add a new data source for IpSec connection tunnels

update core_ip_sec_connection

update test case and add tunnel data source and resource

Author: jiangong

CHANGELOG.md

@@ -2,6 +2,7 @@
 
 ### Added
 - Support for setting `compartment_id` argument in `object_storage_namespace` data source
+- Support BGP dynamic routing and allow customer to input PSK for IPSec tunnels
 
 ## 3.25.0 (May 15, 2019)
 

examples/networking/ipsec_connections/ipsec_connection.tf

@@ -0,0 +1,110 @@
+// Copyright (c) 2017, 2019, Oracle and/or its affiliates. All rights reserved.
+variable "ip_sec_connection_cpe_local_identifier" {
+  default = "189.44.2.135"
+}
+
+variable "ip_sec_connection_cpe_local_identifier_type" {
+  default = "IP_ADDRESS"
+}
+
+variable "ip_sec_connection_defined_tags_value" {
+  default = "value"
+}
+
+variable "ip_sec_connection_display_name" {
+  default = "MyIPSecConnection"
+}
+
+variable "ip_sec_connection_freeform_tags" {
+  default = {
+    "Department" = "Finance"
+  }
+}
+
+variable "ip_sec_connection_static_routes" {
+  default = ["10.0.0.0/16"]
+}
+
+variable "ip_sec_connection_tunnel_configuration_bgp_session_config_customer_bgp_asn" {
+  default = "1587232876"
+}
+
+variable "ip_sec_connection_tunnel_configuration_bgp_session_config_customer_interface_ip" {
+  default = "10.0.0.16/31"
+}
+
+variable "ip_sec_connection_tunnel_configuration_bgp_session_config_oracle_interface_ip" {
+  default = "10.0.0.17/31"
+}
+
+variable "ip_sec_connection_tunnel_configuration_display_name" {
+  default = "MyIPSecConnection"
+}
+
+variable "ip_sec_connection_tunnel_configuration_routing" {
+  default = "BGP"
+}
+
+variable "ip_sec_connection_tunnel_configuration_shared_secret" {
+  default = "sharedSecret"
+}
+
+resource oci_core_cpe "test_cpe" {
+  compartment_id = "${var.compartment_ocid}"
+  display_name   = "test_cpe"
+  ip_address     = "189.44.2.135"
+}
+
+resource oci_core_drg "test_drg" {
+  compartment_id = "${var.compartment_ocid}"
+  display_name   = "test_drg"
+}
+
+resource "oci_core_ipsec" "test_ip_sec_connection" {
+  #Required
+  compartment_id = "${var.compartment_ocid}"
+  cpe_id         = "${oci_core_cpe.test_cpe.id}"
+  drg_id         = "${oci_core_drg.test_drg.id}"
+  static_routes  = "${var.ip_sec_connection_static_routes}"
+
+  #Optional
+  cpe_local_identifier      = "${var.ip_sec_connection_cpe_local_identifier}"
+  cpe_local_identifier_type = "${var.ip_sec_connection_cpe_local_identifier_type}"
+  defined_tags              = "${map("${oci_identity_tag_namespace.tag-namespace1.name}.${oci_identity_tag.tag1.name}", "${var.ip_sec_connection_defined_tags_value}")}"
+  display_name              = "${var.ip_sec_connection_display_name}"
+  freeform_tags             = "${var.ip_sec_connection_freeform_tags}"
+
+  tunnel_configuration {
+    #Optional
+    bgp_session_config {
+      #Optional
+      customer_bgp_asn      = "${var.ip_sec_connection_tunnel_configuration_bgp_session_config_customer_bgp_asn}"
+      customer_interface_ip = "${var.ip_sec_connection_tunnel_configuration_bgp_session_config_customer_interface_ip}"
+      oracle_interface_ip   = "${var.ip_sec_connection_tunnel_configuration_bgp_session_config_oracle_interface_ip}"
+    }
+
+    display_name  = "${var.ip_sec_connection_tunnel_configuration_display_name}"
+    routing       = "${var.ip_sec_connection_tunnel_configuration_routing}"
+    shared_secret = "${var.ip_sec_connection_tunnel_configuration_shared_secret}"
+  }
+}
+
+data "oci_core_ipsec_connections" "test_ip_sec_connections" {
+  #Required
+  compartment_id = "${var.compartment_ocid}"
+
+  #Optional
+  cpe_id = "${oci_core_cpe.test_cpe.id}"
+  drg_id = "${oci_core_drg.test_drg.id}"
+}
+
+data "oci_core_ipsec_connection_tunnels" "test_ip_sec_connection_tunnels" {
+  ipsec_id = "${oci_core_ipsec.test_ip_sec_connection.id}"
+
+  # tunnel_id = ""
+}
+
+data "oci_core_ipsec_connection_tunnel" "test_ipsec_connection_tunnel" {
+  ipsec_id  = "${oci_core_ipsec.test_ip_sec_connection.id}"
+  tunnel_id = "${data.oci_core_ipsec_connection_tunnels.test_ip_sec_connection_tunnels.ip_sec_connection_tunnels.0.id}"
+}

examples/networking/ipsec_connections/provider.tf

@@ -0,0 +1,25 @@
+// Copyright (c) 2017, 2019, Oracle and/or its affiliates. All rights reserved.
+
+variable "tenancy_ocid" {}
+variable "user_ocid" {}
+variable "fingerprint" {}
+variable "private_key_path" {}
+variable "region" {}
+
+variable "tag_namespace_description" {
+  default = "Just a test"
+}
+
+variable "tag_namespace_name" {
+  default = "testexamples-tag-namespace"
+}
+
+variable "compartment_ocid" {}
+
+provider "oci" {
+  tenancy_ocid     = "${var.tenancy_ocid}"
+  user_ocid        = "${var.user_ocid}"
+  fingerprint      = "${var.fingerprint}"
+  private_key_path = "${var.private_key_path}"
+  region           = "${var.region}"
+}

examples/networking/ipsec_connections/tags.tf

@@ -0,0 +1,22 @@
+// Copyright (c) 2017, 2019, Oracle and/or its affiliates. All rights reserved.
+
+resource "oci_identity_tag_namespace" "tag-namespace1" {
+  #Required
+  compartment_id = "${var.tenancy_ocid}"
+  description    = "${var.tag_namespace_description}"
+  name           = "${var.tag_namespace_name}"
+}
+
+resource "oci_identity_tag" "tag1" {
+  #Required
+  description      = "tf example tag"
+  name             = "tf-example-tag"
+  tag_namespace_id = "${oci_identity_tag_namespace.tag-namespace1.id}"
+}
+
+resource "oci_identity_tag" "tag2" {
+  #Required
+  description      = "tf example tag 2"
+  name             = "tf-example-tag-2"
+  tag_namespace_id = "${oci_identity_tag_namespace.tag-namespace1.id}"
+}