-
Notifications
You must be signed in to change notification settings - Fork 76
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
[APIGW] acl policy Summary of the Pull Request PR Checklist Refers to: #xxx Tests added/passed. Documentation updated. Schema updated. Release notes added. Acceptance Steps Performed === RUN TestAccAclPolicy_basic === PAUSE TestAccAclPolicy_basic === CONT TestAccAclPolicy_basic --- PASS: TestAccAclPolicy_basic (521.02s) PASS Process finished with the exit code 0 Reviewed-by: Aloento Reviewed-by: Vladimir Vshivkov
- Loading branch information
1 parent
5f9da27
commit 1c47cb0
Showing
16 changed files
with
517 additions
and
18 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,107 @@ | ||
| --- | ||
| subcategory: "APIGW" | ||
| --- | ||
|
|
||
| # opentelekomcloud_apigw_acl_policy_v2 | ||
|
|
||
| Manages an ACL policy resource within OpenTelekomCloud. | ||
|
|
||
| ## Example Usage | ||
|
|
||
| ### Create an ACL policy with IP control | ||
|
|
||
| ```hcl | ||
| variable "gateway_id" {} | ||
| variable "policy_name" {} | ||
| variable "ip_addresses" { | ||
| type = list(string) | ||
| } | ||
| resource "opentelekomcloud_apigw_acl_policy_v2" "ip_rule" { | ||
| gateway_id = var.gateway_id | ||
| name = var.policy_name | ||
| type = "PERMIT" | ||
| entity_type = "IP" | ||
| value = join(",", var.ip_addresses) | ||
| } | ||
| ``` | ||
|
|
||
| ### Create an ACL policy with account control (via domain names) | ||
|
|
||
| ```hcl | ||
| variable "gateway_id" {} | ||
| variable "policy_name" {} | ||
| variable "domain_names" { | ||
| type = list(string) | ||
| } | ||
| resource "opentelekomcloud_apigw_acl_policy_v2" "domain_rule" { | ||
| gateway_id = var.gateway_id | ||
| name = var.policy_name | ||
| type = "PERMIT" | ||
| entity_type = "DOMAIN" | ||
| value = join(",", var.domain_names) | ||
| } | ||
| ``` | ||
|
|
||
| ### Create an ACL policy with account control (via domain IDs) | ||
|
|
||
| ```hcl | ||
| variable "gateway_id" {} | ||
| variable "policy_name" {} | ||
| variable "domain_ids" { | ||
| type = list(string) | ||
| } | ||
| resource "opentelekomcloud_apigw_acl_policy_v2" "domain_id_rule" { | ||
| gateway_id = var.gateway_id | ||
| name = var.policy_name | ||
| type = "PERMIT" | ||
| entity_type = "DOMAIN_ID" | ||
| value = join(",", var.domain_ids) | ||
| } | ||
| ``` | ||
|
|
||
| ## Argument Reference | ||
|
|
||
| The following arguments are supported: | ||
| * `gateway_id` - (Required, String, ForceNew) Specifies the ID of the dedicated gateway instance to which the ACL | ||
| policy belongs. | ||
| Changing this will create a new resource. | ||
|
|
||
| * `name` - (Required, String) Specifies the name of the ACL policy. | ||
| The valid length is limited from `3` to `64`, only English letters, Chinese characters, digits and underscores (_) are | ||
| allowed. The name must start with an letter. | ||
|
|
||
| * `type` - (Required, String) Specifies the type of the ACL policy. | ||
| The valid values are as follows: | ||
| + `PERMIT`: Allow specific IPs or accounts to access API. | ||
| + `DENY`: Forbid specific IPs or accounts to access API. | ||
|
|
||
| * `entity_type` - (Required, String, ForceNew) Specifies the entity type of the ACL policy. | ||
| The valid values are as follows: | ||
| + `IP`: This rule is specified to control access to the API for specific IPs. | ||
| + `DOMAIN`: This rule is specified to control access to the API for specific accounts (specified by domain name). | ||
| + `DOMAIN_ID`: This rule is specified to control access to the API for specific accounts (specified by domain ID). | ||
| Changing this will create a new resource. | ||
|
|
||
| * `value` - (Required, String) Specifies one or more objects from which the access will be controlled. | ||
| Separate multiple objects with commas (,). | ||
|
|
||
| ## Attribute Reference | ||
|
|
||
| In addition to all arguments above, the following attributes are exported: | ||
|
|
||
| * `id` - The ID of the ACL policy. | ||
|
|
||
| * `region` - The region where the ACL policy is located. | ||
|
|
||
| * `updated_at` - The latest update time of the ACL policy. | ||
|
|
||
| ## Import | ||
|
|
||
| ACL Policies can be imported using their `id` and related dedicated gateway ID, separated by a slash, e.g. | ||
|
|
||
| ```bash | ||
| $ terraform import opentelekomcloud_apigw_acl_policy_v2.test <gateway_id>/<id> | ||
| ``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,5 +1,5 @@ | ||
| --- | ||
| subcategory: "APIG" | ||
| subcategory: "APIGW" | ||
| --- | ||
|
|
||
| # opentelekomcloud_apigw_api_publishment_v2 | ||
|
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,5 +1,5 @@ | ||
| --- | ||
| subcategory: "APIG" | ||
| subcategory: "APIGW" | ||
| --- | ||
|
|
||
| # opentelekomcloud_apigw_throttling_policy_associate_v2 | ||
|
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.