0
0
mirror of https://github.com/bpg/terraform-provider-proxmox.git synced 2025-07-01 19:12:59 +00:00
terraform-provider-proxmox/docs/resources/virtual_environment_firewall_ipset.md
Pavel Boldyrev 98e1cff7fe
feat: Add firewall resources (#246)
* refactoring existing cluster / firewall API for better composition

* add basic security groups API
fix linter errors

* add rules API

* fix after renaming resourceVirtualEnvironmentClusterIPSet

* fix linter errors

* make linter happy

* even more refactoring

* tidy up datasources

* in refactoring spree

* update examples

* fix firewall resource/datasource & client error handling

* add ipset(s) datasource

* update docs

* add security group resource with rules

* docs

* fix security group update, TODO: rule update

* fix after rebase

* add rule update, extract common rule schema, refactor group

* fix linter  errors

* bump linter for ci

* make alias and ipset reusable

* make security group reusable

* refactor datasources

* add security group datasources

* fix linter errors

* update docs

TODO: documentation for group datasources

* add sg docs, update doc index

* minor cleanup

* fix examples & tests

* stub for firewall-level options and rules

* extract firewall interface

* add firewall options and rules on the cluster level

TODO: issues with rule list management

* refactor all resources format AGAIN, now more flat, without complex subresources

* sort out hierarchy of APIs and remove duplication in API wrappers

* bring back security group

* finally, working rules

* restore cluster firewall option

* add containers support

* add options

* move rules back under security group, update docs

* fix vm_id / container_id attrs

* add examples

* cleanup

* more cleanup


Release-As: 0.17.0-rc1
2023-04-02 18:01:10 -04:00

1.7 KiB

layout title permalink nav_order parent subcategory
page proxmox_virtual_environment_cluster_firewall_ipset /resources/virtual_environment_cluster_firewall_ipset 8 Resources Virtual Environment

Resource: proxmox_virtual_environment_cluster_firewall_ipset

An IPSet allows us to group multiple IP addresses, IP subnets and aliases. Aliases can be created on the cluster level, on VM / Container level.

Example Usage

resource "proxmox_virtual_environment_cluster_firewall_ipset" "ipset" {
  depends_on = [proxmox_virtual_environment_vm.example]

  node_name = proxmox_virtual_environment_vm.example.node_name
  vm_id     = proxmox_virtual_environment_vm.example.vm_id

  name    = "local_network"
  comment = "Managed by Terraform"

  cidr {
    name    = "192.168.0.0/23"
    comment = "Local network 1"
  }

  cidr {
    name    = "192.168.0.1"
    comment = "Server 1"
    nomatch = true
  }

  cidr {
    name    = "192.168.2.1"
    comment = "Server 1"
  }
}

Argument Reference

  • node_name - (Optional) Node name. Leave empty for cluster level aliases.
  • vm_id - (Optional) VM ID. Leave empty for cluster level aliases.
  • container_id - (Optional) Container ID. Leave empty for cluster level aliases.
  • name - (Required) IPSet name.
  • comment - (Optional) IPSet comment.
  • cidr - (Optional) IP/CIDR block (multiple blocks supported).
    • name - Network/IP specification in CIDR format.
    • comment - (Optional) Arbitrary string annotation.
    • nomatch - (Optional) Entries marked as nomatch are skipped as if those were not added to the set.

Attribute Reference

There are no attribute references available for this resource.