using rule_desc with ec2_group will always clear the rules on the first run

96 views
Skip to first unread message

Barry Kaplan

unread,
Oct 8, 2018, 6:11:26 PM10/8/18
to Ansible Project
I just recently discovered `rule_desc`. So upon adding the description to some plays I am seeing the behavior that the first time `ec2_group` is executed with the rule description, all rules (or at least the rules with the descriptions) are removed. Only on the second run of `ec2_groups` are the rules with the descriptions created. Subsequent runs are then unchanged.

I still have some other experiments to run to see the scope of this. Like what happens if the description is changed for a rule that already has a description.

In the meantime, has anybody else seen this.

ansible versions: 2.6.4, 2.6.5

Barry Kaplan

unread,
Oct 8, 2018, 10:00:51 PM10/8/18
to Ansible Project
I find that when I change a rule_desc I get an error

An error occurred (InvalidPermission.NotFound) when calling the RevokeSecurityGroupIngress operation: The specified rule does not exist in this security group."

Immediately rerunning the play and ec2_group shows no change. So the previous execution actually changed the rule description before crashing.
Reply all
Reply to author
Forward
0 new messages