Roles found to have changes. Though they are up to date and no changes were made.

[5obol]

I am creating few roles as follow:

resource "nexus_role" "ROLE" {
  roleid      = "ROLE"
  name        = "ldap-role bla"
  description = "LDAP role for bla"
  privileges  = ["nx-repository-view-maven2-maven-internal-releases-*", "nx-repository-view-maven2-maven-internal-snapshots-*", "nx-repository-view-maven2-maven-internal-snapshots-browse", "nx-repository-view-maven2-maven-internal-releases-browse"]
  roles       = ["npm-group-read", "internal-atap-read", "internal-atap-write", "docker-group-read", "pypi-group-read"]
}

And during second or any other applies they are tried to be changed:

 # nexus_role.ROLE will be updated in-place
  ~ resource "nexus_role" "ROLE" {
      ~ description = "ROLE" -> "LDAP role for bla"
        id          = "ROLE"
      ~ name        = "ROLE" -> "ldap-role bla"
      ~ privileges  = [
          + "nx-repository-view-maven2-maven-internal-releases-*",
          + "nx-repository-view-maven2-maven-internal-snapshots-*",
          + "nx-repository-view-maven2-maven-internal-snapshots-browse",
          + "nx-repository-view-maven2-maven-internal-releases-browse",
        ]
        roleid      = "ROLE"
      ~ roles       = [
          + "npm-group-read",
          + "internal-read",
          + "internal-write",
          + "docker-group-read",
          + "pypi-group-read",
        ]
    }

But in fact there is some error in logic. As description filed never was equal to "ROLE" . The same as name, privileges etc.

Hence there are seem to be multiple issues:

• description and name fields for some reason evaluated by the provider as equal to id field value. Even though in reality they have different values.
• roles and privilages either change its order or somethings else. As they have valid values but are modified all the time.

[fog1985]

Yeap. Facing pretty the same.

[AliAllomani]

Seems #68 is related.

[fog1985]

Seems #68 is related.

Yeap. Seems so.