ec2_group fails if security group already exists

Archives Ansible Project
1

Hi

I am having the following problem

If I try to run the following Sec_Rule it works ok, but if I re-run it it fails
`

ec2_security_groups_test:

  • sg_name: test-grup
    sg_description: test-group
    vpc_id: “vpc-XXXXXX”
    region: “{{ region }}”
    sg_rules:
  • proto: 50
    from_port: -1
    to_port: -1
    cidr_ip: 54.67.116.112/32
  • proto: 50
    from_port: -1
    to_port: -1
    cidr_ip: 54.183.92.78/32
  • proto: 50
    from_port: -1
    to_port: -1
    group_name: vpn-ap-northeast-1-production
    `

I have tried a number of different options : -1/all… etc… but it always fails

if I use TCP/UDP it seems to work no problem, but I need to define that sort of PROTOCOL…

I am using ansible 1.7.1

Any workaround for this??

Thanks!

2

added a pr which migh fix this https://github.com/ansible/ansible-modules-core/pull/1472 , maybe you can give it a try.

3

Hi

This patch seems to have fixed the problem.
I am working on some more rules topping up and they seem to get through all right.
So far as I am using protocols 50 and 51 and ALL for all ports it works.

Thanks you so much for helping out on this