815c8840a7
We have a curtesy function in place allowing you to specify both a `name` of `ID`. But in order for the graph to be build correctly when you recreate or taint stuff that other resources depend on, we need to reference the `ID` and *not* the `name`. So in order to enforce this and by that help people to not make this mistake unknowingly, I deprecated all the parameters this allies to and changed the logic, docs and tests accordingly.
2.2 KiB
layout, page_title, sidebar_current, description
| layout | page_title | sidebar_current | description |
|---|---|---|---|
| cloudstack | CloudStack: cloudstack_egress_firewall | docs-cloudstack-resource-egress-firewall | Creates egress firewall rules for a given network. |
cloudstack_egress_firewall
Creates egress firewall rules for a given network.
Example Usage
resource "cloudstack_egress_firewall" "default" {
network_id = "6eb22f91-7454-4107-89f4-36afcdf33021"
rule {
cidr_list = ["10.0.0.0/8"]
protocol = "tcp"
ports = ["80", "1000-2000"]
}
}
Argument Reference
The following arguments are supported:
-
network_id- (Required) The network ID for which to create the egress firewall rules. Changing this forces a new resource to be created. -
network- (Required, Deprecated) The network for which to create the egress firewall rules. Changing this forces a new resource to be created. -
managed- (Optional) USE WITH CAUTION! If enabled all the egress firewall rules for this network will be managed by this resource. This means it will delete all firewall rules that are not in your config! (defaults false) -
rule- (Optional) Can be specified multiple times. Each rule block supports fields documented below. Ifmanaged = falseat least one rule is required! -
parallelism(Optional) Specifies how much rules will be created or deleted concurrently. (defaults 2)
The rule block supports:
-
cidr_list- (Required) A CIDR list to allow access to the given ports. -
source_cidr- (Optional, Deprecated) The source CIDR to allow access to the given ports. This attribute is deprecated, please usecidr_listinstead. -
protocol- (Required) The name of the protocol to allow. Valid options are:tcp,udpandicmp. -
icmp_type- (Optional) The ICMP type to allow. This can only be specified if the protocol is ICMP. -
icmp_code- (Optional) The ICMP code to allow. This can only be specified if the protocol is ICMP. -
ports- (Optional) List of ports and/or port ranges to allow. This can only be specified if the protocol is TCP or UDP.
Attributes Reference
The following attributes are exported:
id- The network ID for which the egress firewall rules are created.