@@ -443,24 +443,28 @@ func (s *Service) reconcileGroupRules(desired *securityGroupSpec, observed *grou
443443 }
444444 }
445445
446- s .scope .Logger ().V (4 ).Info ("Deleting rules not needed anymore for group" , "name" , observed .Name , "amount" , len (rulesToDelete ))
447- for _ , rule := range rulesToDelete {
448- s .scope .Logger ().V (6 ).Info ("Deleting rule" , "ID" , rule , "name" , observed .Name )
449- err := s .client .DeleteSecGroupRule (rule )
450- if err != nil {
451- return err
446+ if len (rulesToDelete ) > 0 {
447+ s .scope .Logger ().V (4 ).Info ("Deleting rules not needed anymore for group" , "name" , observed .Name , "amount" , len (rulesToDelete ))
448+ for _ , rule := range rulesToDelete {
449+ s .scope .Logger ().V (6 ).Info ("Deleting rule" , "ID" , rule , "name" , observed .Name )
450+ err := s .client .DeleteSecGroupRule (rule )
451+ if err != nil {
452+ return err
453+ }
452454 }
453455 }
454456
455- s .scope .Logger ().V (4 ).Info ("Creating new rules needed for group" , "name" , observed .Name , "amount" , len (rulesToCreate ))
456- for _ , rule := range rulesToCreate {
457- r := rule
458- if r .RemoteGroupID == remoteGroupIDSelf {
459- r .RemoteGroupID = observed .ID
460- }
461- err := s .createRule (observed .ID , r )
462- if err != nil {
463- return err
457+ if len (rulesToCreate ) > 0 {
458+ s .scope .Logger ().V (4 ).Info ("Creating new rules needed for group" , "name" , observed .Name , "amount" , len (rulesToCreate ))
459+ for _ , rule := range rulesToCreate {
460+ r := rule
461+ if r .RemoteGroupID == remoteGroupIDSelf {
462+ r .RemoteGroupID = observed .ID
463+ }
464+ err := s .createRule (observed .ID , r )
465+ if err != nil {
466+ return err
467+ }
464468 }
465469 }
466470
0 commit comments