AWS VPC Security Group loses all ingresses

[mahnve]

We have a few security groups that always lose all ingress information when running apply

Definition:

resource "aws_security_group" "internal_web" {
  name="internal-web-sg"
  description="internally open to http and https"
  vpc_id="${aws_vpc.dryleaf.id}"

  ingress {
    from_port=80
    to_port=80
    protocol="tcp"
    cidr_block=["10.20.0.0/16"]
  }

  tags {
    app="dryleaf"
    Name="dryleaf-internal-web-sg"
  }
}

state:

"aws_security_group.internal_web": {
                    "type": "aws_security_group",
                    "depends_on": [
                        "aws_vpc.dryleaf"
                    ],
                    "primary": {
                        "id": "<id>",
                        "attributes": {
                            "description": "internally open to http and https",
                            "id": "<id>",
                            "ingress.#": "0",
                            "name": "internal-web-sg",
                            "owner_id": "<id>",
                            "tags.Name": "dryleaf-internal-web-sg",
                            "tags.app": "dryleaf",
                            "vpc_id": "<id>"
                        }
                    }
                },

Running apply outputs the following;

~ aws_security_group.internal_web
    ingress.#:                   "0" => "1"
    ingress.0.cidr_blocks.#:     "0" => "0"
    ingress.0.from_port:         "" => "80"
    ingress.0.protocol:          "" => "tcp"
    ingress.0.security_groups.#: "0" => "0"
    ingress.0.self:              "" => "0"
    ingress.0.to_port:           "" => "80"

However, after running apply, the security group has no ingresses and the state file remains the same.

[pmoust]

Try v0.3.6? (or master if you are up to it)

[mahnve]

Thanks - how would I get 0.3.6? I can't see such a tag in the repo.

[pmoust]

Hm, you are right, I thought the guys had released it.
Try building upstream/master I guess.

[mahnve]

Cool, thanks for the help.

[mitchellh]

Ouch! This sounds not good. Tagged to take a look.

[mitchellh]

Reproduced as of master right now.

[mitchellh]

Hah, cidr_block should be cidr_blocks. I'm going to keep this bug open so that we can validate better.

[mahnve]

Awesome, thanks.

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.