role assignment fix

[NaKamize]

No description provided.

[github-actions]

Terraform Plan

Acquiring state lock. This may take a few moments...
data.azurerm_client_config.current: Reading...
azurerm_storage_container.containers-static0: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.Storage/storageAccounts/ujmikamiblob/blobServices/default/containers/static]
azurerm_storage_container.containers-media0: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.Storage/storageAccounts/ujmikamiblob/blobServices/default/containers/media]
azurerm_resource_group.resource_groups-ujmikamiapp20: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2]
data.azurerm_client_config.current: Read complete after 0s [id=Y2xpZW50Q29uZmlncy9jbGllbnRJZD02MTc3MDA1NS03ODQ0LTQ5N2QtYWVhMC0yMzdmZmE3NjkxMWU7b2JqZWN0SWQ9NGMwY2Q2ZWYtODlhYi00OWY5LTkxODQtMWVlZDRhZmJiODY5O3N1YnNjcmlwdGlvbklkPWZmYWE1YTYzLWU2M2QtNDk4Zi05NzQ3LWMxZGVlZDYzNmVmNDt0ZW5hbnRJZD03YTgwZGM5OC01OWQwLTQ5ZmItOWE5ZS1jYzY0Y2I1MDQ3YWE=]
azurerm_static_web_app.static_sites-ujmikamiapp0: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.Web/staticSites/ujmikamiapp]
azurerm_container_registry.registries-ujmikamiacr0: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.ContainerRegistry/registries/ujmikamiacr]
azurerm_log_analytics_workspace.workspaces-workspace_ujmikamiapp2_hm_um0: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.OperationalInsights/workspaces/workspace-ujmikamiapp2HmUM]
azurerm_key_vault.main: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.KeyVault/vaults/ujmikami-kv]
azurerm_mysql_flexible_server.flexible_servers-ujmikami_db0: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.DBforMySQL/flexibleServers/ujmikami-db]
azurerm_storage_account.storage_accounts-ujmikamiblob0: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.Storage/storageAccounts/ujmikamiblob]
azurerm_mysql_flexible_database.databases-ujmikamiapp0: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.DBforMySQL/flexibleServers/ujmikami-db/databases/ujmikamiapp]
azurerm_mysql_flexible_server_firewall_rule.firewall_rules-allow_all_azure_services_and_resources_within_azure_ips_2026_7_5_19_1_10: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.DBforMySQL/flexibleServers/ujmikami-db/firewallRules/AllowAllAzureServicesAndResourcesWithinAzureIps_2026-7-5_19-1-1]
azurerm_container_app_environment.managed_environments-ujmikamiapp_env_env0: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.App/managedEnvironments/ujmikamiapp-env-env]
azurerm_role_assignment.terraform_secrets_officer: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.KeyVault/vaults/ujmikami-kv/providers/Microsoft.Authorization/roleAssignments/5e0b41a4-4add-9e46-1860-dd65b941e8ad]
azurerm_key_vault_secret.django_secret_key: Refreshing state... [id=https://ujmikami-kv.vault.azure.net/secrets/django-secret-key/8db9ce346ed1411e94dd07c7d3214c5a]
azurerm_key_vault_secret.mysql_database_url: Refreshing state... [id=https://ujmikami-kv.vault.azure.net/secrets/mysql-database-url/73c79319b73e4e1e9d8baf09b5c32465]
azurerm_key_vault_secret.acr_admin_password: Refreshing state... [id=https://ujmikami-kv.vault.azure.net/secrets/acr-admin-password/071a5f4052f54993a8c7597df670ff9e]
azurerm_key_vault_secret.storage_account_key: Refreshing state... [id=https://ujmikami-kv.vault.azure.net/secrets/storage-account-key/cf572e5764a14d099ac3d99968ba800f]
azurerm_storage_account_queue_properties.queue_services-default0: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.Storage/storageAccounts/ujmikamiblob]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
-/+ destroy and then create replacement

Terraform planned the following actions, but then encountered a problem:

  # azurerm_role_assignment.terraform_secrets_officer must be replaced
-/+ resource "azurerm_role_assignment" "terraform_secrets_officer" {
      + condition_version                      = (known after apply)
      ~ id                                     = "/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.KeyVault/vaults/ujmikami-kv/providers/Microsoft.Authorization/roleAssignments/5e0b41a4-4add-9e46-1860-dd65b941e8ad" -> (known after apply)
      ~ name                                   = "5e0b41a4-4add-9e46-1860-dd65b941e8ad" -> (known after apply)
      ~ principal_id                           = "5731fd27-fb2a-4dd3-b4b5-e709cb8980b0" -> "4c0cd6ef-89ab-49f9-9184-1eed4afbb869" # forces replacement
      ~ principal_type                         = "User" -> (known after apply)
      ~ role_definition_id                     = "/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/providers/Microsoft.Authorization/roleDefinitions/b86a8fe4-44ce-4948-aee5-eccb2c155cd7" -> (known after apply)
      + skip_service_principal_aad_check       = (known after apply)
        # (5 unchanged attributes hidden)
    }

Plan: 1 to add, 0 to change, 1 to destroy.
Releasing state lock. This may take a few moments...
::error::Terraform exited with code 1.

[github-actions]

Terraform Plan

Acquiring state lock. This may take a few moments...
data.azurerm_client_config.current: Reading...
azurerm_storage_container.containers-static0: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.Storage/storageAccounts/ujmikamiblob/blobServices/default/containers/static]
azurerm_storage_container.containers-media0: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.Storage/storageAccounts/ujmikamiblob/blobServices/default/containers/media]
data.azurerm_client_config.current: Read complete after 0s [id=Y2xpZW50Q29uZmlncy9jbGllbnRJZD02MTc3MDA1NS03ODQ0LTQ5N2QtYWVhMC0yMzdmZmE3NjkxMWU7b2JqZWN0SWQ9NGMwY2Q2ZWYtODlhYi00OWY5LTkxODQtMWVlZDRhZmJiODY5O3N1YnNjcmlwdGlvbklkPWZmYWE1YTYzLWU2M2QtNDk4Zi05NzQ3LWMxZGVlZDYzNmVmNDt0ZW5hbnRJZD03YTgwZGM5OC01OWQwLTQ5ZmItOWE5ZS1jYzY0Y2I1MDQ3YWE=]
azurerm_resource_group.resource_groups-ujmikamiapp20: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2]
azurerm_key_vault.main: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.KeyVault/vaults/ujmikami-kv]
azurerm_mysql_flexible_server.flexible_servers-ujmikami_db0: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.DBforMySQL/flexibleServers/ujmikami-db]
azurerm_log_analytics_workspace.workspaces-workspace_ujmikamiapp2_hm_um0: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.OperationalInsights/workspaces/workspace-ujmikamiapp2HmUM]
azurerm_static_web_app.static_sites-ujmikamiapp0: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.Web/staticSites/ujmikamiapp]
azurerm_container_registry.registries-ujmikamiacr0: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.ContainerRegistry/registries/ujmikamiacr]
azurerm_storage_account.storage_accounts-ujmikamiblob0: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.Storage/storageAccounts/ujmikamiblob]
azurerm_mysql_flexible_database.databases-ujmikamiapp0: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.DBforMySQL/flexibleServers/ujmikami-db/databases/ujmikamiapp]
azurerm_mysql_flexible_server_firewall_rule.firewall_rules-allow_all_azure_services_and_resources_within_azure_ips_2026_7_5_19_1_10: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.DBforMySQL/flexibleServers/ujmikami-db/firewallRules/AllowAllAzureServicesAndResourcesWithinAzureIps_2026-7-5_19-1-1]
azurerm_role_assignment.terraform_secrets_officer["4c0cd6ef-89ab-49f9-9184-1eed4afbb869"]: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.KeyVault/vaults/ujmikami-kv/providers/Microsoft.Authorization/roleAssignments/da6c3fd4-9b49-72c7-bed4-f19935da8292]
azurerm_role_assignment.terraform_secrets_officer["5731fd27-fb2a-4dd3-b4b5-e709cb8980b0"]: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.KeyVault/vaults/ujmikami-kv/providers/Microsoft.Authorization/roleAssignments/6a8979f2-9884-97da-4059-ba60b792a1e4]
azurerm_container_app_environment.managed_environments-ujmikamiapp_env_env0: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.App/managedEnvironments/ujmikamiapp-env-env]
azurerm_key_vault_secret.django_secret_key: Refreshing state... [id=https://ujmikami-kv.vault.azure.net/secrets/django-secret-key/8db9ce346ed1411e94dd07c7d3214c5a]
azurerm_key_vault_secret.acr_admin_password: Refreshing state... [id=https://ujmikami-kv.vault.azure.net/secrets/acr-admin-password/071a5f4052f54993a8c7597df670ff9e]
azurerm_key_vault_secret.mysql_database_url: Refreshing state... [id=https://ujmikami-kv.vault.azure.net/secrets/mysql-database-url/73c79319b73e4e1e9d8baf09b5c32465]
azurerm_key_vault_secret.storage_account_key: Refreshing state... [id=https://ujmikami-kv.vault.azure.net/secrets/storage-account-key/cf572e5764a14d099ac3d99968ba800f]
azurerm_storage_account_queue_properties.queue_services-default0: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.Storage/storageAccounts/ujmikamiblob]
azurerm_container_app.container_apps-ujmikamiapp_env0: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.App/containerApps/ujmikamiapp-env]
azurerm_role_assignment.container_app_secrets_user: Refreshing state... [id=/subscriptions/ffaa5a63-e63d-498f-9747-c1deed636ef4/resourceGroups/ujmikamiapp2/providers/Microsoft.KeyVault/vaults/ujmikami-kv/providers/Microsoft.Authorization/roleAssignments/72f1acc6-84c1-7de5-d970-4e60f6dad29b]

No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.
Releasing state lock. This may take a few moments...