first-apply.sh

$ terraform apply --input=false
cloudstack_vpc.prod: Creating...
  cidr:         "" => "10.3.0.0/16"
  display_text: "" => "<computed>"
  name:         "" => "prod"
  vpc_offering: "" => "Default VPC Offering"
  zone:         "" => "Digipost advanced"



cloudstack_vpc.prod: Creation complete
cloudstack_network.proddmz: Creating...
  cidr:             "" => "10.3.0.0/24"
  display_text:     "" => "<computed>"
  name:             "" => "proddmz"
  network_offering: "" => "DefaultIsolatedNetworkOfferingForVpcNetworksNoLB-guest"
  vpc:              "" => "46c1be94-3e22-4dde-b636-2779e5121861"
  zone:             "" => "Digipost advanced"
cloudstack_network.proddmz: Creation complete
cloudstack_instance.lbdmz: Creating...
  display_name:     "" => "<computed>"
  expunge:          "" => "1"
  ipaddress:        "" => "<computed>"
  name:             "" => "larstobilb0"
  network:          "" => "23b402d8-59e4-4257-a8eb-0cebdca6191b"
  service_offering: "" => "Small Instance"
  template:         "" => "centos-7-1440502449"
  zone:             "" => "Digipost advanced"
cloudstack_instance.lbdmz: Creation complete

Apply complete! Resources: 3 added, 0 changed, 0 destroyed.

The state of your infrastructure has been saved to the path
below. This state is required to modify and destroy your
infrastructure, so keep it safe. To inspect the complete state
use the `terraform show` command.

State path: terraform.tfstate

first-plan-after-first-apply.sh

$ terraform plan --input=false
Refreshing Terraform state prior to plan...

cloudstack_vpc.prod: Refreshing state... (ID: 46c1be94-3e22-4dde-b636-2779e5121861)
cloudstack_network.proddmz: Refreshing state... (ID: 23b402d8-59e4-4257-a8eb-0cebdca6191b)
cloudstack_instance.lbdmz: Refreshing state... (ID: 52888cd3-f8da-452a-9733-4a8987beb2d5)

The Terraform execution plan has been generated and is shown below.
Resources are shown in alphabetical order for quick scanning. Green resources
will be created (or destroyed and then created if an existing resource
exists), yellow resources are being changed in-place, and red resources
will be destroyed.

Note: You didn't specify an "-out" parameter to save this plan, so when
"apply" is called, Terraform can't guarantee this is what will execute.

-/+ cloudstack_instance.lbdmz
    display_name:     "larstobilb0" => "<computed>"
    expunge:          "true" => "1"
    ipaddress:        "10.3.0.229" => "<computed>"
    name:             "larstobilb0" => "larstobilb0"
    network:          "23b402d8-59e4-4257-a8eb-0cebdca6191b" => "${cloudstack_network.proddmz.id}" (forces new resource)
    service_offering: "Small Instance" => "Small Instance"
    template:         "centos-7-1440502449" => "centos-7-1440502449"
    zone:             "Digipost advanced" => "Digipost advanced"

-/+ cloudstack_network.proddmz
    cidr:             "10.3.0.0/24" => "10.3.0.0/24"
    display_text:     "proddmz" => "<computed>"
    name:             "proddmz" => "proddmz"
    network_offering: "DefaultIsolatedNetworkOfferingForVpcNetworksNoLB-guest" => "DefaultIsolatedNetworkOfferingForVpcNetworksNoLB-guest"
    vpc:              "46c1be94-3e22-4dde-b636-2779e5121861" => "${cloudstack_vpc.prod.id}" (forces new resource)
    zone:             "Digipost advanced" => "Digipost advanced"

-/+ cloudstack_vpc.prod
    cidr:         "10.3.0.0/16" => "10.3.0.0/16"
    display_text: "prod" => "<computed>"
    name:         "prod" => "prod"
    vpc_offering: "Default VPC offering" => "Default VPC Offering" (forces new resource)
    zone:         "Digipost advanced" => "Digipost advanced"


Plan: 0 to add, 3 to change, 0 to destroy.

resources.tf

resource "cloudstack_vpc" "prod" {
    name = "prod"
    cidr = "10.3.0.0/16"
    vpc_offering = "Default VPC Offering"
    zone = "${var.default_zone}"
}

resource "cloudstack_network" "proddmz" {
    name = "proddmz"
    vpc = "${cloudstack_vpc.prod.id}"
    cidr = "10.3.0.0/24"
    network_offering = "${var.default_networkoffering}"
    zone = "${var.default_zone}"
}

resource "cloudstack_instance" "lbdmz" {
    count            = "${var.lb_count}"
    name             = "${var.resource_prefix}lb${count.index}"
    service_offering = "${var.default_service_offering}"
    network          = "${cloudstack_network.proddmz.id}"
    template         = "${var.default_template}"
    zone             = "${var.default_zone}"
    expunge          = true
    connection {
        bastion_host = "${var.connection_ssh_bastion_host}"
        bastion_user = "${var.connection_ssh_bastion_user}"
    }
}