panos_virtual_router (Resource): At most 1 occurrence is allowed for devices/entry"

[Danmaarjustin]

Describe the bug

Im trying to add a static route to my virtual router:

resource "panos_virtual_router" "example" {
name = "default"

location = {
ngfw = {
ngfw_device = ""
}
}

routing_table = {
ip = {
static_routes = [
{
name = "static-route-1"
destination = "192.168.33.0/24"
interface = "tunnel.5"
}
]
}
}
}

Expected behavior

In my opinion it should apply this static route to the virtual router called "default".
I can see its willing to add the values:

"stdout_lines": [
"",
"Terraform used the selected providers to generate the following execution",
"plan. Resource actions are indicated with the following symbols:",
" \u001b[32m+\u001b[0m create\u001b[0m",
"",
"Terraform will perform the following actions:",
"",
"\u001b[1m # panos_virtual_router.example\u001b[0m will be created",
"\u001b[0m \u001b[32m+\u001b[0m\u001b[0m resource "panos_virtual_router" "example" {",
" \u001b[32m+\u001b[0m\u001b[0m location = {",
" \u001b[32m+\u001b[0m\u001b[0m ngfw = {",
" \u001b[32m+\u001b[0m\u001b[0m ngfw_device = """,
" }",
" }",
" \u001b[32m+\u001b[0m\u001b[0m name = "default"",
" \u001b[32m+\u001b[0m\u001b[0m routing_table = {",
" \u001b[32m+\u001b[0m\u001b[0m ip = {",
" \u001b[32m+\u001b[0m\u001b[0m static_routes = [",
" \u001b[32m+\u001b[0m\u001b[0m {",
" \u001b[32m+\u001b[0m\u001b[0m destination = "192.168.33.0/24"",
" \u001b[32m+\u001b[0m\u001b[0m interface = "tunnel.5"",
" \u001b[32m+\u001b[0m\u001b[0m name = "static-route-1"",
" },",
" ]",
" }",
" }",
" \u001b[32m+\u001b[0m\u001b[0m tfid = (known after apply)",
" }",
"",
"\u001b[1mPlan:\u001b[0m 1 to add, 0 to change, 0 to destroy.",
"\u001b[0m\u001b[0m\u001b[1mpanos_virtual_router.example: Creating...\u001b[0m\u001b[0m"
],

Current behavior

It is not applying the resource. Instead im getting this error:

"stderr_lines": [
"\u001b[31m╷\u001b[0m\u001b[0m",
"\u001b[31m│\u001b[0m \u001b[0m\u001b[1m\u001b[31mError: \u001b[0m\u001b[0m\u001b[1mError in create\u001b[0m",
"\u001b[31m│\u001b[0m \u001b[0m",
"\u001b[31m│\u001b[0m \u001b[0m\u001b[0m with panos_virtual_router.example,",
"\u001b[31m│\u001b[0m \u001b[0m on main.tf line 95, in resource "panos_virtual_router" "example":",
"\u001b[31m│\u001b[0m \u001b[0m 95: resource "panos_virtual_router" "example" \u001b[4m{\u001b[0m\u001b[0m",
"\u001b[31m│\u001b[0m \u001b[0m",
"\u001b[31m│\u001b[0m \u001b[0mAt most 1 occurrence is allowed for devices/entry",
"\u001b[31m╵\u001b[0m\u001b[0m"
],

Possible solution

I tried adding the PANOS_TARGET but then its not even connecting

Your Environment

My environment is an AWX instance that starts a execution environment with terraform installed.
First it will fetch my tf state from a s3 bucket while doing a terraform init, when this finnished it will do a terraform apply.

• Version used:
  Terraform: Terraform v1.9.6
  on linux_amd64

Latest version of awx.

palo provider version:
version = "2.0.0-rc.1"

Firewall: PA440
Software Version 11.0.3-h5

[kklimonda-cl]

Can you try applying the resource with changes I've outlined below instead?
I've explicitly set location.ngfw.ngfw_device to localhost.localdomain (which should be default if you don't specify it at all, and this is the only value that makes sense at this time from what I understand).
The interface tunnel.5 must also be imported into virtual_router interfaces list so it can be used in the routing_table.

The modified resource:

resource "panos_virtual_router" "example" {
  name = "default"

  location = {
    ngfw = {
      ngfw_device = "localhost.localdomain"
    }
  }

  interfaces = [
    "tunnel.5"
  ]

  routing_table = {
    ip = {
      static_routes = [
        {
          name        = "static-route-1"
          destination = "192.168.33.0/24"
          interface   = "tunnel.5"
        }
      ]
    }
  }
}

[Justin-Schoenaker]

Yes this did the job, thnx a lot, also for te quick reply!! I tried this with no value but dint work.
Couldn't find it in the example or documentation, so was a bit lost. But this makes sense.