Can't set Enable IP Masquerade for vcd_vapp_nat_rules

[tcinbis]

Hey everyone,

The title pretty much describes the issue. When I'm setting enable_ip_masquerade to true it is correctly shown in the terraform plan output, but after I have applied the plan the option is disabled in vCloud when checking it via the UI.
When running terraform apply again it also doesn't pickup the change and reports that the infrastructure matches the configuration.

Am I missing something here?

Thanks for your help!

Terraform Version

Terraform v1.1.1
on windows_amd64
+ provider registry.terraform.io/hashicorp/null v3.1.0
+ provider registry.terraform.io/vmware/vcd v3.4.0

VMware Cloud Director version: 10.2.2.17855680

Affected Resource(s)

• vcd_vapp_nat_rules

Terraform Configuration Files

provider "registry.terraform.io/hashicorp/null" {
  version = "3.1.0"
  hashes = [
    "h1:SFT7X3zY18CLWjoH2GfQyapxsRv6GDKsy9cF1aRwncc=",
  ]
}

provider "registry.terraform.io/vmware/vcd" {
  version     = "3.4.0"
  constraints = "~> 3.4.0"
  hashes = [
    "h1:YAGmqCFJiJJr/shs7P9UKVp3+LsJ8HBr9tYUnP3ZrRA=",
  ]
}

Debug Output

https://gist.github.com/tcinbis/bffddec898be2e31376ec9324de182a9

Expected Behavior

The Enable IP Masquerade option in the NAT setting should be enabled.

Actual Behavior

Enable IP Masquerade is not enabled.

Steps to Reproduce

Please list the steps required to reproduce the issue, for example:

1. terraform apply

User Access rights

• User that Terraform uses for authentication has admin rights.

[tcinbis]

So I poked around a bit with PowerCLI and read through the Go code for the NAT configuration. And what I find interesting is at line 156-157.

My interpretation of the code snippet is the following. By default the policy is set to allowTrafficIn and is changed to
allowTraffic if enable_ip_masquerade is false.
And I think that this is the issue since allowTraffic should be set if enable_ip_masquerade is true (at least I could enable the feature with PowerCLI when setting the policy to allowTraffic).

These are just my observations while looking only at this very tiny part of the code and playing with the API. Maybe I am missing something.

[tcinbis]

I know right before Christmas is almost a bad time to come up with new issues.... :)
Just wanted to ask is there any update on this?

Tagging @dataclouder and @vbauzysvmware, thanks!

[vbauzys]

Hi @tcinbis I am checking it.

[tcinbis]

Closing this since #784 was merged and is scheduled for release in April.