = [local.builtin_hash_mask_id, local.builtin_null_mask_id]
      row_filter_ids  = []
    },
  ]
}