815c8840a7
We have a curtesy function in place allowing you to specify both a `name` of `ID`. But in order for the graph to be build correctly when you recreate or taint stuff that other resources depend on, we need to reference the `ID` and *not* the `name`. So in order to enforce this and by that help people to not make this mistake unknowingly, I deprecated all the parameters this allies to and changed the logic, docs and tests accordingly.
2.2 KiB
layout, page_title, sidebar_current, description
| layout | page_title | sidebar_current | description |
|---|---|---|---|
| cloudstack | CloudStack: cloudstack_firewall | docs-cloudstack-resource-firewall | Creates firewall rules for a given IP address. |
cloudstack_firewall
Creates firewall rules for a given IP address.
Example Usage
resource "cloudstack_firewall" "default" {
ip_address_id = "30b21801-d4b3-4174-852b-0c0f30bdbbfb"
rule {
cidr_list = ["10.0.0.0/8"]
protocol = "tcp"
ports = ["80", "1000-2000"]
}
}
Argument Reference
The following arguments are supported:
-
ip_address_id- (Required) The IP address ID for which to create the firewall rules. Changing this forces a new resource to be created. -
ipaddress- (Required, Deprecated) The IP address or ID for which to create the firewall rules. Changing this forces a new resource to be created. -
managed- (Optional) USE WITH CAUTION! If enabled all the firewall rules for this IP address will be managed by this resource. This means it will delete all firewall rules that are not in your config! (defaults false) -
rule- (Optional) Can be specified multiple times. Each rule block supports fields documented below. Ifmanaged = falseat least one rule is required! -
parallelism(Optional) Specifies how much rules will be created or deleted concurrently. (defaults 2)
The rule block supports:
-
cidr_list- (Required) A CIDR list to allow access to the given ports. -
source_cidr- (Optional, Deprecated) The source CIDR to allow access to the given ports. This attribute is deprecated, please usecidr_listinstead. -
protocol- (Required) The name of the protocol to allow. Valid options are:tcp,udpandicmp. -
icmp_type- (Optional) The ICMP type to allow. This can only be specified if the protocol is ICMP. -
icmp_code- (Optional) The ICMP code to allow. This can only be specified if the protocol is ICMP. -
ports- (Optional) List of ports and/or port ranges to allow. This can only be specified if the protocol is TCP or UDP.
Attributes Reference
The following attributes are exported:
id- The IP address ID for which the firewall rules are created.