I'm trying to encrypt a VM disk with Pulumi using a

DiskEncryptionSet

and I'm facing an issue:

des_key = keyvault.Key("des-key",
      name="des-key",
      key_vault_id=args.keyvault_id,
      key_type="RSA",
      key_size=2048,
      key_opts=[
        "decrypt",
        "encrypt",
        "sign",
        "unwrapKey",
        "verify",
        "wrapKey",
      ],
      tags=args.tags
    )

    des_set = compute.DiskEncryptionSet("disk_encryption_set",
      name="disk_encryption_set",
      resource_group_name=args.resource_group_name,
      key_vault_key_id=des_key.id
    )

I receive

TypeError: Missing required property 'identity'

on the

DiskEncryptionSet

Why? According to https://www.terraform.io/docs/providers/azurerm/r/disk_encryption_set.html#identity it's optional.

Because they are lying? https://github.com/terraform-providers/terraform-provider-azurerm/blob/master/azurerm/internal/services/compute/resource_arm_disk_encryption_set.go#L64-L67

ha, I just found the exact same line