okd/roles/openshift_aws/tasks/security_group.yml

---
- name: Fetch the VPC for the vpc.id
  ec2_vpc_net_facts:
    region: "{{ openshift_aws_region }}"
    filters:
      "tag:Name": "{{ openshift_aws_clusterid }}"
  register: vpcout

- include_tasks: security_group_create.yml
  vars:
    l_security_groups: "{{ openshift_aws_node_security_groups }}"

- include_tasks: security_group_create.yml
  when: openshift_aws_node_security_groups_extra is defined
  vars:
    l_security_groups: "{{ openshift_aws_node_security_groups_extra | default({}) }}"