Infos of data.nsxt_policy_segment_realization can't export/show via output at least in terraform plan

[kaje783]

Describe the bug

The information from the data element nsxt_policy_segment_realization is not displayed via the output element

Reproduction steps

1. terraform init
2. terraform plan

   
   data.nsxt_policy_mac_discovery_profile.nsx_mac_discovery_profile: Reading...
   data.nsxt_policy_transport_zone.vlan_tz: Reading...
   data.nsxt_policy_transport_zone.overlay_tz: Reading...
   data.nsxt_policy_segment_security_profile.nsx_security_profile: Reading...
   data.nsxt_policy_mac_discovery_profile.nsx_mac_discovery_profile: Read complete after 0s [id=<removed>]
   data.nsxt_policy_segment_security_profile.nsx_security_profile: Read complete after 0s [id=<removed>]
   data.nsxt_policy_transport_zone.overlay_tz: Read complete after 0s [id=<removed>]
   data.nsxt_policy_transport_zone.vlan_tz: Read complete after 0s [id=<removed>]

Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols:

• create <= read (data resources)

Terraform will perform the following actions:

data.nsxt_policy_segment_realization.tenant_networks["Test-mgmt"] will be read during apply

(config refers to values not yet known)

<= data "nsxt_policy_segment_realization" "tenant_networks" {

• id = (known after apply)

• network_name = (known after apply)

• path = (known after apply)

• state = (known after apply) }

  nsxt_policy_project.tenant_networks will be created

  • resource "nsxt_policy_project" "tenant_networks" {

• description = "Terraform provisioned and managed Project"

• display_name = "test"

• id = (known after apply)

• nsx_id = (known after apply)

• path = (known after apply)

• revision = (known after apply)

• short_id = (known after apply) }

  nsxt_policy_segment.tenant_networks["500"] will be created

  • resource "nsxt_policy_segment" "tenant_networks" {

• description = "provisioned and managed with Terraform"

• display_name = "Test-mgmt"

• id = (known after apply)

• nsx_id = (known after apply)

• overlay_id = (known after apply)

• path = (known after apply)

• replication_mode = "MTEP"

• revision = (known after apply)

• transport_zone_path = "/infra/sites/default/enforcement-points/default/transport-zones/"

• discovery_profile {

  • binding_map_path = (known after apply)
  • mac_discovery_profile_path = "/infra/mac-discovery-profiles/"
  • revision = (known after apply) }

• security_profile {

  • binding_map_path = (known after apply)
  • revision = (known after apply)
  • security_profile_path = "/infra/segment-security-profiles/" } }

Plan: 2 to add, 0 to change, 0 to destroy.

Changes to Outputs:

• network = {
  • Test-mgmt = {
    • context = [] } }

─────────────────────────────────────────────────────────────────────────────────────────────────────────

Note: You didn't use the -out option to save this plan, so Terraform can't guarantee to take exactly these actions if you run "terraform apply" now.

3. output ist empty

...

### Expected behavior

The complete variable information from the data element is displayed.
So something like this:

Changes to Outputs:

• network = {
  • Test-mgmt = {
    • id = (known after apply)
    • network_name = (known after apply)
    • path = (known after apply)
    • state = (known after apply) } }

Additional context

Config:

---

main.tf

data "nsxt_policy_transport_zone" "overlay_tz" {
  display_name = var.nsx.transport_zone.overlay
}

data "nsxt_policy_transport_zone" "vlan_tz" {
  display_name = var.nsx.transport_zone.vlan
}

data "nsxt_policy_mac_discovery_profile" "nsx_mac_discovery_profile" {
  display_name = var.nsx.mac_discovery_profile
} 

data "nsxt_policy_segment_security_profile" "nsx_security_profile" {
  display_name = var.nsx.security_profile
}

resource "nsxt_policy_segment" "tenant_networks" { 
  for_each = { for network in var.networks : network.id => network}

  display_name        = "${each.value.name}"
  description         = "provisioned with Terraform"
  transport_zone_path = "${data.nsxt_policy_transport_zone.overlay_tz.path}"

  discovery_profile {
    mac_discovery_profile_path = "${data.nsxt_policy_mac_discovery_profile.nsx_mac_discovery_profile.path}"
  }

  security_profile {
    security_profile_path   = "${data.nsxt_policy_segment_security_profile.nsx_security_profile.path}"
  }  
}

data "nsxt_policy_segment_realization" "tenant_networks" {
  for_each = { for network in var.networks : network.name => network}
  path = resource.nsxt_policy_segment.tenant_networks["${each.value.id}"].path
  depends_on = [resource.nsxt_policy_segment.tenant_networks]
}

output "network" {
  value       = data.nsxt_policy_segment_realization.tenant_networks
}

---

var.tf

variable "nsx" {
    type = object({
        ip_address = string
        username = string
        password = string
        transport_zone = object({
            overlay = string
            vlan = string
            edge = optional(string)
        })
        mac_discovery_profile = string
        security_profile = string       
    })
    sensitive = true
}

variable "networks" {
    type = list(object({
        name = string
        id = number     
    }))
}

---

provider.tf

terraform {
    required_providers {
        nsxt = {
            source = "vmware/nsxt"
            version = "3.4.0"
            configuration_aliases = [
                nsxt,
            ]
        }
    }
}

Testdata:

terraform.tfvars

nsx = {
    ip_address = "<nsx_address>"
    username = "<nsx_username>"
    password =  "<nsx_password>" 
    transport_zone = {
        overlay = "<nsx_overlay>"
        vlan = "<nsx_vlan>"
    }
    mac_discovery_profile = "<nsx_mac_discovery_profile>"
    security_profile = "<nsx_security_profile>"
}

tenant_networks = [    
    {
        name = "Test-mgmt"
        id   = 500  
    }
]

[salv-orlando]

@annakhm can you please look at this bug?

[annakhm]

Hi @kaje783, thanks for reporting this. Here is the output that I see when trying to replicate your scenario:

Plan: 1 to add, 0 to change, 1 to destroy.

Changes to Outputs:
  + network = {
      + Test-mgmt = {
          + context      = []
          + id           = (known after apply)
          + network_name = (known after apply)
          + path         = (known after apply)
          + state        = (known after apply)
        }
    }

May I ask what is your version of terraform? I don't think this can be related to the provider, rather to terraform core, but I'm curious what the difference in our cases might be.