When running terraform apply back to back the same config keeps on getting changed even though there is no change.

[thomaschristory]

Hello,

I'm testing out the module and I am running into something strange (that we don't get on our ACI nac setup to compare to something similar).

Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

   module.iosxe.iosxe_aaa_accounting.aaa_accounting["rt-testing-1"] will be updated in-place
  ~ resource "iosxe_aaa_accounting" "aaa_accounting" {
      ~ commands = [
          ~ {
              + level     = 0
              + list_name = "default"
            },
          ~ {
              + level     = 1
              + list_name = "default"
            },
          ~ {
              + level     = 15
              + list_name = "default"
            },
        ]
        id       = "Cisco-IOS-XE-native:native/aaa/Cisco-IOS-XE-aaa:accounting"
        # (3 unchanged attributes hidden)
    }

   module.iosxe.iosxe_line.line["rt-testing-1"] will be updated in-place
  ~ resource "iosxe_line" "line" {
        id      = "Cisco-IOS-XE-native:native/line"
      ~ vty     = [
          ~ {
              + transport_input      = [
                  + "ssh",
                ]
                # (6 unchanged attributes hidden)
            },
          ~ {
              + transport_input      = [
                  + "ssh",
                ]
                # (6 unchanged attributes hidden)
            },
        ]
        # (2 unchanged attributes hidden)
    }

   module.iosxe.iosxe_save_config.save_config["rt-testing-1"] will be updated in-place
  ~ resource "iosxe_save_config" "save_config" {
      ~ save   = false -> true
        # (1 unchanged attribute hidden)
    }

   module.iosxe.iosxe_snmp_server.snmp_server["rt-testing-1"] will be updated in-place
  ~ resource "iosxe_snmp_server" "snmp_server" {
      ~ groups                                    = [
          ~ {
                name        = "V3Group"
              ~ v3_security = [
                  ~ {
                      + access_standard_acl = 2
                        # (2 unchanged attributes hidden)
                    },
                  ~ {
                      + access_standard_acl = 2
                        # (2 unchanged attributes hidden)
                    },
                ]
            },
        ]
        id                                        = "Cisco-IOS-XE-native:native/snmp-server"
      ~ ifindex_persist                           = false -> true
      + source_interface_traps_gigabit_ethernet   = "0/0"
      ~ users                                     = [
          ~ {
              + grpname           = "V3Group"
              + username          = "snmpuser1"
              + v3_auth_algorithm = "sha"
                # (1 unchanged attribute hidden)
            },
          ~ {
              + grpname           = "V3Group"
              + username          = "snmpuser2"
              + v3_auth_algorithm = "sha"
                # (1 unchanged attribute hidden)
            },
        ]
      ~ vrf_hosts                                 = [
          ~ {
              + security_level    = "auth"
              + version           = "3"
                # (3 unchanged attributes hidden)
            },
            # (2 unchanged elements hidden)
        ]
        # (11 unchanged attributes hidden)
    }



Plan: 0 to add, 8 to change, 0 to destroy.

I got rid of half the output since it's another device from the pair.

I can provide the yaml config if needed, but it's very basic apart from variables for some things ( I tried with fixed values but no change).
I am running this against a CML device if that matters.

It's not preventing the solution from working however this will be a hassle in the future as we have to analyze the changes every time (and will confuse less terraform interested colleagues :) )