Refresh doesn't pick up a cloudflare_zero_trust_tunnel_cloudflared_route that was deleted out of band

[paulcdejean]

Confirmation

• This is a bug with an existing resource and is not a feature request or enhancement. Feature requests should be submitted with Cloudflare Support or your account team.
• I have searched the issue tracker and my issue isn't already found.
• I have replicated my issue using the latest version of the provider and it is still present.

Terraform and Cloudflare provider version

OpenTofu v1.11.2
on darwin_arm64

• provider registry.opentofu.org/cloudflare/cloudflare v5.15.0
• provider registry.opentofu.org/hashicorp/aws v6.27.0
• provider registry.opentofu.org/hashicorp/random v3.7.

Affected resource(s)

cloudflare_zero_trust_tunnel_cloudflared_route

Terraform configuration files

resource "cloudflare_zero_trust_tunnel_cloudflared_route" "vpc_ipv6" {
  account_id         = local.workspace.cf_account_id
  network            = data.aws_vpc.main.ipv6_cidr_block
  tunnel_id          = cloudflare_zero_trust_tunnel_cloudflared.lightning.id
  comment            = "lightning-${tofu.workspace} vpc ipv6"
  virtual_network_id = data.cloudflare_zero_trust_tunnel_cloudflared_virtual_network.default.id
}

Link to debug output

Nope, debug output can leak sensitive state info

Panic output

N/A

Expected output

Tofu picks up that the resource was deleted out of band, when performing a refresh

Actual output

Tofu thinks the route still exists even though it doesn't anymore

Steps to reproduce

Make a cloudflare_zero_trust_tunnel_cloudflared_route via terraform

Delete that route via the cloudflare web console

Do a tofu plan, realize that tofu thinks the route still exists

Additional factoids

No response

References

No response