Fix ACL sequence name key error

netascode · Apr 30, 2024 · c2ef892 · c2ef892
1 parent c5edf41
commit c2ef892
Showing 1 changed file with 4 additions and 5 deletions.
diff --git a/sdwan_localized_policies.tf b/sdwan_localized_policies.tf
@@ -183,9 +183,9 @@ resource "sdwan_ipv6_acl_policy_definition" "ipv6_acl_policy_definition" {
           type           = "destinationIpv6"
           destination_ip = s.match_criterias.destination_ip_prefix
         }],
-        try(s.match_criterias.destination_port, null) == null ? [] : [{
+        try(s.match_criterias.destination_ports, null) == null && try(s.match_criterias.destination_port_ranges, null) == null ? [] : [{
           type              = "destinationPort"
-          destination_ports = s.match_criterias.destination_port
+          destination_ports = join(" ", concat([for p in try(s.match_criterias.destination_ports, []) : p], [for r in try(s.match_criterias.destination_port_ranges, []) : "${r.from}-${r.to}"]))
         }],
         try(s.match_criterias.next_header, null) == null ? [] : [{
           type        = "nextHeader"
@@ -276,7 +276,7 @@ resource "sdwan_ipv4_device_acl_policy_definition" "ipv4_device_acl_policy_defin
   default_action = try(each.value.default_action, null)
   sequences = try(length(each.value.sequences) == 0, true) ? null : [for s in each.value.sequences : {
     id          = s.id
-    name        = try(s.sequenceName, "Device Access Control List")
+    name        = try(s.name, "Device Access Control List")
     base_action = s.base_action
     match_entries = !(can(s.match_criterias.destination_data_prefix_list) ||
       can(s.match_criterias.destination_ip_prefix) ||
@@ -325,7 +325,7 @@ resource "sdwan_ipv6_device_acl_policy_definition" "ipv6_device_acl_policy_defin
   default_action = try(each.value.default_action, null)
   sequences = try(length(each.value.sequences) == 0, true) ? null : [for s in each.value.sequences : {
     id          = s.id
-    name        = try(s.sequenceName, "Device Access Control List")
+    name        = try(s.name, "Device Access Control List")
     base_action = s.base_action
     match_entries = !(can(s.match_criterias.destination_data_prefix_list) ||
       can(s.match_criterias.destination_ip_prefix) ||
@@ -570,4 +570,3 @@ resource "sdwan_localized_policy" "localized_policy" {
     }]]
   ])
 }
-