https://pulumi.com
Join Slack
This message was deleted.
# general
s
This message was deleted.
m
was the update modifying an existing security group?
f
Yes. I changed the ingress rule.
m
Did it use "-1" as its protocol before?
f
Yes
m
kk, let me see if I can repro this
possible that we're pulling that in as a default for some reason
do you also have 
aws.ec2.SecurityGroupRule
resources, or does the 
aws.ec2.SecurityGroup
define all of its rules inline?
f
All rules inline.
m
just for kicks, can you try "TCP" instead of "tcp"?
f
Added the ingress rule via AWS console then running 
pulumi refresh
followed by 
pulumi update
fixes it.
Lemme see if I can get into that state again.
m
That would be great. So far I've been unable to repro that as well.
Which versions of the packages are you working with?
f
Copy code
"dependencies": {
        "@pulumi/pulumi": "0.16.6",
        "@pulumi/aws": "0.16.2",
        "@pulumi/aws-infra": "0.16.2",
        "@pulumi/cloud-aws": "0.16.0",
        "@pulumi/cloud": "0.16.0"
    }
Simply changing from tcp to -1 to tcp does not do it.
m
Hm. That's quite odd.
f
I think I got it. Go from
Copy code
{
    protocol: "tcp",
        fromPort: 80,
    toPort: 80,
    cidrBlocks: ["0.0.0.0/0"]
}
to
Copy code
{
    protocol: "-1",
        fromPort: 80,
    toPort: 80,
    cidrBlocks: ["0.0.0.0/0"]
}
to
Copy code
{
    protocol: "-1",
        fromPort: 0,
    toPort: 0,
    cidrBlocks: ["0.0.0.0/0"]
}
m
That second configuration should not be allowed
Are you able to successfully run a 
pulumi update
with
Copy code
{
    protocol: "-1",
        fromPort: 80,
    toPort: 80,
    cidrBlocks: ["0.0.0.0/0"]
}
?
f
Right. It failed deployment. But then going from the second to third resulted in the above exception.
m
okay, I can repro this
hoo boy, that is weird
can you file an issue in pulumi-aws?
my guess is that there's some bad interaction with terraform here
good to know that a 
refresh
unblocked you
f
I've somehow managed to hit this multiple times. Some combo of refresh and/or stack export | import usually fixes things.
m
cc @stocky-spoon-28903
f
Open in Slack
PreviousNext
Powered by

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Powered by