Provider returns both IPv4 and IPv6 IPs as an array causing terraform security group resource to fail

[davidg-sainsbury]

Terraform Version

Terraform v0.15.4

Affected Resource(s)

terraform resource "aws_security_group"

Terraform Configuration Files

module..

data "github_ip_ranges" "gha_runner_scaling_api" {}

resource "aws_security_group" "gha_runner_scaling_api" {
  name                   = "gha-runners_api"
  description            = "Allow traffic to GHA Scaling runner API Gateway"
  vpc_id                 = var.vpc_id
  revoke_rules_on_delete = true

  ingress {
    from_port   = 443
    to_port     = 443
    protocol    = "tcp"
    cidr_blocks = data.github_ip_ranges.gha_runner_scaling_api.hooks
    description = "HTTPS access from Github API"
  }

plan...
resource "aws_security_group" "gha_runner_scaling_api" {
        id                     = "sg-0415fc1dd10896cd0"
      ~ ingress                = [
          + {
              + cidr_blocks      = [
                  + "192.30.252.0/22",
                  + "140.82.112.0/20",
                  + "143.55.64.0/20",
                  + "185.199.108.0/22",
                  + "2a0a:a440::/29",
                  + "2606:50c0::/32",
                ]
              + description      = "HTTPS access from Github API"
              + from_port        = 443
              + ipv6_cidr_blocks = []
              + prefix_list_ids  = []
              + protocol         = "tcp"
              + security_groups  = []
              + self             = false
              + to_port          = 443
            }

error..

Error authorizing security group ingress rules: InvalidParameterValue: CIDR block 2a0a:a440::/29 is malformed

Expected Behavior

The provider to handle separately both IPV4 and IPV6 addresses.

Actual Behavior

Error authorizing security group ingress rules: InvalidParameterValue: CIDR block 2a0a:a440::/29 is malformed

Steps to Reproduce

Please list the steps required to reproduce the issue, for example:

1. terraform apply

[mattes-mms]

H, when there will be a fix for this pls.? Thx...

[martinmosegaard]

Perhaps you can do something like this as a workaround:

cidr_blocks      = [for block in data.github_ip_ranges.gha_runner_scaling_api.hooks : block if length(regexall("::", block)) == 0]
ipv6_cidr_blocks = [for block in data.github_ip_ranges.gha_runner_scaling_api.hooks : block if length(regexall("::", block)) > 0]

[jiba21]

This issue is also in other versions. I'm using terraform 0.13