Point to Point Security Group configuration results in circular dependency

[wazoo]

When configuring two SG as follows:

resource "aws_security_group" "sgr_test_lb" {
  name        = "sgr-test-lb"
  vpc_id      = "<vpc>"
  description = "SG For Test LB"
  ingress {
    from_port       = "80"
    to_port         = "80"
    protocol        = "http"
    security_groups = ["${aws_security_group.sgr_test_nodes.id}"]
  }
  egress {
    from_port       = "443"
    to_port         = "443"
    protocol        = "tcp"
    cidr_blocks     =  ["0.0.0.0/0"]
  }
}
resource "aws_security_group" "sgr_test_nodes" {
  name = "sgr-test-nodes"
  description = "SG For Test Nodes"
  vpc_id      = "<vpc>"
  ingress {
    from_port       = "80"
    to_port         = "80"
    protocol        = "http"
    security_groups = ["${aws_security_group.sgr_test_lb.id}"]
  }
  egress  {
    from_port       = "80"
    to_port         = "80"
    protocol        = "http"
    security_groups = ["${aws_security_group.sgr_test_lb.id}"]
  }
}

This results in a circular dependency in the graph:

Error configuring: The dependency graph is not valid:

* Cycle: aws_security_group.sgr_test_nodes -> aws_security_group.sgr_test_lb

I understand why this is happening from a graph perspective but this is a pretty common configuration and I would think that TF could figure out to create both groups first then adjust their rules. Thoughts?

[xcoderzach]

I think this is a dupe of #539.

I got around this by specifying the ingress and egress of one of my security groups as a cidr block to break the cycle, which is an unfortunate hack.

[mitchellh]

Agreed, dup of #539.

[wazoo]

Ah damn, I tried to search but I couldn't figure out what to call it. I like the solution in that bug, awesome work guys.

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.