Creating Rich Rules with IPSets fails

[darkmudley]

Rich_rule creation works OK if the source is specified as an address, but not if specified as an ipset.
Specify the source as a valid IPset and the rule creation fails because the source is empty, the rule is not surrounded by single quotes, and the --add-rich-rule param does not have a "=" sign after it.

I'm not sure that IPSets get created at all as calling firewall-cmd --get-ipsets on the target node doesn't list any ipsets, whether I specified them in manifests or in Hiera.
It's possible that my syntax is wrong, but no IPset errors are generated and the hiera is valid.

Would you have time to test the IPset creation and rich rule creation, and post the hiera and/or manifest code to call, please?
Many thanks
Mark

[darkmudley]

Please ignore - a modulepath clash was causing an older module without IPsets to be used
Thanks for the great module!