terraform doesn't like it when a managed IP gets removed from infoblox by hand

[scumola]

I added an IP using the infoblox_ip_allocation block (it worked well, BTW), then removed the IP address by-hand in the InfoBlox UI. When terraform ran again, I expected it to see that the IP was missing and re-add it, but instead the error I got back from terraform was:

Error: Error getting IP from network block(10.120.0.0/13): WAPI request error: 404('404 Not Found')
Contents:
{ "Error": "AdmConDataNotFoundError: Reference fixedaddress/ZG5zLmZpeGVkX2FkZHJlc3MkMTAuMTIwLjguMjEuMC4u:10.120.8.21/default not found",
  "code": "Client.Ibap.Data.NotFound",
  "text": "Reference fixedaddress/ZG5zLmZpeGVkX2FkZHJlc3MkMTAuMTIwLjguMjEuMC4u:10.120.8.21/default not found"
}

[saiprasannasastry]

that is because terraform doesnt know that you have deleted it manually, and in state file the resource is there, try deleting the state file and delete the record in NIOS and run again that should work

[scumola]

I'm pretty sure that it's terraform's job to restore (build if needed) resources if they're missing. I specify what I want to exist in the *.tf files and if they're missing, terraform is supposed to do whatever's necessary to make the resources match what is specified in the *.tf file. I shouldn't have to delete the *.tfstate file or manage that state file by-hand at all.

[saiprasannasastry]

Hi, when you run terraform again, it first tries to do a get using that IP, The error is coming from Infoblox side telling that it is not able to find that network/IP to get, i understand it's terraform job to create again if it does not find it. But infoblox cant return an empty value to make terraform understand that there is no resource. From infoblox side the only thing we do is throw an error and the same gets reflected during next apply

[scumola]

InfoBlox is returning a 404 - "Not Found" and "Client.Ibap.Data.NotFound". Can't you interpret that as "this record doesn't exist" and create a new one?

[AvRajath]

Hi, We do not expect/encourage our customers to explicitly delete the data in NIOS manually when we are using automation to create them. If you still have concerns about it then its possible to create users and assign roles to the users on NIOS on what they can modify/delete.