Skip to content

provider/aws: Revoke default ipv6 egress rule for aws_security_group#15075

Merged
stack72 merged 1 commit intomasterfrom
b-aws-sg-disable-default-ipv6-egress-14522
Jun 5, 2017
Merged

provider/aws: Revoke default ipv6 egress rule for aws_security_group#15075
stack72 merged 1 commit intomasterfrom
b-aws-sg-disable-default-ipv6-egress-14522

Conversation

@stack72
Copy link
Copy Markdown
Contributor

@stack72 stack72 commented Jun 5, 2017

Fixes: #14522

To follow similar work in IPv4, we are now going to revoke the default
IPv6 egress rule from an empty AWS security group

% make testacc TEST=./builtin/providers/aws/ TESTARGS='-run=TestAccAWSSecurityGroup_ipv4andipv6Egress'
==> Checking that code complies with gofmt requirements...
go generate $(go list ./... | grep -v /terraform/vendor/)
2017/06/05 14:01:52 Generated command/internal_plugin_list.go
TF_ACC=1 go test ./builtin/providers/aws/ -v -run=TestAccAWSSecurityGroup_ipv4andipv6Egress -timeout 120m
=== RUN   TestAccAWSSecurityGroup_ipv4andipv6Egress
--- PASS: TestAccAWSSecurityGroup_ipv4andipv6Egress (63.39s)
PASS
ok  	github.com/hashicorp/terraform/builtin/providers/aws	63.423s

Fixes: #14522

To follow similar work in IPv4, we are now going to revoke the default
IPv6 egress rule from an empty AWS security group

```
% make testacc TEST=./builtin/providers/aws/ TESTARGS='-run=TestAccAWSSecurityGroup_ipv4andipv6Egress'
==> Checking that code complies with gofmt requirements...
go generate $(go list ./... | grep -v /terraform/vendor/)
2017/06/05 14:01:52 Generated command/internal_plugin_list.go
TF_ACC=1 go test ./builtin/providers/aws/ -v -run=TestAccAWSSecurityGroup_ipv4andipv6Egress -timeout 120m
=== RUN   TestAccAWSSecurityGroup_ipv4andipv6Egress
--- PASS: TestAccAWSSecurityGroup_ipv4andipv6Egress (63.39s)
PASS
ok  	github.com/hashicorp/terraform/builtin/providers/aws	63.423s
```
@stack72 stack72 force-pushed the b-aws-sg-disable-default-ipv6-egress-14522 branch from e6b4623 to 50c2135 Compare June 5, 2017 11:11
Copy link
Copy Markdown
Contributor

@tombuildsstuff tombuildsstuff left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM :)

@stack72 stack72 merged commit df11150 into master Jun 5, 2017
@stack72 stack72 deleted the b-aws-sg-disable-default-ipv6-egress-14522 branch June 5, 2017 21:53
@zzq889
Copy link
Copy Markdown

zzq889 commented Aug 1, 2017

AWS region cn-north-1 has no IPv6 which may cause the revoke error. Is it possible to provide default property like revoke_default_ipv6 to allow us disable this behavior?

@ghost
Copy link
Copy Markdown

ghost commented Apr 8, 2020

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

@ghost ghost locked and limited conversation to collaborators Apr 8, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Cannot create aws_security group with both IPv4 and IPV6 open egress

3 participants