Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1916474

Summary: openstack.cloud.security_group_rule: ESP not supported
Product: Red Hat OpenStack Reporter: Mark Gray <mark.d.gray>
Component: ansible-collections-openstackAssignee: Sagi Shnaidman <sshnaidm>
Status: CLOSED CURRENTRELEASE QA Contact: Sagi Shnaidman <sshnaidm>
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: anusaxen, mbultel, mburns, sshnaidm, whayutin
Target Milestone: ---Keywords: Triaged
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ansible-collections-openstack-1.3.1-2.20210406085021.18b03e1.el8ost Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 2128616 (view as bug list) Environment:
Last Closed: 2024-12-05 13:50:16 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Mark Gray 2021-01-14 20:41:29 UTC
Description of problem:

When attempting to run a task of the form:

  - name: 'Create master-sg rule "IPsec ESP"'
    os_security_group_rule:
      security_group: "{{ os_sg_master }}"
      protocol: esp
      remote_ip_prefix: "{{ os_subnet_range }}"

The following error is displayed:

 TASK [Create master-sg rule "IPsec ESP"] ***************************************
fatal: [localhost]: FAILED! => {"changed": false, "msg": "value of protocol must be one of: None, tcp, udp, icmp, 112, got: esp"} 

How reproducible:
Always

Steps to Reproduce:
1.As above
2.
3.

Actual results:
 TASK [Create master-sg rule "IPsec ESP"] ***************************************
fatal: [localhost]: FAILED! => {"changed": false, "msg": "value of protocol must be one of: None, tcp, udp, icmp, 112, got: esp"} 


Expected results:
Successful completion of task
Additional info:
ESP is a supported protocol in Openstack security groups.

Comment 1 Sagi Shnaidman 2021-01-15 17:37:40 UTC
Should be solved in upstream patch:

Remove protocols choice in security rules  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/771055

Comment 6 Sagi Shnaidman 2021-02-16 21:06:34 UTC
Version 1.3.0 is released with the fix.