ISTI-provisioning
/
openstack-infrastructure-terraform
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix the s2i2s-proj-cloud project.

This commit is contained in:
Andrea Dell'Amico 2026-02-03 15:54:49 +01:00
parent 957eada881
commit 7aba48cdc3
Signed by: adellam
GPG Key ID: 147ABE6CEB9E20FF
3 changed files with 3201 additions and 86 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
s2i2s/main_net_dns_router/main.tf
View File

@ -31,8 +31,8 @@ module "main_private_net_and_dns_zone" {
ttl = 8600
}
os_project_data = {
name = "s2i2s-proj"
id = "d58ff441b31d4d0daf4a3e64d5332082"
name = "s2i2s-proj-cloud"
id = "d0dcc2b7f3004c9a81b87ab60ec3c0d3"
}
main_private_network = {

160
s2i2s/main_net_dns_router/terraform.tfstate
View File

@ -1,7 +1,7 @@
{
"version": 4,
"terraform_version": "1.6.6",
"serial": 20,
"terraform_version": "1.14.3",
"serial": 57,
"lineage": "bad36b1d-a210-1782-e7b2-e07bde71f6be",
"outputs": {
"almalinux_9": {
@ -53,10 +53,10 @@
"description": "DNS primary zone for the S2I2S project",
"disable_status_check": false,
"email": "postmaster@isti.cnr.it",
"id": "f668696a-cedb-4554-8f81-cf7dc1db773b",
"id": "e826e777-0196-4f63-b2a9-df07f70e618f",
"masters": [],
"name": "s2i2s.cloud.isti.cnr.it.",
"project_id": "d58ff441b31d4d0daf4a3e64d5332082",
"project_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3",
"region": "isti_area_pi_1",
"timeouts": null,
"ttl": 8600,
@ -99,7 +99,7 @@
]
},
"dns_zone_id": {
"value": "f668696a-cedb-4554-8f81-cf7dc1db773b",
"value": "e826e777-0196-4f63-b2a9-df07f70e618f",
"type": "string"
},
"el7_data_file": {
@ -109,7 +109,7 @@
"external_gateway_ip": {
"value": [
{
"ip_address": "146.48.31.101",
"ip_address": "146.48.30.6",
"subnet_id": "57f87509-4016-46fb-b8c3-25fca7f72ccb"
}
],
@ -175,7 +175,7 @@
"description": "S2I2S private network (use this as the main network)",
"dns_domain": "s2i2s.cloud.isti.cnr.it.",
"external": false,
"id": "9b3cd2d7-f9f0-4d4a-ae0b-29c8ceb055f4",
"id": "f371c239-6d5d-4ac8-a17e-af607752d82c",
"mtu": 8942,
"name": "s2i2s-proj-main",
"port_security_enabled": true,
@ -185,12 +185,12 @@
{
"network_type": "geneve",
"physical_network": "",
"segmentation_id": 55270
"segmentation_id": 47850
}
],
"shared": false,
"tags": [],
"tenant_id": "d58ff441b31d4d0daf4a3e64d5332082",
"tags": null,
"tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3",
"timeouts": null,
"transparent_vlan": false,
"value_specs": null
@ -249,7 +249,7 @@
]
},
"main_private_network_id": {
"value": "9b3cd2d7-f9f0-4d4a-ae0b-29c8ceb055f4",
"value": "f371c239-6d5d-4ac8-a17e-af607752d82c",
"type": "string"
},
"main_region": {
@ -265,12 +265,6 @@
"start": "10.10.1.1"
}
],
"allocation_pools": [
{
"end": "10.10.7.254",
"start": "10.10.1.1"
}
],
"cidr": "10.10.0.0/21",
"description": "S2I2S main private subnet",
"dns_nameservers": [
@ -278,22 +272,23 @@
"146.48.29.98",
"146.48.29.99"
],
"dns_publish_fixed_ip": false,
"enable_dhcp": true,
"gateway_ip": "10.10.0.1",
"host_routes": [],
"id": "0a5dd0f6-e23d-469e-982c-7bb280221c12",
"id": "19c649ee-96ea-438b-ac0c-512afdf5046d",
"ip_version": 4,
"ipv6_address_mode": "",
"ipv6_ra_mode": "",
"name": "s2i2s-proj-main-subnet",
"network_id": "9b3cd2d7-f9f0-4d4a-ae0b-29c8ceb055f4",
"network_id": "f371c239-6d5d-4ac8-a17e-af607752d82c",
"no_gateway": false,
"prefix_length": null,
"region": "isti_area_pi_1",
"segment_id": "",
"service_types": [],
"subnetpool_id": "",
"tags": [],
"tenant_id": "d58ff441b31d4d0daf4a3e64d5332082",
"tags": null,
"tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3",
"timeouts": null,
"value_specs": null
},
@ -314,34 +309,15 @@
}
]
],
"allocation_pools": [
"list",
[
"object",
{
"end": "string",
"start": "string"
}
]
],
"cidr": "string",
"description": "string",
"dns_nameservers": [
"list",
"string"
],
"dns_publish_fixed_ip": "bool",
"enable_dhcp": "bool",
"gateway_ip": "string",
"host_routes": [
"list",
[
"object",
{
"destination_cidr": "string",
"next_hop": "string"
}
]
],
"id": "string",
"ip_version": "number",
"ipv6_address_mode": "string",
@ -351,6 +327,7 @@
"no_gateway": "bool",
"prefix_length": "number",
"region": "string",
"segment_id": "string",
"service_types": [
"list",
"string"
@ -376,7 +353,7 @@
]
},
"main_subnet_network_id": {
"value": "0a5dd0f6-e23d-469e-982c-7bb280221c12",
"value": "19c649ee-96ea-438b-ac0c-512afdf5046d",
"type": "string"
},
"mtu_size": {
@ -385,8 +362,8 @@
},
"os_project_data": {
"value": {
"id": "d58ff441b31d4d0daf4a3e64d5332082",
"name": "s2i2s-proj"
"id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3",
"name": "s2i2s-proj-cloud"
},
"type": [
"map",
@ -418,6 +395,8 @@
},
"ssh_sources": {
"value": {
"d4s_vpn_1_cidr": "146.48.122.27/32",
"d4s_vpn_2_cidr": "146.48.122.49/32",
"infrascience_net_cidr": "146.48.122.0/23",
"isti_net_cidr": "146.48.80.0/21",
"isti_vpn_gw1": "146.48.80.101/32",
@ -425,7 +404,8 @@
"isti_vpn_gw3": "146.48.80.103/32",
"s2i2s_net_cidr": "146.48.28.0/22",
"s2i2s_vpn_1_cidr": "146.48.28.10/32",
"s2i2s_vpn_2_cidr": "146.48.28.11/32"
"s2i2s_vpn_2_cidr": "146.48.28.11/32",
"shell_d4s_cidr": "146.48.122.95/32"
},
"type": [
"map",
@ -463,10 +443,10 @@
"description": "DNS primary zone for the S2I2S project",
"disable_status_check": false,
"email": "postmaster@isti.cnr.it",
"id": "f668696a-cedb-4554-8f81-cf7dc1db773b",
"id": "e826e777-0196-4f63-b2a9-df07f70e618f",
"masters": [],
"name": "s2i2s.cloud.isti.cnr.it.",
"project_id": "d58ff441b31d4d0daf4a3e64d5332082",
"project_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3",
"region": "isti_area_pi_1",
"timeouts": null,
"ttl": 8600,
@ -474,6 +454,7 @@
"value_specs": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19"
}
]
@ -494,7 +475,7 @@
"description": "S2I2S private network (use this as the main network)",
"dns_domain": "s2i2s.cloud.isti.cnr.it.",
"external": false,
"id": "9b3cd2d7-f9f0-4d4a-ae0b-29c8ceb055f4",
"id": "f371c239-6d5d-4ac8-a17e-af607752d82c",
"mtu": 8942,
"name": "s2i2s-proj-main",
"port_security_enabled": true,
@ -504,17 +485,18 @@
{
"network_type": "geneve",
"physical_network": "",
"segmentation_id": 55270
"segmentation_id": 47850
}
],
"shared": false,
"tags": [],
"tenant_id": "d58ff441b31d4d0daf4a3e64d5332082",
"tags": null,
"tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3",
"timeouts": null,
"transparent_vlan": false,
"value_specs": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0="
}
]
@ -530,14 +512,15 @@
"schema_version": 0,
"attributes": {
"force_destroy": false,
"id": "bb511b0d-629a-425e-8054-f7ac2e4f2793",
"port_id": "bb511b0d-629a-425e-8054-f7ac2e4f2793",
"id": "7dc0b90c-cfdf-408e-9597-50cd98cc1dc0",
"port_id": "7dc0b90c-cfdf-408e-9597-50cd98cc1dc0",
"region": "isti_area_pi_1",
"router_id": "bca61b05-e34d-4d1c-8400-860e8ea66406",
"subnet_id": "0a5dd0f6-e23d-469e-982c-7bb280221c12",
"router_id": "7cd0ade5-1d49-48c5-bb9e-1a567d253011",
"subnet_id": "19c649ee-96ea-438b-ac0c-512afdf5046d",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=",
"dependencies": [
"module.main_private_net_and_dns_zone.openstack_networking_network_v2.main-private-network",
@ -565,18 +548,18 @@
"enable_snat": true,
"external_fixed_ip": [
{
"ip_address": "146.48.31.101",
"ip_address": "146.48.30.6",
"subnet_id": "57f87509-4016-46fb-b8c3-25fca7f72ccb"
}
],
"external_gateway": "1d2ff137-6ff7-4017-be2b-0d6c4af2353b",
"external_network_id": "1d2ff137-6ff7-4017-be2b-0d6c4af2353b",
"external_qos_policy_id": null,
"external_subnet_ids": null,
"id": "bca61b05-e34d-4d1c-8400-860e8ea66406",
"id": "7cd0ade5-1d49-48c5-bb9e-1a567d253011",
"name": "s2i2s-proj-external-router",
"region": "isti_area_pi_1",
"tags": [],
"tenant_id": "d58ff441b31d4d0daf4a3e64d5332082",
"tags": null,
"tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3",
"timeouts": null,
"value_specs": null,
"vendor_options": [
@ -586,6 +569,7 @@
]
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0="
}
]
@ -604,18 +588,20 @@
"description": "SSH from the S2I2S VPN 1",
"direction": "ingress",
"ethertype": "IPv4",
"id": "7b3b3ba7-130e-4d5e-8504-9d716dbdef41",
"id": "da38b746-dc67-408e-923f-a0c78b02789f",
"port_range_max": 22,
"port_range_min": 22,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_address_group_id": "",
"remote_group_id": "",
"remote_ip_prefix": "146.48.28.10/32",
"security_group_id": "a330ab7b-7e10-4085-b0f4-c8a4b80a4586",
"security_group_id": "a0518da1-1e56-4aa0-ba86-55cb54d597e0",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default"
@ -628,18 +614,20 @@
"description": "SSH from the S2I2S VPN 2",
"direction": "ingress",
"ethertype": "IPv4",
"id": "da40d77e-ea28-4e6e-88f1-b4e1f2ae7aa0",
"id": "ec77c5bd-b436-4e00-98ed-4a7a8b1c13c2",
"port_range_max": 22,
"port_range_min": 22,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_address_group_id": "",
"remote_group_id": "",
"remote_ip_prefix": "146.48.28.11/32",
"security_group_id": "a330ab7b-7e10-4085-b0f4-c8a4b80a4586",
"security_group_id": "a0518da1-1e56-4aa0-ba86-55cb54d597e0",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default"
@ -652,18 +640,20 @@
"description": "SSH from the S2I2S VPN 1",
"direction": "ingress",
"ethertype": "IPv4",
"id": "848ba8fc-1636-4a8b-a9fc-e41b06ed1d04",
"id": "87699b14-f66f-41b4-8dd6-452b9617a72c",
"port_range_max": 22,
"port_range_min": 22,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_address_group_id": "",
"remote_group_id": "",
"remote_ip_prefix": "10.10.0.5/32",
"security_group_id": "a330ab7b-7e10-4085-b0f4-c8a4b80a4586",
"security_group_id": "a0518da1-1e56-4aa0-ba86-55cb54d597e0",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default"
@ -684,18 +674,20 @@
"description": "Allow all the egress traffic",
"direction": "egress",
"ethertype": "IPv4",
"id": "f10cb159-233b-4fca-800d-24a071b4e27a",
"id": "159505fc-72da-4cd2-9f6c-f7a53a34f841",
"port_range_max": 0,
"port_range_min": 0,
"protocol": "",
"region": "isti_area_pi_1",
"remote_address_group_id": "",
"remote_group_id": "",
"remote_ip_prefix": "",
"security_group_id": "a330ab7b-7e10-4085-b0f4-c8a4b80a4586",
"security_group_id": "a0518da1-1e56-4aa0-ba86-55cb54d597e0",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default"
@ -716,18 +708,20 @@
"description": "Allow ICMP from remote",
"direction": "ingress",
"ethertype": "IPv4",
"id": "5b380756-8cc2-4642-ac2d-33540126dcbf",
"id": "0e3cd570-eb67-46e5-aca3-a4822f4ed495",
"port_range_max": 0,
"port_range_min": 0,
"protocol": "icmp",
"region": "isti_area_pi_1",
"remote_address_group_id": "",
"remote_group_id": "",
"remote_ip_prefix": "0.0.0.0/0",
"security_group_id": "a330ab7b-7e10-4085-b0f4-c8a4b80a4586",
"security_group_id": "a0518da1-1e56-4aa0-ba86-55cb54d597e0",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default"
@ -748,14 +742,16 @@
"all_tags": [],
"delete_default_rules": true,
"description": "Default security group with rules that allow ssh access from the ISTI networks, http, https",
"id": "a330ab7b-7e10-4085-b0f4-c8a4b80a4586",
"id": "a0518da1-1e56-4aa0-ba86-55cb54d597e0",
"name": "default_for_all",
"region": "isti_area_pi_1",
"stateful": false,
"tags": [],
"tenant_id": "d58ff441b31d4d0daf4a3e64d5332082",
"tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="
}
]
@ -777,12 +773,6 @@
"start": "10.10.1.1"
}
],
"allocation_pools": [
{
"end": "10.10.7.254",
"start": "10.10.1.1"
}
],
"cidr": "10.10.0.0/21",
"description": "S2I2S main private subnet",
"dns_nameservers": [
@ -790,26 +780,28 @@
"146.48.29.98",
"146.48.29.99"
],
"dns_publish_fixed_ip": false,
"enable_dhcp": true,
"gateway_ip": "10.10.0.1",
"host_routes": [],
"id": "0a5dd0f6-e23d-469e-982c-7bb280221c12",
"id": "19c649ee-96ea-438b-ac0c-512afdf5046d",
"ip_version": 4,
"ipv6_address_mode": "",
"ipv6_ra_mode": "",
"name": "s2i2s-proj-main-subnet",
"network_id": "9b3cd2d7-f9f0-4d4a-ae0b-29c8ceb055f4",
"network_id": "f371c239-6d5d-4ac8-a17e-af607752d82c",
"no_gateway": false,
"prefix_length": null,
"region": "isti_area_pi_1",
"segment_id": "",
"service_types": [],
"subnetpool_id": "",
"tags": [],
"tenant_id": "d58ff441b31d4d0daf4a3e64d5332082",
"tags": null,
"tenant_id": "d0dcc2b7f3004c9a81b87ab60ec3c0d3",
"timeouts": null,
"value_specs": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=",
"dependencies": [
"module.main_private_net_and_dns_zone.openstack_networking_network_v2.main-private-network"

3123
s2i2s/project-setup/terraform.tfstate
View File

File diff suppressed because it is too large Load Diff