| page_title | stackit_sfs_export_policy Resource - stackit |
|---|---|
| subcategory | |
| description | SFS export policy resource schema. Must have a region specified in the provider configuration. ~> This resource is in beta and may be subject to breaking changes in the future. Use with caution. See our guide https://registry.terraform.io/providers/stackitcloud/stackit/latest/docs/guides/opting_into_beta_resources for how to opt-in to use beta resources. |
SFS export policy resource schema. Must have a region specified in the provider configuration.
~> This resource is in beta and may be subject to breaking changes in the future. Use with caution. See our guide for how to opt-in to use beta resources.
resource "stackit_sfs_export_policy" "example" {
project_id = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
name = "example"
rules = [
{
ip_acl = ["172.16.0.0/24", "172.16.0.250/32"]
order = 1
}
]
}
# Only use the import statement, if you want to import an existing export policy
import {
to = stackit_sfs_export_policy.example
id = "${var.project_id},${var.region},${var.policy_id}"
}name(String) Name of the export policy.project_id(String) STACKIT project ID to which the export policy is associated.
region(String) The resource region. If not defined, the provider region is used.rules(Attributes List) (see below for nested schema)
id(String) Terraform's internal resource ID. It is structured as "project_id,region,policy_id".policy_id(String) Export policy ID
Required:
ip_acl(List of String) IP access control list; IPs must have a subnet mask (e.g. "172.16.0.0/24" for a range of IPs, or "172.16.0.250/32" for a specific IP).order(Number) Order of the rule within a Share Export Policy. The order is used so that when a client IP matches multiple rules, the first rule is applied
Optional:
description(String) Description of the Ruleread_only(Boolean) Flag to indicate if client IPs matching this rule can only mount the share in read only modeset_uuid(Boolean) Flag to honor set UUIDsuper_user(Boolean) Flag to indicate if client IPs matching this rule have root access on the Share