Add ip_tags to ignore_changes on appgwpip public IP to prevent forced replacement

Copilot · marrobi · web-flow · commit 713eedd274d8 · 2026-05-22T21:23:23.000Z
Agent-Logs-Url: https://github.com/microsoft/AzureTRE/sessions/de009e2c-bd9e-4c65-a86b-a1939648a2e8 Co-authored-by: marrobi <17089773+marrobi@users.noreply.github.com>
diff --git a/core/terraform/appgateway/appgateway.tf b/core/terraform/appgateway/appgateway.tf
@@ -7,7 +7,7 @@ resource "azurerm_public_ip" "appgwpip" {
   domain_name_label   = var.tre_id
   tags                = local.tre_core_tags
 
-  lifecycle { ignore_changes = [tags, zones] }
+  lifecycle { ignore_changes = [tags, zones, ip_tags] }
 }
 
 resource "azurerm_user_assigned_identity" "agw_id" {

Original file line number	Diff line number	Diff line change
`@@ -7,7 +7,7 @@ resource "azurerm_public_ip" "appgwpip" {`
`7`	`7`	`domain_name_label = var.tre_id`
`8`	`8`	`tags = local.tre_core_tags`
`9`	`9`
`10`		`- lifecycle { ignore_changes = [tags, zones] }`
	`10`	`+ lifecycle { ignore_changes = [tags, zones, ip_tags] }`
`11`	`11`	`}`
`12`	`12`
`13`	`13`	`resource "azurerm_user_assigned_identity" "agw_id" {`