aci_rest_managed for objects that are not deletable (DCNE-550)

[juchowan]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

With aci_rest_managed we try to configure objects in ACI which are configurable, but not always deletable. As an example all the child policies under infraAccPortGrp, such as infraRsCdpIfPol, infraRsLldpIfPol etc can be configured with a policy name, but it is not possible to remove the object from APIC. Deleting policy defaults the config to empty strings.

Would it be possible to add support to have a list of classes that are configurable but can't be deleted. There is already var UnableToDelete configured but not used in the rest_managed resource.
The desired behaviour would be:

• for all create, read, update operations no change
• for delete operation, instead of sending DELETE to APIC, we would send PATCH with empty values that were previously configured and then delete the resource from statefile

New or Affected Resource(s) + ACI Class(es):

• aci_rest_managed

Not-deletable classes:

• infraRsHIfPol
• infraRsCdpIfPol
• infraRsLldpIfPol
• infraRsStpIfPol
• infraRsMcpIfPol
• infraRsL2IfPol
• infraRsStormctrlIfPol
• infraRsLacpPol
• infraRsMacsecIfPol
• infraRsQosIngressDppIfPol
• infraRsQosEgressDppIfPol
• mgmtMgmtP

APIC version and APIC Platform

• V 4.2+

Potential Terraform Configuration

# Copy-paste your Terraform configurations here - for large Terraform configs,
# please use a service like Dropbox and share a link to the ZIP file. For
# security, you can also encrypt the files using our GPG public key.

References

• #0000