ITADN

You can not change the name of the firewall route table after deployment

#121Opengr-gh-nexia 创建于 2025-03-17
bug
G
gr-gh-nexiacommented
### Is there an existing issue for this? - [x] I have searched the existing issues ### Greenfield/Brownfield provisioning brownfield ### Terraform Version 1.10.5 ### Module Version 0.5.2 ### AzureRM Provider Version 4.23 ### Affected Resource(s)/Data Source(s) module.hub_mesh.module.hub_routing_firewall.azurerm_route.this ### Terraform Configuration Files ```hcl I deploy the example from the https://github.com/Azure/terraform-azurerm-avm-ptn-hubnetworking/tree/v0.6.1/examples/azure_landing_zone_firewall I then try to change the name of the route_table_name_firewall = "my-rt-firewall-secondary" The plan works but the apply fails with: Error: deleting Route (Subscription: "..." Resource Group Name: "rg-hub-eastus2-new-poodle" Route Table Name: "rt-firewall-secondary" Route Name: "internet"): performing Delete: unexpected status 400 (400 Bad Request) with error: AzureFirewallSubnetRouteTableMustHaveDefaultRouteToInternet: Route Table rt-firewall-secondary on firewall subnet AzureFirewallSubnet must have 0.0.0.0/0 route with next hop Internet. ``` ### tfvars variables values ```hcl No tfvars required. ``` ### Debug Output/Panic Output ```shell Problem seems easy to recreate without debug info. ``` ### Expected Behaviour The new route table should be created and assigned before the previous one gets deleted (terraform lifecycle { create_before_destroy = true } required? But since the hubnetworking is itself using an AVM submodule.. ### Actual Behaviour Error: deleting Route (Subscription: "..." Resource Group Name: "rg-hub-eastus2-new-poodle" Route Table Name: "rt-firewall-secondary" Route Name: "internet"): performing Delete: unexpected status 400 (400 Bad Request) with error: AzureFirewallSubnetRouteTableMustHaveDefaultRouteToInternet: Route Table rt-firewall-secondary on firewall subnet AzureFirewallSubnet must have 0.0.0.0/0 route with next hop Internet. ### Steps to Reproduce I deploy the example from the https://github.com/Azure/terraform-azurerm-avm-ptn-hubnetworking/tree/v0.6.1/examples/azure_landing_zone_firewall I then try to change the name of the route_table_name_firewall = "my-rt-firewall-secondary" The plan works but the apply fails ### Important Factoids _No response_ ### References _No response_
0 条评论