Puppet: The End of Reason

aws_security_group.rb

Puppet::Type.newtype(:aws_security_group) do
  @doc = "Manage AWS Security Groups"
  newparam(:name)
  ensurable
  newproperty(:description)
  newproperty(:vpc)
  autorequire(:aws_vpc) do
    self[:vpc]
  end
  newproperty(:tags)
  newproperty(:authorize_ingress) do
  end
  newproperty(:authorize_egress) do
  end
end

output.rb

# running apply noop

#Notice:
#  .. /Aws_security_group[default]/authorize_ingress: 
# current_value 
{"protocol"=>"any", "ports"=>[], "sources"=>["0.0.0.0/0"]},
#should be 
{"protocol"=>"any", "ports"=>[], "sources"=>["default"]} 
# HI, where is my second array element pretty please? 

# Ok, what if we do this?
newproperty(:authorize_ingress,  :array_matching => :all) do
end

# Notice: 
# .../Aws_security_group[default]/authorize_ingress: 
# current_value 
{"protocol"=>"any", "ports"=>[], "sources"=>["0.0.0.0/0"]},
#, should be
{"protocol"=>"any", "ports"=>[], "sources"=>["default"]} {"protocol"=>"tcp", "ports"=>"22", "sources"=>["0.0.0.0/0"]} 

# WTF is this? Why isn't it an Array? Where are the []s and the separating comma?
# Is it actually a string? (btw, yes, yes it is)
# Why?
# WHY PUPPET, WHY?

whatever.pp

aws_security_group {'default': 
		ensure => $ensure,
		vpc => "$name-vpc",
		authorize_ingress => [
			{
				protocol => 'any',
				ports => [],
				sources => ['default']
			},
			{
				protocol => 'tcp',
				ports => 22,
				sources => ['0.0.0.0/0'],
			},
		],
	}