oci-ansible-collection icon indicating copy to clipboard operation
oci-ansible-collection copied to clipboard

oci_network_firewall_policy does not create security_rules, address_lists, etc.

Open jeliker opened this issue 10 months ago • 2 comments

Issue Report

Creating Network Firewall Policy with address_lists and security_rules but neither are created (only the policy itself).

Expected behavior Specifying network firewall policy with address_lists and security_rules attributes so expect to have new policy containing both created. Watching with debug output and I see the attributes for each recognized and shown but only the API call for CreateNetworkFirewallPolicy occurs. There should be subsequent calls to CreateAddressList and CreateSecurityRule which do not happen.

Environment

  • OS version: macOS 14.3.1

  • Ansible version: Python 3.11.4

  • OCI Python SDK version: 2.120.0

  • OCI Ansible Modules version: oracle.oci 4.43.0

Ansible playbook to reproduce the issue

  - name: Create NFW policy
    oracle.oci.oci_network_firewall_policy:
      compartment_id: "{{ compartment_id }}"
      display_name: policy_from_ansible
      ip_address_lists:
        "any_all":
          - 0.0.0.0/0
        "private_cidrs":
          - 10.1.0.0/16
          - 10.2.0.0/15

      security_rules:
        - name: allow_private
          condition:
            sources:
              - any_all
            destinations:
              - private_cidrs
          action: ALLOW
        - name: deny_all
          condition:
            sources:
              - any_all
            destinations:
              - any_all
          action: DROP

jeliker avatar Apr 01 '24 18:04 jeliker

@jeliker Can you enable debug logs using https://docs.oracle.com/en-us/iaas/tools/oci-ansible-collection/latest/guides/logging-guide.html document and share debug logs with us.

dineshsuthar786 avatar Apr 02 '24 21:04 dineshsuthar786

debug.txt

FYI @dineshsuthar786

jeliker avatar Apr 02 '24 22:04 jeliker