From 2d47dab1164c9820283766133742ef3f52e65ba8 Mon Sep 17 00:00:00 2001 From: Andrea Dell'Amico Date: Wed, 5 Aug 2026 18:23:57 +0200 Subject: [PATCH] Various fixes to the s2i2s project-setup workspace. Fix the openstack module requirements. --- modules/complete_infra_setup/haproxy.tf | 4 +- modules/complete_infra_setup/internal-ca.tf | 4 +- modules/complete_infra_setup/postgresql.tf | 4 +- modules/complete_infra_setup/prometheus.tf | 4 +- .../complete_infra_setup/ssh-jump-proxy.tf | 4 +- s2i2s/project-setup/haproxy.tf | 47 +- s2i2s/project-setup/outputs.tf | 8 + s2i2s/project-setup/provider.tf | 2 +- s2i2s/project-setup/terraform.tfstate | 4308 +---------------- 9 files changed, 59 insertions(+), 4326 deletions(-) diff --git a/modules/complete_infra_setup/haproxy.tf b/modules/complete_infra_setup/haproxy.tf index 5dbf7b0..3307574 100644 --- a/modules/complete_infra_setup/haproxy.tf +++ b/modules/complete_infra_setup/haproxy.tf @@ -86,7 +86,7 @@ resource "openstack_compute_instance_v2" "main_haproxy_l7" { group = openstack_compute_servergroup_v2.main_haproxy_l7.id } block_device { - uuid = var.ubuntu_2204.uuid + uuid = var.ubuntu_2404.uuid source_type = "image" volume_size = 10 boot_index = 0 @@ -99,7 +99,7 @@ resource "openstack_compute_instance_v2" "main_haproxy_l7" { fixed_ip_v4 = var.main_haproxy_l7_ip.* [count.index] } - user_data = file("${var.ubuntu2204_data_file}") + user_data = file("${var.ubuntu2404_data_file}") # Do not replace the instance when the ssh key changes lifecycle { ignore_changes = [ diff --git a/modules/complete_infra_setup/internal-ca.tf b/modules/complete_infra_setup/internal-ca.tf index 298191f..23d7f27 100644 --- a/modules/complete_infra_setup/internal-ca.tf +++ b/modules/complete_infra_setup/internal-ca.tf @@ -5,7 +5,7 @@ resource "openstack_compute_instance_v2" "internal_ca" { key_pair = module.ssh_settings.ssh_key_name security_groups = [var.default_security_group_name] block_device { - uuid = var.ubuntu_2204.uuid + uuid = var.ubuntu_2404.uuid source_type = "image" volume_size = 10 boot_index = 0 @@ -17,7 +17,7 @@ resource "openstack_compute_instance_v2" "internal_ca" { name = var.main_private_network.name fixed_ip_v4 = var.basic_services_ip.ca } - user_data = file("${var.ubuntu2204_data_file}") + user_data = file("${var.ubuntu2404_data_file}") # Do not replace the instance when the ssh key changes lifecycle { ignore_changes = [ diff --git a/modules/complete_infra_setup/postgresql.tf b/modules/complete_infra_setup/postgresql.tf index a5524f7..f45d31b 100644 --- a/modules/complete_infra_setup/postgresql.tf +++ b/modules/complete_infra_setup/postgresql.tf @@ -60,7 +60,7 @@ resource "openstack_compute_instance_v2" "shared_postgresql_server" { key_pair = module.ssh_settings.ssh_key_name security_groups = [var.default_security_group_name, openstack_networking_secgroup_v2.shared_postgresql_access.name] block_device { - uuid = var.ubuntu_2204.uuid + uuid = var.ubuntu_2404.uuid source_type = "image" volume_size = 10 boot_index = 0 @@ -76,7 +76,7 @@ resource "openstack_compute_instance_v2" "shared_postgresql_server" { fixed_ip_v4 = var.shared_postgresql_server_data.server_ip } - user_data = file("${var.ubuntu2204_data_file}") + user_data = file("${var.ubuntu2404_data_file}") # Do not replace the instance when the ssh key changes lifecycle { ignore_changes = [ diff --git a/modules/complete_infra_setup/prometheus.tf b/modules/complete_infra_setup/prometheus.tf index 84f64c6..9ded574 100644 --- a/modules/complete_infra_setup/prometheus.tf +++ b/modules/complete_infra_setup/prometheus.tf @@ -11,7 +11,7 @@ resource "openstack_compute_instance_v2" "prometheus_server" { key_pair = module.ssh_settings.ssh_key_name security_groups = [var.default_security_group_name, openstack_networking_secgroup_v2.restricted_web.name, openstack_networking_secgroup_v2.prometheus_access_from_grafana.name] block_device { - uuid = var.ubuntu_2204.uuid + uuid = var.ubuntu_2404.uuid source_type = "image" volume_size = 10 boot_index = 0 @@ -23,7 +23,7 @@ resource "openstack_compute_instance_v2" "prometheus_server" { name = var.main_private_network.name fixed_ip_v4 = var.basic_services_ip.prometheus } - user_data = file("${var.ubuntu2204_data_file}") + user_data = file("${var.ubuntu2404_data_file}") # Do not replace the instance when the ssh key changes lifecycle { ignore_changes = [ diff --git a/modules/complete_infra_setup/ssh-jump-proxy.tf b/modules/complete_infra_setup/ssh-jump-proxy.tf index a09f6b8..39f3c7c 100644 --- a/modules/complete_infra_setup/ssh-jump-proxy.tf +++ b/modules/complete_infra_setup/ssh-jump-proxy.tf @@ -6,7 +6,7 @@ resource "openstack_compute_instance_v2" "ssh_jump_proxy" { key_pair = module.ssh_settings.ssh_key_name security_groups = [var.default_security_group_name, openstack_networking_secgroup_v2.access_to_the_jump_proxy.name] block_device { - uuid = var.ubuntu_2204.uuid + uuid = var.ubuntu_2404.uuid source_type = "image" volume_size = 30 boot_index = 0 @@ -18,7 +18,7 @@ resource "openstack_compute_instance_v2" "ssh_jump_proxy" { name = var.main_private_network.name fixed_ip_v4 = var.basic_services_ip.ssh_jump } - user_data = file("${var.ubuntu2204_data_file}") + user_data = file("${var.ubuntu2404_data_file}") # Do not replace the instance when the ssh key changes lifecycle { ignore_changes = [ diff --git a/s2i2s/project-setup/haproxy.tf b/s2i2s/project-setup/haproxy.tf index cd98ebb..c32401c 100644 --- a/s2i2s/project-setup/haproxy.tf +++ b/s2i2s/project-setup/haproxy.tf @@ -8,11 +8,15 @@ resource "openstack_compute_servergroup_v2" "main_haproxy_l7" { policies = ["anti-affinity"] } -# Security group for traffic from Octavia LB to HAProxy +# Security group for traffic from the Octavia LB to HAProxy. +# The main LB uses the OVN provider, not amphora: OVN does not SNAT the traffic to +# the amphora VIP, so the HAProxy L7 servers see the original client source IP. +# Only the health monitor probes and the hairpinned traffic come from the private +# subnet. Therefore the public listeners (80, 443) must accept any source. resource "openstack_networking_secgroup_v2" "main_lb_to_haproxy_l7" { name = "traffic_from_main_lb_to_haproxy_l7" delete_default_rules = "true" - description = "Traffic coming from the main L4 lb directed to the haproxy l7 servers" + description = "Traffic coming from the main L4 lb (OVN provider, client IP is preserved) directed to the haproxy l7 servers" } resource "openstack_networking_secgroup_rule_v2" "haproxy_l7_1_peer" { @@ -39,29 +43,34 @@ resource "openstack_networking_secgroup_rule_v2" "haproxy_l7_2_peer" { resource "openstack_networking_secgroup_rule_v2" "octavia_to_haproxy_l7_80" { security_group_id = openstack_networking_secgroup_v2.main_lb_to_haproxy_l7.id - description = "Traffic from the octavia lb instance to HAPROXY l7 port 80" + description = "HTTP traffic to HAPROXY l7 port 80, through the OVN based main lb. The source is the client IP" direction = "ingress" ethertype = "IPv4" protocol = "tcp" port_range_min = 80 port_range_max = 80 - remote_ip_prefix = local.main_private_subnet.cidr + remote_ip_prefix = "0.0.0.0/0" } resource "openstack_networking_secgroup_rule_v2" "octavia_to_haproxy_l7_443" { security_group_id = openstack_networking_secgroup_v2.main_lb_to_haproxy_l7.id - description = "Traffic from the octavia lb instance to HAPROXY l7 port 443" + description = "HTTPS traffic to HAPROXY l7 port 443, through the OVN based main lb. The source is the client IP" direction = "ingress" ethertype = "IPv4" protocol = "tcp" port_range_min = 443 port_range_max = 443 - remote_ip_prefix = local.main_private_subnet.cidr + remote_ip_prefix = "0.0.0.0/0" } -resource "openstack_networking_secgroup_rule_v2" "octavia_to_haproxy_l7_8880" { +# HAPROXY stats, port 8880. +# The OVN provider does not support allowed_cidrs on the listener, so this security +# group is the only place where the stats can be restricted. Since OVN preserves the +# client source IP, we can filter on the real client addresses instead of opening the +# port to everybody. The private subnet is still needed for the health monitor probes. +resource "openstack_networking_secgroup_rule_v2" "octavia_to_haproxy_l7_8880_healthcheck" { security_group_id = openstack_networking_secgroup_v2.main_lb_to_haproxy_l7.id - description = "Traffic from the octavia lb instance to HAPROXY l7 port 8880" + description = "Health monitor probes to the HAPROXY l7 stats port 8880" direction = "ingress" ethertype = "IPv4" protocol = "tcp" @@ -70,6 +79,28 @@ resource "openstack_networking_secgroup_rule_v2" "octavia_to_haproxy_l7_8880" { remote_ip_prefix = local.main_private_subnet.cidr } +resource "openstack_networking_secgroup_rule_v2" "haproxy_l7_8880_stats_sources" { + for_each = { + d4s_vpn_1 = local.ssh_sources.d4s_vpn_1_cidr + d4s_vpn_2 = local.ssh_sources.d4s_vpn_2_cidr + s2i2s_vpn_1 = local.ssh_sources.s2i2s_vpn_1_cidr + s2i2s_vpn_2 = local.ssh_sources.s2i2s_vpn_2_cidr + infrascience_net = local.ssh_sources.infrascience_net_cidr + # Prometheus scrapes the HAPROXY stats: it reaches them over the private network, + # and through the load balancer public IP via its own floating IP + prometheus_private = local.basic_services_ip.prometheus_cidr + prometheus_public = "${openstack_networking_floatingip_v2.prometheus_server_ip.address}/32" + } + security_group_id = openstack_networking_secgroup_v2.main_lb_to_haproxy_l7.id + description = "HAPROXY l7 stats port 8880 from ${each.key}" + direction = "ingress" + ethertype = "IPv4" + protocol = "tcp" + port_range_min = 8880 + port_range_max = 8880 + remote_ip_prefix = each.value +} + # Ports in the main private network for HAProxy instances resource "openstack_networking_port_v2" "main_haproxy_l7_port" { count = local.haproxy_l7_data.vm_count diff --git a/s2i2s/project-setup/outputs.tf b/s2i2s/project-setup/outputs.tf index c878e65..8f5b18e 100644 --- a/s2i2s/project-setup/outputs.tf +++ b/s2i2s/project-setup/outputs.tf @@ -154,6 +154,10 @@ output "ubuntu_2204" { value = local.ubuntu_2204 } +output "ubuntu_2404" { + value = local.ubuntu_2404 +} + output "availability_zones_names" { value = local.availability_zones_names } @@ -162,6 +166,10 @@ output "ubuntu2204_data_file" { value = local.ubuntu2204_data_file } +output "ubuntu2404_data_file" { + value = local.ubuntu2404_data_file +} + output "mtu_size" { value = local.mtu_size } diff --git a/s2i2s/project-setup/provider.tf b/s2i2s/project-setup/provider.tf index 97d0e50..a890a41 100644 --- a/s2i2s/project-setup/provider.tf +++ b/s2i2s/project-setup/provider.tf @@ -4,7 +4,7 @@ terraform { required_providers { openstack = { source = "terraform-provider-openstack/openstack" - version = "~> 1.53.0" + version = ">= 2.0.0" } } } diff --git a/s2i2s/project-setup/terraform.tfstate b/s2i2s/project-setup/terraform.tfstate index f1a2933..4e22a8a 100644 --- a/s2i2s/project-setup/terraform.tfstate +++ b/s2i2s/project-setup/terraform.tfstate @@ -1,4307 +1 @@ -{ - "version": 4, - "terraform_version": "1.14.3", - "serial": 163, - "lineage": "63543f0d-4b49-2066-95b6-653706374703", - "outputs": { - "access_to_the_jump_proxy": { - "value": { - "all_tags": [], - "delete_default_rules": true, - "description": "Security group that allows SSH access to the jump node from a limited set of sources", - "id": "4c6b6683-77fa-4d1a-8ba2-41acf10a12ba", - "name": "ssh_access_to_the_jump_node", - "region": "isti_area_pi_1", - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "type": [ - "object", - { - "all_tags": [ - "set", - "string" - ], - "delete_default_rules": "bool", - "description": "string", - "id": "string", - "name": "string", - "region": "string", - "tags": [ - "set", - "string" - ], - "tenant_id": "string", - "timeouts": [ - "object", - { - "delete": "string" - } - ] - } - ] - }, - "availability_zones_names": { - "value": { - "availability_zone_no_gpu": "cnr-isti-nova-a", - "availability_zone_with_gpu": "cnr-isti-nova-gpu-a" - }, - "type": [ - "map", - "string" - ] - }, - "basic_services_ip": { - "value": { - "ca": "10.10.0.4", - "ca_cidr": "10.10.0.4/32", - "haproxy_l7_1": "10.10.0.11", - "haproxy_l7_1_cidr": "10.10.0.11/32", - "haproxy_l7_2": "10.10.0.12", - "haproxy_l7_2_cidr": "10.10.0.12/32", - "octavia_main": "10.10.0.20", - "octavia_main_cidr": "10.10.0.20/32", - "prometheus": "10.10.0.10", - "prometheus_cidr": "10.10.0.10/32", - "ssh_jump": "10.10.0.5", - "ssh_jump_cidr": "10.10.0.5/32" - }, - "type": [ - "map", - "string" - ] - }, - "debugging": { - "value": { - "all_tags": [], - "delete_default_rules": true, - "description": "Security group that allows web app debugging via tunnel from the ssh jump node", - "id": "6c21f51b-9cad-4051-99b6-221bed658a83", - "name": "debugging_from_jump_node", - "region": "isti_area_pi_1", - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "type": [ - "object", - { - "all_tags": [ - "set", - "string" - ], - "delete_default_rules": "bool", - "description": "string", - "id": "string", - "name": "string", - "region": "string", - "tags": [ - "set", - "string" - ], - "tenant_id": "string", - "timeouts": [ - "object", - { - "delete": "string" - } - ] - } - ] - }, - "default_security_group": { - "value": { - "all_tags": [], - "delete_default_rules": true, - "description": "Default security group with rules for ssh access via jump proxy, prometheus scraping", - "id": "1ec8a419-f9cf-473f-a022-6499d67d57b8", - "name": "default_for_all", - "region": "isti_area_pi_1", - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "type": [ - "object", - { - "all_tags": [ - "set", - "string" - ], - "delete_default_rules": "bool", - "description": "string", - "id": "string", - "name": "string", - "region": "string", - "tags": [ - "set", - "string" - ], - "tenant_id": "string", - "timeouts": [ - "object", - { - "delete": "string" - } - ] - } - ] - }, - "default_security_group_id": { - "value": "1ec8a419-f9cf-473f-a022-6499d67d57b8", - "type": "string" - }, - "default_security_group_name": { - "value": "default_for_all", - "type": "string" - }, - "dns_zone": { - "value": { - "attributes": {}, - "description": "DNS primary zone for the S2I2S project", - "disable_status_check": false, - "email": "postmaster@isti.cnr.it", - "id": "e826e777-0196-4f63-b2a9-df07f70e618f", - "masters": [], - "name": "s2i2s.cloud.isti.cnr.it.", - "project_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "region": "isti_area_pi_1", - "timeouts": null, - "ttl": 8600, - "type": "PRIMARY", - "value_specs": null - }, - "type": [ - "object", - { - "attributes": [ - "map", - "string" - ], - "description": "string", - "disable_status_check": "bool", - "email": "string", - "id": "string", - "masters": [ - "set", - "string" - ], - "name": "string", - "project_id": "string", - "region": "string", - "timeouts": [ - "object", - { - "create": "string", - "delete": "string", - "update": "string" - } - ], - "ttl": "number", - "type": "string", - "value_specs": [ - "map", - "string" - ] - } - ] - }, - "dns_zone_id": { - "value": "e826e777-0196-4f63-b2a9-df07f70e618f", - "type": "string" - }, - "floating_ip_pools": { - "value": { - "main_public_ip_pool": "external-network" - }, - "type": [ - "map", - "string" - ] - }, - "haproxy_l7_data": { - "value": { - "flavor": "m1.medium", - "name": "main-haproxy-l7", - "vm_count": "2" - }, - "type": [ - "map", - "string" - ] - }, - "internal_ca_data": { - "value": { - "flavor": "m1.small", - "name": "ca" - }, - "type": [ - "map", - "string" - ] - }, - "internal_ca_id": { - "value": "286b7a4d-33c6-451f-9019-d9fd79265181", - "type": "string" - }, - "main_haproxy_l7_ids": { - "value": [ - "b42a0e99-6172-4a5d-886c-c0fb016da60e", - "b770644a-5c39-4db2-8811-fb62751bd789" - ], - "type": [ - "tuple", - [ - "string", - "string" - ] - ] - }, - "main_haproxy_l7_ip": { - "value": [ - "10.10.0.11", - "10.10.0.12" - ], - "type": [ - "list", - "string" - ] - }, - "main_lb_to_haproxy_l7_security_group": { - "value": { - "all_tags": [], - "delete_default_rules": true, - "description": "Traffic coming from the main L4 lb directed to the haproxy l7 servers", - "id": "613cacac-ac46-46ab-ba7a-d66f61cce84d", - "name": "traffic_from_main_lb_to_haproxy_l7", - "region": "isti_area_pi_1", - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "type": [ - "object", - { - "all_tags": [ - "set", - "string" - ], - "delete_default_rules": "bool", - "description": "string", - "id": "string", - "name": "string", - "region": "string", - "tags": [ - "set", - "string" - ], - "tenant_id": "string", - "timeouts": [ - "object", - { - "delete": "string" - } - ] - } - ] - }, - "main_loadbalancer_hostname": { - "value": "octavia-main-lb.s2i2s.cloud.isti.cnr.it.", - "type": "string" - }, - "main_loadbalancer_id": { - "value": "44dbe548-a436-4816-927a-2912f443b50f", - "type": "string" - }, - "main_loadbalancer_ip": { - "value": "10.10.0.20", - "type": "string" - }, - "main_loadbalancer_public_ip": { - "value": "146.48.30.30", - "type": "string" - }, - "main_private_network": { - "value": { - "admin_state_up": true, - "all_tags": [], - "availability_zone_hints": [], - "description": "S2I2S private network (use this as the main network)", - "dns_domain": "s2i2s.cloud.isti.cnr.it.", - "external": false, - "id": "f371c239-6d5d-4ac8-a17e-af607752d82c", - "mtu": 8942, - "name": "s2i2s-proj-main", - "port_security_enabled": true, - "qos_policy_id": "", - "region": "isti_area_pi_1", - "segments": [ - { - "network_type": "geneve", - "physical_network": "", - "segmentation_id": 47850 - } - ], - "shared": false, - "tags": null, - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null, - "transparent_vlan": false, - "value_specs": null - }, - "type": [ - "object", - { - "admin_state_up": "bool", - "all_tags": [ - "set", - "string" - ], - "availability_zone_hints": [ - "set", - "string" - ], - "description": "string", - "dns_domain": "string", - "external": "bool", - "id": "string", - "mtu": "number", - "name": "string", - "port_security_enabled": "bool", - "qos_policy_id": "string", - "region": "string", - "segments": [ - "set", - [ - "object", - { - "network_type": "string", - "physical_network": "string", - "segmentation_id": "number" - } - ] - ], - "shared": "bool", - "tags": [ - "set", - "string" - ], - "tenant_id": "string", - "timeouts": [ - "object", - { - "create": "string", - "delete": "string" - } - ], - "transparent_vlan": "bool", - "value_specs": [ - "map", - "string" - ] - } - ] - }, - "main_private_subnet": { - "value": { - "all_tags": [], - "allocation_pool": [ - { - "end": "10.10.7.254", - "start": "10.10.1.1" - } - ], - "cidr": "10.10.0.0/21", - "description": "S2I2S main private subnet", - "dns_nameservers": [ - "146.48.29.97", - "146.48.29.98", - "146.48.29.99" - ], - "dns_publish_fixed_ip": false, - "enable_dhcp": true, - "gateway_ip": "10.10.0.1", - "id": "19c649ee-96ea-438b-ac0c-512afdf5046d", - "ip_version": 4, - "ipv6_address_mode": "", - "ipv6_ra_mode": "", - "name": "s2i2s-proj-main-subnet", - "network_id": "f371c239-6d5d-4ac8-a17e-af607752d82c", - "no_gateway": false, - "prefix_length": null, - "region": "isti_area_pi_1", - "segment_id": "", - "service_types": [], - "subnetpool_id": "", - "tags": null, - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null, - "value_specs": null - }, - "type": [ - "object", - { - "all_tags": [ - "set", - "string" - ], - "allocation_pool": [ - "set", - [ - "object", - { - "end": "string", - "start": "string" - } - ] - ], - "cidr": "string", - "description": "string", - "dns_nameservers": [ - "list", - "string" - ], - "dns_publish_fixed_ip": "bool", - "enable_dhcp": "bool", - "gateway_ip": "string", - "id": "string", - "ip_version": "number", - "ipv6_address_mode": "string", - "ipv6_ra_mode": "string", - "name": "string", - "network_id": "string", - "no_gateway": "bool", - "prefix_length": "number", - "region": "string", - "segment_id": "string", - "service_types": [ - "list", - "string" - ], - "subnetpool_id": "string", - "tags": [ - "set", - "string" - ], - "tenant_id": "string", - "timeouts": [ - "object", - { - "create": "string", - "delete": "string" - } - ], - "value_specs": [ - "map", - "string" - ] - } - ] - }, - "main_region": { - "value": "isti_area_pi_1", - "type": "string" - }, - "main_subnet_network_id": { - "value": "19c649ee-96ea-438b-ac0c-512afdf5046d", - "type": "string" - }, - "mtu_size": { - "value": 8942, - "type": "number" - }, - "os_project_data": { - "value": { - "id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "name": "s2i2s-proj-cloud" - }, - "type": [ - "map", - "string" - ] - }, - "prometheus_access_from_grafana": { - "value": { - "all_tags": [], - "delete_default_rules": true, - "description": "The public grafana server must be able to get data from Prometheus", - "id": "48e9366f-23a8-47df-abcd-66f84d4af395", - "name": "prometheus_access_from_grafana", - "region": "isti_area_pi_1", - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "type": [ - "object", - { - "all_tags": [ - "set", - "string" - ], - "delete_default_rules": "bool", - "description": "string", - "id": "string", - "name": "string", - "region": "string", - "tags": [ - "set", - "string" - ], - "tenant_id": "string", - "timeouts": [ - "object", - { - "delete": "string" - } - ] - } - ] - }, - "prometheus_hostname": { - "value": "prometheus.s2i2s.cloud.isti.cnr.it.", - "type": "string" - }, - "prometheus_public_ip": { - "value": "146.48.31.67", - "type": "string" - }, - "prometheus_server_data": { - "value": { - "flavor": "m1.medium", - "name": "prometheus", - "public_grafana_server_cidr": "146.48.28.103/32", - "vol_data_device": "/dev/vdb", - "vol_data_name": "prometheus-data", - "vol_data_size": "100" - }, - "type": [ - "map", - "string" - ] - }, - "prometheus_server_id": { - "value": "d2a37e7c-3eaa-4929-b70d-cfb55416d8bc", - "type": "string" - }, - "public_web": { - "value": { - "all_tags": [], - "delete_default_rules": true, - "description": "Security group that allows HTTPS and HTTP from everywhere, for the services that are not behind any load balancer", - "id": "31140e64-667a-4044-b388-79afcc6bcb69", - "name": "public_web_service", - "region": "isti_area_pi_1", - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "type": [ - "object", - { - "all_tags": [ - "set", - "string" - ], - "delete_default_rules": "bool", - "description": "string", - "id": "string", - "name": "string", - "region": "string", - "tags": [ - "set", - "string" - ], - "tenant_id": "string", - "timeouts": [ - "object", - { - "delete": "string" - } - ] - } - ] - }, - "resolvers_ip": { - "value": [ - "146.48.29.97", - "146.48.29.98", - "146.48.29.99" - ], - "type": [ - "list", - "string" - ] - }, - "restricted_web": { - "value": { - "all_tags": [], - "delete_default_rules": true, - "description": "Security group that restricts HTTPS sources to the VPN nodes and shell.d4science.org. HTTP is open to all, because letsencrypt", - "id": "359d7ae7-cdff-47c2-bf69-7d423860d2d2", - "name": "restricted_web_service", - "region": "isti_area_pi_1", - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "type": [ - "object", - { - "all_tags": [ - "set", - "string" - ], - "delete_default_rules": "bool", - "description": "string", - "id": "string", - "name": "string", - "region": "string", - "tags": [ - "set", - "string" - ], - "tenant_id": "string", - "timeouts": [ - "object", - { - "delete": "string" - } - ] - } - ] - }, - "ssh_jump_proxy": { - "value": { - "flavor": "m2.small", - "name": "ssh-jump-proxy" - }, - "type": [ - "map", - "string" - ] - }, - "ssh_jump_proxy_hostname": { - "value": "ssh-jump-proxy.s2i2s.cloud.isti.cnr.it.", - "type": "string" - }, - "ssh_jump_proxy_id": { - "value": "6aed1634-ec4e-43b0-a8c6-2da42a27ad25", - "type": "string" - }, - "ssh_jump_proxy_public_ip": { - "value": "146.48.31.105", - "type": "string" - }, - "ssh_sources": { - "value": { - "d4s_vpn_1_cidr": "146.48.122.27/32", - "d4s_vpn_2_cidr": "146.48.122.49/32", - "infrascience_net_cidr": "146.48.122.0/23", - "isti_net_cidr": "146.48.80.0/21", - "isti_vpn_gw1": "146.48.80.101/32", - "isti_vpn_gw2": "146.48.80.102/32", - "isti_vpn_gw3": "146.48.80.103/32", - "s2i2s_net_cidr": "146.48.28.0/22", - "s2i2s_vpn_1_cidr": "146.48.28.10/32", - "s2i2s_vpn_2_cidr": "146.48.28.11/32", - "shell_d4s_cidr": "146.48.122.95/32" - }, - "type": [ - "map", - "string" - ] - }, - "traffic_from_main_haproxy": { - "value": { - "all_tags": [], - "delete_default_rules": true, - "description": "Allow traffic from the main L7 HAPROXY load balancers", - "id": "56ba7585-659a-49ac-8d8e-c85ebcb1179f", - "name": "traffic_from_the_main_load_balancers", - "region": "isti_area_pi_1", - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "type": [ - "object", - { - "all_tags": [ - "set", - "string" - ], - "delete_default_rules": "bool", - "description": "string", - "id": "string", - "name": "string", - "region": "string", - "tags": [ - "set", - "string" - ], - "tenant_id": "string", - "timeouts": [ - "object", - { - "delete": "string" - } - ] - } - ] - }, - "ubuntu2204_data_file": { - "value": "../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh", - "type": "string" - }, - "ubuntu_2204": { - "value": { - "name": "Ubuntu-Jammy-22.04", - "user_data_file": "../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh", - "uuid": "54768889-8556-4be4-a2eb-82a4d9b34627" - }, - "type": [ - "map", - "string" - ] - } - }, - "resources": [ - { - "mode": "data", - "type": "terraform_remote_state", - "name": "privnet_dns_router", - "provider": "provider[\"terraform.io/builtin/terraform\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "backend": "local", - "config": { - "value": { - "path": "../main_net_dns_router/terraform.tfstate" - }, - "type": [ - "object", - { - "path": "string" - } - ] - }, - "defaults": null, - "outputs": { - "value": { - "almalinux_9": { - "name": "AlmaLinux-9.0-20220718", - "uuid": "541650fc-dd19-4f38-bb1d-7333ed9dd688" - }, - "availability_zone_no_gpu_name": "cnr-isti-nova-a", - "availability_zone_with_gpu_name": "cnr-isti-nova-gpu-a", - "availability_zones_names": { - "availability_zone_no_gpu": "cnr-isti-nova-a", - "availability_zone_with_gpu": "cnr-isti-nova-gpu-a" - }, - "centos_7": { - "name": "CentOS-7", - "user_data_file": "../../s2i2s_openstack_vm_data_scripts/el.sh", - "uuid": "f0187a99-64f6-462a-ab5f-ef52fe62f2ca" - }, - "default_security_group_name": "default_for_all", - "dns_zone": { - "attributes": {}, - "description": "DNS primary zone for the S2I2S project", - "disable_status_check": false, - "email": "postmaster@isti.cnr.it", - "id": "e826e777-0196-4f63-b2a9-df07f70e618f", - "masters": [], - "name": "s2i2s.cloud.isti.cnr.it.", - "project_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "region": "isti_area_pi_1", - "timeouts": null, - "ttl": 8600, - "type": "PRIMARY", - "value_specs": null - }, - "dns_zone_id": "e826e777-0196-4f63-b2a9-df07f70e618f", - "el7_data_file": "../../s2i2s_openstack_vm_data_scripts/el.sh", - "external_gateway_ip": [ - { - "ip_address": "146.48.30.6", - "subnet_id": "57f87509-4016-46fb-b8c3-25fca7f72ccb" - } - ], - "external_network": { - "id": "1d2ff137-6ff7-4017-be2b-0d6c4af2353b", - "name": "external-network" - }, - "external_network_id": "1d2ff137-6ff7-4017-be2b-0d6c4af2353b", - "flavor_list": { - "c1_large": "c1.large", - "c1_medium": "c1.medium", - "c1_small": "c1.small", - "c2_large": "c2.large", - "m1_large": "m1.large", - "m1_medium": "m1.medium", - "m1_xlarge": "m1.xlarge", - "m1_xxl": "m1.xxl", - "m2_large": "m2.large", - "m2_medium": "m2.medium", - "m2_small": "m2.small", - "m3_large": "m3.large" - }, - "floating_ip_pools": { - "main_public_ip_pool": "external-network" - }, - "main_private_network": { - "admin_state_up": true, - "all_tags": [], - "availability_zone_hints": [], - "description": "S2I2S private network (use this as the main network)", - "dns_domain": "s2i2s.cloud.isti.cnr.it.", - "external": false, - "id": "f371c239-6d5d-4ac8-a17e-af607752d82c", - "mtu": 8942, - "name": "s2i2s-proj-main", - "port_security_enabled": true, - "qos_policy_id": "", - "region": "isti_area_pi_1", - "segments": [ - { - "network_type": "geneve", - "physical_network": "", - "segmentation_id": 47850 - } - ], - "shared": false, - "tags": null, - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null, - "transparent_vlan": false, - "value_specs": null - }, - "main_private_network_id": "f371c239-6d5d-4ac8-a17e-af607752d82c", - "main_region": "isti_area_pi_1", - "main_subnet_network": { - "all_tags": [], - "allocation_pool": [ - { - "end": "10.10.7.254", - "start": "10.10.1.1" - } - ], - "cidr": "10.10.0.0/21", - "description": "S2I2S main private subnet", - "dns_nameservers": [ - "146.48.29.97", - "146.48.29.98", - "146.48.29.99" - ], - "dns_publish_fixed_ip": false, - "enable_dhcp": true, - "gateway_ip": "10.10.0.1", - "id": "19c649ee-96ea-438b-ac0c-512afdf5046d", - "ip_version": 4, - "ipv6_address_mode": "", - "ipv6_ra_mode": "", - "name": "s2i2s-proj-main-subnet", - "network_id": "f371c239-6d5d-4ac8-a17e-af607752d82c", - "no_gateway": false, - "prefix_length": null, - "region": "isti_area_pi_1", - "segment_id": "", - "service_types": [], - "subnetpool_id": "", - "tags": null, - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null, - "value_specs": null - }, - "main_subnet_network_id": "19c649ee-96ea-438b-ac0c-512afdf5046d", - "mtu_size": 8942, - "os_project_data": { - "id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "name": "s2i2s-proj-cloud" - }, - "policy_list": { - "affinity": "affinity", - "anti_affinity": "anti-affinity", - "soft_affinity": "soft-affinity", - "soft_anti_affinity": "soft-anti-affinity" - }, - "resolvers_ip": [ - "146.48.29.97", - "146.48.29.98", - "146.48.29.99" - ], - "ssh_sources": { - "d4s_vpn_1_cidr": "146.48.122.27/32", - "d4s_vpn_2_cidr": "146.48.122.49/32", - "infrascience_net_cidr": "146.48.122.0/23", - "isti_net_cidr": "146.48.80.0/21", - "isti_vpn_gw1": "146.48.80.101/32", - "isti_vpn_gw2": "146.48.80.102/32", - "isti_vpn_gw3": "146.48.80.103/32", - "s2i2s_net_cidr": "146.48.28.0/22", - "s2i2s_vpn_1_cidr": "146.48.28.10/32", - "s2i2s_vpn_2_cidr": "146.48.28.11/32", - "shell_d4s_cidr": "146.48.122.95/32" - }, - "ubuntu2204_data_file": "../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh", - "ubuntu_2204": { - "name": "Ubuntu-Jammy-22.04", - "user_data_file": "../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh", - "uuid": "54768889-8556-4be4-a2eb-82a4d9b34627" - } - }, - "type": [ - "object", - { - "almalinux_9": [ - "map", - "string" - ], - "availability_zone_no_gpu_name": "string", - "availability_zone_with_gpu_name": "string", - "availability_zones_names": [ - "map", - "string" - ], - "centos_7": [ - "map", - "string" - ], - "default_security_group_name": "string", - "dns_zone": [ - "object", - { - "attributes": [ - "map", - "string" - ], - "description": "string", - "disable_status_check": "bool", - "email": "string", - "id": "string", - "masters": [ - "set", - "string" - ], - "name": "string", - "project_id": "string", - "region": "string", - "timeouts": [ - "object", - { - "create": "string", - "delete": "string", - "update": "string" - } - ], - "ttl": "number", - "type": "string", - "value_specs": [ - "map", - "string" - ] - } - ], - "dns_zone_id": "string", - "el7_data_file": "string", - "external_gateway_ip": [ - "list", - [ - "object", - { - "ip_address": "string", - "subnet_id": "string" - } - ] - ], - "external_network": [ - "map", - "string" - ], - "external_network_id": "string", - "flavor_list": [ - "map", - "string" - ], - "floating_ip_pools": [ - "map", - "string" - ], - "main_private_network": [ - "object", - { - "admin_state_up": "bool", - "all_tags": [ - "set", - "string" - ], - "availability_zone_hints": [ - "set", - "string" - ], - "description": "string", - "dns_domain": "string", - "external": "bool", - "id": "string", - "mtu": "number", - "name": "string", - "port_security_enabled": "bool", - "qos_policy_id": "string", - "region": "string", - "segments": [ - "set", - [ - "object", - { - "network_type": "string", - "physical_network": "string", - "segmentation_id": "number" - } - ] - ], - "shared": "bool", - "tags": [ - "set", - "string" - ], - "tenant_id": "string", - "timeouts": [ - "object", - { - "create": "string", - "delete": "string" - } - ], - "transparent_vlan": "bool", - "value_specs": [ - "map", - "string" - ] - } - ], - "main_private_network_id": "string", - "main_region": "string", - "main_subnet_network": [ - "object", - { - "all_tags": [ - "set", - "string" - ], - "allocation_pool": [ - "set", - [ - "object", - { - "end": "string", - "start": "string" - } - ] - ], - "cidr": "string", - "description": "string", - "dns_nameservers": [ - "list", - "string" - ], - "dns_publish_fixed_ip": "bool", - "enable_dhcp": "bool", - "gateway_ip": "string", - "id": "string", - "ip_version": "number", - "ipv6_address_mode": "string", - "ipv6_ra_mode": "string", - "name": "string", - "network_id": "string", - "no_gateway": "bool", - "prefix_length": "number", - "region": "string", - "segment_id": "string", - "service_types": [ - "list", - "string" - ], - "subnetpool_id": "string", - "tags": [ - "set", - "string" - ], - "tenant_id": "string", - "timeouts": [ - "object", - { - "create": "string", - "delete": "string" - } - ], - "value_specs": [ - "map", - "string" - ] - } - ], - "main_subnet_network_id": "string", - "mtu_size": "number", - "os_project_data": [ - "map", - "string" - ], - "policy_list": [ - "map", - "string" - ], - "resolvers_ip": [ - "list", - "string" - ], - "ssh_sources": [ - "map", - "string" - ], - "ubuntu2204_data_file": "string", - "ubuntu_2204": [ - "map", - "string" - ] - } - ] - }, - "workspace": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0 - } - ] - }, - { - "mode": "managed", - "type": "openstack_blockstorage_volume_v3", - "name": "prometheus_data_vol", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "attachment": [ - { - "device": "/dev/vdb", - "id": "59c354bc-bc05-4dbb-ad58-236da1186974", - "instance_id": "d2a37e7c-3eaa-4929-b70d-cfb55416d8bc" - } - ], - "availability_zone": "nova", - "consistency_group_id": null, - "description": "", - "enable_online_resize": true, - "id": "59c354bc-bc05-4dbb-ad58-236da1186974", - "image_id": null, - "metadata": {}, - "multiattach": null, - "name": "prometheus-data", - "region": "isti_area_pi_1", - "scheduler_hints": [], - "size": 100, - "snapshot_id": "", - "source_replica": null, - "source_vol_id": "", - "timeouts": null, - "volume_type": "CephSSD" - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=" - } - ] - }, - { - "mode": "managed", - "type": "openstack_compute_instance_v2", - "name": "internal_ca", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "access_ip_v4": "10.10.0.4", - "access_ip_v6": "", - "admin_pass": null, - "all_metadata": {}, - "all_tags": [], - "availability_zone": "cnr-isti-nova-a", - "availability_zone_hints": "cnr-isti-nova-a", - "block_device": [ - { - "boot_index": 0, - "delete_on_termination": false, - "destination_type": "volume", - "device_type": "", - "disk_bus": "", - "guest_format": "", - "multiattach": false, - "source_type": "image", - "uuid": "fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075", - "volume_size": 10, - "volume_type": "" - } - ], - "config_drive": null, - "created": "2026-02-03 14:57:24 +0000 UTC", - "flavor_id": "2", - "flavor_name": "m1.small", - "floating_ip": null, - "force_delete": false, - "id": "286b7a4d-33c6-451f-9019-d9fd79265181", - "image_id": "Attempt to boot from volume - no image supplied", - "image_name": null, - "key_pair": "adellam", - "metadata": null, - "name": "ca", - "network": [ - { - "access_network": false, - "fixed_ip_v4": "10.10.0.4", - "fixed_ip_v6": "", - "floating_ip": "", - "mac": "fa:16:3e:21:d8:29", - "name": "s2i2s-proj-main", - "port": "22a51c59-75c8-4031-a283-212751553d12", - "uuid": "f371c239-6d5d-4ac8-a17e-af607752d82c" - } - ], - "network_mode": null, - "personality": [], - "power_state": "active", - "region": "isti_area_pi_1", - "scheduler_hints": [], - "security_groups": [ - "default_for_all" - ], - "stop_before_destroy": false, - "tags": [], - "timeouts": null, - "updated": "2026-02-03 14:59:18 +0000 UTC", - "user_data": "164cdf695f3b4a01a2f8b9dc0af2f87629bd89a7", - "vendor_options": [], - "volume": [] - }, - "sensitive_attributes": [ - [ - { - "type": "get_attr", - "value": "admin_pass" - } - ] - ], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjoxODAwMDAwMDAwMDAwLCJkZWxldGUiOjE4MDAwMDAwMDAwMDAsInVwZGF0ZSI6MTgwMDAwMDAwMDAwMH19", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_networking_port_v2.internal_ca_port", - "openstack_networking_secgroup_v2.default" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_compute_instance_v2", - "name": "main_haproxy_l7", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "index_key": 0, - "schema_version": 0, - "attributes": { - "access_ip_v4": "10.10.0.11", - "access_ip_v6": "", - "admin_pass": null, - "all_metadata": {}, - "all_tags": [], - "availability_zone": "cnr-isti-nova-a", - "availability_zone_hints": "cnr-isti-nova-a", - "block_device": [ - { - "boot_index": 0, - "delete_on_termination": false, - "destination_type": "volume", - "device_type": "", - "disk_bus": "", - "guest_format": "", - "multiattach": false, - "source_type": "image", - "uuid": "fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075", - "volume_size": 10, - "volume_type": "" - } - ], - "config_drive": null, - "created": "2026-02-03 14:57:25 +0000 UTC", - "flavor_id": "4", - "flavor_name": "m1.medium", - "floating_ip": null, - "force_delete": false, - "id": "b42a0e99-6172-4a5d-886c-c0fb016da60e", - "image_id": "Attempt to boot from volume - no image supplied", - "image_name": null, - "key_pair": "adellam", - "metadata": null, - "name": "main-haproxy-l7-01", - "network": [ - { - "access_network": false, - "fixed_ip_v4": "10.10.0.11", - "fixed_ip_v6": "", - "floating_ip": "", - "mac": "fa:16:3e:b1:42:7f", - "name": "s2i2s-proj-main", - "port": "bd7d2fb6-db15-42d5-9779-1411c914a65e", - "uuid": "f371c239-6d5d-4ac8-a17e-af607752d82c" - } - ], - "network_mode": null, - "personality": [], - "power_state": "active", - "region": "isti_area_pi_1", - "scheduler_hints": [ - { - "additional_properties": {}, - "build_near_host_ip": "", - "different_cell": [], - "different_host": [], - "group": "f691b2ad-07f9-452d-9bec-6f1a3e6f9626", - "query": [], - "same_host": [], - "target_cell": "" - } - ], - "security_groups": [ - "default_for_all", - "traffic_from_main_lb_to_haproxy_l7" - ], - "stop_before_destroy": false, - "tags": [], - "timeouts": null, - "updated": "2026-02-03 14:58:26 +0000 UTC", - "user_data": "164cdf695f3b4a01a2f8b9dc0af2f87629bd89a7", - "vendor_options": [], - "volume": [] - }, - "sensitive_attributes": [ - [ - { - "type": "get_attr", - "value": "admin_pass" - } - ] - ], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjoxODAwMDAwMDAwMDAwLCJkZWxldGUiOjE4MDAwMDAwMDAwMDAsInVwZGF0ZSI6MTgwMDAwMDAwMDAwMH19", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_compute_servergroup_v2.main_haproxy_l7", - "openstack_networking_port_v2.main_haproxy_l7_port", - "openstack_networking_secgroup_v2.default", - "openstack_networking_secgroup_v2.main_lb_to_haproxy_l7" - ] - }, - { - "index_key": 1, - "schema_version": 0, - "attributes": { - "access_ip_v4": "10.10.0.12", - "access_ip_v6": "", - "admin_pass": null, - "all_metadata": {}, - "all_tags": [], - "availability_zone": "cnr-isti-nova-a", - "availability_zone_hints": "cnr-isti-nova-a", - "block_device": [ - { - "boot_index": 0, - "delete_on_termination": false, - "destination_type": "volume", - "device_type": "", - "disk_bus": "", - "guest_format": "", - "multiattach": false, - "source_type": "image", - "uuid": "fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075", - "volume_size": 10, - "volume_type": "" - } - ], - "config_drive": null, - "created": "2026-02-03 14:57:25 +0000 UTC", - "flavor_id": "4", - "flavor_name": "m1.medium", - "floating_ip": null, - "force_delete": false, - "id": "b770644a-5c39-4db2-8811-fb62751bd789", - "image_id": "Attempt to boot from volume - no image supplied", - "image_name": null, - "key_pair": "adellam", - "metadata": null, - "name": "main-haproxy-l7-02", - "network": [ - { - "access_network": false, - "fixed_ip_v4": "10.10.0.12", - "fixed_ip_v6": "", - "floating_ip": "", - "mac": "fa:16:3e:a9:49:bb", - "name": "s2i2s-proj-main", - "port": "3018d5db-3d39-472f-b623-07c85e792ed5", - "uuid": "f371c239-6d5d-4ac8-a17e-af607752d82c" - } - ], - "network_mode": null, - "personality": [], - "power_state": "active", - "region": "isti_area_pi_1", - "scheduler_hints": [ - { - "additional_properties": {}, - "build_near_host_ip": "", - "different_cell": [], - "different_host": [], - "group": "f691b2ad-07f9-452d-9bec-6f1a3e6f9626", - "query": [], - "same_host": [], - "target_cell": "" - } - ], - "security_groups": [ - "default_for_all", - "traffic_from_main_lb_to_haproxy_l7" - ], - "stop_before_destroy": false, - "tags": [], - "timeouts": null, - "updated": "2026-02-03 14:58:25 +0000 UTC", - "user_data": "164cdf695f3b4a01a2f8b9dc0af2f87629bd89a7", - "vendor_options": [], - "volume": [] - }, - "sensitive_attributes": [ - [ - { - "type": "get_attr", - "value": "admin_pass" - } - ] - ], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjoxODAwMDAwMDAwMDAwLCJkZWxldGUiOjE4MDAwMDAwMDAwMDAsInVwZGF0ZSI6MTgwMDAwMDAwMDAwMH19", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_compute_servergroup_v2.main_haproxy_l7", - "openstack_networking_port_v2.main_haproxy_l7_port", - "openstack_networking_secgroup_v2.default", - "openstack_networking_secgroup_v2.main_lb_to_haproxy_l7" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_compute_instance_v2", - "name": "prometheus_server", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "access_ip_v4": "10.10.0.10", - "access_ip_v6": "", - "admin_pass": null, - "all_metadata": {}, - "all_tags": [], - "availability_zone": "cnr-isti-nova-a", - "availability_zone_hints": "cnr-isti-nova-a", - "block_device": [ - { - "boot_index": 0, - "delete_on_termination": false, - "destination_type": "volume", - "device_type": "", - "disk_bus": "", - "guest_format": "", - "multiattach": false, - "source_type": "image", - "uuid": "fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075", - "volume_size": 10, - "volume_type": "" - } - ], - "config_drive": null, - "created": "2026-02-03 14:57:28 +0000 UTC", - "flavor_id": "4", - "flavor_name": "m1.medium", - "floating_ip": null, - "force_delete": false, - "id": "d2a37e7c-3eaa-4929-b70d-cfb55416d8bc", - "image_id": "Attempt to boot from volume - no image supplied", - "image_name": null, - "key_pair": "adellam", - "metadata": null, - "name": "prometheus", - "network": [ - { - "access_network": false, - "fixed_ip_v4": "10.10.0.10", - "fixed_ip_v6": "", - "floating_ip": "", - "mac": "fa:16:3e:bc:2d:03", - "name": "s2i2s-proj-main", - "port": "a6cf4c4b-d5b8-4fd9-a9b7-5a355aeea808", - "uuid": "f371c239-6d5d-4ac8-a17e-af607752d82c" - } - ], - "network_mode": null, - "personality": [], - "power_state": "active", - "region": "isti_area_pi_1", - "scheduler_hints": [], - "security_groups": [ - "default_for_all", - "prometheus_access_from_grafana", - "restricted_web_service" - ], - "stop_before_destroy": false, - "tags": [], - "timeouts": null, - "updated": "2026-02-03 14:59:22 +0000 UTC", - "user_data": "164cdf695f3b4a01a2f8b9dc0af2f87629bd89a7", - "vendor_options": [], - "volume": [] - }, - "sensitive_attributes": [ - [ - { - "type": "get_attr", - "value": "admin_pass" - } - ] - ], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjoxODAwMDAwMDAwMDAwLCJkZWxldGUiOjE4MDAwMDAwMDAwMDAsInVwZGF0ZSI6MTgwMDAwMDAwMDAwMH19", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_networking_port_v2.prometheus_server_port", - "openstack_networking_secgroup_v2.default", - "openstack_networking_secgroup_v2.prometheus_access_from_grafana", - "openstack_networking_secgroup_v2.restricted_web" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_compute_instance_v2", - "name": "ssh_jump_proxy", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "access_ip_v4": "10.10.0.5", - "access_ip_v6": "", - "admin_pass": null, - "all_metadata": {}, - "all_tags": [], - "availability_zone": "cnr-isti-nova-a", - "availability_zone_hints": "cnr-isti-nova-a", - "block_device": [ - { - "boot_index": 0, - "delete_on_termination": false, - "destination_type": "volume", - "device_type": "", - "disk_bus": "", - "guest_format": "", - "multiattach": false, - "source_type": "image", - "uuid": "fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075", - "volume_size": 30, - "volume_type": "" - } - ], - "config_drive": null, - "created": "2026-02-03 14:57:25 +0000 UTC", - "flavor_id": "10", - "flavor_name": "m2.small", - "floating_ip": null, - "force_delete": false, - "id": "6aed1634-ec4e-43b0-a8c6-2da42a27ad25", - "image_id": "Attempt to boot from volume - no image supplied", - "image_name": null, - "key_pair": "adellam", - "metadata": null, - "name": "ssh-jump-proxy", - "network": [ - { - "access_network": false, - "fixed_ip_v4": "10.10.0.5", - "fixed_ip_v6": "", - "floating_ip": "", - "mac": "fa:16:3e:75:76:4e", - "name": "s2i2s-proj-main", - "port": "4ca1a42a-2cee-43a5-bec7-b044c1361af5", - "uuid": "f371c239-6d5d-4ac8-a17e-af607752d82c" - } - ], - "network_mode": null, - "personality": [], - "power_state": "active", - "region": "isti_area_pi_1", - "scheduler_hints": [], - "security_groups": [ - "default_for_all", - "ssh_access_to_the_jump_node" - ], - "stop_before_destroy": false, - "tags": [], - "timeouts": null, - "updated": "2026-02-03 15:00:14 +0000 UTC", - "user_data": "164cdf695f3b4a01a2f8b9dc0af2f87629bd89a7", - "vendor_options": [], - "volume": [] - }, - "sensitive_attributes": [ - [ - { - "type": "get_attr", - "value": "admin_pass" - } - ] - ], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjoxODAwMDAwMDAwMDAwLCJkZWxldGUiOjE4MDAwMDAwMDAwMDAsInVwZGF0ZSI6MTgwMDAwMDAwMDAwMH19", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_networking_port_v2.ssh_jump_proxy_port", - "openstack_networking_secgroup_v2.access_to_the_jump_proxy", - "openstack_networking_secgroup_v2.default" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_compute_servergroup_v2", - "name": "main_haproxy_l7", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "id": "f691b2ad-07f9-452d-9bec-6f1a3e6f9626", - "members": [ - "b42a0e99-6172-4a5d-886c-c0fb016da60e", - "b770644a-5c39-4db2-8811-fb62751bd789" - ], - "name": "main_haproxy_l7", - "policies": [ - "anti-affinity" - ], - "region": "isti_area_pi_1", - "rules": [ - { - "max_server_per_host": 0 - } - ], - "value_specs": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "bnVsbA==" - } - ] - }, - { - "mode": "managed", - "type": "openstack_compute_volume_attach_v2", - "name": "prometheus_data_attach_vol", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "device": "/dev/vdb", - "id": "d2a37e7c-3eaa-4929-b70d-cfb55416d8bc/59c354bc-bc05-4dbb-ad58-236da1186974", - "instance_id": "d2a37e7c-3eaa-4929-b70d-cfb55416d8bc", - "multiattach": null, - "region": "isti_area_pi_1", - "timeouts": null, - "vendor_options": [], - "volume_id": "59c354bc-bc05-4dbb-ad58-236da1186974" - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_blockstorage_volume_v3.prometheus_data_vol", - "openstack_compute_instance_v2.prometheus_server", - "openstack_networking_port_v2.prometheus_server_port", - "openstack_networking_secgroup_v2.default", - "openstack_networking_secgroup_v2.prometheus_access_from_grafana", - "openstack_networking_secgroup_v2.restricted_web" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_dns_recordset_v2", - "name": "alertmanager_server_recordset", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "Prometheus alertmanager", - "disable_status_check": false, - "id": "e826e777-0196-4f63-b2a9-df07f70e618f/b8256293-8c32-4fa9-a43c-fa115339504f", - "name": "alertmanager.s2i2s.cloud.isti.cnr.it.", - "project_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "records": [ - "prometheus.s2i2s.cloud.isti.cnr.it." - ], - "region": "isti_area_pi_1", - "timeouts": null, - "ttl": 8600, - "type": "CNAME", - "value_specs": null, - "zone_id": "e826e777-0196-4f63-b2a9-df07f70e618f" - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_dns_recordset_v2", - "name": "main_lb_dns_recordset", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "Public IP address of the main Octavia load balancer", - "disable_status_check": false, - "id": "e826e777-0196-4f63-b2a9-df07f70e618f/a8190fb9-9468-4b95-9e66-9e1fa86bf1c2", - "name": "octavia-main-lb.s2i2s.cloud.isti.cnr.it.", - "project_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "records": [ - "146.48.30.30" - ], - "region": "isti_area_pi_1", - "timeouts": null, - "ttl": 8600, - "type": "A", - "value_specs": null, - "zone_id": "e826e777-0196-4f63-b2a9-df07f70e618f" - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_networking_floatingip_v2.main_lb_ip" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_dns_recordset_v2", - "name": "prometheus_server_recordset", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "Public IP address of the Prometheus server", - "disable_status_check": false, - "id": "e826e777-0196-4f63-b2a9-df07f70e618f/ba7b0d61-3364-4451-9c9e-45e957c400ca", - "name": "prometheus.s2i2s.cloud.isti.cnr.it.", - "project_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "records": [ - "146.48.31.67" - ], - "region": "isti_area_pi_1", - "timeouts": null, - "ttl": 8600, - "type": "A", - "value_specs": null, - "zone_id": "e826e777-0196-4f63-b2a9-df07f70e618f" - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_networking_floatingip_v2.prometheus_server_ip" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_dns_recordset_v2", - "name": "ssh_jump_proxy_recordset", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "Public IP address of the SSH Proxy Jump server", - "disable_status_check": false, - "id": "e826e777-0196-4f63-b2a9-df07f70e618f/72909fe7-c0a5-4060-bad6-be3c25680078", - "name": "ssh-jump-proxy.s2i2s.cloud.isti.cnr.it.", - "project_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "records": [ - "146.48.31.105" - ], - "region": "isti_area_pi_1", - "timeouts": null, - "ttl": 8600, - "type": "A", - "value_specs": null, - "zone_id": "e826e777-0196-4f63-b2a9-df07f70e618f" - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_networking_floatingip_v2.ssh_jump_proxy_ip" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_lb_listener_v2", - "name": "main_haproxy_http_listener", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "admin_state_up": true, - "allowed_cidrs": [], - "connection_limit": -1, - "default_pool_id": "8ed17fa2-9259-4511-a91f-24820d80983a", - "default_tls_container_ref": "", - "description": "HTTP listener of the main HAPROXY instances", - "id": "ef26b673-26ff-4466-9c51-9114d85eeb64", - "insert_headers": {}, - "loadbalancer_id": "44dbe548-a436-4816-927a-2912f443b50f", - "name": "main_haproxy_http_listener", - "protocol": "TCP", - "protocol_port": 80, - "region": "isti_area_pi_1", - "sni_container_refs": [], - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeout_client_data": 50000, - "timeout_member_connect": 5000, - "timeout_member_data": 50000, - "timeout_tcp_inspect": 0, - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_lb_loadbalancer_v2.main_lb" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_lb_listener_v2", - "name": "main_haproxy_https_listener", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "admin_state_up": true, - "allowed_cidrs": [], - "connection_limit": -1, - "default_pool_id": "c631cfb1-327b-4e28-8d3c-8532f566a527", - "default_tls_container_ref": "", - "description": "HTTPS listener of the main HAPROXY instances", - "id": "eb03441a-3aa4-4221-a698-81062c2cb9c1", - "insert_headers": {}, - "loadbalancer_id": "44dbe548-a436-4816-927a-2912f443b50f", - "name": "main_haproxy_https_listener", - "protocol": "TCP", - "protocol_port": 443, - "region": "isti_area_pi_1", - "sni_container_refs": [], - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeout_client_data": 3600000, - "timeout_member_connect": 10000, - "timeout_member_data": 7200000, - "timeout_tcp_inspect": 0, - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_lb_loadbalancer_v2.main_lb" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_lb_listener_v2", - "name": "main_haproxy_stats_listener", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "admin_state_up": true, - "allowed_cidrs": [], - "connection_limit": -1, - "default_pool_id": "281bb090-bd54-4c1f-97ea-e5d2d6cff28d", - "default_tls_container_ref": "", - "description": "Listener for the stats of the main HAPROXY instances", - "id": "d410acca-25e5-45a2-9d22-90f33f2730d4", - "insert_headers": {}, - "loadbalancer_id": "44dbe548-a436-4816-927a-2912f443b50f", - "name": "main_haproxy_stats_listener", - "protocol": "TCP", - "protocol_port": 8880, - "region": "isti_area_pi_1", - "sni_container_refs": [], - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeout_client_data": 50000, - "timeout_member_connect": 5000, - "timeout_member_data": 50000, - "timeout_tcp_inspect": 0, - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_lb_loadbalancer_v2.main_lb" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_lb_loadbalancer_v2", - "name": "main_lb", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "admin_state_up": true, - "availability_zone": "", - "description": "Main L4 load balancer for the S2I2S services", - "flavor_id": "", - "id": "44dbe548-a436-4816-927a-2912f443b50f", - "loadbalancer_provider": "ovn", - "name": "s2i2s-cloud-l4-load-balancer", - "region": "isti_area_pi_1", - "security_group_ids": [ - "0b382ff1-38ac-44bd-9f63-27df73af0476" - ], - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null, - "vip_address": "10.10.0.20", - "vip_network_id": "f371c239-6d5d-4ac8-a17e-af607752d82c", - "vip_port_id": "af6ed877-0aa6-4728-bba2-4e99666eca8c", - "vip_subnet_id": "19c649ee-96ea-438b-ac0c-512afdf5046d" - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6MzAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_lb_members_v2", - "name": "main_haproxy_http_pool_members", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "id": "8ed17fa2-9259-4511-a91f-24820d80983a", - "member": [ - { - "address": "10.10.0.11", - "admin_state_up": true, - "backup": false, - "id": "2a0877ca-2fe6-4fbe-8de8-bae08ad47cbf", - "monitor_address": "", - "monitor_port": 0, - "name": "haproxy l7 1", - "protocol_port": 80, - "subnet_id": "", - "weight": 1 - }, - { - "address": "10.10.0.12", - "admin_state_up": true, - "backup": false, - "id": "61c22a78-dd8c-4928-b301-733baac59389", - "monitor_address": "", - "monitor_port": 0, - "name": "haproxy l7 2", - "protocol_port": 80, - "subnet_id": "", - "weight": 1 - } - ], - "pool_id": "8ed17fa2-9259-4511-a91f-24820d80983a", - "region": "isti_area_pi_1", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_lb_listener_v2.main_haproxy_http_listener", - "openstack_lb_loadbalancer_v2.main_lb", - "openstack_lb_pool_v2.main_haproxy_http_pool" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_lb_members_v2", - "name": "main_haproxy_https_pool_members", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "id": "c631cfb1-327b-4e28-8d3c-8532f566a527", - "member": [ - { - "address": "10.10.0.11", - "admin_state_up": true, - "backup": false, - "id": "0f143500-1d20-44c3-8624-70eb5aa600ea", - "monitor_address": "", - "monitor_port": 0, - "name": "haproxy l7 1", - "protocol_port": 443, - "subnet_id": "", - "weight": 1 - }, - { - "address": "10.10.0.12", - "admin_state_up": true, - "backup": false, - "id": "47925117-1d2c-4bef-adac-652ada82506e", - "monitor_address": "", - "monitor_port": 0, - "name": "haproxy l7 2", - "protocol_port": 443, - "subnet_id": "", - "weight": 1 - } - ], - "pool_id": "c631cfb1-327b-4e28-8d3c-8532f566a527", - "region": "isti_area_pi_1", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_lb_listener_v2.main_haproxy_https_listener", - "openstack_lb_loadbalancer_v2.main_lb", - "openstack_lb_pool_v2.main_haproxy_https_pool" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_lb_members_v2", - "name": "main_haproxy_stats_pool_members", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "id": "281bb090-bd54-4c1f-97ea-e5d2d6cff28d", - "member": [ - { - "address": "10.10.0.11", - "admin_state_up": true, - "backup": false, - "id": "f8d622ee-162d-44bf-aec1-1bcba2201cf1", - "monitor_address": "", - "monitor_port": 0, - "name": "haproxy l7 1", - "protocol_port": 8880, - "subnet_id": "", - "weight": 1 - }, - { - "address": "10.10.0.12", - "admin_state_up": true, - "backup": false, - "id": "d6c2a4cf-bc49-4564-b3b5-f348939d9dd9", - "monitor_address": "", - "monitor_port": 0, - "name": "haproxy l7 2", - "protocol_port": 8880, - "subnet_id": "", - "weight": 1 - } - ], - "pool_id": "281bb090-bd54-4c1f-97ea-e5d2d6cff28d", - "region": "isti_area_pi_1", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_lb_listener_v2.main_haproxy_stats_listener", - "openstack_lb_loadbalancer_v2.main_lb", - "openstack_lb_pool_v2.main_haproxy_stats_pool" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_lb_monitor_v2", - "name": "main_haproxy_http_monitor", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "admin_state_up": true, - "delay": 20, - "expected_codes": "", - "http_method": "", - "id": "837af662-7c87-4fd4-b25d-29aaac58f348", - "max_retries": 3, - "max_retries_down": 3, - "name": "main_haproxy_http_monitor", - "pool_id": "8ed17fa2-9259-4511-a91f-24820d80983a", - "region": "isti_area_pi_1", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeout": 5, - "timeouts": null, - "type": "TCP", - "url_path": "" - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_lb_listener_v2.main_haproxy_http_listener", - "openstack_lb_loadbalancer_v2.main_lb", - "openstack_lb_pool_v2.main_haproxy_http_pool" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_lb_monitor_v2", - "name": "main_haproxy_https_monitor", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "admin_state_up": true, - "delay": 20, - "expected_codes": "", - "http_method": "", - "id": "03e086f3-6fb6-4109-a6cc-1475ac25b694", - "max_retries": 3, - "max_retries_down": 3, - "name": "main_haproxy_https_monitor", - "pool_id": "c631cfb1-327b-4e28-8d3c-8532f566a527", - "region": "isti_area_pi_1", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeout": 5, - "timeouts": null, - "type": "TCP", - "url_path": "" - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_lb_listener_v2.main_haproxy_https_listener", - "openstack_lb_loadbalancer_v2.main_lb", - "openstack_lb_pool_v2.main_haproxy_https_pool" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_lb_monitor_v2", - "name": "main_haproxy_stats_monitor", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "admin_state_up": true, - "delay": 20, - "expected_codes": "", - "http_method": "", - "id": "2c0dfc3e-de80-40d9-9594-158062522f33", - "max_retries": 3, - "max_retries_down": 3, - "name": "main_haproxy_stats_monitor", - "pool_id": "281bb090-bd54-4c1f-97ea-e5d2d6cff28d", - "region": "isti_area_pi_1", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeout": 5, - "timeouts": null, - "type": "TCP", - "url_path": "" - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_lb_listener_v2.main_haproxy_stats_listener", - "openstack_lb_loadbalancer_v2.main_lb", - "openstack_lb_pool_v2.main_haproxy_stats_pool" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_lb_pool_v2", - "name": "main_haproxy_http_pool", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "admin_state_up": true, - "description": "Pool for the HTTP listener of the main HAPROXY instances", - "id": "8ed17fa2-9259-4511-a91f-24820d80983a", - "lb_method": "SOURCE_IP_PORT", - "listener_id": "ef26b673-26ff-4466-9c51-9114d85eeb64", - "loadbalancer_id": null, - "name": "main-haproxy-lb-http", - "persistence": [ - { - "cookie_name": "", - "type": "SOURCE_IP" - } - ], - "protocol": "TCP", - "region": "isti_area_pi_1", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_lb_listener_v2.main_haproxy_http_listener", - "openstack_lb_loadbalancer_v2.main_lb" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_lb_pool_v2", - "name": "main_haproxy_https_pool", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "admin_state_up": true, - "description": "Pool for the HTTPS listener of the main HAPROXY instances", - "id": "c631cfb1-327b-4e28-8d3c-8532f566a527", - "lb_method": "SOURCE_IP_PORT", - "listener_id": "eb03441a-3aa4-4221-a698-81062c2cb9c1", - "loadbalancer_id": null, - "name": "main-haproxy-lb-https", - "persistence": [ - { - "cookie_name": "", - "type": "SOURCE_IP" - } - ], - "protocol": "TCP", - "region": "isti_area_pi_1", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_lb_listener_v2.main_haproxy_https_listener", - "openstack_lb_loadbalancer_v2.main_lb" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_lb_pool_v2", - "name": "main_haproxy_stats_pool", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "admin_state_up": true, - "description": "Pool for the stats of the main HAPROXY instances", - "id": "281bb090-bd54-4c1f-97ea-e5d2d6cff28d", - "lb_method": "SOURCE_IP_PORT", - "listener_id": "d410acca-25e5-45a2-9d22-90f33f2730d4", - "loadbalancer_id": null, - "name": "main-haproxy-lb-stats", - "persistence": [ - { - "cookie_name": "", - "type": "SOURCE_IP" - } - ], - "protocol": "TCP", - "region": "isti_area_pi_1", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_lb_listener_v2.main_haproxy_stats_listener", - "openstack_lb_loadbalancer_v2.main_lb" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_floatingip_associate_v2", - "name": "main_lb", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "fixed_ip": "10.10.0.20", - "floating_ip": "146.48.30.30", - "id": "973de1d6-75e9-4b67-90fa-b24221975e6f", - "port_id": "af6ed877-0aa6-4728-bba2-4e99666eca8c", - "region": "isti_area_pi_1" - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "bnVsbA==", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_lb_loadbalancer_v2.main_lb", - "openstack_networking_floatingip_v2.main_lb_ip" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_floatingip_associate_v2", - "name": "prometheus_server", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "fixed_ip": "10.10.0.10", - "floating_ip": "146.48.31.67", - "id": "35526990-3174-4822-aac3-b20a5c8a34bf", - "port_id": "a6cf4c4b-d5b8-4fd9-a9b7-5a355aeea808", - "region": "isti_area_pi_1" - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "bnVsbA==", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_networking_floatingip_v2.prometheus_server_ip", - "openstack_networking_port_v2.prometheus_server_port", - "openstack_networking_secgroup_v2.default", - "openstack_networking_secgroup_v2.prometheus_access_from_grafana", - "openstack_networking_secgroup_v2.restricted_web" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_floatingip_associate_v2", - "name": "ssh_jump_proxy", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "fixed_ip": "10.10.0.5", - "floating_ip": "146.48.31.105", - "id": "a22d4285-4314-4dd9-9f8b-b52fb3f6dd60", - "port_id": "4ca1a42a-2cee-43a5-bec7-b044c1361af5", - "region": "isti_area_pi_1" - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "bnVsbA==", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_networking_floatingip_v2.ssh_jump_proxy_ip", - "openstack_networking_port_v2.ssh_jump_proxy_port", - "openstack_networking_secgroup_v2.access_to_the_jump_proxy", - "openstack_networking_secgroup_v2.default" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_floatingip_v2", - "name": "main_lb_ip", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "address": "146.48.30.30", - "all_tags": [], - "description": "Main L4 load balancer for the S2I2S services", - "dns_domain": "", - "dns_name": "", - "fixed_ip": "10.10.0.20", - "id": "973de1d6-75e9-4b67-90fa-b24221975e6f", - "pool": "external-network", - "port_id": "af6ed877-0aa6-4728-bba2-4e99666eca8c", - "region": "isti_area_pi_1", - "subnet_id": null, - "subnet_ids": null, - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null, - "value_specs": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=" - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_floatingip_v2", - "name": "prometheus_server_ip", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "address": "146.48.31.67", - "all_tags": [], - "description": "Prometheus server", - "dns_domain": "", - "dns_name": "", - "fixed_ip": "10.10.0.10", - "id": "35526990-3174-4822-aac3-b20a5c8a34bf", - "pool": "external-network", - "port_id": "a6cf4c4b-d5b8-4fd9-a9b7-5a355aeea808", - "region": "isti_area_pi_1", - "subnet_id": null, - "subnet_ids": null, - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null, - "value_specs": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=" - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_floatingip_v2", - "name": "ssh_jump_proxy_ip", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "address": "146.48.31.105", - "all_tags": [], - "description": "SSH Proxy Jump Server", - "dns_domain": "", - "dns_name": "", - "fixed_ip": "10.10.0.5", - "id": "a22d4285-4314-4dd9-9f8b-b52fb3f6dd60", - "pool": "external-network", - "port_id": "4ca1a42a-2cee-43a5-bec7-b044c1361af5", - "region": "isti_area_pi_1", - "subnet_id": null, - "subnet_ids": null, - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null, - "value_specs": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=" - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_port_v2", - "name": "internal_ca_port", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "admin_state_up": true, - "all_fixed_ips": [ - "10.10.0.4" - ], - "all_security_group_ids": [ - "1ec8a419-f9cf-473f-a022-6499d67d57b8" - ], - "all_tags": [], - "allowed_address_pairs": [], - "binding": [ - { - "host_id": "", - "profile": "", - "vif_details": {}, - "vif_type": "", - "vnic_type": "normal" - } - ], - "description": "", - "device_id": "286b7a4d-33c6-451f-9019-d9fd79265181", - "device_owner": "compute:cnr-isti-nova-a", - "dns_assignment": [ - { - "fqdn": "ca.internal-cloud.isti.cnr.it.", - "hostname": "ca", - "ip_address": "10.10.0.4" - } - ], - "dns_name": "ca", - "extra_dhcp_option": [], - "fixed_ip": [ - { - "ip_address": "10.10.0.4", - "subnet_id": "19c649ee-96ea-438b-ac0c-512afdf5046d" - } - ], - "id": "22a51c59-75c8-4031-a283-212751553d12", - "mac_address": "fa:16:3e:21:d8:29", - "name": "ca-port", - "network_id": "f371c239-6d5d-4ac8-a17e-af607752d82c", - "no_fixed_ip": null, - "no_security_groups": null, - "port_security_enabled": true, - "qos_policy_id": "", - "region": "isti_area_pi_1", - "security_group_ids": [ - "1ec8a419-f9cf-473f-a022-6499d67d57b8" - ], - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null, - "value_specs": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_networking_secgroup_v2.default" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_port_v2", - "name": "main_haproxy_l7_port", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "index_key": 0, - "schema_version": 0, - "attributes": { - "admin_state_up": true, - "all_fixed_ips": [ - "10.10.0.11" - ], - "all_security_group_ids": [ - "1ec8a419-f9cf-473f-a022-6499d67d57b8", - "613cacac-ac46-46ab-ba7a-d66f61cce84d" - ], - "all_tags": [], - "allowed_address_pairs": [], - "binding": [ - { - "host_id": "", - "profile": "", - "vif_details": {}, - "vif_type": "", - "vnic_type": "normal" - } - ], - "description": "", - "device_id": "b42a0e99-6172-4a5d-886c-c0fb016da60e", - "device_owner": "compute:cnr-isti-nova-a", - "dns_assignment": [ - { - "fqdn": "main-haproxy-l7-01.internal-cloud.isti.cnr.it.", - "hostname": "main-haproxy-l7-01", - "ip_address": "10.10.0.11" - } - ], - "dns_name": "main-haproxy-l7-01", - "extra_dhcp_option": [], - "fixed_ip": [ - { - "ip_address": "10.10.0.11", - "subnet_id": "19c649ee-96ea-438b-ac0c-512afdf5046d" - } - ], - "id": "bd7d2fb6-db15-42d5-9779-1411c914a65e", - "mac_address": "fa:16:3e:b1:42:7f", - "name": "main-haproxy-l7-01-port", - "network_id": "f371c239-6d5d-4ac8-a17e-af607752d82c", - "no_fixed_ip": null, - "no_security_groups": null, - "port_security_enabled": true, - "qos_policy_id": "", - "region": "isti_area_pi_1", - "security_group_ids": [ - "1ec8a419-f9cf-473f-a022-6499d67d57b8", - "613cacac-ac46-46ab-ba7a-d66f61cce84d" - ], - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null, - "value_specs": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_networking_secgroup_v2.default", - "openstack_networking_secgroup_v2.main_lb_to_haproxy_l7" - ] - }, - { - "index_key": 1, - "schema_version": 0, - "attributes": { - "admin_state_up": true, - "all_fixed_ips": [ - "10.10.0.12" - ], - "all_security_group_ids": [ - "1ec8a419-f9cf-473f-a022-6499d67d57b8", - "613cacac-ac46-46ab-ba7a-d66f61cce84d" - ], - "all_tags": [], - "allowed_address_pairs": [], - "binding": [ - { - "host_id": "", - "profile": "", - "vif_details": {}, - "vif_type": "", - "vnic_type": "normal" - } - ], - "description": "", - "device_id": "b770644a-5c39-4db2-8811-fb62751bd789", - "device_owner": "compute:cnr-isti-nova-a", - "dns_assignment": [ - { - "fqdn": "main-haproxy-l7-02.internal-cloud.isti.cnr.it.", - "hostname": "main-haproxy-l7-02", - "ip_address": "10.10.0.12" - } - ], - "dns_name": "main-haproxy-l7-02", - "extra_dhcp_option": [], - "fixed_ip": [ - { - "ip_address": "10.10.0.12", - "subnet_id": "19c649ee-96ea-438b-ac0c-512afdf5046d" - } - ], - "id": "3018d5db-3d39-472f-b623-07c85e792ed5", - "mac_address": "fa:16:3e:a9:49:bb", - "name": "main-haproxy-l7-02-port", - "network_id": "f371c239-6d5d-4ac8-a17e-af607752d82c", - "no_fixed_ip": null, - "no_security_groups": null, - "port_security_enabled": true, - "qos_policy_id": "", - "region": "isti_area_pi_1", - "security_group_ids": [ - "1ec8a419-f9cf-473f-a022-6499d67d57b8", - "613cacac-ac46-46ab-ba7a-d66f61cce84d" - ], - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null, - "value_specs": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_networking_secgroup_v2.default", - "openstack_networking_secgroup_v2.main_lb_to_haproxy_l7" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_port_v2", - "name": "prometheus_server_port", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "admin_state_up": true, - "all_fixed_ips": [ - "10.10.0.10" - ], - "all_security_group_ids": [ - "1ec8a419-f9cf-473f-a022-6499d67d57b8", - "359d7ae7-cdff-47c2-bf69-7d423860d2d2", - "48e9366f-23a8-47df-abcd-66f84d4af395" - ], - "all_tags": [], - "allowed_address_pairs": [], - "binding": [ - { - "host_id": "", - "profile": "", - "vif_details": {}, - "vif_type": "", - "vnic_type": "normal" - } - ], - "description": "", - "device_id": "d2a37e7c-3eaa-4929-b70d-cfb55416d8bc", - "device_owner": "compute:cnr-isti-nova-a", - "dns_assignment": [ - { - "fqdn": "prometheus.internal-cloud.isti.cnr.it.", - "hostname": "prometheus", - "ip_address": "10.10.0.10" - } - ], - "dns_name": "prometheus", - "extra_dhcp_option": [], - "fixed_ip": [ - { - "ip_address": "10.10.0.10", - "subnet_id": "19c649ee-96ea-438b-ac0c-512afdf5046d" - } - ], - "id": "a6cf4c4b-d5b8-4fd9-a9b7-5a355aeea808", - "mac_address": "fa:16:3e:bc:2d:03", - "name": "prometheus-port", - "network_id": "f371c239-6d5d-4ac8-a17e-af607752d82c", - "no_fixed_ip": null, - "no_security_groups": null, - "port_security_enabled": true, - "qos_policy_id": "", - "region": "isti_area_pi_1", - "security_group_ids": [ - "1ec8a419-f9cf-473f-a022-6499d67d57b8", - "359d7ae7-cdff-47c2-bf69-7d423860d2d2", - "48e9366f-23a8-47df-abcd-66f84d4af395" - ], - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null, - "value_specs": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_networking_secgroup_v2.default", - "openstack_networking_secgroup_v2.prometheus_access_from_grafana", - "openstack_networking_secgroup_v2.restricted_web" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_port_v2", - "name": "ssh_jump_proxy_port", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "admin_state_up": true, - "all_fixed_ips": [ - "10.10.0.5" - ], - "all_security_group_ids": [ - "1ec8a419-f9cf-473f-a022-6499d67d57b8", - "4c6b6683-77fa-4d1a-8ba2-41acf10a12ba" - ], - "all_tags": [], - "allowed_address_pairs": [], - "binding": [ - { - "host_id": "", - "profile": "", - "vif_details": {}, - "vif_type": "", - "vnic_type": "normal" - } - ], - "description": "", - "device_id": "6aed1634-ec4e-43b0-a8c6-2da42a27ad25", - "device_owner": "compute:cnr-isti-nova-a", - "dns_assignment": [ - { - "fqdn": "ssh-jump-proxy.internal-cloud.isti.cnr.it.", - "hostname": "ssh-jump-proxy", - "ip_address": "10.10.0.5" - } - ], - "dns_name": "ssh-jump-proxy", - "extra_dhcp_option": [], - "fixed_ip": [ - { - "ip_address": "10.10.0.5", - "subnet_id": "19c649ee-96ea-438b-ac0c-512afdf5046d" - } - ], - "id": "4ca1a42a-2cee-43a5-bec7-b044c1361af5", - "mac_address": "fa:16:3e:75:76:4e", - "name": "ssh-jump-proxy-port", - "network_id": "f371c239-6d5d-4ac8-a17e-af607752d82c", - "no_fixed_ip": null, - "no_security_groups": null, - "port_security_enabled": true, - "qos_policy_id": "", - "region": "isti_area_pi_1", - "security_group_ids": [ - "1ec8a419-f9cf-473f-a022-6499d67d57b8", - "4c6b6683-77fa-4d1a-8ba2-41acf10a12ba" - ], - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null, - "value_specs": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_networking_secgroup_v2.access_to_the_jump_proxy", - "openstack_networking_secgroup_v2.default" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "egress-ipv4", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "", - "direction": "egress", - "ethertype": "IPv4", - "id": "b231bb15-1585-4c96-9b48-b6907d89cf1d", - "port_range_max": 0, - "port_range_min": 0, - "protocol": "", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "", - "security_group_id": "1ec8a419-f9cf-473f-a022-6499d67d57b8", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.default" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "grafana_d4s", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "Allow HTTPS from grafana.d4science.org", - "direction": "ingress", - "ethertype": "IPv4", - "id": "2f887282-b19c-4223-9db7-cb1c47e50e4d", - "port_range_max": 443, - "port_range_min": 443, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "146.48.28.103/32", - "security_group_id": "48e9366f-23a8-47df-abcd-66f84d4af395", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.prometheus_access_from_grafana" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "haproxy-l7-1-443", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "HTTPS traffic from HAPROXY L7 1", - "direction": "ingress", - "ethertype": "IPv4", - "id": "8f5353f9-98a9-4dc2-aa32-cb0a007bd182", - "port_range_max": 443, - "port_range_min": 443, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "10.10.0.11/32", - "security_group_id": "56ba7585-659a-49ac-8d8e-c85ebcb1179f", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.traffic_from_main_haproxy" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "haproxy-l7-1-80", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "HTTP traffic from HAPROXY L7 1", - "direction": "ingress", - "ethertype": "IPv4", - "id": "9cb7007d-1d03-44e7-9e99-816afc7ba905", - "port_range_max": 80, - "port_range_min": 80, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "10.10.0.11/32", - "security_group_id": "56ba7585-659a-49ac-8d8e-c85ebcb1179f", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.traffic_from_main_haproxy" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "haproxy-l7-1-8080", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "HTTP traffic from HAPROXY L7 1", - "direction": "ingress", - "ethertype": "IPv4", - "id": "b02fab4f-49b2-475b-8c37-0104210ae4af", - "port_range_max": 8080, - "port_range_min": 8080, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "10.10.0.11/32", - "security_group_id": "56ba7585-659a-49ac-8d8e-c85ebcb1179f", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.traffic_from_main_haproxy" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "haproxy-l7-1-8888", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "HTTP traffic from HAPROXY L7 1", - "direction": "ingress", - "ethertype": "IPv4", - "id": "e4721ff4-95ba-4c3f-a4c4-f09f578ee377", - "port_range_max": 8888, - "port_range_min": 8888, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "10.10.0.11/32", - "security_group_id": "56ba7585-659a-49ac-8d8e-c85ebcb1179f", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.traffic_from_main_haproxy" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "haproxy-l7-2-443", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "HTTPS traffic from HAPROXY L7 2", - "direction": "ingress", - "ethertype": "IPv4", - "id": "0de5b769-eb27-4636-b453-47105706cc40", - "port_range_max": 443, - "port_range_min": 443, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "10.10.0.12/32", - "security_group_id": "56ba7585-659a-49ac-8d8e-c85ebcb1179f", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.traffic_from_main_haproxy" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "haproxy-l7-2-80", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "HTTP traffic from HAPROXY L7 2", - "direction": "ingress", - "ethertype": "IPv4", - "id": "480b75d2-2c6e-4e2b-8f2f-7a30c27c767c", - "port_range_max": 80, - "port_range_min": 80, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "10.10.0.12/32", - "security_group_id": "56ba7585-659a-49ac-8d8e-c85ebcb1179f", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.traffic_from_main_haproxy" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "haproxy-l7-2-8080", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "HTTP traffic from HAPROXY L7 2", - "direction": "ingress", - "ethertype": "IPv4", - "id": "12bd97f1-9a9b-46b8-96dd-2adda86f3475", - "port_range_max": 8080, - "port_range_min": 8080, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "10.10.0.12/32", - "security_group_id": "56ba7585-659a-49ac-8d8e-c85ebcb1179f", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.traffic_from_main_haproxy" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "haproxy-l7-2-8888", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "HTTP traffic from HAPROXY L7 2", - "direction": "ingress", - "ethertype": "IPv4", - "id": "cc6792c1-b5aa-4835-a293-7284fc144e30", - "port_range_max": 8888, - "port_range_min": 8888, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "10.10.0.12/32", - "security_group_id": "56ba7585-659a-49ac-8d8e-c85ebcb1179f", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.traffic_from_main_haproxy" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "haproxy_l7_1_peer", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "Peer traffic from haproxy l7 1 to l7 2", - "direction": "ingress", - "ethertype": "IPv4", - "id": "f916f790-e372-4393-b0e2-d4f56a47db63", - "port_range_max": 10000, - "port_range_min": 10000, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "10.10.0.11/32", - "security_group_id": "613cacac-ac46-46ab-ba7a-d66f61cce84d", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.main_lb_to_haproxy_l7" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "haproxy_l7_2_peer", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "Peer traffic from haproxy l7 2 to l7 1", - "direction": "ingress", - "ethertype": "IPv4", - "id": "7dfd1cd5-e533-4d80-a4ba-9fabba824634", - "port_range_max": 10000, - "port_range_min": 10000, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "10.10.0.12/32", - "security_group_id": "613cacac-ac46-46ab-ba7a-d66f61cce84d", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.main_lb_to_haproxy_l7" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "http_from_everywhere", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "Allow HTTP from everywhere", - "direction": "ingress", - "ethertype": "IPv4", - "id": "8e2d9198-7b9e-45a3-ada2-f62924d86e2f", - "port_range_max": 80, - "port_range_min": 80, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "0.0.0.0/0", - "security_group_id": "359d7ae7-cdff-47c2-bf69-7d423860d2d2", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.restricted_web" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "https_from_d4s_vpn_1", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "Allow HTTPS from D4Science VPN 1", - "direction": "ingress", - "ethertype": "IPv4", - "id": "cf5e6a80-2ef1-4261-85b4-fc53f10fc932", - "port_range_max": 443, - "port_range_min": 443, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "146.48.122.27/32", - "security_group_id": "359d7ae7-cdff-47c2-bf69-7d423860d2d2", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.restricted_web" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "https_from_d4s_vpn_2", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "Allow HTTPS from D4Science VPN 2", - "direction": "ingress", - "ethertype": "IPv4", - "id": "84bb5373-36e6-49a6-8605-c689e476833d", - "port_range_max": 443, - "port_range_min": 443, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "146.48.122.49/32", - "security_group_id": "359d7ae7-cdff-47c2-bf69-7d423860d2d2", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.restricted_web" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "https_from_s2i2s_vpn_1", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "Allow HTTPS from S2I2S VPN 1", - "direction": "ingress", - "ethertype": "IPv4", - "id": "6822707c-ca3a-4230-ab91-075310c4277a", - "port_range_max": 443, - "port_range_min": 443, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "146.48.28.10/32", - "security_group_id": "359d7ae7-cdff-47c2-bf69-7d423860d2d2", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.restricted_web" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "https_from_s2i2s_vpn_2", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "Allow HTTPS from S2I2S VPN 2", - "direction": "ingress", - "ethertype": "IPv4", - "id": "b981a99f-0a99-4d76-8da4-316542afba4d", - "port_range_max": 443, - "port_range_min": 443, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "146.48.28.11/32", - "security_group_id": "359d7ae7-cdff-47c2-bf69-7d423860d2d2", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.restricted_web" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "https_from_shell_d4s", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "Allow HTTPS from shell.d4science.org", - "direction": "ingress", - "ethertype": "IPv4", - "id": "b8a463f6-5587-4495-ac71-f0f34abf78e7", - "port_range_max": 443, - "port_range_min": 443, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "146.48.122.95/32", - "security_group_id": "359d7ae7-cdff-47c2-bf69-7d423860d2d2", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.restricted_web" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "ingress-icmp", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "Allow ICMP from remote", - "direction": "ingress", - "ethertype": "IPv4", - "id": "a2344bc4-79ca-4458-9185-b63791b50f0f", - "port_range_max": 0, - "port_range_min": 0, - "protocol": "icmp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "0.0.0.0/0", - "security_group_id": "1ec8a419-f9cf-473f-a022-6499d67d57b8", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.default" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "octavia_to_haproxy_l7_443", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "Traffic from the octavia lb instance to HAPROXY l7 port 443", - "direction": "ingress", - "ethertype": "IPv4", - "id": "05ecdb59-5b66-4120-824a-ede0038e155c", - "port_range_max": 443, - "port_range_min": 443, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "10.10.0.0/21", - "security_group_id": "613cacac-ac46-46ab-ba7a-d66f61cce84d", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_networking_secgroup_v2.main_lb_to_haproxy_l7" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "octavia_to_haproxy_l7_80", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "Traffic from the octavia lb instance to HAPROXY l7 port 80", - "direction": "ingress", - "ethertype": "IPv4", - "id": "17091b8b-774e-4760-8276-8e66eac4cfd4", - "port_range_max": 80, - "port_range_min": 80, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "10.10.0.0/21", - "security_group_id": "613cacac-ac46-46ab-ba7a-d66f61cce84d", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_networking_secgroup_v2.main_lb_to_haproxy_l7" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "octavia_to_haproxy_l7_8880", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "Traffic from the octavia lb instance to HAPROXY l7 port 8880", - "direction": "ingress", - "ethertype": "IPv4", - "id": "2af01d24-e99a-4029-b27a-ff9b605015f8", - "port_range_max": 8880, - "port_range_min": 8880, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "10.10.0.0/21", - "security_group_id": "613cacac-ac46-46ab-ba7a-d66f61cce84d", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "data.terraform_remote_state.privnet_dns_router", - "openstack_networking_secgroup_v2.main_lb_to_haproxy_l7" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "prometheus-node", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "Prometheus access to the node exporter", - "direction": "ingress", - "ethertype": "IPv4", - "id": "df3d2e24-2457-4140-af24-6d59d536c421", - "port_range_max": 9100, - "port_range_min": 9100, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "10.10.0.10/32", - "security_group_id": "1ec8a419-f9cf-473f-a022-6499d67d57b8", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.default" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "public_http", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "Allow HTTP from everywhere", - "direction": "ingress", - "ethertype": "IPv4", - "id": "58149f48-3a84-4e0e-aa70-734f479c020f", - "port_range_max": 80, - "port_range_min": 80, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "0.0.0.0/0", - "security_group_id": "31140e64-667a-4044-b388-79afcc6bcb69", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.public_web" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "public_https", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "Allow HTTPS from everywhere", - "direction": "ingress", - "ethertype": "IPv4", - "id": "9a3826c7-105e-4761-8a7b-fb2d9f63c27c", - "port_range_max": 443, - "port_range_min": 443, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "0.0.0.0/0", - "security_group_id": "31140e64-667a-4044-b388-79afcc6bcb69", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.public_web" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "shell_443", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "https debug port 443 from the shell jump proxy", - "direction": "ingress", - "ethertype": "IPv4", - "id": "0e2a05db-a7c9-489f-9b8a-6445022e9420", - "port_range_max": 443, - "port_range_min": 443, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "10.10.0.5/32", - "security_group_id": "6c21f51b-9cad-4051-99b6-221bed658a83", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.debugging" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "shell_80", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "http debug port 80 from the shell jump proxy", - "direction": "ingress", - "ethertype": "IPv4", - "id": "0456811c-4ebb-489d-8387-aedd09eb349a", - "port_range_max": 80, - "port_range_min": 80, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "10.10.0.5/32", - "security_group_id": "6c21f51b-9cad-4051-99b6-221bed658a83", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.debugging" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "shell_8100", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "Tomcat debug on port 8100 from the shell jump proxy", - "direction": "ingress", - "ethertype": "IPv4", - "id": "c479d69a-8000-4d6b-985d-c8b9b58f7a7f", - "port_range_max": 8100, - "port_range_min": 8100, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "10.10.0.5/32", - "security_group_id": "6c21f51b-9cad-4051-99b6-221bed658a83", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.debugging" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "ssh-d4s-vpn-1", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "SSH traffic from D4Science VPN 1", - "direction": "ingress", - "ethertype": "IPv4", - "id": "30eebdd6-f912-44ba-ba2a-f54c0e89449d", - "port_range_max": 22, - "port_range_min": 22, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "146.48.122.27/32", - "security_group_id": "4c6b6683-77fa-4d1a-8ba2-41acf10a12ba", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.access_to_the_jump_proxy" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "ssh-d4s-vpn-2", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "SSH traffic from D4Science VPN 2", - "direction": "ingress", - "ethertype": "IPv4", - "id": "ffa7c61d-9963-4da0-a713-00fda18d7e38", - "port_range_max": 22, - "port_range_min": 22, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "146.48.122.49/32", - "security_group_id": "4c6b6683-77fa-4d1a-8ba2-41acf10a12ba", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.access_to_the_jump_proxy" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "ssh-infrascience-net", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "SSH traffic from the InfraScience network", - "direction": "ingress", - "ethertype": "IPv4", - "id": "f8010337-c98b-4adc-8285-bfb8eb7f0fa1", - "port_range_max": 22, - "port_range_min": 22, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "146.48.122.0/23", - "security_group_id": "4c6b6683-77fa-4d1a-8ba2-41acf10a12ba", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.access_to_the_jump_proxy" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "ssh-jump-proxy", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "SSH traffic from the jump proxy", - "direction": "ingress", - "ethertype": "IPv4", - "id": "43f8a26d-29f6-4790-ab01-f4b12c9c52a8", - "port_range_max": 22, - "port_range_min": 22, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "10.10.0.5/32", - "security_group_id": "1ec8a419-f9cf-473f-a022-6499d67d57b8", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.default" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "ssh-s2i2s-vpn-1", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "SSH traffic from S2I2S VPN 1", - "direction": "ingress", - "ethertype": "IPv4", - "id": "b2165477-3d0b-489f-945c-d2ca9e6abd22", - "port_range_max": 22, - "port_range_min": 22, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "146.48.28.10/32", - "security_group_id": "4c6b6683-77fa-4d1a-8ba2-41acf10a12ba", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.access_to_the_jump_proxy" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "ssh-s2i2s-vpn-2", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "SSH traffic from S2I2S VPN 2", - "direction": "ingress", - "ethertype": "IPv4", - "id": "9410e2a2-9109-4f09-8248-a6a1c7962260", - "port_range_max": 22, - "port_range_min": 22, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "146.48.28.11/32", - "security_group_id": "4c6b6683-77fa-4d1a-8ba2-41acf10a12ba", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.access_to_the_jump_proxy" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_rule_v2", - "name": "ssh-shell-d4s", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "description": "SSH traffic from shell.d4science.org", - "direction": "ingress", - "ethertype": "IPv4", - "id": "2533f58b-fe98-4202-841c-f00f58bca4dc", - "port_range_max": 22, - "port_range_min": 22, - "protocol": "tcp", - "region": "isti_area_pi_1", - "remote_group_id": "", - "remote_ip_prefix": "146.48.122.95/32", - "security_group_id": "4c6b6683-77fa-4d1a-8ba2-41acf10a12ba", - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", - "dependencies": [ - "openstack_networking_secgroup_v2.access_to_the_jump_proxy" - ] - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_v2", - "name": "access_to_the_jump_proxy", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "all_tags": [], - "delete_default_rules": true, - "description": "Security group that allows SSH access to the jump node from a limited set of sources", - "id": "4c6b6683-77fa-4d1a-8ba2-41acf10a12ba", - "name": "ssh_access_to_the_jump_node", - "region": "isti_area_pi_1", - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==" - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_v2", - "name": "debugging", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "all_tags": [], - "delete_default_rules": true, - "description": "Security group that allows web app debugging via tunnel from the ssh jump node", - "id": "6c21f51b-9cad-4051-99b6-221bed658a83", - "name": "debugging_from_jump_node", - "region": "isti_area_pi_1", - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==" - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_v2", - "name": "default", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "all_tags": [], - "delete_default_rules": true, - "description": "Default security group with rules for ssh access via jump proxy, prometheus scraping", - "id": "1ec8a419-f9cf-473f-a022-6499d67d57b8", - "name": "default_for_all", - "region": "isti_area_pi_1", - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==" - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_v2", - "name": "main_lb_to_haproxy_l7", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "all_tags": [], - "delete_default_rules": true, - "description": "Traffic coming from the main L4 lb directed to the haproxy l7 servers", - "id": "613cacac-ac46-46ab-ba7a-d66f61cce84d", - "name": "traffic_from_main_lb_to_haproxy_l7", - "region": "isti_area_pi_1", - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==" - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_v2", - "name": "prometheus_access_from_grafana", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "all_tags": [], - "delete_default_rules": true, - "description": "The public grafana server must be able to get data from Prometheus", - "id": "48e9366f-23a8-47df-abcd-66f84d4af395", - "name": "prometheus_access_from_grafana", - "region": "isti_area_pi_1", - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==" - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_v2", - "name": "public_web", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "all_tags": [], - "delete_default_rules": true, - "description": "Security group that allows HTTPS and HTTP from everywhere, for the services that are not behind any load balancer", - "id": "31140e64-667a-4044-b388-79afcc6bcb69", - "name": "public_web_service", - "region": "isti_area_pi_1", - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==" - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_v2", - "name": "restricted_web", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "all_tags": [], - "delete_default_rules": true, - "description": "Security group that restricts HTTPS sources to the VPN nodes and shell.d4science.org. HTTP is open to all, because letsencrypt", - "id": "359d7ae7-cdff-47c2-bf69-7d423860d2d2", - "name": "restricted_web_service", - "region": "isti_area_pi_1", - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==" - } - ] - }, - { - "mode": "managed", - "type": "openstack_networking_secgroup_v2", - "name": "traffic_from_main_haproxy", - "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", - "instances": [ - { - "schema_version": 0, - "attributes": { - "all_tags": [], - "delete_default_rules": true, - "description": "Allow traffic from the main L7 HAPROXY load balancers", - "id": "56ba7585-659a-49ac-8d8e-c85ebcb1179f", - "name": "traffic_from_the_main_load_balancers", - "region": "isti_area_pi_1", - "tags": [], - "tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3", - "timeouts": null - }, - "sensitive_attributes": [], - "identity_schema_version": 0, - "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==" - } - ] - } - ], - "check_results": null -} +{"version":4,"terraform_version":"1.11.6","serial":164,"lineage":"63543f0d-4b49-2066-95b6-653706374703","outputs":{"access_to_the_jump_proxy":{"value":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows SSH access to the jump node from a limited set of sources","id":"4c6b6683-77fa-4d1a-8ba2-41acf10a12ba","name":"ssh_access_to_the_jump_node","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"type":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}]},"availability_zones_names":{"value":{"availability_zone_no_gpu":"cnr-isti-nova-a","availability_zone_with_gpu":"cnr-isti-nova-gpu-a"},"type":["map","string"]},"basic_services_ip":{"value":{"ca":"10.10.0.4","ca_cidr":"10.10.0.4/32","haproxy_l7_1":"10.10.0.11","haproxy_l7_1_cidr":"10.10.0.11/32","haproxy_l7_2":"10.10.0.12","haproxy_l7_2_cidr":"10.10.0.12/32","octavia_main":"10.10.0.20","octavia_main_cidr":"10.10.0.20/32","prometheus":"10.10.0.10","prometheus_cidr":"10.10.0.10/32","ssh_jump":"10.10.0.5","ssh_jump_cidr":"10.10.0.5/32"},"type":["map","string"]},"debugging":{"value":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows web app debugging via tunnel from the ssh jump node","id":"6c21f51b-9cad-4051-99b6-221bed658a83","name":"debugging_from_jump_node","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"type":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}]},"default_security_group":{"value":{"all_tags":[],"delete_default_rules":true,"description":"Default security group with rules for ssh access via jump proxy, prometheus scraping","id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","name":"default_for_all","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"type":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}]},"default_security_group_id":{"value":"1ec8a419-f9cf-473f-a022-6499d67d57b8","type":"string"},"default_security_group_name":{"value":"default_for_all","type":"string"},"dns_zone":{"value":{"attributes":{},"description":"DNS primary zone for the S2I2S project","disable_status_check":false,"email":"postmaster@isti.cnr.it","id":"e826e777-0196-4f63-b2a9-df07f70e618f","masters":[],"name":"s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"PRIMARY","value_specs":null},"type":["object",{"attributes":["map","string"],"description":"string","disable_status_check":"bool","email":"string","id":"string","masters":["set","string"],"name":"string","project_id":"string","region":"string","timeouts":["object",{"create":"string","delete":"string","update":"string"}],"ttl":"number","type":"string","value_specs":["map","string"]}]},"dns_zone_id":{"value":"e826e777-0196-4f63-b2a9-df07f70e618f","type":"string"},"floating_ip_pools":{"value":{"main_public_ip_pool":"external-network"},"type":["map","string"]},"haproxy_l7_data":{"value":{"flavor":"m1.medium","name":"main-haproxy-l7","vm_count":"2"},"type":["map","string"]},"internal_ca_data":{"value":{"flavor":"m1.small","name":"ca"},"type":["map","string"]},"internal_ca_id":{"value":"286b7a4d-33c6-451f-9019-d9fd79265181","type":"string"},"main_haproxy_l7_ids":{"value":["b42a0e99-6172-4a5d-886c-c0fb016da60e","b770644a-5c39-4db2-8811-fb62751bd789"],"type":["tuple",["string","string"]]},"main_haproxy_l7_ip":{"value":["10.10.0.11","10.10.0.12"],"type":["list","string"]},"main_lb_to_haproxy_l7_security_group":{"value":{"all_tags":[],"delete_default_rules":true,"description":"Traffic coming from the main L4 lb (OVN provider, client IP is preserved) directed to the haproxy l7 servers","id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","name":"traffic_from_main_lb_to_haproxy_l7","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"type":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}]},"main_loadbalancer_hostname":{"value":"octavia-main-lb.s2i2s.cloud.isti.cnr.it.","type":"string"},"main_loadbalancer_id":{"value":"44dbe548-a436-4816-927a-2912f443b50f","type":"string"},"main_loadbalancer_ip":{"value":"10.10.0.20","type":"string"},"main_loadbalancer_public_ip":{"value":"146.48.30.30","type":"string"},"main_private_network":{"value":{"admin_state_up":true,"all_tags":[],"availability_zone_hints":[],"description":"S2I2S private network (use this as the main network)","dns_domain":"s2i2s.cloud.isti.cnr.it.","external":false,"id":"f371c239-6d5d-4ac8-a17e-af607752d82c","mtu":8942,"name":"s2i2s-proj-main","port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","segments":[{"network_type":"geneve","physical_network":"","segmentation_id":47850}],"shared":false,"tags":null,"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"transparent_vlan":false,"value_specs":null},"type":["object",{"admin_state_up":"bool","all_tags":["set","string"],"availability_zone_hints":["set","string"],"description":"string","dns_domain":"string","external":"bool","id":"string","mtu":"number","name":"string","port_security_enabled":"bool","qos_policy_id":"string","region":"string","segments":["set",["object",{"network_type":"string","physical_network":"string","segmentation_id":"number"}]],"shared":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"transparent_vlan":"bool","value_specs":["map","string"]}]},"main_private_subnet":{"value":{"all_tags":[],"allocation_pool":[{"end":"10.10.7.254","start":"10.10.1.1"}],"cidr":"10.10.0.0/21","description":"S2I2S main private subnet","dns_nameservers":["146.48.29.97","146.48.29.98","146.48.29.99"],"dns_publish_fixed_ip":false,"enable_dhcp":true,"gateway_ip":"10.10.0.1","id":"19c649ee-96ea-438b-ac0c-512afdf5046d","ip_version":4,"ipv6_address_mode":"","ipv6_ra_mode":"","name":"s2i2s-proj-main-subnet","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_gateway":false,"prefix_length":null,"region":"isti_area_pi_1","segment_id":"","service_types":[],"subnetpool_id":"","tags":null,"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"type":["object",{"all_tags":["set","string"],"allocation_pool":["set",["object",{"end":"string","start":"string"}]],"cidr":"string","description":"string","dns_nameservers":["list","string"],"dns_publish_fixed_ip":"bool","enable_dhcp":"bool","gateway_ip":"string","id":"string","ip_version":"number","ipv6_address_mode":"string","ipv6_ra_mode":"string","name":"string","network_id":"string","no_gateway":"bool","prefix_length":"number","region":"string","segment_id":"string","service_types":["list","string"],"subnetpool_id":"string","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"value_specs":["map","string"]}]},"main_region":{"value":"isti_area_pi_1","type":"string"},"main_subnet_network_id":{"value":"19c649ee-96ea-438b-ac0c-512afdf5046d","type":"string"},"mtu_size":{"value":8942,"type":"number"},"os_project_data":{"value":{"id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","name":"s2i2s-proj-cloud"},"type":["map","string"]},"prometheus_access_from_grafana":{"value":{"all_tags":[],"delete_default_rules":true,"description":"The public grafana server must be able to get data from Prometheus","id":"48e9366f-23a8-47df-abcd-66f84d4af395","name":"prometheus_access_from_grafana","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"type":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}]},"prometheus_hostname":{"value":"prometheus.s2i2s.cloud.isti.cnr.it.","type":"string"},"prometheus_public_ip":{"value":"146.48.31.67","type":"string"},"prometheus_server_data":{"value":{"flavor":"m1.medium","name":"prometheus","public_grafana_server_cidr":"146.48.28.103/32","vol_data_device":"/dev/vdb","vol_data_name":"prometheus-data","vol_data_size":"100"},"type":["map","string"]},"prometheus_server_id":{"value":"d2a37e7c-3eaa-4929-b70d-cfb55416d8bc","type":"string"},"public_web":{"value":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows HTTPS and HTTP from everywhere, for the services that are not behind any load balancer","id":"31140e64-667a-4044-b388-79afcc6bcb69","name":"public_web_service","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"type":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}]},"resolvers_ip":{"value":["146.48.29.97","146.48.29.98","146.48.29.99"],"type":["list","string"]},"restricted_web":{"value":{"all_tags":[],"delete_default_rules":true,"description":"Security group that restricts HTTPS sources to the VPN nodes and shell.d4science.org. HTTP is open to all, because letsencrypt","id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","name":"restricted_web_service","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"type":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}]},"ssh_jump_proxy":{"value":{"flavor":"m2.small","name":"ssh-jump-proxy"},"type":["map","string"]},"ssh_jump_proxy_hostname":{"value":"ssh-jump-proxy.s2i2s.cloud.isti.cnr.it.","type":"string"},"ssh_jump_proxy_id":{"value":"6aed1634-ec4e-43b0-a8c6-2da42a27ad25","type":"string"},"ssh_jump_proxy_public_ip":{"value":"146.48.31.105","type":"string"},"ssh_sources":{"value":{"d4s_vpn_1_cidr":"146.48.122.27/32","d4s_vpn_2_cidr":"146.48.122.49/32","infrascience_net_cidr":"146.48.122.0/23","isti_net_cidr":"146.48.80.0/21","isti_vpn_gw1":"146.48.80.101/32","isti_vpn_gw2":"146.48.80.102/32","isti_vpn_gw3":"146.48.80.103/32","s2i2s_net_cidr":"146.48.28.0/22","s2i2s_vpn_1_cidr":"146.48.28.10/32","s2i2s_vpn_2_cidr":"146.48.28.11/32","shell_d4s_cidr":"146.48.122.95/32"},"type":["map","string"]},"traffic_from_main_haproxy":{"value":{"all_tags":[],"delete_default_rules":true,"description":"Allow traffic from the main L7 HAPROXY load balancers","id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","name":"traffic_from_the_main_load_balancers","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"type":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}]},"ubuntu2204_data_file":{"value":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","type":"string"},"ubuntu2404_data_file":{"value":"../../s2i2s_openstack_vm_data_scripts/ubuntu2404.sh","type":"string"},"ubuntu_2204":{"value":{"name":"Ubuntu-Jammy-22.04","user_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","uuid":"54768889-8556-4be4-a2eb-82a4d9b34627"},"type":["map","string"]},"ubuntu_2404":{"value":{"name":"Ubuntu-Noble-24.04.img","user_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2404.sh","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075"},"type":["map","string"]}},"resources":[{"mode":"data","type":"terraform_remote_state","name":"privnet_dns_router","provider":"provider[\"terraform.io/builtin/terraform\"]","instances":[{"schema_version":0,"attributes":{"backend":"local","config":{"value":{"path":"../main_net_dns_router/terraform.tfstate"},"type":["object",{"path":"string"}]},"defaults":null,"outputs":{"value":{"almalinux_9":{"name":"AlmaLinux-9.0-20220718","uuid":"541650fc-dd19-4f38-bb1d-7333ed9dd688"},"availability_zone_no_gpu_name":"cnr-isti-nova-a","availability_zone_with_gpu_name":"cnr-isti-nova-gpu-a","availability_zones_names":{"availability_zone_no_gpu":"cnr-isti-nova-a","availability_zone_with_gpu":"cnr-isti-nova-gpu-a"},"centos_7":{"name":"CentOS-7","user_data_file":"../../s2i2s_openstack_vm_data_scripts/el.sh","uuid":"f0187a99-64f6-462a-ab5f-ef52fe62f2ca"},"default_security_group_name":"default_for_all","dns_zone":{"attributes":{},"description":"DNS primary zone for the S2I2S project","disable_status_check":false,"email":"postmaster@isti.cnr.it","id":"e826e777-0196-4f63-b2a9-df07f70e618f","masters":[],"name":"s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"PRIMARY","value_specs":null},"dns_zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f","el7_data_file":"../../s2i2s_openstack_vm_data_scripts/el.sh","external_gateway_ip":[{"ip_address":"146.48.30.6","subnet_id":"57f87509-4016-46fb-b8c3-25fca7f72ccb"}],"external_network":{"id":"1d2ff137-6ff7-4017-be2b-0d6c4af2353b","name":"external-network"},"external_network_id":"1d2ff137-6ff7-4017-be2b-0d6c4af2353b","flavor_list":{"c1_large":"c1.large","c1_medium":"c1.medium","c1_small":"c1.small","c2_large":"c2.large","m1_large":"m1.large","m1_medium":"m1.medium","m1_xlarge":"m1.xlarge","m1_xxl":"m1.xxl","m2_large":"m2.large","m2_medium":"m2.medium","m2_small":"m2.small","m3_large":"m3.large"},"floating_ip_pools":{"main_public_ip_pool":"external-network"},"main_private_network":{"admin_state_up":true,"all_tags":[],"availability_zone_hints":[],"description":"S2I2S private network (use this as the main network)","dns_domain":"s2i2s.cloud.isti.cnr.it.","external":false,"id":"f371c239-6d5d-4ac8-a17e-af607752d82c","mtu":8942,"name":"s2i2s-proj-main","port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","segments":[{"network_type":"geneve","physical_network":"","segmentation_id":47850}],"shared":false,"tags":null,"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"transparent_vlan":false,"value_specs":null},"main_private_network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","main_region":"isti_area_pi_1","main_subnet_network":{"all_tags":[],"allocation_pool":[{"end":"10.10.7.254","start":"10.10.1.1"}],"cidr":"10.10.0.0/21","description":"S2I2S main private subnet","dns_nameservers":["146.48.29.97","146.48.29.98","146.48.29.99"],"dns_publish_fixed_ip":false,"enable_dhcp":true,"gateway_ip":"10.10.0.1","id":"19c649ee-96ea-438b-ac0c-512afdf5046d","ip_version":4,"ipv6_address_mode":"","ipv6_ra_mode":"","name":"s2i2s-proj-main-subnet","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_gateway":false,"prefix_length":null,"region":"isti_area_pi_1","segment_id":"","service_types":[],"subnetpool_id":"","tags":null,"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"main_subnet_network_id":"19c649ee-96ea-438b-ac0c-512afdf5046d","mtu_size":8942,"os_project_data":{"id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","name":"s2i2s-proj-cloud"},"policy_list":{"affinity":"affinity","anti_affinity":"anti-affinity","soft_affinity":"soft-affinity","soft_anti_affinity":"soft-anti-affinity"},"resolvers_ip":["146.48.29.97","146.48.29.98","146.48.29.99"],"ssh_sources":{"d4s_vpn_1_cidr":"146.48.122.27/32","d4s_vpn_2_cidr":"146.48.122.49/32","infrascience_net_cidr":"146.48.122.0/23","isti_net_cidr":"146.48.80.0/21","isti_vpn_gw1":"146.48.80.101/32","isti_vpn_gw2":"146.48.80.102/32","isti_vpn_gw3":"146.48.80.103/32","s2i2s_net_cidr":"146.48.28.0/22","s2i2s_vpn_1_cidr":"146.48.28.10/32","s2i2s_vpn_2_cidr":"146.48.28.11/32","shell_d4s_cidr":"146.48.122.95/32"},"ubuntu2204_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","ubuntu_2204":{"name":"Ubuntu-Jammy-22.04","user_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","uuid":"54768889-8556-4be4-a2eb-82a4d9b34627"}},"type":["object",{"almalinux_9":["map","string"],"availability_zone_no_gpu_name":"string","availability_zone_with_gpu_name":"string","availability_zones_names":["map","string"],"centos_7":["map","string"],"default_security_group_name":"string","dns_zone":["object",{"attributes":["map","string"],"description":"string","disable_status_check":"bool","email":"string","id":"string","masters":["set","string"],"name":"string","project_id":"string","region":"string","timeouts":["object",{"create":"string","delete":"string","update":"string"}],"ttl":"number","type":"string","value_specs":["map","string"]}],"dns_zone_id":"string","el7_data_file":"string","external_gateway_ip":["list",["object",{"ip_address":"string","subnet_id":"string"}]],"external_network":["map","string"],"external_network_id":"string","flavor_list":["map","string"],"floating_ip_pools":["map","string"],"main_private_network":["object",{"admin_state_up":"bool","all_tags":["set","string"],"availability_zone_hints":["set","string"],"description":"string","dns_domain":"string","external":"bool","id":"string","mtu":"number","name":"string","port_security_enabled":"bool","qos_policy_id":"string","region":"string","segments":["set",["object",{"network_type":"string","physical_network":"string","segmentation_id":"number"}]],"shared":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"transparent_vlan":"bool","value_specs":["map","string"]}],"main_private_network_id":"string","main_region":"string","main_subnet_network":["object",{"all_tags":["set","string"],"allocation_pool":["set",["object",{"end":"string","start":"string"}]],"cidr":"string","description":"string","dns_nameservers":["list","string"],"dns_publish_fixed_ip":"bool","enable_dhcp":"bool","gateway_ip":"string","id":"string","ip_version":"number","ipv6_address_mode":"string","ipv6_ra_mode":"string","name":"string","network_id":"string","no_gateway":"bool","prefix_length":"number","region":"string","segment_id":"string","service_types":["list","string"],"subnetpool_id":"string","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"value_specs":["map","string"]}],"main_subnet_network_id":"string","mtu_size":"number","os_project_data":["map","string"],"policy_list":["map","string"],"resolvers_ip":["list","string"],"ssh_sources":["map","string"],"ubuntu2204_data_file":"string","ubuntu_2204":["map","string"]}]},"workspace":null},"sensitive_attributes":[]}]},{"mode":"managed","type":"openstack_blockstorage_volume_v3","name":"prometheus_data_vol","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"attachment":[{"device":"/dev/vdb","id":"59c354bc-bc05-4dbb-ad58-236da1186974","instance_id":"d2a37e7c-3eaa-4929-b70d-cfb55416d8bc"}],"availability_zone":"nova","backup_id":"","consistency_group_id":null,"description":"","enable_online_resize":true,"id":"59c354bc-bc05-4dbb-ad58-236da1186974","image_id":null,"metadata":{},"name":"prometheus-data","region":"isti_area_pi_1","scheduler_hints":[],"size":100,"snapshot_id":"","source_replica":null,"source_vol_id":"","timeouts":null,"volume_retype_policy":"never","volume_type":"CephSSD"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0="}]},{"mode":"managed","type":"openstack_compute_instance_v2","name":"internal_ca","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"access_ip_v4":"10.10.0.4","access_ip_v6":"","admin_pass":null,"all_metadata":{},"all_tags":[],"availability_zone":"cnr-isti-nova-a","availability_zone_hints":"cnr-isti-nova-a","block_device":[{"boot_index":0,"delete_on_termination":false,"destination_type":"volume","device_type":"","disk_bus":"","guest_format":"","multiattach":false,"source_type":"image","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075","volume_size":10,"volume_type":""}],"config_drive":null,"created":"2026-02-03 14:57:24 +0000 UTC","flavor_id":"2","flavor_name":"m1.small","force_delete":false,"hypervisor_hostname":"","id":"286b7a4d-33c6-451f-9019-d9fd79265181","image_id":"Attempt to boot from volume - no image supplied","image_name":null,"key_pair":"adellam","metadata":null,"name":"ca","network":[{"access_network":false,"fixed_ip_v4":"10.10.0.4","fixed_ip_v6":"","mac":"fa:16:3e:21:d8:29","name":"s2i2s-proj-main","port":"22a51c59-75c8-4031-a283-212751553d12","uuid":"f371c239-6d5d-4ac8-a17e-af607752d82c"}],"network_mode":null,"personality":[],"power_state":"active","region":"isti_area_pi_1","scheduler_hints":[],"security_groups":["default_for_all_do_not_use"],"stop_before_destroy":false,"tags":[],"timeouts":null,"updated":"2026-07-07 10:22:50 +0000 UTC","user_data":"164cdf695f3b4a01a2f8b9dc0af2f87629bd89a7","vendor_options":[]},"sensitive_attributes":[[{"type":"get_attr","value":"admin_pass"}]],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjoxODAwMDAwMDAwMDAwLCJkZWxldGUiOjE4MDAwMDAwMDAwMDAsInVwZGF0ZSI6MTgwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_port_v2.internal_ca_port","openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_compute_instance_v2","name":"main_haproxy_l7","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"index_key":0,"schema_version":0,"attributes":{"access_ip_v4":"10.10.0.11","access_ip_v6":"","admin_pass":null,"all_metadata":{},"all_tags":[],"availability_zone":"cnr-isti-nova-a","availability_zone_hints":"cnr-isti-nova-a","block_device":[{"boot_index":0,"delete_on_termination":false,"destination_type":"volume","device_type":"","disk_bus":"","guest_format":"","multiattach":false,"source_type":"image","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075","volume_size":10,"volume_type":""}],"config_drive":null,"created":"2026-02-03 14:57:25 +0000 UTC","flavor_id":"4","flavor_name":"m1.medium","force_delete":false,"hypervisor_hostname":"","id":"b42a0e99-6172-4a5d-886c-c0fb016da60e","image_id":"Attempt to boot from volume - no image supplied","image_name":null,"key_pair":"adellam","metadata":null,"name":"main-haproxy-l7-01","network":[{"access_network":false,"fixed_ip_v4":"10.10.0.11","fixed_ip_v6":"","mac":"fa:16:3e:b1:42:7f","name":"s2i2s-proj-main","port":"bd7d2fb6-db15-42d5-9779-1411c914a65e","uuid":"f371c239-6d5d-4ac8-a17e-af607752d82c"}],"network_mode":null,"personality":[],"power_state":"active","region":"isti_area_pi_1","scheduler_hints":[{"additional_properties":{},"build_near_host_ip":"","different_cell":[],"different_host":[],"group":"f691b2ad-07f9-452d-9bec-6f1a3e6f9626","query":[],"same_host":[],"target_cell":""}],"security_groups":["default_for_all_do_not_use","traffic_from_main_lb_to_haproxy_l7"],"stop_before_destroy":false,"tags":[],"timeouts":null,"updated":"2026-02-03 14:58:26 +0000 UTC","user_data":"164cdf695f3b4a01a2f8b9dc0af2f87629bd89a7","vendor_options":[]},"sensitive_attributes":[[{"type":"get_attr","value":"admin_pass"}]],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjoxODAwMDAwMDAwMDAwLCJkZWxldGUiOjE4MDAwMDAwMDAwMDAsInVwZGF0ZSI6MTgwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_compute_servergroup_v2.main_haproxy_l7","openstack_networking_port_v2.main_haproxy_l7_port","openstack_networking_secgroup_v2.default","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]},{"index_key":1,"schema_version":0,"attributes":{"access_ip_v4":"10.10.0.12","access_ip_v6":"","admin_pass":null,"all_metadata":{},"all_tags":[],"availability_zone":"cnr-isti-nova-a","availability_zone_hints":"cnr-isti-nova-a","block_device":[{"boot_index":0,"delete_on_termination":false,"destination_type":"volume","device_type":"","disk_bus":"","guest_format":"","multiattach":false,"source_type":"image","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075","volume_size":10,"volume_type":""}],"config_drive":null,"created":"2026-02-03 14:57:25 +0000 UTC","flavor_id":"4","flavor_name":"m1.medium","force_delete":false,"hypervisor_hostname":"","id":"b770644a-5c39-4db2-8811-fb62751bd789","image_id":"Attempt to boot from volume - no image supplied","image_name":null,"key_pair":"adellam","metadata":null,"name":"main-haproxy-l7-02","network":[{"access_network":false,"fixed_ip_v4":"10.10.0.12","fixed_ip_v6":"","mac":"fa:16:3e:a9:49:bb","name":"s2i2s-proj-main","port":"3018d5db-3d39-472f-b623-07c85e792ed5","uuid":"f371c239-6d5d-4ac8-a17e-af607752d82c"}],"network_mode":null,"personality":[],"power_state":"active","region":"isti_area_pi_1","scheduler_hints":[{"additional_properties":{},"build_near_host_ip":"","different_cell":[],"different_host":[],"group":"f691b2ad-07f9-452d-9bec-6f1a3e6f9626","query":[],"same_host":[],"target_cell":""}],"security_groups":["default_for_all_do_not_use","traffic_from_main_lb_to_haproxy_l7"],"stop_before_destroy":false,"tags":[],"timeouts":null,"updated":"2026-07-07 11:20:09 +0000 UTC","user_data":"164cdf695f3b4a01a2f8b9dc0af2f87629bd89a7","vendor_options":[]},"sensitive_attributes":[[{"type":"get_attr","value":"admin_pass"}]],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjoxODAwMDAwMDAwMDAwLCJkZWxldGUiOjE4MDAwMDAwMDAwMDAsInVwZGF0ZSI6MTgwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_compute_servergroup_v2.main_haproxy_l7","openstack_networking_port_v2.main_haproxy_l7_port","openstack_networking_secgroup_v2.default","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_compute_instance_v2","name":"prometheus_server","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"access_ip_v4":"10.10.0.10","access_ip_v6":"","admin_pass":null,"all_metadata":{},"all_tags":[],"availability_zone":"cnr-isti-nova-a","availability_zone_hints":"cnr-isti-nova-a","block_device":[{"boot_index":0,"delete_on_termination":false,"destination_type":"volume","device_type":"","disk_bus":"","guest_format":"","multiattach":false,"source_type":"image","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075","volume_size":10,"volume_type":""}],"config_drive":null,"created":"2026-02-03 14:57:28 +0000 UTC","flavor_id":"4","flavor_name":"m1.medium","force_delete":false,"hypervisor_hostname":"","id":"d2a37e7c-3eaa-4929-b70d-cfb55416d8bc","image_id":"Attempt to boot from volume - no image supplied","image_name":null,"key_pair":"adellam","metadata":null,"name":"prometheus","network":[{"access_network":false,"fixed_ip_v4":"10.10.0.10","fixed_ip_v6":"","mac":"fa:16:3e:bc:2d:03","name":"s2i2s-proj-main","port":"a6cf4c4b-d5b8-4fd9-a9b7-5a355aeea808","uuid":"f371c239-6d5d-4ac8-a17e-af607752d82c"}],"network_mode":null,"personality":[],"power_state":"active","region":"isti_area_pi_1","scheduler_hints":[],"security_groups":["default_for_all_do_not_use","prometheus_access_from_grafana","restricted_web_service"],"stop_before_destroy":false,"tags":[],"timeouts":null,"updated":"2026-02-03 14:59:22 +0000 UTC","user_data":"164cdf695f3b4a01a2f8b9dc0af2f87629bd89a7","vendor_options":[]},"sensitive_attributes":[[{"type":"get_attr","value":"admin_pass"}]],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjoxODAwMDAwMDAwMDAwLCJkZWxldGUiOjE4MDAwMDAwMDAwMDAsInVwZGF0ZSI6MTgwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_port_v2.prometheus_server_port","openstack_networking_secgroup_v2.default","openstack_networking_secgroup_v2.prometheus_access_from_grafana","openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_compute_instance_v2","name":"ssh_jump_proxy","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"access_ip_v4":"10.10.0.5","access_ip_v6":"","admin_pass":null,"all_metadata":{},"all_tags":[],"availability_zone":"cnr-isti-nova-a","availability_zone_hints":"cnr-isti-nova-a","block_device":[{"boot_index":0,"delete_on_termination":false,"destination_type":"volume","device_type":"","disk_bus":"","guest_format":"","multiattach":false,"source_type":"image","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075","volume_size":30,"volume_type":""}],"config_drive":null,"created":"2026-02-03 14:57:25 +0000 UTC","flavor_id":"10","flavor_name":"m2.small","force_delete":false,"hypervisor_hostname":"","id":"6aed1634-ec4e-43b0-a8c6-2da42a27ad25","image_id":"Attempt to boot from volume - no image supplied","image_name":null,"key_pair":"adellam","metadata":null,"name":"ssh-jump-proxy","network":[{"access_network":false,"fixed_ip_v4":"10.10.0.5","fixed_ip_v6":"","mac":"fa:16:3e:75:76:4e","name":"s2i2s-proj-main","port":"4ca1a42a-2cee-43a5-bec7-b044c1361af5","uuid":"f371c239-6d5d-4ac8-a17e-af607752d82c"}],"network_mode":null,"personality":[],"power_state":"active","region":"isti_area_pi_1","scheduler_hints":[],"security_groups":["default_for_all_do_not_use","ssh_access_to_the_jump_node"],"stop_before_destroy":false,"tags":[],"timeouts":null,"updated":"2026-04-10 13:14:32 +0000 UTC","user_data":"164cdf695f3b4a01a2f8b9dc0af2f87629bd89a7","vendor_options":[]},"sensitive_attributes":[[{"type":"get_attr","value":"admin_pass"}]],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjoxODAwMDAwMDAwMDAwLCJkZWxldGUiOjE4MDAwMDAwMDAwMDAsInVwZGF0ZSI6MTgwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_port_v2.ssh_jump_proxy_port","openstack_networking_secgroup_v2.access_to_the_jump_proxy","openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_compute_servergroup_v2","name":"main_haproxy_l7","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"id":"f691b2ad-07f9-452d-9bec-6f1a3e6f9626","members":["b42a0e99-6172-4a5d-886c-c0fb016da60e","b770644a-5c39-4db2-8811-fb62751bd789"],"name":"main_haproxy_l7","policies":["anti-affinity"],"region":"isti_area_pi_1","rules":[{"max_server_per_host":0}],"value_specs":null},"sensitive_attributes":[],"private":"bnVsbA=="}]},{"mode":"managed","type":"openstack_compute_volume_attach_v2","name":"prometheus_data_attach_vol","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"device":"/dev/vdb","id":"d2a37e7c-3eaa-4929-b70d-cfb55416d8bc/59c354bc-bc05-4dbb-ad58-236da1186974","instance_id":"d2a37e7c-3eaa-4929-b70d-cfb55416d8bc","multiattach":null,"region":"isti_area_pi_1","tag":null,"timeouts":null,"vendor_options":[],"volume_id":"59c354bc-bc05-4dbb-ad58-236da1186974"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_blockstorage_volume_v3.prometheus_data_vol","openstack_compute_instance_v2.prometheus_server","openstack_networking_port_v2.prometheus_server_port","openstack_networking_secgroup_v2.default","openstack_networking_secgroup_v2.prometheus_access_from_grafana","openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_dns_recordset_v2","name":"alertmanager_server_recordset","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Prometheus alertmanager","disable_status_check":false,"id":"e826e777-0196-4f63-b2a9-df07f70e618f/b8256293-8c32-4fa9-a43c-fa115339504f","name":"alertmanager.s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","records":["prometheus.s2i2s.cloud.isti.cnr.it."],"region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"CNAME","value_specs":null,"zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router"]}]},{"mode":"managed","type":"openstack_dns_recordset_v2","name":"main_lb_dns_recordset","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Public IP address of the main Octavia load balancer","disable_status_check":false,"id":"e826e777-0196-4f63-b2a9-df07f70e618f/a8190fb9-9468-4b95-9e66-9e1fa86bf1c2","name":"octavia-main-lb.s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","records":["146.48.30.30"],"region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"A","value_specs":null,"zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_floatingip_v2.main_lb_ip"]}]},{"mode":"managed","type":"openstack_dns_recordset_v2","name":"prometheus_server_recordset","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Public IP address of the Prometheus server","disable_status_check":false,"id":"e826e777-0196-4f63-b2a9-df07f70e618f/ba7b0d61-3364-4451-9c9e-45e957c400ca","name":"prometheus.s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","records":["146.48.31.67"],"region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"A","value_specs":null,"zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_floatingip_v2.prometheus_server_ip"]}]},{"mode":"managed","type":"openstack_dns_recordset_v2","name":"ssh_jump_proxy_recordset","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Public IP address of the SSH Proxy Jump server","disable_status_check":false,"id":"e826e777-0196-4f63-b2a9-df07f70e618f/72909fe7-c0a5-4060-bad6-be3c25680078","name":"ssh-jump-proxy.s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","records":["146.48.31.105"],"region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"A","value_specs":null,"zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_floatingip_v2.ssh_jump_proxy_ip"]}]},{"mode":"managed","type":"openstack_lb_listener_v2","name":"main_haproxy_http_listener","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"allowed_cidrs":[],"alpn_protocols":[],"client_authentication":"NONE","client_ca_tls_container_ref":"","client_crl_container_ref":"","connection_limit":-1,"default_pool_id":"8ed17fa2-9259-4511-a91f-24820d80983a","default_tls_container_ref":"","description":"HTTP listener of the main HAPROXY instances","hsts_include_subdomains":false,"hsts_max_age":0,"hsts_preload":false,"id":"ef26b673-26ff-4466-9c51-9114d85eeb64","insert_headers":{},"loadbalancer_id":"44dbe548-a436-4816-927a-2912f443b50f","name":"main_haproxy_http_listener","protocol":"TCP","protocol_port":80,"region":"isti_area_pi_1","sni_container_refs":[],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeout_client_data":50000,"timeout_member_connect":5000,"timeout_member_data":50000,"timeout_tcp_inspect":0,"timeouts":null,"tls_ciphers":"","tls_versions":[]},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_loadbalancer_v2.main_lb"]}]},{"mode":"managed","type":"openstack_lb_listener_v2","name":"main_haproxy_https_listener","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"allowed_cidrs":[],"alpn_protocols":[],"client_authentication":"NONE","client_ca_tls_container_ref":"","client_crl_container_ref":"","connection_limit":-1,"default_pool_id":"c631cfb1-327b-4e28-8d3c-8532f566a527","default_tls_container_ref":"","description":"HTTPS listener of the main HAPROXY instances","hsts_include_subdomains":false,"hsts_max_age":0,"hsts_preload":false,"id":"eb03441a-3aa4-4221-a698-81062c2cb9c1","insert_headers":{},"loadbalancer_id":"44dbe548-a436-4816-927a-2912f443b50f","name":"main_haproxy_https_listener","protocol":"TCP","protocol_port":443,"region":"isti_area_pi_1","sni_container_refs":[],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeout_client_data":3600000,"timeout_member_connect":10000,"timeout_member_data":7200000,"timeout_tcp_inspect":0,"timeouts":null,"tls_ciphers":"","tls_versions":[]},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_loadbalancer_v2.main_lb"]}]},{"mode":"managed","type":"openstack_lb_listener_v2","name":"main_haproxy_stats_listener","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"allowed_cidrs":[],"alpn_protocols":[],"client_authentication":"NONE","client_ca_tls_container_ref":"","client_crl_container_ref":"","connection_limit":-1,"default_pool_id":"281bb090-bd54-4c1f-97ea-e5d2d6cff28d","default_tls_container_ref":"","description":"Listener for the stats of the main HAPROXY instances","hsts_include_subdomains":false,"hsts_max_age":0,"hsts_preload":false,"id":"d410acca-25e5-45a2-9d22-90f33f2730d4","insert_headers":{},"loadbalancer_id":"44dbe548-a436-4816-927a-2912f443b50f","name":"main_haproxy_stats_listener","protocol":"TCP","protocol_port":8880,"region":"isti_area_pi_1","sni_container_refs":[],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeout_client_data":50000,"timeout_member_connect":5000,"timeout_member_data":50000,"timeout_tcp_inspect":0,"timeouts":null,"tls_ciphers":"","tls_versions":[]},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_loadbalancer_v2.main_lb"]}]},{"mode":"managed","type":"openstack_lb_loadbalancer_v2","name":"main_lb","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"availability_zone":"","description":"Main L4 load balancer for the S2I2S services","flavor_id":"","id":"44dbe548-a436-4816-927a-2912f443b50f","loadbalancer_provider":"ovn","name":"s2i2s-cloud-l4-load-balancer","region":"isti_area_pi_1","security_group_ids":["0b382ff1-38ac-44bd-9f63-27df73af0476"],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"vip_address":"10.10.0.20","vip_network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","vip_port_id":"af6ed877-0aa6-4728-bba2-4e99666eca8c","vip_qos_policy_id":"","vip_subnet_id":"19c649ee-96ea-438b-ac0c-512afdf5046d"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6MzAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router"]}]},{"mode":"managed","type":"openstack_lb_members_v2","name":"main_haproxy_http_pool_members","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"id":"8ed17fa2-9259-4511-a91f-24820d80983a","member":[{"address":"10.10.0.11","admin_state_up":true,"backup":false,"id":"2a0877ca-2fe6-4fbe-8de8-bae08ad47cbf","monitor_address":"","monitor_port":0,"name":"haproxy l7 1","protocol_port":80,"subnet_id":"","weight":1},{"address":"10.10.0.12","admin_state_up":true,"backup":false,"id":"61c22a78-dd8c-4928-b301-733baac59389","monitor_address":"","monitor_port":0,"name":"haproxy l7 2","protocol_port":80,"subnet_id":"","weight":1}],"pool_id":"8ed17fa2-9259-4511-a91f-24820d80983a","region":"isti_area_pi_1","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_http_listener","openstack_lb_loadbalancer_v2.main_lb","openstack_lb_pool_v2.main_haproxy_http_pool"]}]},{"mode":"managed","type":"openstack_lb_members_v2","name":"main_haproxy_https_pool_members","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"id":"c631cfb1-327b-4e28-8d3c-8532f566a527","member":[{"address":"10.10.0.11","admin_state_up":true,"backup":false,"id":"0f143500-1d20-44c3-8624-70eb5aa600ea","monitor_address":"","monitor_port":0,"name":"haproxy l7 1","protocol_port":443,"subnet_id":"","weight":1},{"address":"10.10.0.12","admin_state_up":true,"backup":false,"id":"47925117-1d2c-4bef-adac-652ada82506e","monitor_address":"","monitor_port":0,"name":"haproxy l7 2","protocol_port":443,"subnet_id":"","weight":1}],"pool_id":"c631cfb1-327b-4e28-8d3c-8532f566a527","region":"isti_area_pi_1","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_https_listener","openstack_lb_loadbalancer_v2.main_lb","openstack_lb_pool_v2.main_haproxy_https_pool"]}]},{"mode":"managed","type":"openstack_lb_members_v2","name":"main_haproxy_stats_pool_members","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"id":"281bb090-bd54-4c1f-97ea-e5d2d6cff28d","member":[{"address":"10.10.0.11","admin_state_up":true,"backup":false,"id":"f8d622ee-162d-44bf-aec1-1bcba2201cf1","monitor_address":"","monitor_port":0,"name":"haproxy l7 1","protocol_port":8880,"subnet_id":"","weight":1},{"address":"10.10.0.12","admin_state_up":true,"backup":false,"id":"d6c2a4cf-bc49-4564-b3b5-f348939d9dd9","monitor_address":"","monitor_port":0,"name":"haproxy l7 2","protocol_port":8880,"subnet_id":"","weight":1}],"pool_id":"281bb090-bd54-4c1f-97ea-e5d2d6cff28d","region":"isti_area_pi_1","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_stats_listener","openstack_lb_loadbalancer_v2.main_lb","openstack_lb_pool_v2.main_haproxy_stats_pool"]}]},{"mode":"managed","type":"openstack_lb_monitor_v2","name":"main_haproxy_http_monitor","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"delay":20,"domain_name":"","expected_codes":"","http_method":"","http_version":"","id":"837af662-7c87-4fd4-b25d-29aaac58f348","max_retries":3,"max_retries_down":3,"name":"main_haproxy_http_monitor","pool_id":"8ed17fa2-9259-4511-a91f-24820d80983a","region":"isti_area_pi_1","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeout":5,"timeouts":null,"type":"TCP","url_path":""},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_http_listener","openstack_lb_loadbalancer_v2.main_lb","openstack_lb_pool_v2.main_haproxy_http_pool"]}]},{"mode":"managed","type":"openstack_lb_monitor_v2","name":"main_haproxy_https_monitor","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"delay":20,"domain_name":"","expected_codes":"","http_method":"","http_version":"","id":"03e086f3-6fb6-4109-a6cc-1475ac25b694","max_retries":3,"max_retries_down":3,"name":"main_haproxy_https_monitor","pool_id":"c631cfb1-327b-4e28-8d3c-8532f566a527","region":"isti_area_pi_1","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeout":5,"timeouts":null,"type":"TCP","url_path":""},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_https_listener","openstack_lb_loadbalancer_v2.main_lb","openstack_lb_pool_v2.main_haproxy_https_pool"]}]},{"mode":"managed","type":"openstack_lb_monitor_v2","name":"main_haproxy_stats_monitor","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"delay":20,"domain_name":"","expected_codes":"","http_method":"","http_version":"","id":"2c0dfc3e-de80-40d9-9594-158062522f33","max_retries":3,"max_retries_down":3,"name":"main_haproxy_stats_monitor","pool_id":"281bb090-bd54-4c1f-97ea-e5d2d6cff28d","region":"isti_area_pi_1","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeout":5,"timeouts":null,"type":"TCP","url_path":""},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_stats_listener","openstack_lb_loadbalancer_v2.main_lb","openstack_lb_pool_v2.main_haproxy_stats_pool"]}]},{"mode":"managed","type":"openstack_lb_pool_v2","name":"main_haproxy_http_pool","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"alpn_protocols":[],"ca_tls_container_ref":"","crl_container_ref":"","description":"Pool for the HTTP listener of the main HAPROXY instances","id":"8ed17fa2-9259-4511-a91f-24820d80983a","lb_method":"SOURCE_IP_PORT","listener_id":"ef26b673-26ff-4466-9c51-9114d85eeb64","loadbalancer_id":null,"name":"main-haproxy-lb-http","persistence":[{"cookie_name":"","type":"SOURCE_IP"}],"protocol":"TCP","region":"isti_area_pi_1","tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"tls_ciphers":"","tls_container_ref":"","tls_enabled":false,"tls_versions":[]},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_http_listener","openstack_lb_loadbalancer_v2.main_lb"]}]},{"mode":"managed","type":"openstack_lb_pool_v2","name":"main_haproxy_https_pool","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"alpn_protocols":[],"ca_tls_container_ref":"","crl_container_ref":"","description":"Pool for the HTTPS listener of the main HAPROXY instances","id":"c631cfb1-327b-4e28-8d3c-8532f566a527","lb_method":"SOURCE_IP_PORT","listener_id":"eb03441a-3aa4-4221-a698-81062c2cb9c1","loadbalancer_id":null,"name":"main-haproxy-lb-https","persistence":[{"cookie_name":"","type":"SOURCE_IP"}],"protocol":"TCP","region":"isti_area_pi_1","tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"tls_ciphers":"","tls_container_ref":"","tls_enabled":false,"tls_versions":[]},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_https_listener","openstack_lb_loadbalancer_v2.main_lb"]}]},{"mode":"managed","type":"openstack_lb_pool_v2","name":"main_haproxy_stats_pool","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"alpn_protocols":[],"ca_tls_container_ref":"","crl_container_ref":"","description":"Pool for the stats of the main HAPROXY instances","id":"281bb090-bd54-4c1f-97ea-e5d2d6cff28d","lb_method":"SOURCE_IP_PORT","listener_id":"d410acca-25e5-45a2-9d22-90f33f2730d4","loadbalancer_id":null,"name":"main-haproxy-lb-stats","persistence":[{"cookie_name":"","type":"SOURCE_IP"}],"protocol":"TCP","region":"isti_area_pi_1","tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"tls_ciphers":"","tls_container_ref":"","tls_enabled":false,"tls_versions":[]},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_listener_v2.main_haproxy_stats_listener","openstack_lb_loadbalancer_v2.main_lb"]}]},{"mode":"managed","type":"openstack_networking_floatingip_associate_v2","name":"main_lb","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"fixed_ip":"10.10.0.20","floating_ip":"146.48.30.30","id":"973de1d6-75e9-4b67-90fa-b24221975e6f","port_id":"af6ed877-0aa6-4728-bba2-4e99666eca8c","region":"isti_area_pi_1"},"sensitive_attributes":[],"private":"bnVsbA==","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_lb_loadbalancer_v2.main_lb","openstack_networking_floatingip_v2.main_lb_ip"]}]},{"mode":"managed","type":"openstack_networking_floatingip_associate_v2","name":"prometheus_server","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"fixed_ip":"10.10.0.10","floating_ip":"146.48.31.67","id":"35526990-3174-4822-aac3-b20a5c8a34bf","port_id":"a6cf4c4b-d5b8-4fd9-a9b7-5a355aeea808","region":"isti_area_pi_1"},"sensitive_attributes":[],"private":"bnVsbA==","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_floatingip_v2.prometheus_server_ip","openstack_networking_port_v2.prometheus_server_port","openstack_networking_secgroup_v2.default","openstack_networking_secgroup_v2.prometheus_access_from_grafana","openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_networking_floatingip_associate_v2","name":"ssh_jump_proxy","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"fixed_ip":"10.10.0.5","floating_ip":"146.48.31.105","id":"a22d4285-4314-4dd9-9f8b-b52fb3f6dd60","port_id":"4ca1a42a-2cee-43a5-bec7-b044c1361af5","region":"isti_area_pi_1"},"sensitive_attributes":[],"private":"bnVsbA==","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_floatingip_v2.ssh_jump_proxy_ip","openstack_networking_port_v2.ssh_jump_proxy_port","openstack_networking_secgroup_v2.access_to_the_jump_proxy","openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_networking_floatingip_v2","name":"main_lb_ip","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"address":"146.48.30.30","all_tags":[],"description":"Main L4 load balancer for the S2I2S services","dns_domain":"","dns_name":"","fixed_ip":"10.10.0.20","id":"973de1d6-75e9-4b67-90fa-b24221975e6f","pool":"external-network","port_id":"af6ed877-0aa6-4728-bba2-4e99666eca8c","region":"isti_area_pi_1","subnet_id":null,"subnet_ids":null,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0="}]},{"mode":"managed","type":"openstack_networking_floatingip_v2","name":"prometheus_server_ip","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"address":"146.48.31.67","all_tags":[],"description":"Prometheus server","dns_domain":"","dns_name":"","fixed_ip":"10.10.0.10","id":"35526990-3174-4822-aac3-b20a5c8a34bf","pool":"external-network","port_id":"a6cf4c4b-d5b8-4fd9-a9b7-5a355aeea808","region":"isti_area_pi_1","subnet_id":null,"subnet_ids":null,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0="}]},{"mode":"managed","type":"openstack_networking_floatingip_v2","name":"ssh_jump_proxy_ip","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"address":"146.48.31.105","all_tags":[],"description":"SSH Proxy Jump Server","dns_domain":"","dns_name":"","fixed_ip":"10.10.0.5","id":"a22d4285-4314-4dd9-9f8b-b52fb3f6dd60","pool":"external-network","port_id":"4ca1a42a-2cee-43a5-bec7-b044c1361af5","region":"isti_area_pi_1","subnet_id":null,"subnet_ids":null,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0="}]},{"mode":"managed","type":"openstack_networking_port_v2","name":"internal_ca_port","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"all_fixed_ips":["10.10.0.4"],"all_security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8"],"all_tags":[],"allowed_address_pairs":[],"binding":[{"host_id":"","profile":"","vif_details":{},"vif_type":"","vnic_type":"normal"}],"description":"","device_id":"286b7a4d-33c6-451f-9019-d9fd79265181","device_owner":"compute:cnr-isti-nova-a","dns_assignment":[{"fqdn":"ca.internal-cloud.isti.cnr.it.","hostname":"ca","ip_address":"10.10.0.4"}],"dns_name":"ca","extra_dhcp_option":[],"fixed_ip":[{"ip_address":"10.10.0.4","subnet_id":"19c649ee-96ea-438b-ac0c-512afdf5046d"}],"id":"22a51c59-75c8-4031-a283-212751553d12","mac_address":"fa:16:3e:21:d8:29","name":"ca-port","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_fixed_ip":null,"no_security_groups":null,"port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8"],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_networking_port_v2","name":"main_haproxy_l7_port","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"index_key":0,"schema_version":0,"attributes":{"admin_state_up":true,"all_fixed_ips":["10.10.0.11"],"all_security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","613cacac-ac46-46ab-ba7a-d66f61cce84d"],"all_tags":[],"allowed_address_pairs":[],"binding":[{"host_id":"","profile":"","vif_details":{},"vif_type":"","vnic_type":"normal"}],"description":"","device_id":"b42a0e99-6172-4a5d-886c-c0fb016da60e","device_owner":"compute:cnr-isti-nova-a","dns_assignment":[{"fqdn":"main-haproxy-l7-01.internal-cloud.isti.cnr.it.","hostname":"main-haproxy-l7-01","ip_address":"10.10.0.11"}],"dns_name":"main-haproxy-l7-01","extra_dhcp_option":[],"fixed_ip":[{"ip_address":"10.10.0.11","subnet_id":"19c649ee-96ea-438b-ac0c-512afdf5046d"}],"id":"bd7d2fb6-db15-42d5-9779-1411c914a65e","mac_address":"fa:16:3e:b1:42:7f","name":"main-haproxy-l7-01-port","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_fixed_ip":null,"no_security_groups":null,"port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","613cacac-ac46-46ab-ba7a-d66f61cce84d"],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_secgroup_v2.default","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]},{"index_key":1,"schema_version":0,"attributes":{"admin_state_up":true,"all_fixed_ips":["10.10.0.12"],"all_security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","613cacac-ac46-46ab-ba7a-d66f61cce84d"],"all_tags":[],"allowed_address_pairs":[],"binding":[{"host_id":"","profile":"","vif_details":{},"vif_type":"","vnic_type":"normal"}],"description":"","device_id":"b770644a-5c39-4db2-8811-fb62751bd789","device_owner":"compute:cnr-isti-nova-a","dns_assignment":[{"fqdn":"main-haproxy-l7-02.internal-cloud.isti.cnr.it.","hostname":"main-haproxy-l7-02","ip_address":"10.10.0.12"}],"dns_name":"main-haproxy-l7-02","extra_dhcp_option":[],"fixed_ip":[{"ip_address":"10.10.0.12","subnet_id":"19c649ee-96ea-438b-ac0c-512afdf5046d"}],"id":"3018d5db-3d39-472f-b623-07c85e792ed5","mac_address":"fa:16:3e:a9:49:bb","name":"main-haproxy-l7-02-port","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_fixed_ip":null,"no_security_groups":null,"port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","613cacac-ac46-46ab-ba7a-d66f61cce84d"],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_secgroup_v2.default","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_networking_port_v2","name":"prometheus_server_port","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"all_fixed_ips":["10.10.0.10"],"all_security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","359d7ae7-cdff-47c2-bf69-7d423860d2d2","48e9366f-23a8-47df-abcd-66f84d4af395"],"all_tags":[],"allowed_address_pairs":[],"binding":[{"host_id":"","profile":"","vif_details":{},"vif_type":"","vnic_type":"normal"}],"description":"","device_id":"d2a37e7c-3eaa-4929-b70d-cfb55416d8bc","device_owner":"compute:cnr-isti-nova-a","dns_assignment":[{"fqdn":"prometheus.internal-cloud.isti.cnr.it.","hostname":"prometheus","ip_address":"10.10.0.10"}],"dns_name":"prometheus","extra_dhcp_option":[],"fixed_ip":[{"ip_address":"10.10.0.10","subnet_id":"19c649ee-96ea-438b-ac0c-512afdf5046d"}],"id":"a6cf4c4b-d5b8-4fd9-a9b7-5a355aeea808","mac_address":"fa:16:3e:bc:2d:03","name":"prometheus-port","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_fixed_ip":null,"no_security_groups":null,"port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","359d7ae7-cdff-47c2-bf69-7d423860d2d2","48e9366f-23a8-47df-abcd-66f84d4af395"],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_secgroup_v2.default","openstack_networking_secgroup_v2.prometheus_access_from_grafana","openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_networking_port_v2","name":"ssh_jump_proxy_port","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"admin_state_up":true,"all_fixed_ips":["10.10.0.5"],"all_security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","4c6b6683-77fa-4d1a-8ba2-41acf10a12ba"],"all_tags":[],"allowed_address_pairs":[],"binding":[{"host_id":"","profile":"","vif_details":{},"vif_type":"","vnic_type":"normal"}],"description":"","device_id":"6aed1634-ec4e-43b0-a8c6-2da42a27ad25","device_owner":"compute:cnr-isti-nova-a","dns_assignment":[{"fqdn":"ssh-jump-proxy.internal-cloud.isti.cnr.it.","hostname":"ssh-jump-proxy","ip_address":"10.10.0.5"}],"dns_name":"ssh-jump-proxy","extra_dhcp_option":[],"fixed_ip":[{"ip_address":"10.10.0.5","subnet_id":"19c649ee-96ea-438b-ac0c-512afdf5046d"}],"id":"4ca1a42a-2cee-43a5-bec7-b044c1361af5","mac_address":"fa:16:3e:75:76:4e","name":"ssh-jump-proxy-port","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_fixed_ip":null,"no_security_groups":null,"port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","4c6b6683-77fa-4d1a-8ba2-41acf10a12ba"],"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_secgroup_v2.access_to_the_jump_proxy","openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"egress-ipv4","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"","direction":"egress","ethertype":"IPv4","id":"b231bb15-1585-4c96-9b48-b6907d89cf1d","port_range_max":0,"port_range_min":0,"protocol":"","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"","security_group_id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"grafana_d4s","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTPS from grafana.d4science.org","direction":"ingress","ethertype":"IPv4","id":"2f887282-b19c-4223-9db7-cb1c47e50e4d","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.28.103/32","security_group_id":"48e9366f-23a8-47df-abcd-66f84d4af395","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.prometheus_access_from_grafana"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy-l7-1-443","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTPS traffic from HAPROXY L7 1","direction":"ingress","ethertype":"IPv4","id":"8f5353f9-98a9-4dc2-aa32-cb0a007bd182","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.11/32","security_group_id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.traffic_from_main_haproxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy-l7-1-80","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTP traffic from HAPROXY L7 1","direction":"ingress","ethertype":"IPv4","id":"9cb7007d-1d03-44e7-9e99-816afc7ba905","port_range_max":80,"port_range_min":80,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.11/32","security_group_id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.traffic_from_main_haproxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy-l7-1-8080","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTP traffic from HAPROXY L7 1","direction":"ingress","ethertype":"IPv4","id":"b02fab4f-49b2-475b-8c37-0104210ae4af","port_range_max":8080,"port_range_min":8080,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.11/32","security_group_id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.traffic_from_main_haproxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy-l7-1-8888","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTP traffic from HAPROXY L7 1","direction":"ingress","ethertype":"IPv4","id":"e4721ff4-95ba-4c3f-a4c4-f09f578ee377","port_range_max":8888,"port_range_min":8888,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.11/32","security_group_id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.traffic_from_main_haproxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy-l7-2-443","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTPS traffic from HAPROXY L7 2","direction":"ingress","ethertype":"IPv4","id":"0de5b769-eb27-4636-b453-47105706cc40","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.12/32","security_group_id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.traffic_from_main_haproxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy-l7-2-80","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTP traffic from HAPROXY L7 2","direction":"ingress","ethertype":"IPv4","id":"480b75d2-2c6e-4e2b-8f2f-7a30c27c767c","port_range_max":80,"port_range_min":80,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.12/32","security_group_id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.traffic_from_main_haproxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy-l7-2-8080","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTP traffic from HAPROXY L7 2","direction":"ingress","ethertype":"IPv4","id":"12bd97f1-9a9b-46b8-96dd-2adda86f3475","port_range_max":8080,"port_range_min":8080,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.12/32","security_group_id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.traffic_from_main_haproxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy-l7-2-8888","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTP traffic from HAPROXY L7 2","direction":"ingress","ethertype":"IPv4","id":"cc6792c1-b5aa-4835-a293-7284fc144e30","port_range_max":8888,"port_range_min":8888,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.12/32","security_group_id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.traffic_from_main_haproxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy_l7_1_peer","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Peer traffic from haproxy l7 1 to l7 2","direction":"ingress","ethertype":"IPv4","id":"f916f790-e372-4393-b0e2-d4f56a47db63","port_range_max":10000,"port_range_min":10000,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.11/32","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy_l7_2_peer","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Peer traffic from haproxy l7 2 to l7 1","direction":"ingress","ethertype":"IPv4","id":"7dfd1cd5-e533-4d80-a4ba-9fabba824634","port_range_max":10000,"port_range_min":10000,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.12/32","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy_l7_8880_stats_sources","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"index_key":"d4s_vpn_1","schema_version":0,"attributes":{"description":"HAPROXY l7 stats port 8880 from d4s_vpn_1","direction":"ingress","ethertype":"IPv4","id":"62bea42a-c54b-4038-b0c1-8747480edd93","port_range_max":8880,"port_range_min":8880,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.27/32","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_floatingip_v2.prometheus_server_ip","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]},{"index_key":"d4s_vpn_2","schema_version":0,"attributes":{"description":"HAPROXY l7 stats port 8880 from d4s_vpn_2","direction":"ingress","ethertype":"IPv4","id":"18e7fe2a-b726-4391-93cc-ca57941da91a","port_range_max":8880,"port_range_min":8880,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.49/32","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_floatingip_v2.prometheus_server_ip","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]},{"index_key":"infrascience_net","schema_version":0,"attributes":{"description":"HAPROXY l7 stats port 8880 from infrascience_net","direction":"ingress","ethertype":"IPv4","id":"5e4d2492-b96b-4c4d-8a29-aec50b77ff1c","port_range_max":8880,"port_range_min":8880,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.0/23","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_floatingip_v2.prometheus_server_ip","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]},{"index_key":"prometheus_private","schema_version":0,"attributes":{"description":"HAPROXY l7 stats port 8880 from prometheus_private","direction":"ingress","ethertype":"IPv4","id":"f73459b9-31fc-41b1-83d3-b1f2c71599ce","port_range_max":8880,"port_range_min":8880,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.10/32","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_floatingip_v2.prometheus_server_ip","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]},{"index_key":"prometheus_public","schema_version":0,"attributes":{"description":"HAPROXY l7 stats port 8880 from prometheus_public","direction":"ingress","ethertype":"IPv4","id":"22464816-de38-458d-9ba5-765deb2cf41e","port_range_max":8880,"port_range_min":8880,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.31.67/32","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_floatingip_v2.prometheus_server_ip","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]},{"index_key":"s2i2s_vpn_1","schema_version":0,"attributes":{"description":"HAPROXY l7 stats port 8880 from s2i2s_vpn_1","direction":"ingress","ethertype":"IPv4","id":"d7d394d9-8779-4f17-934d-8a490cdf72d9","port_range_max":8880,"port_range_min":8880,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.28.10/32","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_floatingip_v2.prometheus_server_ip","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]},{"index_key":"s2i2s_vpn_2","schema_version":0,"attributes":{"description":"HAPROXY l7 stats port 8880 from s2i2s_vpn_2","direction":"ingress","ethertype":"IPv4","id":"4642bd23-0156-4760-a4c6-aaa7806f2c2e","port_range_max":8880,"port_range_min":8880,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.28.11/32","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_floatingip_v2.prometheus_server_ip","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"http_from_everywhere","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTP from everywhere","direction":"ingress","ethertype":"IPv4","id":"8e2d9198-7b9e-45a3-ada2-f62924d86e2f","port_range_max":80,"port_range_min":80,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"https_from_d4s_vpn_1","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTPS from D4Science VPN 1","direction":"ingress","ethertype":"IPv4","id":"cf5e6a80-2ef1-4261-85b4-fc53f10fc932","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.27/32","security_group_id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"https_from_d4s_vpn_2","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTPS from D4Science VPN 2","direction":"ingress","ethertype":"IPv4","id":"84bb5373-36e6-49a6-8605-c689e476833d","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.49/32","security_group_id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"https_from_s2i2s_vpn_1","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTPS from S2I2S VPN 1","direction":"ingress","ethertype":"IPv4","id":"6822707c-ca3a-4230-ab91-075310c4277a","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.28.10/32","security_group_id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"https_from_s2i2s_vpn_2","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTPS from S2I2S VPN 2","direction":"ingress","ethertype":"IPv4","id":"b981a99f-0a99-4d76-8da4-316542afba4d","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.28.11/32","security_group_id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"https_from_shell_d4s","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTPS from shell.d4science.org","direction":"ingress","ethertype":"IPv4","id":"b8a463f6-5587-4495-ac71-f0f34abf78e7","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.95/32","security_group_id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.restricted_web"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"ingress-icmp","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow ICMP from remote","direction":"ingress","ethertype":"IPv4","id":"a2344bc4-79ca-4458-9185-b63791b50f0f","port_range_max":0,"port_range_min":0,"protocol":"icmp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"octavia_to_haproxy_l7_443","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTPS traffic to HAPROXY l7 port 443, through the OVN based main lb. The source is the client IP","direction":"ingress","ethertype":"IPv4","id":"bf80c3c6-c4e1-4f17-9578-435147a234dc","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"octavia_to_haproxy_l7_80","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"HTTP traffic to HAPROXY l7 port 80, through the OVN based main lb. The source is the client IP","direction":"ingress","ethertype":"IPv4","id":"7c67970c-6bbc-4f8b-a4e9-256a4a1981f4","port_range_max":80,"port_range_min":80,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"octavia_to_haproxy_l7_8880_healthcheck","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Health monitor probes to the HAPROXY l7 stats port 8880","direction":"ingress","ethertype":"IPv4","id":"aa58e85a-49b5-4360-9536-26f8138d939b","port_range_max":8880,"port_range_min":8880,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.0/21","security_group_id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["data.terraform_remote_state.privnet_dns_router","openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"prometheus-node","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Prometheus access to the node exporter","direction":"ingress","ethertype":"IPv4","id":"df3d2e24-2457-4140-af24-6d59d536c421","port_range_max":9100,"port_range_min":9100,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.10/32","security_group_id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"public_http","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTP from everywhere","direction":"ingress","ethertype":"IPv4","id":"58149f48-3a84-4e0e-aa70-734f479c020f","port_range_max":80,"port_range_min":80,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"31140e64-667a-4044-b388-79afcc6bcb69","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.public_web"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"public_https","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Allow HTTPS from everywhere","direction":"ingress","ethertype":"IPv4","id":"9a3826c7-105e-4761-8a7b-fb2d9f63c27c","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"31140e64-667a-4044-b388-79afcc6bcb69","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.public_web"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"shell_443","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"https debug port 443 from the shell jump proxy","direction":"ingress","ethertype":"IPv4","id":"0e2a05db-a7c9-489f-9b8a-6445022e9420","port_range_max":443,"port_range_min":443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.5/32","security_group_id":"6c21f51b-9cad-4051-99b6-221bed658a83","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.debugging"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"shell_80","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"http debug port 80 from the shell jump proxy","direction":"ingress","ethertype":"IPv4","id":"0456811c-4ebb-489d-8387-aedd09eb349a","port_range_max":80,"port_range_min":80,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.5/32","security_group_id":"6c21f51b-9cad-4051-99b6-221bed658a83","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.debugging"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"shell_8100","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Tomcat debug on port 8100 from the shell jump proxy","direction":"ingress","ethertype":"IPv4","id":"c479d69a-8000-4d6b-985d-c8b9b58f7a7f","port_range_max":8100,"port_range_min":8100,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.5/32","security_group_id":"6c21f51b-9cad-4051-99b6-221bed658a83","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.debugging"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"ssh-d4s-vpn-1","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"SSH traffic from D4Science VPN 1","direction":"ingress","ethertype":"IPv4","id":"30eebdd6-f912-44ba-ba2a-f54c0e89449d","port_range_max":22,"port_range_min":22,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.27/32","security_group_id":"4c6b6683-77fa-4d1a-8ba2-41acf10a12ba","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.access_to_the_jump_proxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"ssh-d4s-vpn-2","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"SSH traffic from D4Science VPN 2","direction":"ingress","ethertype":"IPv4","id":"ffa7c61d-9963-4da0-a713-00fda18d7e38","port_range_max":22,"port_range_min":22,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.49/32","security_group_id":"4c6b6683-77fa-4d1a-8ba2-41acf10a12ba","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.access_to_the_jump_proxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"ssh-infrascience-net","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"SSH traffic from the InfraScience network","direction":"ingress","ethertype":"IPv4","id":"f8010337-c98b-4adc-8285-bfb8eb7f0fa1","port_range_max":22,"port_range_min":22,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.0/23","security_group_id":"4c6b6683-77fa-4d1a-8ba2-41acf10a12ba","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.access_to_the_jump_proxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"ssh-jump-proxy","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"SSH traffic from the jump proxy","direction":"ingress","ethertype":"IPv4","id":"43f8a26d-29f6-4790-ab01-f4b12c9c52a8","port_range_max":22,"port_range_min":22,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.5/32","security_group_id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.default"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"ssh-s2i2s-vpn-1","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"SSH traffic from S2I2S VPN 1","direction":"ingress","ethertype":"IPv4","id":"b2165477-3d0b-489f-945c-d2ca9e6abd22","port_range_max":22,"port_range_min":22,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.28.10/32","security_group_id":"4c6b6683-77fa-4d1a-8ba2-41acf10a12ba","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.access_to_the_jump_proxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"ssh-s2i2s-vpn-2","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"SSH traffic from S2I2S VPN 2","direction":"ingress","ethertype":"IPv4","id":"9410e2a2-9109-4f09-8248-a6a1c7962260","port_range_max":22,"port_range_min":22,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.28.11/32","security_group_id":"4c6b6683-77fa-4d1a-8ba2-41acf10a12ba","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.access_to_the_jump_proxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"ssh-shell-d4s","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"SSH traffic from shell.d4science.org","direction":"ingress","ethertype":"IPv4","id":"2533f58b-fe98-4202-841c-f00f58bca4dc","port_range_max":22,"port_range_min":22,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"146.48.122.95/32","security_group_id":"4c6b6683-77fa-4d1a-8ba2-41acf10a12ba","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["openstack_networking_secgroup_v2.access_to_the_jump_proxy"]}]},{"mode":"managed","type":"openstack_networking_secgroup_v2","name":"access_to_the_jump_proxy","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows SSH access to the jump node from a limited set of sources","id":"4c6b6683-77fa-4d1a-8ba2-41acf10a12ba","name":"ssh_access_to_the_jump_node","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"mode":"managed","type":"openstack_networking_secgroup_v2","name":"debugging","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows web app debugging via tunnel from the ssh jump node","id":"6c21f51b-9cad-4051-99b6-221bed658a83","name":"debugging_from_jump_node","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"mode":"managed","type":"openstack_networking_secgroup_v2","name":"default","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Default security group with rules for ssh access via jump proxy, prometheus scraping","id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","name":"default_for_all","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"mode":"managed","type":"openstack_networking_secgroup_v2","name":"main_lb_to_haproxy_l7","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Traffic coming from the main L4 lb (OVN provider, client IP is preserved) directed to the haproxy l7 servers","id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","name":"traffic_from_main_lb_to_haproxy_l7","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"mode":"managed","type":"openstack_networking_secgroup_v2","name":"prometheus_access_from_grafana","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"The public grafana server must be able to get data from Prometheus","id":"48e9366f-23a8-47df-abcd-66f84d4af395","name":"prometheus_access_from_grafana","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"mode":"managed","type":"openstack_networking_secgroup_v2","name":"public_web","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows HTTPS and HTTP from everywhere, for the services that are not behind any load balancer","id":"31140e64-667a-4044-b388-79afcc6bcb69","name":"public_web_service","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"mode":"managed","type":"openstack_networking_secgroup_v2","name":"restricted_web","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Security group that restricts HTTPS sources to the VPN nodes and shell.d4science.org. HTTP is open to all, because letsencrypt","id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","name":"restricted_web_service","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"mode":"managed","type":"openstack_networking_secgroup_v2","name":"traffic_from_main_haproxy","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Allow traffic from the main L7 HAPROXY load balancers","id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","name":"traffic_from_the_main_load_balancers","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]}],"check_results":null}