Add Support for WAF in Cloud Mode

[coufal-gradar]

Description of the enhancement

Please correct me if I’m wrong, but it appears that provisioning a WAF Cloud Mode instance is currently not possible using Terraform.

The Cloud Mode variant does not seem to have an equivalent Terraform resource for creation or management.

This means users must create the Cloud Mode WAF manually via the OTC Console, and only parts of the configuration (policies, certificates) can be managed afterwards via Terraform.

https://www.open-telekom-cloud.com/de/support/release-notes/release-des-modus-cloudwaf-der-waf

[muneeb-jan]

Hi @coufal-gradar

I believe we offer the resource opentelekomcloud_waf_dedicated_instance_v1 to create the Dedicated WAF instance mentioned in the article in your comment. Please check our documentation for usage.

[coufal-gradar]

@muneeb-jan Thank you, yes, however this resource can only be used to create a WAF in Dedicated Mode.

In Cloud Mode, the required arguments like specification, flavor etc. are not applicable.

I have attached a screenshot of the UI. Basically we would need a WAF Mode argument or a separate resource for a Cloud Mode WAF instance (as only a region argument is possible to be set).

[muneeb-jan]

Hi @coufal-gradar

I tested this cloud mode feature and also talked to QA. It seems that the cloud mode is just a persistent setting for pay-per-use billing mode. If you create the WAF in this manner in the console, it will just enable the pay-per-use billing for the dedicated WAF instances created thereafter.

Currently, this feature is not released throughout OTC and is still going through testing. Furthermore, the APIs to enable and disable cloud mode are not released publicly. We need to wait for the final release to add this feature to Terraform.

I will mark this issue as otc-issue for now. Apologies for the inconvenience.

Regards,
Muneeb