Support Hard Delete For Revoked Delegate Tokens In Terraform Provider
J
Jasmine green Carp
Description
When managing delegate tokens with the harness_platform_delegatetoken Terraform resource, terraform destroy revokes the token but does not permanently delete it.
Because revoked delegate tokens are retained for a period of time, the same token name cannot be reused immediately. This causes a recreate flow to fail unless the user manually deletes the revoked token, waits for retention cleanup, or changes the token name.
Request
Add an optional Terraform setting to permanently delete a revoked delegate token during destroy, for example:
hard_delete_on_destroy = true
or:
delete_behavior = "revoke_and_delete"
Why this matters
Teams managing delegates with Terraform expect a clean create/destroy/recreate workflow. Today, the revoked token state requires manual cleanup or token renaming before the same Terraform configuration can be applied again.
The default behavior can remain revoke-only, but Terraform users should have an explicit opt-in option to fully delete revoked delegate tokens when needed.
Log In