lb_listener_rule not allowing SourceIpConfig with source-ip

[paihu]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Terraform Version

Terraform v0.11.13
+ provider.aws v2.13.0

Affected Resource(s)

• aws_lb_listener_rule

Terraform Configuration Files

resource "aws_lb_listener_rule" "rule_allow" {
  listener_arn = "${var.alb_listener_arn}"

  priority = 1

  action {
    type             = "forward"
    target_group_arn = "${var.target_group_arn}"
  }

  condition {
    field  = "path-pattern"
    values = ["/path/*"]
  }

  condition {
    field = "source-ip"

    source_ip_config = {
      values = [
        "${var.segment_01}",
        "${var.segment_02}",
        "${var.segment_03}",
        "${var.segment_04}",
      ]
    }
  }
}

Expected Behavior

field source-ip allow source_ip_config

Actual Behavior

Error: aws_lb_listener_rule.rule_allow: condition.1.values: attribute supports 1 item maximum, config has 4 declared

Steps to Reproduce

1. terraform apply

Important Factoids

References

• https://github.com/terraform-providers/terraform-provider-aws/blob/aa6921d7ea17d6a4b91c9b34a894bc77162729f8/aws/resource_aws_lb_listener_rule.go#L295

• run aws elbv2 describe-rules --listener-arn listener-arn

{
    "Rules": [
        {
            "Priority": "1",
            "Conditions": [
                {
                    "SourceIpConfig": {
                        "Values": [
                            "9.9.9.9/32",
                            "1.1.1.1/32",
                            "5.5.5.5/32"
                        ]
                    },
                    "Field": "source-ip"
                }
            ],
            "RuleArn": "arn:aws:elasticloadbalancing:... ",
            "IsDefault": false,
            "Actions": [
                {
                    "Type": "fixed-response",
                    "Order": 1,
                    "FixedResponseConfig": {
                        "ContentType": "text/plain",
                        "MessageBody": "permission denied",
                        "StatusCode": "403"
                    }
                }
            ]
        },
        {
            "Priority": "default",
            "Conditions": [],
            "RuleArn": "arn:aws:elasticloadbalancing:...",
            "IsDefault": true,
            "Actions": [
                {
                    "TargetGroupArn": "arn:aws:elasticloadbalancing:...",
                    "Type": "forward",
                    "Order": 1
                }
            ]
        }
    ]
}

• #0000

[paihu]

This issue fixed by #8268 .
Thank you.

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks!