Terraform refresh misses incorrect network security group associations in azurerm_subnet

[cchildress]

Terraform Version

0.9.6

Affected Resource(s)

• azurerm_subnet
• azurerm_network_security_group

Terraform Configuration Files

resource "azurerm_subnet" "test_snet" {
  name = "TESTERNET"
  address_prefix = "192.51.100.0/24"
  resource_group_name = "${azurerm_resource_group.foo.name}"
  virtual_network_name = "${azurerm_virtual_network.bar.name}"
  network_security_group_id = "${azurerm_network_security_group.some_nsec_group.id}"

Debug Output

Gist

Expected Behavior

If the network security group is not associated with the subnet Terraform should show this as a pending change in the plan.

Actual Behavior

Terraform reports no changes are needed when running a plan

Steps to Reproduce

1. Use Terraform to create a subnet with an associated network security group.
2. Go into the AzureRM portal and set the network security group for the subnet to none.
3. Run terraform plan and it reports that no changes are needed.

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. If you feel I made an error 🤖 🙉 , please reach out to my human friends 👉 hashibot-feedback@hashicorp.com. Thanks!