Having a "clean" terraform directory (main.tf, terraform.tfvars, variables.tf) executes the command "terraform init; terraform apply -auto-approve", everything passes fine, adds the first part of the code marked "part-1", all the commands along with "no shutdown" are added. When I add the code "part-2", coemend "terraform apply -auto-approve" usually all commands except "no shutdown" are added, relatively rarely all will be added, so it happens quite randomly. When I let go of the same terraform again without changes it will add the command "no shutdown" correctly. Below I paste the code of "part-1" and "part-2" and the output from terraform.
Terraform code: main.tf
terraform {
required_providers {
nxos = {
source = "CiscoDevNet/nxos"
version = "0.5.3"
}
}
}
provider "nxos" {
username = var.nxos_username
password = var.nxos_password
url = var.nxos_url
}
/*============================================ common ============================================*/
resource "nxos_feature_lldp" "lldp" {
admin_state = "enabled"
}
/*=====================================*/
resource "nxos_rest" "cdpEntity" {
dn = "sys/cdp"
class_name = "cdpEntity"
}
//============================================== part-1 ==============================================
//============================================== part-1 ==============================================
//============================================== part-1 ==============================================
/*============================================ description & L3 ============================================*/
resource "nxos_physical_interface" "desc-L3" {
interface_id = "eth1/5"
description = "desc1"
layer = "Layer3"
admin_state = "up"
user_configured_flags = "admin_state"
}
/*============================================ lldp ============================================*/
resource "nxos_rest" "lldpInst" {
depends_on = [nxos_feature_lldp.lldp]
dn = "sys/lldp/inst"
class_name = "lldpInst"
children = [
{
rn = "if-[eth1/5]"
class_name = "lldpIf"
content = {
adminRxSt = "disabled",
adminTxSt = "disabled",
id = "eth1/5"
}
}
]
}
/*============================================ cdp ============================================*/
resource "nxos_rest" "cdpInst" {
depends_on = [nxos_rest.cdpEntity]
dn = "sys/cdp/inst"
class_name = "cdpInst"
children = [
{
rn = "if-[eth1/5]"
class_name = "cdpIf"
content = {
adminSt = "disabled",
id = "eth1/5"
}
}
]
}
//============================================== part-2 ==============================================
//============================================== part-2 ==============================================
//============================================== part-2 ==============================================
/*============================================ description & L3 ============================================*/
resource "nxos_physical_interface" "desc-L3v2" {
interface_id = "eth1/6"
description = "desc2"
layer = "Layer3"
admin_state = "up"
user_configured_flags = "admin_state"
}
/*============================================ lldp ============================================*/
resource "nxos_rest" "lldpInstv2" {
depends_on = [nxos_feature_lldp.lldp]
dn = "sys/lldp/inst"
class_name = "lldpInst"
children = [
{
rn = "if-[eth1/6]"
class_name = "lldpIf"
content = {
adminRxSt = "disabled",
adminTxSt = "disabled",
id = "eth1/6"
}
}
]
}
/*============================================ cdp ============================================*/
resource "nxos_rest" "cdpInstv2" {
depends_on = [nxos_rest.cdpEntity]
dn = "sys/cdp/inst"
class_name = "cdpInst"
children = [
{
rn = "if-[eth1/6]"
class_name = "cdpIf"
content = {
adminSt = "disabled",
id = "eth1/6"
}
}
]
}
Output:
Terraform will perform the following actions:
# nxos_physical_interface.desc-L3v2 will be created
+ resource "nxos_physical_interface" "desc-L3v2" {
+ access_vlan = "vlan-1"
+ admin_state = "up"
+ auto_negotiation = "on"
+ bandwidth = 0
+ delay = 1
+ description = "desc2"
+ duplex = "auto"
+ fec_mode = "auto"
+ id = (known after apply)
+ interface_id = "eth1/6"
+ layer = "Layer3"
+ link_debounce_down = 100
+ link_debounce_up = 0
+ link_logging = "default"
+ medium = "broadcast"
+ mode = "access"
+ mtu = 1500
+ native_vlan = "vlan-1"
+ speed = "auto"
+ speed_group = "auto"
+ trunk_vlans = "1-4094"
+ uni_directional_ethernet = "disable"
+ user_configured_flags = "admin_state"
}
Output form Nexus9000:
I have one more problem, because when I delete a part of the code in e.g. part two, responsible for cdp or lldp it says it is destroyed, but it stays on the Nexus configuration and I don't know why all the other stuff gets deleted and those 3 lines of code (seen on the switch) stay, even though the terraform logs clearly say "destroyed", but I will devote a second post on the community to this, because it seems to have nothing to do with each other.
https://community.cisco.com/t5/devnet-general-discussions/after-removing-resource-cdp-ldp-configuration-is-left-on-the/m-p/5157851#M2553
Accepted Solutions
