You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| <aname="input_enforcement_mode"></a> [enforcement\_mode](#input\_enforcement\_mode)| (String) The rule enforcement mode |`string`|`"report"`| no |
28
+
| <aname="input_operations"></a> [operations](#input\_operations)| (Optional, List) The operations this rule applies to | <pre>list(object({<br> api_types = list(object({<br> api_type_id = string<br> }))<br> }))</pre> |`[]`| no |
29
+
| <aname="input_resources"></a> [resources](#input\_resources)| (List) The resources this rule apply to | <pre>list(object({<br> attributes = optional(list(object({<br> name = string<br> value = string<br> operator = optional(string)<br> })))<br> tags = optional(list(object({<br> name = string<br> value = string<br> operator = optional(string)<br> })))<br> }))</pre> | n/a | yes |
30
+
| <aname="input_rule_contexts"></a> [rule\_contexts](#input\_rule\_contexts)| (List) The contexts the rule applies to | <pre>list(object({<br> attributes = optional(list(object({<br> name = string<br> value = string<br> })))<br> }))</pre> | n/a | yes |
31
+
| <aname="input_rule_description"></a> [rule\_description](#input\_rule\_description)| (Optional, String) The description of the rule |`string`|`null`| no |
Accepts a list of VPC crns / service references to create CBR zones and a list of target services, to create the rule matching these profiles. It supports to target the service using name, account id, tags, resource group.
4
+
5
+
<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
|[ibm_iam_account_settings.iam_account_settings](https://registry.terraform.io/providers/IBM-Cloud/ibm/latest/docs/data-sources/iam_account_settings)| data source |
25
+
26
+
### Inputs
27
+
28
+
| Name | Description | Type | Default | Required |
| <aname="input_endpoints"></a> [endpoints](#input\_endpoints)| List specific endpoint types for target services, valid values for endpoints are 'public', 'private' or 'direct' |`list(string)`| <pre>[<br> "private"<br>]</pre> | no |
31
+
| <aname="input_location"></a> [location](#input\_location)| The region in which the network zone is scoped |`string`|`"us-south"`| no |
32
+
| <aname="input_prefix"></a> [prefix](#input\_prefix)| Prefix to append to all vpc\_zone\_list, service\_ref\_zone\_list and cbr\_rule\_description created by this submodule |`string`|`"serviceprofile"`| no |
33
+
| <aname="input_target_service_details"></a> [target\_service\_details](#input\_target\_service\_details)| (String) Details of the target service for which the rule has to be created | <pre>list(object({<br> target_service_name = string<br> target_rg = optional(string)<br> enforcement_mode = string<br> tags = optional(list(string))<br> }))</pre> | n/a | yes |
34
+
| <aname="input_zone_service_ref_list"></a> [zone\_service\_ref\_list](#input\_zone\_service\_ref\_list)| (List) Service reference for the zone creation |`list(string)`|`[]`| no |
35
+
| <aname="input_zone_vpc_crn_list"></a> [zone\_vpc\_crn\_list](#input\_zone\_vpc\_crn\_list)| (List) VPC CRN for the zones |`list(string)`|`[]`| no |
| <aname="input_account_id"></a> [account\_id](#input\_account\_id)| (Optional, String) The id of the account owning this zone |`string`|`null`| no |
28
+
| <aname="input_addresses"></a> [addresses](#input\_addresses)| (List) The list of addresses in the zone | <pre>list(object({<br> type = optional(string)<br> value = optional(string)<br> ref = optional(object({<br> account_id = string<br> location = optional(string)<br> service_instance = optional(string)<br> service_name = optional(string)<br> service_type = optional(string)<br> }))<br> }))</pre> |`[]`| no |
29
+
| <aname="input_excluded_addresses"></a> [excluded\_addresses](#input\_excluded\_addresses)| (Optional, List) The list of excluded addresses in the zone | <pre>list(object({<br> type = optional(string)<br> value = optional(string)<br> }))</pre> |`[]`| no |
30
+
| <aname="input_name"></a> [name](#input\_name)| (Optional, String) The name of the zone |`string`|`null`| no |
31
+
| <aname="input_zone_description"></a> [zone\_description](#input\_zone\_description)| (Optional, String) The description of the zone |`string`|`null`| no |
32
+
33
+
### Outputs
34
+
35
+
| Name | Description |
36
+
|------|-------------|
37
+
| <aname="output_zone_crn"></a> [zone\_crn](#output\_zone\_crn)| CBR zone resource instance crn |
38
+
| <aname="output_zone_description"></a> [zone\_description](#output\_zone\_description)| CBR zone resource instance description |
39
+
| <aname="output_zone_href"></a> [zone\_href](#output\_zone\_href)| CBR zone resource instance link |
40
+
| <aname="output_zone_id"></a> [zone\_id](#output\_zone\_id)| CBR zone resource instance id |
41
+
| <aname="output_zone_names"></a> [zone\_names](#output\_zone\_names)| CBR zone resource instance name |
Copy file name to clipboardExpand all lines: profiles/fscloud/README.md
+15-17Lines changed: 15 additions & 17 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -15,37 +15,30 @@ The module also pre-create CBR zone for each service in the account as a best pr
15
15
Important: In order to avoid unexpected breakage in the account against which this module is executed, the CBR rule enforcement mode is set to 'report' (or 'disabled' for services not supporting 'report' mode) by default. It is recommended to test out this module first with these default, and then use the `target_service_details` variable to set the enforcement mode to "enabled" gradually by service. The [usage example](../../examples/fscloud/) demonstrates how to set the enforcement mode to 'enabled' for the key protect ("kms") service.
16
16
17
17
18
-
<!--BEGIN_TF_DOCS-->
19
-
## Requirements
18
+
<!--BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK-->
|[ibm_iam_account_settings.iam_account_settings](https://registry.terraform.io/providers/IBM-Cloud/ibm/1.49.0/docs/data-sources/iam_account_settings)| data source |
47
40
48
-
## Inputs
41
+
###Inputs
49
42
50
43
| Name | Description | Type | Default | Required |
@@ -55,14 +48,19 @@ Important: In order to avoid unexpected breakage in the account against which th
55
48
| <aname="input_allow_vpcs_to_container_registry"></a> [allow\_vpcs\_to\_container\_registry](#input\_allow\_vpcs\_to\_container\_registry)| Set rule for VPCs to container registry, deafult is true |`bool`|`true`| no |
56
49
| <aname="input_allow_vpcs_to_cos"></a> [allow\_vpcs\_to\_cos](#input\_allow\_vpcs\_to\_cos)| Set rule for VPCs to COS, deafult is true |`bool`|`true`| no |
57
50
| <aname="input_custom_rule_contexts_by_service"></a> [custom\_rule\_contexts\_by\_service](#input\_custom\_rule\_contexts\_by\_service)| Any additional context to add to the CBR rules created by this module. The context are added to the CBR rule targetting the service passed as a key. The module looks up the zone id when service\_ref\_names or add\_managed\_vpc\_zone are passed in. | <pre>map(list(object(<br> {<br> endpointType = string # "private, public or direct"<br><br> # Service-name (module lookup for existing network zone) and/or CBR zone id<br> service_ref_names = optional(list(string), [])<br> add_managed_vpc_zone = optional(bool, false)<br> zone_ids = optional(list(string), [])<br> })))</pre> |`{}`| no |
58
-
| <aname="input_ip_addresses"></a> [ip\_addresses](#input\_ip\_addresses)|List of all addresses. | <pre>object({<br> ipAddress = optional(list(string))<br> ipRange = optional(list(string))<br> subnet = optional(list(string))<br> })</pre> |`null`| no |
59
-
| <aname="input_ip_excluded_addresses"></a> [ip\_excluded\_addresses](#input\_ip\_excluded\_addresses)|List of all excluded addresses. | <pre>object({<br> ipAddress = optional(list(string))<br> ipRange = optional(list(string))<br> subnet = optional(list(string))<br> })</pre> |`null`| no |
51
+
| <aname="input_existing_cbr_zone_vpcs"></a> [existing\_cbr\_zone\_vpcs](#input\_existing\_cbr\_zone\_vpcs)|Provide a existing zone id for VPC | <pre>object(<br> {<br> zone_id = string<br> })</pre> |`null`| no |
52
+
| <aname="input_existing_serviceref_zone"></a> [existing\_serviceref\_zone](#input\_existing\_serviceref\_zone)|Provide a valid service reference and existing zone id | <pre>map(object(<br> {<br> zone_id = string<br> }))</pre> |`{}`| no |
60
53
| <aname="input_prefix"></a> [prefix](#input\_prefix)| Prefix to append to all vpc\_zone\_list, service\_ref\_zone\_list and cbr\_rule\_description created by this submodule |`string`| n/a | yes |
61
54
| <aname="input_target_service_details"></a> [target\_service\_details](#input\_target\_service\_details)| Details of the target service for which a rule is created. The key is the service name. | <pre>map(object({<br> target_rg = optional(string)<br> enforcement_mode = string<br> tags = optional(list(string))<br> }))</pre> |`{}`| no |
62
55
| <aname="input_zone_service_ref_list"></a> [zone\_service\_ref\_list](#input\_zone\_service\_ref\_list)| (List) Service reference for the zone creation |`list(string)`| <pre>[<br> "cloud-object-storage",<br> "codeengine",<br> "containers-kubernetes",<br> "databases-for-cassandra",<br> "databases-for-elasticsearch",<br> "databases-for-enterprisedb",<br> "databases-for-etcd",<br> "databases-for-mongodb",<br> "databases-for-mysql",<br> "databases-for-postgresql",<br> "databases-for-redis",<br> "directlink",<br> "iam-groups",<br> "is",<br> "messagehub",<br> "messages-for-rabbitmq",<br> "schematics",<br> "secrets-manager",<br> "server-protect",<br> "user-management",<br> "apprapp",<br> "compliance",<br> "event-notifications"<br>]</pre> | no |
63
56
| <aname="input_zone_vpc_crn_list"></a> [zone\_vpc\_crn\_list](#input\_zone\_vpc\_crn\_list)| (List) VPC CRN for the zones |`list(string)`| n/a | yes |
64
57
65
-
## Outputs
58
+
###Outputs
66
59
67
-
No outputs.
68
-
<!-- END_TF_DOCS -->
60
+
| Name | Description |
61
+
|------|-------------|
62
+
| <aname="output_account_id"></a> [account\_id](#output\_account\_id)| Account ID |
63
+
| <aname="output_map_service_ref_name_zoneid"></a> [map\_service\_ref\_name\_zoneid](#output\_map\_service\_ref\_name\_zoneid)| Map of service reference and zone ids |
64
+
| <aname="output_map_target_service_rule_ids"></a> [map\_target\_service\_rule\_ids](#output\_map\_target\_service\_rule\_ids)| Map of target service and rule ids |
65
+
| <aname="output_map_vpc_zoneid"></a> [map\_vpc\_zoneid](#output\_map\_vpc\_zoneid)| Map of VPC and zone ids |
0 commit comments