Skip to content

Latest commit

 

History

History
68 lines (50 loc) · 2.59 KB

File metadata and controls

68 lines (50 loc) · 2.59 KB
page_title stackit_sfs_export_policy Resource - stackit
subcategory
description SFS export policy resource schema. Must have a region specified in the provider configuration. ~> This resource is in beta and may be subject to breaking changes in the future. Use with caution. See our guide https://registry.terraform.io/providers/stackitcloud/stackit/latest/docs/guides/opting_into_beta_resources for how to opt-in to use beta resources.

stackit_sfs_export_policy (Resource)

SFS export policy resource schema. Must have a region specified in the provider configuration.

~> This resource is in beta and may be subject to breaking changes in the future. Use with caution. See our guide for how to opt-in to use beta resources.

Example Usage

resource "stackit_sfs_export_policy" "example" {
  project_id = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
  name       = "example"
  rules = [
    {
      ip_acl = ["172.16.0.0/24", "172.16.0.250/32"]
      order  = 1
    }
  ]
}

# Only use the import statement, if you want to import an existing export policy
import {
  to = stackit_sfs_export_policy.example
  id = "${var.project_id},${var.region},${var.policy_id}"
}

Schema

Required

  • name (String) Name of the export policy.
  • project_id (String) STACKIT project ID to which the export policy is associated.

Optional

  • region (String) The resource region. If not defined, the provider region is used.
  • rules (Attributes List) (see below for nested schema)

Read-Only

  • id (String) Terraform's internal resource ID. It is structured as "project_id,region,policy_id".
  • policy_id (String) Export policy ID

Nested Schema for rules

Required:

  • ip_acl (List of String) IP access control list; IPs must have a subnet mask (e.g. "172.16.0.0/24" for a range of IPs, or "172.16.0.250/32" for a specific IP).
  • order (Number) Order of the rule within a Share Export Policy. The order is used so that when a client IP matches multiple rules, the first rule is applied

Optional:

  • description (String) Description of the Rule
  • read_only (Boolean) Flag to indicate if client IPs matching this rule can only mount the share in read only mode
  • set_uuid (Boolean) Flag to honor set UUID
  • super_user (Boolean) Flag to indicate if client IPs matching this rule have root access on the Share