[dedicated elb] IP group

[sfhl]

Hi there,

when configuring an ELBv3 (dedicated) via ip_group for whitelisting, i am not able to reset this config.

Terraform provider version

Terraform v1.5.2
on linux_amd64
+ provider registry.terraform.io/hashicorp/local v2.4.0
+ provider registry.terraform.io/hashicorp/template v2.2.0
+ provider registry.terraform.io/terraform-providers/opentelekomcloud v1.35.5

Affected Resource(s)

opentelekomcloud_lb_listener_v3

Terraform Configuration Files

...
resource "opentelekomcloud_lb_listener_v3" "cceelb-testing-test-443" {
  name            = "xxxxxxxxxxxxxxxxx-443"
  protocol        = "TCP"
  protocol_port   = "443"
  loadbalancer_id = opentelekomcloud_lb_loadbalancer_v3.cceelb-testing-test-cce.id
  depends_on      = [opentelekomcloud_lb_loadbalancer_v3.cceelb-testing-test-cce]

  ip_group {
    id     = ""
    enable = false
    type   = ""
  }

}
...

Terraform will perform the following actions:

  # opentelekomcloud_lb_listener_v3.cceelb-testing-test-443 will be updated in-place
  ~ resource "opentelekomcloud_lb_listener_v3" "cceelb-testing-test-443" {
        id                  = "XXXXXXXXXXXXXXXXXXXXXXXXXXX"
        name                = "xxxxxxxxxxxxxxxxx-443"
        tags                = {}
        # (13 unchanged attributes hidden)

      ~ ip_group {
          ~ enable = true -> false
          - id     = "XXXXXXXXXXXXXXXXXXXXXXXX" -> null
            # (1 unchanged attribute hidden)
        }

        # (1 unchanged block hidden)
    }

Steps to Reproduce

1. terraform apply

Expected Behavior

The listeners ACL config is resetted and/or disabled.

Actual Behavior

The listeners ACL config is not changed, terraform wants to change it again when running again

[anton-sidelnikov]

@sfhl Check on latest please

[sfhl]

@anton-sidelnikov nearly. access control is disabled, but the ip group is not reset to "All addresses", so i am not able to delete the whitelist ip group, because it is still in use

[anton-sidelnikov]

@sfhl please check in 1.35.7

[sfhl]

@anton-sidelnikov
sadly, it's still the same behaviour.

...
Terraform will perform the following actions:

  # resource opentelekomcloud_lb_listener_v3" "cceelb-testing-test-443" will be updated in-place
 ~ resource "opentelekomcloud_lb_listener_v3" "cceelb-testing-test-443" {
        id                  = "YYYYYYYYY-YYYYYYYY-YYYYYYYYYYY-YYYYYYY"
        name                = "xxxxxxxxxxxxxxxxx-443"
        tags                = {}
        # (13 unchanged attributes hidden)

      ~ ip_group {
          ~ enable = true -> false
            id     = "XXXXXX-XXXXXXXXX-XXXXXXXX-XXXXX"
            # (1 unchanged attribute hidden)
        }

        # (1 unchanged block hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.
...

but the whitelist ist still active.
So it is also not possible to delete this ip_group(s).

[anton-sidelnikov]

@sfhl Hi, just remove ip_group block from config