mirror of
https://github.com/bpg/terraform-provider-proxmox.git
synced 2025-07-01 19:12:59 +00:00
98e1cff7fe
* refactoring existing cluster / firewall API for better composition * add basic security groups API fix linter errors * add rules API * fix after renaming resourceVirtualEnvironmentClusterIPSet * fix linter errors * make linter happy * even more refactoring * tidy up datasources * in refactoring spree * update examples * fix firewall resource/datasource & client error handling * add ipset(s) datasource * update docs * add security group resource with rules * docs * fix security group update, TODO: rule update * fix after rebase * add rule update, extract common rule schema, refactor group * fix linter errors * bump linter for ci * make alias and ipset reusable * make security group reusable * refactor datasources * add security group datasources * fix linter errors * update docs TODO: documentation for group datasources * add sg docs, update doc index * minor cleanup * fix examples & tests * stub for firewall-level options and rules * extract firewall interface * add firewall options and rules on the cluster level TODO: issues with rule list management * refactor all resources format AGAIN, now more flat, without complex subresources * sort out hierarchy of APIs and remove duplication in API wrappers * bring back security group * finally, working rules * restore cluster firewall option * add containers support * add options * move rules back under security group, update docs * fix vm_id / container_id attrs * add examples * cleanup * more cleanup Release-As: 0.17.0-rc1
63 lines
1.7 KiB
HCL
63 lines
1.7 KiB
HCL
resource "proxmox_virtual_environment_cluster_firewall" "cluster_options" {
|
|
enabled = false
|
|
|
|
ebtables = false
|
|
input_policy = "ACCEPT"
|
|
output_policy = "REJECT"
|
|
log_ratelimit {
|
|
enabled = false
|
|
burst = 20
|
|
rate = "5/second"
|
|
}
|
|
}
|
|
|
|
|
|
resource "proxmox_virtual_environment_firewall_options" "vm_options" {
|
|
depends_on = [proxmox_virtual_environment_vm.example]
|
|
|
|
node_name = proxmox_virtual_environment_vm.example.node_name
|
|
vm_id = proxmox_virtual_environment_vm.example.vm_id
|
|
|
|
dhcp = true
|
|
enabled = false
|
|
ipfilter = true
|
|
log_level_in = "info"
|
|
log_level_out = "info"
|
|
macfilter = false
|
|
ndp = true
|
|
input_policy = "REJECT"
|
|
output_policy = "REJECT"
|
|
radv = true
|
|
}
|
|
|
|
|
|
resource "proxmox_virtual_environment_firewall_options" "container_options" {
|
|
depends_on = [proxmox_virtual_environment_container.example]
|
|
|
|
node_name = proxmox_virtual_environment_container.example.node_name
|
|
container_id = proxmox_virtual_environment_container.example.vm_id
|
|
|
|
dhcp = false
|
|
enabled = false
|
|
ipfilter = false
|
|
log_level_in = "alert"
|
|
log_level_out = "alert"
|
|
macfilter = true
|
|
ndp = false
|
|
input_policy = "ACCEPT"
|
|
output_policy = "DROP"
|
|
radv = false
|
|
}
|
|
|
|
output "resource_proxmox_virtual_environment_firewall_options_cluster" {
|
|
value = proxmox_virtual_environment_cluster_firewall.cluster_options
|
|
}
|
|
|
|
output "resource_proxmox_virtual_environment_firewall_options_vm" {
|
|
value = proxmox_virtual_environment_firewall_options.vm_options
|
|
}
|
|
|
|
output "resource_proxmox_virtual_environment_firewall_options_container" {
|
|
value = proxmox_virtual_environment_firewall_options.container_options
|
|
}
|