init

Author: orachide

.gitattributes

@@ -0,0 +1,2 @@
+# Set the default behavior, in case people don't have core.autocrlf set.
+* text=lf

.gitignore

@@ -0,0 +1,31 @@
+# .tfvars files
+*.tfvars
+
+# Exclude for testing stuff.
+!testing.tfvars
+
+# .tfstate files
+*.tfstate
+*.tfstate.*
+
+# Go vendor directory
+vendor/
+
+# Files generated by terratest
+.test-data/
+
+# Local .terraform directory
+**/.terraform/*
+
+# IDE config files
+**/.idea/*
+**/.vscode/*
+
+# MacOS files
+.DS_Store
+
+# Ruby downloaded package lock file.
+Gemfile.lock
+
+# Local test-kitchen files.
+**/.kitchen/*

LICENSE

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2019 Rachide <rachide.ouattara@runadium.fr>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

Makefile

@@ -0,0 +1,27 @@
+module "security_group" {
+  source      = "../../"
+  name        = "example"
+  description = "Instance Rules Project"
+  rules       = "${var.instance-rules-sg}"
+}
+
+variable "instance-rules-sg" {
+  default = [
+    {
+      direction        = "ingress"
+      ethertype        = "IPv4"
+      protocol         = "tcp"
+      port_range_min   = 22
+      port_range_max   = 22
+      remote_ip_prefix = "0.0.0.0/0"
+    },
+    {
+      direction        = "ingress"
+      ethertype        = "IPv4"
+      protocol         = "icmp"
+      port_range_min   = 0
+      port_range_max   = 0
+      remote_ip_prefix = "0.0.0.0/0"
+    },
+  ]
+}

examples/simple/main.tf

@@ -0,0 +1,4 @@
+output "security_group_id" {
+  description = "The security group id"
+  value       = ["${module.security_group.id}"]
+}

examples/simple/outputs.tf

@@ -0,0 +1,16 @@
+resource "openstack_networking_secgroup_v2" "this" {
+  name                 = "${var.name}-sg"
+  description          = "${var.description}"
+  delete_default_rules = "${var.delete_default_rules}"
+}
+
+resource "openstack_networking_secgroup_rule_v2" "this" {
+  count             = "${length(var.rules)}"
+  port_range_min    = "${lookup(var.rules[count.index], "port_range_min")}"
+  port_range_max    = "${lookup(var.rules[count.index], "port_range_max")}"
+  protocol          = "${lookup(var.rules[count.index], "protocol")}"
+  direction         = "${lookup(var.rules[count.index], "direction")}"
+  ethertype         = "${lookup(var.rules[count.index], "ethertype")}"
+  remote_ip_prefix  = "${lookup(var.rules[count.index], "remote_ip_prefix")}"
+  security_group_id = "${element(openstack_networking_secgroup_v2.this.*.id,count.index)}"
+}

main.tf

@@ -0,0 +1,3 @@
+output "id" {
+  value = "${openstack_networking_secgroup_v2.this.*.id}"
+}

outputs.tf

@@ -0,0 +1,20 @@
+variable "name" {
+  type    = "string"
+  default = "default"
+}
+
+variable "description" {
+  type    = "string"
+  default = "desc"
+}
+
+variable "delete_default_rules" {
+  type = "string"
+  default = "true"
+}
+
+
+variable "rules" {
+  type    = "list"
+  default = []
+}