search

PaloAltoNetworks / terraform-provider-panos

Terraform Panos provider
https://www.terraform.io/docs/providers/panos/
MIT License
89 stars 73 forks source link

panos_security_rule_group multiple rule deletion failure with Panorama v10.1 #421

Open chuckysap opened 11 months ago

chuckysap commented 11 months ago

Describe the bug

After upgrading Panorama to 10.1 from 9.1.12 we have been experiencing a consistent issue when deleting multiple security rules from a security rule group.

Expected behavior

I would expect the behavior to be the same as in Panorama 9.x where the deletions are handled successfully.

Current behavior

When deploying/executing a terraform apply with 2 or more security rule removals/deletions in a security rule group we experience the following error which is very generic. When looking at the config logs in the panorama, the same API call is made in 9.1.12 as is made in 10.1 (where the issue is experienced).

ERROR Error: The request could not be handled

Config Logs from Panorama DELETE device-group TEST_GROUP pre-rulebase security rules sp.L4_POLICY_4 or @name=sp.L4_POLICY_5

Possible solution

In my opinion this is likely a bug on the Panorama side, but wanted to see if this was known to anyone or if there are any work arounds.

Steps to reproduce

  1. Remove 2 rules from a panos_security_rule_group resource.
  2. Run terraform plan/apply against Panorama 10.1.
  3. See aforementioned error

Your Environment

Panorama v10.1 Terraform Panos Plugin v1.11.1