Allow users to import ACL from a CSV File

[btzq]

ISSUE TYPE

• Improvement Request

COMPONENT NAME

Improvement Request (UI, Functionality)

CLOUDSTACK VERSION

4.19

CONFIGURATION

N/A

OS / ENVIRONMENT

N/A

SUMMARY

Note: This ticket is broken down as requested from the origianl post, #8841

Allow users to import ACL from a CSV File

• As an admin, id like the ability to plan my ACL lists offline first in an excel.
• Once ive finalised my list, i would like to be able to import it to cloudstack via CSV
• This would greatly help my workflow (i can also keep the excel as a backup)

STEPS TO REPRODUCE

N/A

N/A

EXPECTED RESULTS

To be able to manage ACL Rules more easily for large scale projects

ACTUAL RESULTS

Challenging to use ACL rules for large scale projects.

[DaanHoogland]

valid request @btzq ,

I think this can be partly implemented in the UI. There is an example for roles already (for whomever plans to implement this), ImportRole. In the AclList case we need to add an API ImportAclList and that can than be called by a processor that could for instance read an csv file. The UI could be such a processor but a CLI tool would do as well.

[btzq]

I just thought of something. If the 'Import CSV' is going to be supported, it may also be necessary to support 'Override Existing ACL Rules'. Just so that it doesnt create duplicate rules.

[DaanHoogland]

I just thought of something. If the 'Import CSV' is going to be supported, it may also be necessary to support 'Override Existing ACL Rules'. Just so that it doesnt create duplicate rules.

I think it is not needed as we could import rules in a new list and apply that one to the network. I can think of more use-cases to complicate this; add replace flags per rule, but what would be the match (source-cidr+port, source+des-cidr, in/egress, a user defined combination ?) . Let's keep this as simple as possible. Just add to a list and let the operator be responsible of clearing the list first if needed.

[btzq]

Sure, we can go with that.

We can create a new ACL List and upload the rules via XLSX, then swap the ACL List (and delete the old list).

Still works for us.