bind cs vserver sample_cs -lbvserver sample_lb

TF_ACC=1 go test -v
=== RUN   TestProvider
--- PASS: TestProvider (0.00s)
=== RUN   TestProvider_impl
--- PASS: TestProvider_impl (0.00s)
=== RUN   TestAccCspolicy_basic
--- PASS: TestAccCspolicy_basic (3.27s)
=== RUN   TestAccCsvserver_basic
--- PASS: TestAccCsvserver_basic (1.52s)
=== RUN   TestAccLbmonitor_basic
--- PASS: TestAccLbmonitor_basic (1.20s)
=== RUN   TestAccLbvserver_basic
--- PASS: TestAccLbvserver_basic (1.51s)
=== RUN   TestAccService_basic
--- PASS: TestAccService_basic (3.20s)
=== RUN   TestAccServicegroup_basic
--- FAIL: TestAccServicegroup_basic (3.11s)
	testing.go:268: Step 0 error: After applying this step, the plan was not empty:
		
		DIFF:
		
		UPDATE: netscaler_servicegroup.foo
		  servicegroupmembers.1629640711: "" => "172.20.0.9:80"
		  servicegroupmembers.1682487865: "172.20.0.11:8080:1" => ""
		  servicegroupmembers.2927490466: "" => "172.20.0.11:8080"
		  servicegroupmembers.4266564889: "" => "172.20.0.10:80"
		  servicegroupmembers.526377631:  "172.20.0.9:80:1" => ""
		  servicegroupmembers.537949203:  "172.20.0.10:80:1" => ""
		
		STATE:
[...]
		  servicegroupmembers.# = 3
		  servicegroupmembers.1682487865 = 172.20.0.11:8080:1
		  servicegroupmembers.526377631 = 172.20.0.9:80:1
		  servicegroupmembers.537949203 = 172.20.0.10:80:1
[...]
FAIL
exit status 1
FAIL	terraform-provider-netscaler	13.992s

servicegroupmembers = ["172.20.0.9:80", "172.20.0.10:80", "172.20.0.11:8080"]

servicegroupmembers = ["172.20.0.9:80:1", "172.20.0.10:80:1", "172.20.0.11:8080:1"]

resource "netscaler_lbmonitor" "lbmonitor" {
  monitorname = "mon_${var.ingress["name"]}"
  type = "${var.backends_config["service_type"]}"
  interval = 350
  resptimeout = 250
}

resource "netscaler_server" "backends" {
  count = "${length(var.backends)}"

  name = "srv_${format("%s_%s", var.ingress["name"], replace(var.backends[count.index], "/[:.]+/", ""))}"
  ipaddress = "${var.backends[count.index]}"
}

resource "netscaler_servicegroup" "backend" {
  servicegroupname = "sg_${var.ingress["name"]}"
  lbvservers = ["${netscaler_lbvserver.lbvserver.name}"]
  servicetype = "${var.backends_config["service_type"]}"
  servicegroupmembers_by_servername = ["${formatlist("%s:%s", netscaler_server.backends.*.name, var.backends_config["port"])}"]
}

resource "netscaler_lbvserver" "lbvserver" {
  name = "lbvs_${var.ingress["name"]}"
  ipv46 = "${var.ingress["ip"]}"
  port = "${var.ingress["port"]}"
  servicetype = "${var.ingress["service_type"]}"
  lbmethod = "ROUNDROBIN"
  persistencetype = "COOKIEINSERT"
}

variable "ns_user" {
  default = "nsroot"
}

variable "ns_password" {
  default = "nsroot"
}

variable "ns_hostname" {
  default = "ns.domain.tld"
}

variable "ingress" {
  type = "map"
  "description" = "name, vip, port and servicetype for the load balancer"
  default {
    port = 443
    service_type = "HTTP"
  }
}

variable "backends_config" {
  type = "map"
  "description" = "port and servicetype for the backend services"
  default {
    backend_port = 80
    service_type = "HTTP"
  }
}

variable "backends" {
  type = "list"
  description = "List of backend services [ipaddress:port]"
}

ingress = {
  name = "ademoapp"
  service_type = "HTTP"
  ip = "10.42.42.100"
  port = 80
}

backends_config = {
  clttimeout = 40
  port = 80
  service_type = "HTTP"
}

backends = [
  "10.42.42.1",
  "10.42.42.2",
  "10.42.42.3",
]

terraform plan -var-file=local.tfvars -out terraform.plan
terraform apply "terraform.plan"

backends = [
  "10.42.42.1",
  "10.42.42.3",
]

terraform refresh -var-file=local.tfvars
terraform plan -var-file=local.tfvars -out terraform.plan
terraform apply "terraform.plan"

terraform plan -var-file=local.tfvars -out terraform.plan
  ~ netscaler_server.backends[1]
      ipaddress:                                    "10.42.42.2" => "10.42.42.3"
      name:                                         "srv_ademoapp_1042422" => "srv_ademoapp_1042423"
  - netscaler_server.backends[2]
  ~ netscaler_servicegroup.backend
      servicegroupmembers_by_servername.#:          "3" => "2"
      servicegroupmembers_by_servername.1839026872: "srv_ademoapp_1042423:80:1" => ""
      servicegroupmembers_by_servername.213590207:  "" => "srv_ademoapp_1042423:80"
      servicegroupmembers_by_servername.2796742708: "" => "srv_ademoapp_1042421:80"
      servicegroupmembers_by_servername.2797699357: "srv_ademoapp_1042422:80:1" => ""
      servicegroupmembers_by_servername.542503859:  "srv_ademoapp_1042421:80:1" => ""
Plan: 0 to add, 2 to change, 1 to destroy.



terraform apply "terraform.plan"
netscaler_server.backends[2]: Destroying... (ID: srv_ademoapp_1042423)
netscaler_server.backends[1]: Modifying... (ID: srv_ademoapp_1042422)
  ipaddress: "10.42.42.2" => "10.42.42.3"
  name:      "srv_ademoapp_1042422" => "srv_ademoapp_1042423"
netscaler_server.backends[2]: Destruction complete after 0s
Error: Error applying plan:
1 error(s) occurred:
* netscaler_server.backends[1]: 1 error(s) occurred:
* netscaler_server.backends.1: Error updating server srv_ademoapp_1042423

terraform plan -var-file=local.tfvars -out terraform.plan
  ~ netscaler_server.backends[1]
      ipaddress:                                    "10.42.42.2" => "10.42.42.3"
      name:                                         "srv_ademoapp_1042422" => "srv_ademoapp_1042423"
  ~ netscaler_servicegroup.backend
      servicegroupmembers_by_servername.213590207:  "" => "srv_ademoapp_1042423:80"
      servicegroupmembers_by_servername.2796742708: "" => "srv_ademoapp_1042421:80"
      servicegroupmembers_by_servername.2797699357: "srv_ademoapp_1042422:80:1" => ""
      servicegroupmembers_by_servername.542503859:  "srv_ademoapp_1042421:80:1" => ""
Plan: 0 to add, 2 to change, 0 to destroy.



terraform apply "terraform.plan"
netscaler_server.backends[1]: Modifying... (ID: srv_ademoapp_1042422)
  ipaddress: "10.42.42.2" => "10.42.42.3"
  name:      "srv_ademoapp_1042422" => "srv_ademoapp_1042423"
netscaler_server.backends[1]: Modifications complete after 0s (ID: srv_ademoapp_1042422)
Error: Error applying plan:
1 error(s) occurred:
* netscaler_servicegroup.backend: netscaler_servicegroup.backend: diffs didn't match during apply. This is a bug with Terraform and should be reported as a GitHub Issue.
Please include the following information in your report:
    Terraform Version: 0.11.11
    Resource ID: netscaler_servicegroup.backend
    Mismatch reason: attribute mismatch: servicegroupmembers_by_servername.213590207
    Diff One (usually from plan): *terraform.InstanceDiff{mu:sync.Mutex{state:0, sema:0x0}, Attributes:map[string]*terraform.ResourceAttrDiff{"servicegroupmembers_by_servername.542503859":*terraform.ResourceAttrDiff{Old:"srv_ademoapp_1042421:80:1", New:"", NewComputed:false, NewRemoved:true, NewExtra:interface {}(nil), RequiresNew:false, Sensitive:false, Type:0x0}, "servicegroupmembers_by_servername.213590207":*terraform.ResourceAttrDiff{Old:"", New:"srv_ademoapp_1042423:80", NewComputed:false, NewRemoved:false, NewExtra:interface {}(nil), RequiresNew:false, Sensitive:false, Type:0x0}, "servicegroupmembers_by_servername.2796742708":*terraform.ResourceAttrDiff{Old:"", New:"srv_ademoapp_1042421:80", NewComputed:false, NewRemoved:false, NewExtra:interface {}(nil), RequiresNew:false, Sensitive:false, Type:0x0}, "servicegroupmembers_by_servername.2797699357":*terraform.ResourceAttrDiff{Old:"srv_ademoapp_1042422:80:1", New:"", NewComputed:false, NewRemoved:true, NewExtra:interface {}(nil), RequiresNew:false, Sensitive:false, Type:0x0}}, Destroy:false, DestroyDeposed:false, DestroyTainted:false, Meta:map[string]interface {}(nil)}
    Diff Two (usually from apply): *terraform.InstanceDiff{mu:sync.Mutex{state:0, sema:0x0}, Attributes:map[string]*terraform.ResourceAttrDiff{"servicegroupmembers_by_servername.542503859":*terraform.ResourceAttrDiff{Old:"srv_ademoapp_1042421:80:1", New:"", NewComputed:false, NewRemoved:true, NewExtra:interface {}(nil), RequiresNew:false, Sensitive:false, Type:0x0}, "servicegroupmembers_by_servername.2796742708":*terraform.ResourceAttrDiff{Old:"", New:"srv_ademoapp_1042421:80", NewComputed:false, NewRemoved:false, NewExtra:interface {}(nil), RequiresNew:false, Sensitive:false, Type:0x0}, "servicegroupmembers_by_servername.3020376026":*terraform.ResourceAttrDiff{Old:"", New:"srv_ademoapp_1042422:80", NewComputed:false, NewRemoved:false, NewExtra:interface {}(nil), RequiresNew:false, Sensitive:false, Type:0x0}, "servicegroupmembers_by_servername.2797699357":*terraform.ResourceAttrDiff{Old:"srv_ademoapp_1042422:80:1", New:"", NewComputed:false, NewRemoved:true, NewExtra:interface {}(nil), RequiresNew:false, Sensitive:false, Type:0x0}}, Destroy:false, DestroyDeposed:false, DestroyTainted:false, Meta:map[string]interface {}(nil)}

azurerm_virtual_machine.vm (remote-exec): Connecting to remote host via SSH...
azurerm_virtual_machine.vm (remote-exec):   Host: 52.147.4.242
azurerm_virtual_machine.vm (remote-exec):   User: nsroot
azurerm_virtual_machine.vm (remote-exec):   Password: true
azurerm_virtual_machine.vm (remote-exec):   Private key: false
azurerm_virtual_machine.vm (remote-exec):   Certificate: false
azurerm_virtual_machine.vm (remote-exec):   SSH Agent: false
azurerm_virtual_machine.vm (remote-exec):   Checking Host Key: false
azurerm_virtual_machine.vm (remote-exec): Connected!


Error: Failed to upload script: Error chmodding script file to 0777 in remote machine error executing "chmod 0777 /tmp/terraform_1432064364.sh": Process exited with status 1:
###############################################################################
#                     CallHome has been enabled by default.                   #
# This feature lets the NetScaler device/instance automatically upload        #
# diagnostic and usage information to Citrix. This data will help detect      #
# critical errors and will also be used to improve the features and the       #
# product.                                                                    #
#                                                                             #
# This feature can be configured anytime using the command line interface or  #
# the configuration utility. Please see the documentation for more details.   #
###############################################################################
 Done
ERROR: No such command
ERROR: No such command

# Define the variables and default values to be used throughout this script
variable "admin_username" {
  default = "nsroot"
}

variable "admin_password" {
  default = "S0m3Pa55w0rd!"
}

variable "resource_prefix" {
  default = "tfnsdemo"
}

# You'll usually want to set this to a region near you.
variable "location" {
  default = "australiaeast"
}



# Configure the provider.
provider "azurerm" {
  version = "~>1.31"
}

# Create a resource group
resource "azurerm_resource_group" "rg" {
  name     = "${var.resource_prefix}_rg"
  location = var.location
}

# Create virtual network and three subnets
resource "azurerm_virtual_network" "vnet" {
  name                = "${var.resource_prefix}-vnet"
  address_space       = ["10.10.0.0/16"]
  location            = var.location
  resource_group_name = azurerm_resource_group.rg.name
}

resource "azurerm_subnet" "wansubnet" {
  name                 = "wansubnet"
  resource_group_name  = "${azurerm_resource_group.rg.name}"
  virtual_network_name = "${azurerm_virtual_network.vnet.name}"
  address_prefix       = "10.10.1.0/24"
}

resource "azurerm_subnet" "lansubnet" {
  name                 = "lansubnet"
  resource_group_name  = "${azurerm_resource_group.rg.name}"
  virtual_network_name = "${azurerm_virtual_network.vnet.name}"
  address_prefix       = "10.10.2.0/24"
}


# Create public IP for management interface 
resource "azurerm_public_ip" "mgmtpip" {
  name                         = "${var.resource_prefix}-mgmtPIP"
  location                     = var.location
  resource_group_name          = azurerm_resource_group.rg.name
  allocation_method            = "Static"
}

# Create public IP for WAN interface 
resource "azurerm_public_ip" "wanpip" {
  name                         = "${var.resource_prefix}-wanPIP"
  location                     = var.location
  resource_group_name          = azurerm_resource_group.rg.name
  allocation_method            = "Static"
}

# Create Network Security Group and rule
resource "azurerm_network_security_group" "nsg" {
  name                = "${var.resource_prefix}-nsg"
  location            = var.location
  resource_group_name = "${azurerm_resource_group.rg.name}"

  security_rule {
    name                       = "SSH"
    priority                   = 1001
    direction                  = "Inbound"
    access                     = "Allow"
    protocol                   = "Tcp"
    source_port_range          = "*"
    destination_port_range     = "22"
    source_address_prefix      = "*"
    destination_address_prefix = "*"
  }

  security_rule {
    name                       = "HTTP"
    priority                   = 1002
    direction                  = "Inbound"
    access                     = "Allow"
    protocol                   = "Tcp"
    source_port_range          = "*"
    destination_port_range     = "80"
    source_address_prefix      = "*"
    destination_address_prefix = "*"
  }

  security_rule {
    name                       = "HTTPS"
    priority                   = 1003
    direction                  = "Inbound"
    access                     = "Allow"
    protocol                   = "Tcp"
    source_port_range          = "*"
    destination_port_range     = "443"
    source_address_prefix      = "*"
    destination_address_prefix = "*"
  }
}

# Create network interface for netscaler wan
resource "azurerm_network_interface" "wannic" {
  name                      = "${var.resource_prefix}-wannic"
  location                  = var.location
  resource_group_name       = azurerm_resource_group.rg.name
  network_security_group_id = azurerm_network_security_group.nsg.id

  ip_configuration {
      name                          = "${var.resource_prefix}-mgmtipconfig"
      subnet_id                     = azurerm_subnet.wansubnet.id
      private_ip_address_allocation = "static"
      private_ip_address            = "10.10.1.4"
      public_ip_address_id          = azurerm_public_ip.mgmtpip.id
      primary                       = true
  }

  ip_configuration {
    name                          = "${var.resource_prefix}-wanipconfig"
    subnet_id                     = azurerm_subnet.wansubnet.id
    private_ip_address_allocation = "static"
    private_ip_address            = "10.10.1.5"
    public_ip_address_id          = azurerm_public_ip.wanpip.id
    primary                       = false
  }
}

# Create network interface for netscaler lan
resource "azurerm_network_interface" "lannic" {
  name                      = "${var.resource_prefix}-lannic"
  location                  = var.location
  resource_group_name       = azurerm_resource_group.rg.name

  ip_configuration {
    name                          = "${var.resource_prefix}-lanipconfig"
    subnet_id                     = azurerm_subnet.lansubnet.id
    private_ip_address_allocation = "static"
    private_ip_address            = "10.10.2.4"
  }
}


# Create Netscaler virtual machine
resource "azurerm_virtual_machine" "vm" {
  name                  = "${var.resource_prefix}-vm"
  location              = var.location
  resource_group_name   = azurerm_resource_group.rg.name
  network_interface_ids = [
    "${azurerm_network_interface.wannic.id}",
    "${azurerm_network_interface.lannic.id}"
  ]
  primary_network_interface_id = "${azurerm_network_interface.wannic.id}"
  vm_size               = "Standard_A2"

  storage_image_reference {
    publisher = "citrix"
    offer     = "netscalervpx-130"
    sku       = "netscaler10platinum"
    version   = "130.41.28"
  }

  plan {
    name = "netscaler10platinum"
    publisher = "citrix"
    product = "netscalervpx-130"
  }
  
storage_os_disk {
    name              = "${var.resource_prefix}OsDisk"
    caching           = "ReadWrite"
    create_option     = "FromImage"
    managed_disk_type = "Standard_LRS"
  }

  os_profile {
    computer_name  = "${var.resource_prefix}-vm"
    admin_username = var.admin_username
    admin_password = var.admin_password
  }

  os_profile_linux_config {
    disable_password_authentication = false
  }


# Perform the following commands over CLI

  provisioner "remote-exec" {
    connection {
      host     = azurerm_public_ip.mgmtpip.ip_address 
      type     = "ssh"
      user     = var.admin_username
      password = var.admin_password
    }

    inline = [
      "add ns ip 10.10.1.5 255.255.255.0 -type vip",
      "add ns ip 10.10.2.4 255.255.255.0 -type snip",
      "save config"
    ]
  }
}

servicegroupMembers := make([]string, 0, len(boundMembers))
	for _, member := range boundMembers {
		ip := member["ip"].(string)
		port := member["port"].(float64) //TODO: why is this not int?
		weight := member["weight"].(string)
		strmember := fmt.Sprintf("%s:%.0f:%s", ip, port, weight)
		servicegroupMembers = append(servicegroupMembers, strmember)
	}
	d.Set("servicegroupmembers", servicegroupMembers)

variable "netscaler" {
    description = "Map for Nitro API access information.  It has attributes hostname, username, and password."
    type = object({hostname = string, username = string, password = string})
}

variable "virtualserver_ip" {
    description = "virtual server IP address"
}

variable "server_cert" {
    description = "Server certificate name"
}

variable "ca_chain" {
    description = "Map with CA certificate chain names.  It has attributes int and root."
    type = object({int = string, root = string})
}

locals {
        endpoint = "https://${var.netscaler.hostname}/"
}

provider "citrixadc" {
    endpoint = local.endpoint
    username = var.netscaler.username
    password = var.netscaler.password
    insecure_skip_verify = true
}

resource "citrixadc_lbvserver" "ssl_virtualserver" {
        name = "certkey-error-test"
        ipv46 = var.virtualserver_ip
        port = 443
        servicetype = "SSL"
        persistencetype = "SSLSESSION"
        sslcertkey = var.server_cert

        provisioner "local-exec" {
        command = <<HERE
sshpass -p ${var.netscaler.password} ssh -o StrictHostKeyChecking=no ${var.netscaler.username}@${var.netscaler.hostname} <<DOC
bind ssl vserver ${self.name} -certkeyName ${var.ca_chain.int} -CA -ocspCheck Optional
bind ssl vserver ${self.name} -certkeyName ${var.ca_chain.root} -CA -ocspCheck Optional
DOC
        HERE
        }
}

terraform@machine:~/CitrixADC_Certkey_Error$ terraform apply --var-file input.tfvars 

An execution plan has been generated and is shown below.
Resource actions are indicated with the following symbols:
  + create

Terraform will perform the following actions:

  # citrixadc_lbvserver.ssl_virtualserver will be created
  + resource "citrixadc_lbvserver" "ssl_virtualserver" {
      + appflowlog                         = (known after apply)
      + authentication                     = (known after apply)
      + authenticationhost                 = (known after apply)
      + authn401                           = (known after apply)
      + authnprofile                       = (known after apply)
      + authnvsname                        = (known after apply)
      + backuplbmethod                     = (known after apply)
      + backuppersistencetimeout           = (known after apply)
      + backupvserver                      = (known after apply)
      + bypassaaaa                         = (known after apply)
      + cacheable                          = (known after apply)
      + clttimeout                         = (known after apply)
      + comment                            = (known after apply)
      + connfailover                       = (known after apply)
      + cookiename                         = (known after apply)
      + datalength                         = (known after apply)
      + dataoffset                         = (known after apply)
      + dbprofilename                      = (known after apply)
      + dbslb                              = (known after apply)
      + disableprimaryondown               = (known after apply)
      + dns64                              = (known after apply)
      + dnsprofilename                     = (known after apply)
      + downstateflush                     = (known after apply)
      + hashlength                         = (known after apply)
      + healththreshold                    = (known after apply)
      + httpprofilename                    = (known after apply)
      + httpsredirecturl                   = (known after apply)
      + icmpvsrresponse                    = (known after apply)
      + id                                 = (known after apply)
      + insertvserveripport                = (known after apply)
      + ipmask                             = (known after apply)
      + ippattern                          = (known after apply)
      + ipset                              = (known after apply)
      + ipv46                              = "10.1.1.20"
      + l2conn                             = (known after apply)
      + lbmethod                           = (known after apply)
      + lbprofilename                      = (known after apply)
      + listenpolicy                       = (known after apply)
      + listenpriority                     = (known after apply)
      + m                                  = (known after apply)
      + macmoderetainvlan                  = (known after apply)
      + maxautoscalemembers                = (known after apply)
      + minautoscalemembers                = (known after apply)
      + mssqlserverversion                 = (known after apply)
      + mysqlcharacterset                  = (known after apply)
      + mysqlprotocolversion               = (known after apply)
      + mysqlservercapabilities            = (known after apply)
      + mysqlserverversion                 = (known after apply)
      + name                               = "certkey-error-test"
      + netmask                            = (known after apply)
      + netprofile                         = (known after apply)
      + newname                            = (known after apply)
      + newservicerequest                  = (known after apply)
      + newservicerequestincrementinterval = (known after apply)
      + newservicerequestunit              = (known after apply)
      + oracleserverversion                = (known after apply)
      + persistencebackup                  = (known after apply)
      + persistencetype                    = "SSLSESSION"
      + persistmask                        = (known after apply)
      + port                               = 443
      + pq                                 = (known after apply)
      + processlocal                       = (known after apply)
      + push                               = (known after apply)
      + pushlabel                          = (known after apply)
      + pushmulticlients                   = (known after apply)
      + pushvserver                        = (known after apply)
      + range                              = (known after apply)
      + recursionavailable                 = (known after apply)
      + redirectfromport                   = (known after apply)
      + redirectportrewrite                = (known after apply)
      + redirurl                           = (known after apply)
      + redirurlflags                      = (known after apply)
      + resrule                            = (known after apply)
      + retainconnectionsoncluster         = (known after apply)
      + rhistate                           = (known after apply)
      + rtspnat                            = (known after apply)
      + rule                               = (known after apply)
      + sc                                 = (known after apply)
      + servicename                        = (known after apply)
      + servicetype                        = "SSL"
      + sessionless                        = (known after apply)
      + skippersistency                    = (known after apply)
      + sobackupaction                     = (known after apply)
      + somethod                           = (known after apply)
      + sopersistence                      = (known after apply)
      + sopersistencetimeout               = (known after apply)
      + sothreshold                        = (known after apply)
      + sslcertkey                         = "serverCert"
      + state                              = (known after apply)
      + tcpprofilename                     = (known after apply)
      + td                                 = (known after apply)
      + timeout                            = (known after apply)
      + tosid                              = (known after apply)
      + trofspersistence                   = (known after apply)
      + v6netmasklen                       = (known after apply)
      + v6persistmasklen                   = (known after apply)
      + vipheader                          = (known after apply)
      + weight                             = (known after apply)
    }

Plan: 1 to add, 0 to change, 0 to destroy.

Do you want to perform these actions?
  Terraform will perform the actions described above.
  Only 'yes' will be accepted to approve.

  Enter a value: yes

citrixadc_lbvserver.ssl_virtualserver: Creating...
citrixadc_lbvserver.ssl_virtualserver: Provisioning with 'local-exec'...
citrixadc_lbvserver.ssl_virtualserver (local-exec): Executing: ["/bin/sh" "-c" "sshpass -p password ssh -o StrictHostKeyChecking=no username@ipaddress <<DOC\r\nbind ssl vserver certkey-error-test -certkeyName ca_int -CA -ocspCheck Optional\r\nbind ssl vserver certkey-error-test -certkeyName ca_root -CA -ocspCheck Optional\r\nDOC\r\n"]
citrixadc_lbvserver.ssl_virtualserver (local-exec): Pseudo-terminal will not be allocated because stdin is not a terminal.

citrixadc_lbvserver.ssl_virtualserver (local-exec):  Done
citrixadc_lbvserver.ssl_virtualserver (local-exec):  Done
citrixadc_lbvserver.ssl_virtualserver (local-exec):  Done
citrixadc_lbvserver.ssl_virtualserver (local-exec): ^D

citrixadc_lbvserver.ssl_virtualserver (local-exec): Fatal Exception!: EOF
citrixadc_lbvserver.ssl_virtualserver (local-exec): Bye!
citrixadc_lbvserver.ssl_virtualserver: Creation complete after 1s [id=certkey-error-test]

Apply complete! Resources: 1 added, 0 changed, 0 destroyed.
terraform@machine:~/CitrixADC_Certkey_Error$ terraform apply --var-file input.tfvars 
citrixadc_lbvserver.ssl_virtualserver: Refreshing state... [id=certkey-error-test]

An execution plan has been generated and is shown below.
Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # citrixadc_lbvserver.ssl_virtualserver will be updated in-place
  ~ resource "citrixadc_lbvserver" "ssl_virtualserver" {
        appflowlog                         = "ENABLED"
        authentication                     = "OFF"
        authn401                           = "OFF"
        backuplbmethod                     = "ROUNDROBIN"
        backuppersistencetimeout           = 2
        bypassaaaa                         = "NO"
        cacheable                          = "NO"
      ~ ciphers                            = [
          - "DEFAULT",
        ]
        connfailover                       = "DISABLED"
        disableprimaryondown               = "DISABLED"
        dns64                              = "DISABLED"
        downstateflush                     = "ENABLED"
        hashlength                         = 0
        icmpvsrresponse                    = "PASSIVE"
        id                                 = "certkey-error-test"
        insertvserveripport                = "OFF"
        ipmask                             = "*"
        ippattern                          = "0.0.0.0"
        ipv46                              = "10.1.1.20"
        l2conn                             = "OFF"
        lbmethod                           = "LEASTCONNECTION"
        listenpolicy                       = "NONE"
        listenpriority                     = 0
        m                                  = "IP"
        macmoderetainvlan                  = "DISABLED"
        mysqlcharacterset                  = 0
        mysqlprotocolversion               = 0
        mysqlservercapabilities            = 0
        name                               = "certkey-error-test"
        newservicerequest                  = 0
        newservicerequestincrementinterval = 0
        newservicerequestunit              = "PER_SECOND"
        persistencebackup                  = "NONE"
        persistencetype                    = "SSLSESSION"
        persistmask                        = "255.255.255.255"
        port                               = 443
        processlocal                       = "DISABLED"
        push                               = "DISABLED"
        pushlabel                          = "none"
        pushmulticlients                   = "NO"
        redirectfromport                   = 0
        redirectportrewrite                = "DISABLED"
        redirurlflags                      = false
        retainconnectionsoncluster         = "NO"
        rhistate                           = "PASSIVE"
        rtspnat                            = "OFF"
        servicetype                        = "SSL"
        sessionless                        = "DISABLED"
        skippersistency                    = "None"
        snisslcertkeys                     = []
        somethod                           = "NONE"
        sopersistence                      = "DISABLED"
        sothreshold                        = 0
      ~ sslcertkey                         = "ca_root" -> "serverCert"
        timeout                            = 2
        tosid                              = 0
        trofspersistence                   = "ENABLED"
        v6netmasklen                       = 0
        weight                             = 0
    }

Plan: 0 to add, 1 to change, 0 to destroy.

Do you want to perform these actions?
  Terraform will perform the actions described above.
  Only 'yes' will be accepted to approve.

  Enter a value: yes

citrixadc_lbvserver.ssl_virtualserver: Modifying... [id=certkey-error-test]

Error: [ERROR] netscaler-provider: Error unbinding sslcertkey from lbvserver ca_root

  on main.tf line 30, in resource "citrixadc_lbvserver" "ssl_virtualserver":
  30: resource "citrixadc_lbvserver" "ssl_virtualserver" {

resource "null_resource" "destroy_certificate" {
  count = "${var.ingress["service_type"] == "SSL" ? 1 : 0}"

  provisioner "local-exec" {
    when = "destroy"
    command = "./cert_files.sh absent"
    working_dir = "${var.cwd}"
    environment = {
      TF_VAR_ns_ingress_name = "${var.ingress["name"]}"
    }
  }
}


resource "null_resource" "upload_certificate" {
  count = "${var.ingress["service_type"] == "SSL" ? 1 : 0}"

  triggers = {
    cert_hash = "${sha1(var.ingress["cert"])}"
  }

  provisioner "local-exec" {
    command = "./cert_files.sh absent"
    working_dir = "${var.cwd}"
    environment = {
      TF_VAR_ns_ingress_name = "${var.ingress["name"]}"
    }
  }
  provisioner "local-exec" {
    command = "./cert_files.sh present"
    working_dir = "${var.cwd}"
    environment = {
      TF_VAR_ns_ingress_name = "${var.ingress["name"]}"
    }
  }
}


resource "netscaler_sslcertkey" "lbsslcertkey" {
  count = "${var.ingress["service_type"] == "SSL" ? 1 : 0}"

  certkey = "TLS_${var.ingress["name"]}_${var.serial}"
  cert = "/nsconfig/ssl/${var.ingress["name"]}.cert"
  key = "/nsconfig/ssl/${var.ingress["name"]}.key"
  expirymonitor = "DISABLED"
  # notificationperiod = 90
  inform = "PEM"
  nodomaincheck = true

  depends_on = ["null_resource.upload_certificate"]
}


resource "netscaler_lbmonitor" "lbmonitor" {
  monitorname = "mon_${var.ingress["name"]}"
  type = "${var.backends_config["service_type"]}"
  interval = 350
  resptimeout = 250
}


resource "netscaler_server" "backends" {
  count = "${length(var.backends)}"

  name = "srv_${format("%s_%s", var.ingress["name"], replace(var.backends[count.index], "/[:.]+/", ""))}"
  ipaddress = "${var.backends[count.index]}"
}


resource "netscaler_servicegroup" "backend" {
  servicegroupname = "sg_${var.ingress["name"]}"
  lbvservers = ["${netscaler_lbvserver.lbvserver.name}"]
  servicetype = "${var.backends_config["service_type"]}"
  servicegroupmembers_by_servername = ["${formatlist("%s:%s", netscaler_server.backends.*.name, var.backends_config["port"])}"]
}


resource "netscaler_lbvserver" "lbvserver" {
  name = "lbvs_${var.ingress["name"]}"
  ipv46 = "${var.ingress["ip"]}"
  port = "${var.ingress["port"]}"
  servicetype = "${var.ingress["service_type"]}"
  lbmethod = "ROUNDROBIN"
  persistencetype = "COOKIEINSERT"
  # ugly workaround to conditionally reference a possible 0 count resource:
  sslcertkey = "${element(concat(netscaler_sslcertkey.lbsslcertkey.*.certkey, list("")), 0)}"
}

variable "ns_user" {
  default = "nsroot"
}

variable "ns_password" {
  default = "nsroot"
}

variable "ns_hostname" {
  default = "ns.domain.tld"
}

variable "cwd" {
  default = "."
}

variable "serial" {
  default = ""
}

variable "ingress" {
  type = "map"
  "description" = "name, vip, port and servicetype for the load balancer"
  default {
    port = 443
    service_type = "SSL"
  }
}

variable "backends_config" {
  type = "map"
  "description" = "port and servicetype for the backend services"
  default {
    clttimeout = 40
    backend_port = 80
    service_type = "HTTP"
  }
}

variable "backends" {
  type = "list"
  description = "List of backend services [ipaddress:port]"
}

ingress = {
  name = "ademoapp"
  service_type = "SSL"
  ip = "10.42.42.100"
  port = 443

  cert = <<EOF
-----BEGIN CERTIFICATE-----
<snip>
-----END CERTIFICATE-----
EOF

}

backends_config = {
  clttimeout = 40
  port = 80
  service_type = "HTTP"
}

backends = [
  "10.42.42.1",
  "10.42.42.2",
  "10.42.42.3",
]

export TF_CLI_CONFIG_FILE=terraformrc
export TF_VAR_cwd=/home/user/netscaler/terraform
export TF_VAR_ns_hostname=ns.domain.tld
export TF_VAR_ns_ingress_name=ademoapp
export TF_VAR_ns_password=Pssssh
export TF_VAR_ns_user=my_username
export TF_VAR_serial=9b464bfc0efeb1fd

terraform apply -parallelism=1 -refresh=true -no-color \
  -state app_states/ademoapp.tfstate \
  -var-file=app_vars/ademoapp.tfvars

netscaler_lbmonitor.lbmonitor:
  id = mon_ademoapp
  action = Not applicable
  alertretries = 0
  application =
  attribute =
  basedn =
  binddn =
  customheaders =
  database =
  destip =
  destport = 0
  dispatcherip = 0.0.0.0
  dispatcherport = 0
  domain =
  downtime = 30
  evalrule =
  failureretries = 0
  filename =
  filter =
  group =
  hostipaddress =
  hostname =
  httprequest = HEAD /
  inbandsecurityid = NO_INBAND_SECURITY
  interval = 350
  iptunnel = NO
  kcdaccount =
  lasversion =
  logonpointname =
  lrtm =
  metric =
  metrictable =
  metricthreshold = 0
  metricweight = 0
  monitorname = mon_ademoapp
  mssqlprotocolversion =
  netprofile =
  oraclesid =
  originhost =
  originrealm =
  password =
  productname =
  query =
  querytype =
  radaccountsession =
  radapn =
  radframedip = 0.0.0.0
  radkey =
  radmsisdn =
  radnasid =
  radnasip = 0.0.0.0
  recv =
  respcode.# = 1
  respcode.0 = 200
  resptimeout = 250
  retries = 3
  reverse = NO
  rtsprequest = HEAD /
  scriptargs =
  scriptname =
  secondarypassword =
  secure = NO
  send =
  servicegroupname =
  servicename =
  sipmethod = OPTIONS
  sipreguri =
  sipuri =
  sitepath =
  snmpcommunity =
  snmpoid =
  snmpthreshold =
  snmpversion = V1
  sqlquery =
  sslprofile =
  state = ENABLED
  storedb = DISABLED
  storefrontacctservice = NO
  storefrontcheckbackendservices = NO
  storename =
  successretries = 1
  tos = NO
  tosid = 0
  transparent = NO
  trofsstring =
  type = HTTP
  units1 = SEC
  units2 = SEC
  units3 = SEC
  units4 = SEC
  username =
  validatecred =
  vendorspecificvendorid = 0
netscaler_lbvserver.lbvserver:
  id = lbvs_ademoapp
  appflowlog = ENABLED
  authentication = OFF
  authenticationhost =
  authn401 = OFF
  authnprofile =
  authnvsname =
  backuplbmethod =
  backuppersistencetimeout = 2
  backupvserver =
  bypassaaaa = NO
  cacheable = NO
  comment =
  connfailover = DISABLED
  cookiename =
  dbprofilename =
  dbslb =
  disableprimaryondown = DISABLED
  dns64 = DISABLED
  dnsprofilename =
  downstateflush = ENABLED
  hashlength = 0
  httpprofilename =
  httpsredirecturl =
  icmpvsrresponse = PASSIVE
  insertvserveripport = OFF
  ipmask = *
  ippattern = 0.0.0.0
  ipset =
  ipv46 = 10.42.42.100
  l2conn = OFF
  lbmethod = ROUNDROBIN
  lbprofilename =
  listenpolicy = NONE
  listenpriority = 0
  m = IP
  macmoderetainvlan = DISABLED
  mssqlserverversion =
  mysqlcharacterset = 0
  mysqlprotocolversion = 0
  mysqlservercapabilities = 0
  mysqlserverversion =
  name = lbvs_ademoapp
  netmask =
  netprofile =
  newname =
  newservicerequest = 0
  newservicerequestincrementinterval = 0
  newservicerequestunit = PER_SECOND
  oracleserverversion =
  persistencebackup = NONE
  persistencetype = COOKIEINSERT
  persistmask = 255.255.255.255
  port = 443
  pq =
  processlocal = DISABLED
  push = DISABLED
  pushlabel = none
  pushmulticlients = NO
  pushvserver =
  recursionavailable =
  redirectfromport = 0
  redirectportrewrite = DISABLED
  redirurl =
  redirurlflags = false
  resrule =
  retainconnectionsoncluster = NO
  rhistate = PASSIVE
  rtspnat = OFF
  rule =
  sc =
  servicename =
  servicetype = SSL
  sessionless = DISABLED
  skippersistency = None
  sobackupaction =
  somethod = NONE
  sopersistence = DISABLED
  sothreshold = 0
  sslcertkey = TLS_ademoapp_9b464bfc0efeb1fd
  sslprofile =
  state =
  tcpprofilename =
  timeout = 2
  tosid = 0
  trofspersistence = ENABLED
  v6netmasklen = 0
  vipheader =
  weight = 0
netscaler_server.backends.0:
  id = srv_ademoapp_1042421
  comment =
  delay = 0
  domain =
  domainresolvenow = false
  domainresolveretry = 0
  graceful =
  internal = false
  ipaddress = 10.42.42.1
  ipv6address = NO
  name = srv_ademoapp_1042421
  newname =
  state = ENABLED
  translationip = 0.0.0.0
  translationmask = 0.0.0.0
netscaler_server.backends.1:
  id = srv_ademoapp_1042422
  comment =
  delay = 0
  domain =
  domainresolvenow = false
  domainresolveretry = 0
  graceful =
  internal = false
  ipaddress = 10.42.42.2
  ipv6address = NO
  name = srv_ademoapp_1042422
  newname =
  state = ENABLED
  translationip = 0.0.0.0
  translationmask = 0.0.0.0
netscaler_server.backends.2:
  id = srv_ademoapp_1042423
  comment =
  delay = 0
  domain =
  domainresolvenow = false
  domainresolveretry = 0
  graceful =
  internal = false
  ipaddress = 10.42.42.3
  ipv6address = NO
  name = srv_ademoapp_1042423
  newname =
  state = ENABLED
  translationip = 0.0.0.0
  translationmask = 0.0.0.0
netscaler_servicegroup.backend:
  id = sg_ademoapp
  appflowlog = ENABLED
  autodisabledelay = 0
  autodisablegraceful =
  autoscale = DISABLED
  cacheable = NO
  cachetype = SERVER
  cip = ENABLED
  cipheader = X-Forwarded-For
  cka = NO
  clttimeout = 180
  cmp = NO
  comment =
  customserverid =
  delay = 0
  downstateflush = ENABLED
  dupweight = 0
  graceful = NO
  healthmonitor = YES
  httpprofilename =
  includemembers = false
  lbmonitor =
  lbvservers.# = 1
  lbvservers.4129248370 = lbvs_ademoapp
  memberport = 0
  monconnectionclose = NONE
  monitornamesvc =
  netprofile =
  newname =
  pathmonitor = NO
  pathmonitorindv = NO
  port = 0
  riseapbrstatsmsgcode = 0
  rtspsessionidremap = OFF
  sc =
  serverid = 0
  servername =
  servicegroupmembers.# = 0
  servicegroupmembers_by_servername.# = 3
  servicegroupmembers_by_servername.1839026872 = srv_ademoapp_1042423:80:1
  servicegroupmembers_by_servername.2797699357 = srv_ademoapp_1042422:80:1
  servicegroupmembers_by_servername.542503859 = srv_ademoapp_1042421:80:1
  servicegroupname = sg_ademoapp
  servicetype = HTTP
  sp = OFF
  state = ENABLED
  svrtimeout = 360
  tcpb = NO
  tcpprofilename =
  useproxyport = YES
  usip = NO
  weight = 0
netscaler_sslcertkey.lbsslcertkey:
  id = TLS_ademoapp_9b464bfc0efeb1fd
  bundle =
  cert = /nsconfig/ssl/ademoapp.cert
  certkey = TLS_ademoapp_9b464bfc0efeb1fd
  expirymonitor = DISABLED
  fipskey =
  hsmkey =
  inform = PEM
  key = /nsconfig/ssl/ademoapp.key
  linkcertkeyname =
  nodomaincheck = false
  notificationperiod = 0
  ocspstaplingcache = false
  passplain =
  password = false
null_resource.destroy_certificate:
  id = 2452242766656250296
null_resource.upload_certificate:
  id = 4257515104869952010
  triggers.% = 1
  triggers.cert_hash = 66b0e9969c211e5a824b504d092802e57d9f3367

ingress = {
  ....
  cert = <<EOF
-----BEGIN CERTIFICATE-----
MIIDmTCCAoGgAwIBAgIJAJtGS/wO/rH9MA0GCSqGSIb3DQEBCwUAMGsxCzAJBgNV
<snip>
-----END CERTIFICATE-----
...
}

export TF_CLI_CONFIG_FILE=terraformrc
export TF_VAR_cwd=/home/user/netscaler/terraform
export TF_VAR_ns_hostname=ns.domain.tld
export TF_VAR_ns_ingress_name=ademoapp
export TF_VAR_ns_password=Pssssh
export TF_VAR_ns_user=my_username
export TF_VAR_serial=123456789abcdef
terraform apply -parallelism=1 -refresh=true -no-color \
  -state app_states/ademoapp.tfstate \
  -var-file=app_vars/ademoapp.tfvars

null_resource.upload_certificate: Refreshing state... (ID: 4257515104869952010)
null_resource.destroy_certificate: Refreshing state... (ID: 2452242766656250296)
netscaler_server.backends[2]: Refreshing state... (ID: srv_ademoapp_1042423)
netscaler_server.backends[1]: Refreshing state... (ID: srv_ademoapp_1042422)
netscaler_server.backends[0]: Refreshing state... (ID: srv_ademoapp_1042421)
netscaler_lbmonitor.lbmonitor: Refreshing state... (ID: mon_ademoapp)
netscaler_sslcertkey.lbsslcertkey: Refreshing state... (ID: TLS_ademoapp_9b464bfc0efeb1fd)
netscaler_lbvserver.lbvserver: Refreshing state... (ID: lbvs_ademoapp)
netscaler_servicegroup.backend: Refreshing state... (ID: sg_ademoapp)

An execution plan has been generated and is shown below.
Resource actions are indicated with the following symbols:
  ~ update in-place
-/+ destroy and then create replacement

Terraform will perform the following actions:

~ netscaler_lbvserver.lbvserver
      sslcertkey:                                   "TLS_ademoapp_9b464bfc0efeb1fd" => "TLS_ademoapp_123456789abcdef"

  ~ netscaler_servicegroup.backend
      servicegroupmembers_by_servername.1839026872: "srv_ademoapp_1042423:80:1" => ""
      servicegroupmembers_by_servername.213590207:  "" => "srv_ademoapp_1042423:80"
      servicegroupmembers_by_servername.2796742708: "" => "srv_ademoapp_1042421:80"
      servicegroupmembers_by_servername.2797699357: "srv_ademoapp_1042422:80:1" => ""
      servicegroupmembers_by_servername.3020376026: "" => "srv_ademoapp_1042422:80"
      servicegroupmembers_by_servername.542503859:  "srv_ademoapp_1042421:80:1" => ""

  ~ netscaler_sslcertkey.lbsslcertkey
      certkey:                                      "TLS_ademoapp_9b464bfc0efeb1fd" => "TLS_ademoapp_123456789abcdef"
      nodomaincheck:                                "false" => "true"

-/+ null_resource.upload_certificate (new resource required)
      id:                                           "4257515104869952010" => <computed> (forces new resource)
      triggers.%:                                   "1" => "1"
      triggers.cert_hash:                           "66b0e9969c211e5a824b504d092802e57d9f3367" => "80c5376a34359caf831c1bef1724bb296764d1cd" (forces new resource)
Plan: 1 to add, 3 to change, 1 to destroy.



null_resource.upload_certificate: Destroying... (ID: 4257515104869952010)
null_resource.upload_certificate: Destruction complete after 0s
null_resource.upload_certificate: Creating...
  triggers.%:         "" => "1"
  triggers.cert_hash: "" => "80c5376a34359caf831c1bef1724bb296764d1cd"
null_resource.upload_certificate: Provisioning with 'local-exec'...
null_resource.upload_certificate (local-exec): Executing: ["/bin/sh" "-c" "./cert_files.sh absent"]
null_resource.upload_certificate: Provisioning with 'local-exec'...
null_resource.upload_certificate (local-exec): Executing: ["/bin/sh" "-c" "./cert_files.sh present"]
null_resource.upload_certificate: Creation complete after 12s (ID: 8026929991478337533)
netscaler_sslcertkey.lbsslcertkey: Modifying... (ID: TLS_ademoapp_9b464bfc0efeb1fd)
  certkey:       "TLS_ademoapp_9b464bfc0efeb1fd" => "TLS_ademoapp_123456789abcdef"
  nodomaincheck: "false" => "true"
netscaler_sslcertkey.lbsslcertkey: Modifications complete after 0s (ID: TLS_ademoapp_9b464bfc0efeb1fd)

Error: Error applying plan:

1 error(s) occurred:

* netscaler_lbvserver.lbvserver: netscaler_lbvserver.lbvserver: diffs didn't match during apply. This is a bug with Terraform and should be reported as a GitHub Issue.

Please include the following information in your report:

    Terraform Version: 0.11.13
    Resource ID: netscaler_lbvserver.lbvserver
    Mismatch reason: attribute mismatch: sslcertkey
    Diff One (usually from plan): *terraform.InstanceDiff{mu:sync.Mutex{state:0, sema:0x0}, Attributes:map[string]*terraform.ResourceAttrDiff{"sslcertkey":*terraform.ResourceAttrDiff{Old:"TLS_ademoapp_9b464bfc0efeb1fd", New:"TLS_ademoapp_123456789abcdef", NewComputed:false, NewRemoved:false, NewExtra:interface {}(nil), RequiresNew:false, Sensitive:false, Type:0x0}}, Destroy:false, DestroyDeposed:false, DestroyTainted:false, Meta:map[string]interface {}(nil)}
    Diff Two (usually from apply): *terraform.InstanceDiff{mu:sync.Mutex{state:0, sema:0x0}, Attributes:map[string]*terraform.ResourceAttrDiff(nil), Destroy:false, DestroyDeposed:false, DestroyTainted:false, Meta:map[string]interface {}(nil)}

Also include as much context as you can about your config, state, and the steps you performed to trigger this error.

resource "netscaler_sslcertkey" "lbsslcertkey" {
  certkey = "TLS_${lookup(var.vip, "name")}"
  cert = "/nsconfig/ssl/${lookup(var.vip, "name")}.cert"
  key = "/nsconfig/ssl/${lookup(var.vip, "name")}.key"
  expirymonitor = "DISABLED"
  nodomaincheck = true
}

PS D:\code\terraform-test\terraform-provider-citrixadc\examples\content_switch_ssl_lb_mon> terraform init -plugin-dir C:\Users\username\AppData
\Roaming\terraform.d\plugins

Initializing the backend...

Initializing provider plugins...

Missing required providers.

The following provider constraints are not met by the currently-installed
provider plugins:

* citrixadc (any version)

Terraform can automatically download and install plugins to meet the given
constraints, but this step was skipped due to the use of -get-plugins=false
and/or -plugin-dir on the command line.

If automatic installation is not possible or desirable in your environment,
you may manually install plugins by downloading a suitable distribution package
and placing the plugin's executable file in one of the directories given in
by -plugin-dir on the command line, or in the following directory if custom
plugin directories are not set:
    terraform.d/plugins/windows_amd64


Error: missing provider "citrixadc"

2020-06-01T16:32:54.001-0500 [DEBUG] plugin.terraform-provider-citrixadc_v0.12.21: 2020/06/01 16:32:54 [DEBUG] go-nitro: response Status: 400 Bad Request
2020-06-01T16:32:54.001-0500 [DEBUG] plugin.terraform-provider-citrixadc_v0.12.21: 2020/06/01 16:32:54 [INFO] go-nitro: error = { "errorcode": 1094, "message": "Too few arguments", "severity": "ERROR" }

2018-08-02T08:20:02.3572881Z Terraform will perform the following actions:
2018-08-02T08:20:02.3580361Z 
2018-08-02T08:20:02.3642884Z   + netscaler_cspolicy.cspolicy_app[2]
2018-08-02T08:20:02.3658420Z       id:                                                            <computed>
2018-08-02T08:20:02.3673789Z       action:                                                        <computed>
2018-08-02T08:20:02.3691262Z       csvserver:                                                     "vip1"
2018-08-02T08:20:02.3709037Z       domain:                                                        <computed>
2018-08-02T08:20:02.3724084Z       logaction:                                                     <computed>
2018-08-02T08:20:02.3756748Z       newname:                                                       <computed>
2018-08-02T08:20:02.3774880Z       policyname:                                                    "iac-foo_server_policy_test"
2018-08-02T08:20:02.3884547Z       priority:                                                      "6003"
2018-08-02T08:20:02.3901476Z       rule:                                                          "HTTP.REQ.HEADER(\"host\").SET_TEXT_MODE(IGNORECASE).EQ(\"app.example.com\") && HTTP.REQ.URL.PATH.GET(1).SET_TEXT_MODE(IGNORECASE).CONTAINS(\"path\") && HTTP.REQ.URL.PATH.GET(2).SET_TEXT_MODE(IGNORECASE).CONTAINS(\"to\") && HTTP.REQ.HEADER(\"Cookie\").SET_TEXT_MODE(IGNORECASE).CONTAINS(\"foo=bar\")"
2018-08-02T08:20:02.3921307Z       targetlbvserver:                                               "iac-app_server_vslb_test"
2018-08-02T08:20:02.3939171Z       url:                                                           <computed>

"netscaler_cspolicy.cspolicy_app.2": {
	"type": "netscaler_cspolicy",
	"depends_on": [
		"netscaler_csvserver.cs-ssl"
	],
	"primary": {
		"id": "iac-foo_server_policy_test",
		"attributes": {
			"action": "",
			"csvserver": "vip1",
			"domain": "",
			"id": "iac-foo_server_policy_test",
			"logaction": "",
			"policyname": "iac-foo_server_policy_test",
			"priority": "6003",
			"rule": "HTTP.REQ.HEADER(\"host\").SET_TEXT_MODE(IGNORECASE).EQ(\"app.example.com\") \u0026\u0026 HTTP.REQ.URL.PATH.GET(1).SET_TEXT_MODE(IGNORECASE).CONTAINS(\"path\") \u0026\u0026 HTTP.REQ.URL.PATH.GET(2).SET_TEXT_MODE(IGNORECASE).CONTAINS(\"to\") \u0026\u0026 HTTP.REQ.HEADER(\"Cookie\").SET_TEXT_MODE(IGNORECASE).CONTAINS(\"foo=bar\")",
			"targetlbvserver": "iac-app_server_vslb_test",
			"url": ""
		},
		"meta": {
			"schema_version": "1"
		},
		"tainted": false
	},
	"deposed": [],
	"provider": "provider.netscaler"
},

Error: Error applying plan:

1 error(s) occurred:

* netscaler_gslbservice.blue_stack_service_1: 1 error(s) occurred:

* netscaler_gslbservice.blue_stack_service_1: Error updating gslbservice <app>-<env>-blue-stack-service-ssl-443

Terraform does not automatically rollback in the face of errors.
Instead, your Terraform state file has been partially updated with
any resources that successfully completed. Please address the error
above and apply again to incrementally change your infrastructure.

plugin.terraform-provider-netscaler_v0.11.10: 2019/07/24 13:09:16 [DEBUG] go-nitro: response Status: 599 Netscaler specific error
2019-07-24T13:09:16.105-0500 [DEBUG] plugin.terraform-provider-netscaler_v0.11.10: 2019/07/24 13:09:16 [INFO] go-nitro: error = { "errorcode": 278, "message": "Invalid argument [state]", "severity": "ERROR" }
2019/07/24 13:09:16 [TRACE] root: eval: *terraform.EvalWriteState
2019/07/24 13:09:16 [TRACE] root: eval: *terraform.EvalApplyProvisioners
2019/07/24 13:09:16 [TRACE] root: eval: *terraform.EvalIf
2019/07/24 13:09:16 [TRACE] root: eval: *terraform.EvalWriteState
2019/07/24 13:09:16 [TRACE] root: eval: *terraform.EvalWriteDiff
2019/07/24 13:09:16 [TRACE] root: eval: *terraform.EvalApplyPost
2019/07/24 13:09:16 [ERROR] root: eval: *terraform.EvalApplyPost, err: 1 error(s) occurred:

* netscaler_gslbservice.blue_stack_service_1: Error updating gslbservice <app>-<env>-blue-stack-service-ssl-443
2019/07/24 13:09:16 [ERROR] root: eval: *terraform.EvalSequence, err: 1 error(s) occurred:

* netscaler_gslbservice.blue_stack_service_1: Error updating gslbservice <app>-<env>-blue-stack-service-ssl-443

tfm plan
2019-07-24 13:30:05 [INFO] Git repository is at: ****
2019-07-24 13:30:05 [INFO] Validating terraform files ...
2019-07-24 13:30:06 [INFO] Verifying configured backend ...
2019-07-24 13:30:06 [INFO] Generating plan ...
  ~ netscaler_gslbservice.blue_stack_service_1
      state:   "DISABLED" => "ENABLED"

Failed to instantiate provider "registry.terraform.io/hashicorp/citrixadc" to obtain schema: fork/exec .terraform/plugins/registry.terraform.io/hashicorp/citrixadc/0.12.34/linux_amd64/terraform-provider-citrixadc_v0.12.34: no such file or directory

$ terraform init
Initializing modules...
Initializing the backend...
Initializing provider plugins...
- Using previously-installed hashicorp/citrixadc v0.12.34
- Using previously-installed hashicorp/vsphere v1.24.0
The following providers do not have any version constraints in configuration,
so the latest version was installed.
To prevent automatic upgrades to new major versions that may contain breaking
changes, we recommend adding version constraints in a required_providers block
in your configuration, with the constraint strings suggested below.
* hashicorp/citrixadc: version = "~> 0.12.34"
* hashicorp/vsphere: version = "~> 1.24.0"
Terraform has been successfully initialized!
You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.
If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.
$ terraform providers
Providers required by configuration:
.
├── provider[registry.terraform.io/hashicorp/citrixadc]
├── provider[registry.terraform.io/hashicorp/vsphere]
└── module.dsc_server
    └── provider[registry.terraform.io/hashicorp/vsphere]
Providers required by state:
    provider[registry.terraform.io/hashicorp/vsphere]
$ wget https://github.com/citrix/terraform-provider-citrixadc/releases/download/v0.12.34/terraform-provider-citrixadc_0.12.34_linux_amd64.tar.gz
Connecting to github.com (140.82.112.4:443)
Connecting to github-production-release-asset-2e65be.s3.amazonaws.com (52.217.13.228:443)
saving to 'terraform-provider-citrixadc_0.12.34_linux_amd64.tar.gz'
terraform-provider-c 100% |********************************| 8657k  0:00:00 ETA
'terraform-provider-citrixadc_0.12.34_linux_amd64.tar.gz' saved
$ tar -zxf terraform-provider-citrixadc_0.12.34_linux_amd64.tar.gz
$ rm README.md LICENSE terraform-provider-citrixadc_0.12.34_linux_amd64.tar.gz
$ cp terraform-provider-citrixadc .terraform/plugins/registry.terraform.io/hashicorp/citrixadc/0.12.34/linux_amd64/terraform-provider-citrixadc_v0.12.34
$ chmod 755 .terraform/plugins/registry.terraform.io/hashicorp/citrixadc/0.12.34/linux_amd64/terraform-provider-citrixadc_v0.12.34
$ terraform validate
Error: Could not load plugin
Plugin reinitialization required. Please run "terraform init".
Plugins are external binaries that Terraform uses to access and manipulate
resources. The configuration provided requires plugins which can't be located,
don't satisfy the version constraints, or are otherwise incompatible.
Terraform automatically discovers provider requirements from your
configuration, including providers used in child modules. To see the
requirements and constraints, run "terraform providers".
Failed to instantiate provider "registry.terraform.io/hashicorp/citrixadc" to
obtain schema: fork/exec
.terraform/plugins/registry.terraform.io/hashicorp/citrixadc/0.12.34/linux_amd64/terraform-provider-citrixadc_v0.12.34:
no such file or directory
ERROR: Job failed: exit code 1

CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build

* module.<app>_gslb.citrixadc_gslbservice.gslb_service: 1 error(s) occurred:

* citrixadc_gslbservice.gslb_service: [ERROR] go-nitro: Failed to create resource of type gslbservice, name=<app>-443-SSL, err=failed: 599 Netscaler specific error ({ "errorcode": 2170, "message": "Monitor not bound to service", "severity": "ERROR" })

add lb vserver <name> <serviceType> <ip> <port>

resource "netscaler_gslbservice" "gslb_service" {
  count          = "${length(var.service_name)}"
  ip             = "${element(var.service_ip, count.index)}"
  port           = "${lookup(var.ssl_config, "port")}"
  servicename    = "${format("%s-%s-%s-%s-%s", var.application,var.environment, element(var.service_name, count.index), lookup(var.ssl_config, "port"), lookup(var.ssl_config, "type"))}"
  servicetype    = "${lookup(var.ssl_config, "type")}"
  sitename       = "${lookup(local.netscaler_site, var.vsphere_environment)}"
  state          = "${element(var.service_state, count.index)}"
  monitornamesvc = "${var.service_monitor}"
}
resource "netscaler_gslbvserver" "gslb_vserver" {
  dnsrecordtype = "A"
  name          = "${format("%s-%s-gslb-%s-%s-%d", var.application,var.environment, lookup(var.ssl_config, "port"), lookup(var.ssl_config, "type"), count.index)}"
  servicetype   = "SSL"

  backupip = "${var.gslb_backup_ip}"

  domain {
    domainname = "${format("%s-%s.%s", var.application, var.environment, lookup(local.gslb_domain, var.vsphere_environment))}"
    ttl        = "60"
  }

  service {
    servicename = "${netscaler_gslbservice.gslb_service.0.servicename}"
    weight      = "100"
  }

  service {
    servicename = "${netscaler_gslbservice.gslb_service.1.servicename}"
    weight      = "100"
  }
}

service {
    count = "${length(netscaler_gslbservice.gslb_service.*.servicename)}"
    servicename = "${element(netscaler_gslbservice.gslb_service.*.servicename, count.index)}"
    weight      = "100"
}

resource "citrixadc_lbvserver" "netscaler_poc_lb" {
  name = "terraform_poc_lb"
  ipv46 = "x.x.x.x"
  port = 443
  servicetype = "SSL"
  lbmethod = "LEASTCONNECTION"
  sslcertkey = "cert-key-name"
  sslprofile = "ns_default_ssl_profile_secure_frontend"
  ciphers = ["Custom_CipherGroup_Name", "DEFAULT"]
}

resource "citrixadc_servicegroup" "netscaler_poc_service_group" {
  servicegroupname = "terraform_poc_service_group"
  servicetype = "HTTP"
  lbvservers = [citrixadc_lbvserver.netscaler_poc_lb.name]
  servicegroupmembers = ["x.x.x.x:80","x.x.x.x:80"]
}