Closed domel138 closed 4 years ago
i think i found the issue it seems that: ansible_collections/paloaltonetworks/panos/plugins/modules/panos_security_rule.py has wrong group_profile definition it is set to dict() instead of dict(type=list) - after change it started to work
i've noticed also other profile actions has that issue - maybe it has change to list after PANOS9 release?
changing below in panos_security_rule.py: group_profile=dict(), antivirus=dict(), spyware=dict(), vulnerability=dict(), url_filtering=dict(), file_blocking=dict(), wildfire_analysis=dict(), data_filtering=dict(),
to: group_profile=dict(type='list', default=None), antivirus=dict(type='list', default=None), spyware=dict(type='list', default=None), vulnerability=dict(type='list', default=None), url_filtering=dict(type='list', default=None), file_blocking=dict(type='list', default=None), wildfire_analysis=dict(type='list', default=None), data_filtering=dict(type='list', default=None),
seems to solve the issue for Panorama panos9.0.8
All of those elements should be strings, as you can't assign multiple profiles of the same type to a rule.
Describe the bug
When im trying to update a rule with panos_security_rule module:
Expected behavior
group_profile parameter should work once list is provided as its expected - otherwise updating or creating policy fails.
Current behavior
Im getting below error:
group_profile is expecting list (which im passing to it) however something is converting that list to string type among the way which causing module to fail to update the security rule.
If i disable the group_profile parameter it works but it would be nice to have that functionality working - every other parameter is working fine.
Possible solution
Steps to reproduce
Screenshots
Context
Your Environment