diff --git a/d-net/main_net_dns_router/main.tf b/d-net/main_net_dns_router/main.tf index 5be02b6..98df085 100644 --- a/d-net/main_net_dns_router/main.tf +++ b/d-net/main_net_dns_router/main.tf @@ -3,7 +3,7 @@ terraform { required_version = ">= 0.14.0" required_providers { openstack = { - source = "terraform-provider-openstack/openstack" + source = "terraform-provider-openstack/openstack" # version = "~> 1.53.0" } } diff --git a/d-net/main_net_dns_router/terraform.tfstate b/d-net/main_net_dns_router/terraform.tfstate new file mode 100644 index 0000000..e93228a --- /dev/null +++ b/d-net/main_net_dns_router/terraform.tfstate @@ -0,0 +1,870 @@ +{ + "version": 4, + "terraform_version": "1.7.5", + "serial": 14, + "lineage": "c5a2fcbd-a667-c3bb-3f8b-db384108be9d", + "outputs": { + "almalinux_9": { + "value": { + "name": "AlmaLinux-9.0-20220718", + "uuid": "541650fc-dd19-4f38-bb1d-7333ed9dd688" + }, + "type": [ + "map", + "string" + ] + }, + "availability_zone_no_gpu_name": { + "value": "cnr-isti-nova-a", + "type": "string" + }, + "availability_zone_with_gpu_name": { + "value": "cnr-isti-nova-gpu-a", + "type": "string" + }, + "availability_zones_names": { + "value": { + "availability_zone_no_gpu": "cnr-isti-nova-a", + "availability_zone_with_gpu": "cnr-isti-nova-gpu-a" + }, + "type": [ + "map", + "string" + ] + }, + "centos_7": { + "value": { + "name": "CentOS-7", + "user_data_file": "../../s2i2s_openstack_vm_data_scripts/el.sh", + "uuid": "f0187a99-64f6-462a-ab5f-ef52fe62f2ca" + }, + "type": [ + "map", + "string" + ] + }, + "default_security_group_name": { + "value": "default_for_all", + "type": "string" + }, + "dns_zone": { + "value": { + "attributes": null, + "description": "DNS primary zone for the D-Net project", + "disable_status_check": false, + "email": "postmaster@isti.cnr.it", + "id": "0ce5f55b-e638-4e60-8fe1-86db52b0ea06", + "masters": null, + "name": "d-net.cloud.isti.cnr.it.", + "project_id": "484094ba7c444dd286f63df659c08e16", + "region": "isti_area_pi_1", + "timeouts": null, + "ttl": 8600, + "type": "PRIMARY", + "value_specs": null + }, + "type": [ + "object", + { + "attributes": [ + "map", + "string" + ], + "description": "string", + "disable_status_check": "bool", + "email": "string", + "id": "string", + "masters": [ + "set", + "string" + ], + "name": "string", + "project_id": "string", + "region": "string", + "timeouts": [ + "object", + { + "create": "string", + "delete": "string", + "update": "string" + } + ], + "ttl": "number", + "type": "string", + "value_specs": [ + "map", + "string" + ] + } + ] + }, + "dns_zone_id": { + "value": "0ce5f55b-e638-4e60-8fe1-86db52b0ea06", + "type": "string" + }, + "el7_data_file": { + "value": "../../s2i2s_openstack_vm_data_scripts/el.sh", + "type": "string" + }, + "external_gateway_ip": { + "value": [ + { + "ip_address": "146.48.31.36", + "subnet_id": "57f87509-4016-46fb-b8c3-25fca7f72ccb" + } + ], + "type": [ + "list", + [ + "object", + { + "ip_address": "string", + "subnet_id": "string" + } + ] + ] + }, + "external_network": { + "value": { + "id": "1d2ff137-6ff7-4017-be2b-0d6c4af2353b", + "name": "external-network" + }, + "type": [ + "map", + "string" + ] + }, + "external_network_id": { + "value": "1d2ff137-6ff7-4017-be2b-0d6c4af2353b", + "type": "string" + }, + "flavor_list": { + "value": { + "c1_large": "c1.large", + "c1_medium": "c1.medium", + "c1_small": "c1.small", + "c2_large": "c2.large", + "m1_large": "m1.large", + "m1_medium": "m1.medium", + "m1_xlarge": "m1.xlarge", + "m1_xxl": "m1.xxl", + "m2_large": "m2.large", + "m2_medium": "m2.medium", + "m2_small": "m2.small", + "m3_large": "m3.large" + }, + "type": [ + "map", + "string" + ] + }, + "floating_ip_pools": { + "value": { + "main_public_ip_pool": "external-network" + }, + "type": [ + "map", + "string" + ] + }, + "main_private_network": { + "value": { + "admin_state_up": true, + "all_tags": [], + "availability_zone_hints": [], + "description": "D-Net private network (use this as the main network)", + "dns_domain": "d-net.cloud.isti.cnr.it.", + "external": false, + "id": "08cea89e-bca8-41e5-9a2f-7c4a7249045a", + "mtu": 8942, + "name": "d-net-cloud-main", + "port_security_enabled": true, + "qos_policy_id": "", + "region": "isti_area_pi_1", + "segments": [ + { + "network_type": "geneve", + "physical_network": "", + "segmentation_id": 17660 + } + ], + "shared": false, + "tags": null, + "tenant_id": "484094ba7c444dd286f63df659c08e16", + "timeouts": null, + "transparent_vlan": false, + "value_specs": null + }, + "type": [ + "object", + { + "admin_state_up": "bool", + "all_tags": [ + "set", + "string" + ], + "availability_zone_hints": [ + "set", + "string" + ], + "description": "string", + "dns_domain": "string", + "external": "bool", + "id": "string", + "mtu": "number", + "name": "string", + "port_security_enabled": "bool", + "qos_policy_id": "string", + "region": "string", + "segments": [ + "set", + [ + "object", + { + "network_type": "string", + "physical_network": "string", + "segmentation_id": "number" + } + ] + ], + "shared": "bool", + "tags": [ + "set", + "string" + ], + "tenant_id": "string", + "timeouts": [ + "object", + { + "create": "string", + "delete": "string" + } + ], + "transparent_vlan": "bool", + "value_specs": [ + "map", + "string" + ] + } + ] + }, + "main_private_network_id": { + "value": "08cea89e-bca8-41e5-9a2f-7c4a7249045a", + "type": "string" + }, + "main_region": { + "value": "isti_area_pi_1", + "type": "string" + }, + "main_subnet_network": { + "value": { + "all_tags": [], + "allocation_pool": [ + { + "end": "10.24.7.254", + "start": "10.24.1.1" + } + ], + "allocation_pools": [ + { + "end": "10.24.7.254", + "start": "10.24.1.1" + } + ], + "cidr": "10.24.0.0/21", + "description": "D-Net main private subnet", + "dns_nameservers": [ + "146.48.29.97", + "146.48.29.98", + "146.48.29.99" + ], + "enable_dhcp": true, + "gateway_ip": "10.24.0.1", + "host_routes": [], + "id": "095e534e-212b-4e44-8631-5a8d675b47dc", + "ip_version": 4, + "ipv6_address_mode": "", + "ipv6_ra_mode": "", + "name": "d-net-cloud-main-subnet", + "network_id": "08cea89e-bca8-41e5-9a2f-7c4a7249045a", + "no_gateway": false, + "prefix_length": null, + "region": "isti_area_pi_1", + "service_types": [], + "subnetpool_id": "", + "tags": null, + "tenant_id": "484094ba7c444dd286f63df659c08e16", + "timeouts": null, + "value_specs": null + }, + "type": [ + "object", + { + "all_tags": [ + "set", + "string" + ], + "allocation_pool": [ + "set", + [ + "object", + { + "end": "string", + "start": "string" + } + ] + ], + "allocation_pools": [ + "list", + [ + "object", + { + "end": "string", + "start": "string" + } + ] + ], + "cidr": "string", + "description": "string", + "dns_nameservers": [ + "list", + "string" + ], + "enable_dhcp": "bool", + "gateway_ip": "string", + "host_routes": [ + "list", + [ + "object", + { + "destination_cidr": "string", + "next_hop": "string" + } + ] + ], + "id": "string", + "ip_version": "number", + "ipv6_address_mode": "string", + "ipv6_ra_mode": "string", + "name": "string", + "network_id": "string", + "no_gateway": "bool", + "prefix_length": "number", + "region": "string", + "service_types": [ + "list", + "string" + ], + "subnetpool_id": "string", + "tags": [ + "set", + "string" + ], + "tenant_id": "string", + "timeouts": [ + "object", + { + "create": "string", + "delete": "string" + } + ], + "value_specs": [ + "map", + "string" + ] + } + ] + }, + "main_subnet_network_id": { + "value": "095e534e-212b-4e44-8631-5a8d675b47dc", + "type": "string" + }, + "mtu_size": { + "value": 8942, + "type": "number" + }, + "os_project_data": { + "value": { + "id": "484094ba7c444dd286f63df659c08e16", + "name": "d-net-proj" + }, + "type": [ + "map", + "string" + ] + }, + "policy_list": { + "value": { + "affinity": "affinity", + "anti_affinity": "anti-affinity", + "soft_affinity": "soft-affinity", + "soft_anti_affinity": "soft-anti-affinity" + }, + "type": [ + "map", + "string" + ] + }, + "resolvers_ip": { + "value": [ + "146.48.29.97", + "146.48.29.98", + "146.48.29.99" + ], + "type": [ + "list", + "string" + ] + }, + "ssh_sources": { + "value": { + "infrascience_net_cidr": "146.48.122.0/23", + "isti_net_cidr": "146.48.80.0/21", + "isti_vpn_gw1": "146.48.80.101/32", + "isti_vpn_gw2": "146.48.80.102/32", + "isti_vpn_gw3": "146.48.80.103/32", + "s2i2s_net_cidr": "146.48.28.0/22", + "s2i2s_vpn_1_cidr": "146.48.28.10/32", + "s2i2s_vpn_2_cidr": "146.48.28.11/32" + }, + "type": [ + "map", + "string" + ] + }, + "ubuntu2204_data_file": { + "value": "../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh", + "type": "string" + }, + "ubuntu_2204": { + "value": { + "name": "Ubuntu-Jammy-22.04", + "user_data_file": "../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh", + "uuid": "54768889-8556-4be4-a2eb-82a4d9b34627" + }, + "type": [ + "map", + "string" + ] + } + }, + "resources": [ + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_dns_zone_v2", + "name": "primary_project_dns_zone", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "schema_version": 0, + "attributes": { + "attributes": null, + "description": "DNS primary zone for the D-Net project", + "disable_status_check": false, + "email": "postmaster@isti.cnr.it", + "id": "0ce5f55b-e638-4e60-8fe1-86db52b0ea06", + "masters": null, + "name": "d-net.cloud.isti.cnr.it.", + "project_id": "484094ba7c444dd286f63df659c08e16", + "region": "isti_area_pi_1", + "timeouts": null, + "ttl": 8600, + "type": "PRIMARY", + "value_specs": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19" + } + ] + }, + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_networking_network_v2", + "name": "main-private-network", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "schema_version": 0, + "attributes": { + "admin_state_up": true, + "all_tags": [], + "availability_zone_hints": [], + "description": "D-Net private network (use this as the main network)", + "dns_domain": "d-net.cloud.isti.cnr.it.", + "external": false, + "id": "08cea89e-bca8-41e5-9a2f-7c4a7249045a", + "mtu": 8942, + "name": "d-net-cloud-main", + "port_security_enabled": true, + "qos_policy_id": "", + "region": "isti_area_pi_1", + "segments": [ + { + "network_type": "geneve", + "physical_network": "", + "segmentation_id": 17660 + } + ], + "shared": false, + "tags": null, + "tenant_id": "484094ba7c444dd286f63df659c08e16", + "timeouts": null, + "transparent_vlan": false, + "value_specs": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=" + } + ] + }, + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_networking_router_interface_v2", + "name": "private-network-routing", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "schema_version": 0, + "attributes": { + "force_destroy": false, + "id": "fee4cae4-78ac-4b0f-a162-40cff8ec5eae", + "port_id": "fee4cae4-78ac-4b0f-a162-40cff8ec5eae", + "region": "isti_area_pi_1", + "router_id": "dad963bc-460f-4f2a-a926-49858d74568f", + "subnet_id": "095e534e-212b-4e44-8631-5a8d675b47dc", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_network_v2.main-private-network", + "module.main_private_net_and_dns_zone.openstack_networking_router_v2.external-router", + "module.main_private_net_and_dns_zone.openstack_networking_subnet_v2.main-private-subnet" + ] + } + ] + }, + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_networking_router_v2", + "name": "external-router", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "schema_version": 0, + "attributes": { + "admin_state_up": true, + "all_tags": [], + "availability_zone_hints": [], + "description": "D-Net main router", + "distributed": false, + "enable_snat": true, + "external_fixed_ip": [ + { + "ip_address": "146.48.31.36", + "subnet_id": "57f87509-4016-46fb-b8c3-25fca7f72ccb" + } + ], + "external_gateway": "1d2ff137-6ff7-4017-be2b-0d6c4af2353b", + "external_network_id": "1d2ff137-6ff7-4017-be2b-0d6c4af2353b", + "external_subnet_ids": null, + "id": "dad963bc-460f-4f2a-a926-49858d74568f", + "name": "d-net-proj-external-router", + "region": "isti_area_pi_1", + "tags": null, + "tenant_id": "484094ba7c444dd286f63df659c08e16", + "timeouts": null, + "value_specs": null, + "vendor_options": [ + { + "set_router_gateway_after_create": true + } + ] + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=" + } + ] + }, + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_networking_secgroup_rule_v2", + "name": "default_firewall_rules", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "index_key": "http_from_everywhere", + "schema_version": 0, + "attributes": { + "description": "HTTP from everywhere", + "direction": "ingress", + "ethertype": "IPv4", + "id": "520d6bf8-aceb-457f-bc13-5fcbe420eea7", + "port_range_max": 80, + "port_range_min": 80, + "protocol": "tcp", + "region": "isti_area_pi_1", + "remote_group_id": "", + "remote_ip_prefix": "0.0.0.0/0", + "security_group_id": "7081ec00-c2d6-4b26-8a98-8b6db89c91cd", + "tenant_id": "d3c30d05b2524faead8fabf0b511622e", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default" + ] + }, + { + "index_key": "https_from_everywhere", + "schema_version": 0, + "attributes": { + "description": "HTTPS from everywhere", + "direction": "ingress", + "ethertype": "IPv4", + "id": "28fd2681-2957-4210-b6bd-aa47469ae314", + "port_range_max": 443, + "port_range_min": 443, + "protocol": "tcp", + "region": "isti_area_pi_1", + "remote_group_id": "", + "remote_ip_prefix": "0.0.0.0/0", + "security_group_id": "7081ec00-c2d6-4b26-8a98-8b6db89c91cd", + "tenant_id": "d3c30d05b2524faead8fabf0b511622e", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default" + ] + }, + { + "index_key": "ssh_from_isti_net", + "schema_version": 0, + "attributes": { + "description": "SSH from the ISTI network", + "direction": "ingress", + "ethertype": "IPv4", + "id": "c9ad0916-880d-4252-8d25-990fc2304f4a", + "port_range_max": 22, + "port_range_min": 22, + "protocol": "tcp", + "region": "isti_area_pi_1", + "remote_group_id": "", + "remote_ip_prefix": "146.48.80.0/21", + "security_group_id": "7081ec00-c2d6-4b26-8a98-8b6db89c91cd", + "tenant_id": "d3c30d05b2524faead8fabf0b511622e", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default" + ] + }, + { + "index_key": "ssh_from_s2i2s_vpn_1", + "schema_version": 0, + "attributes": { + "description": "SSH from the S2I2S VPN 1", + "direction": "ingress", + "ethertype": "IPv4", + "id": "2870ec1a-57d4-477e-93ef-a24b73af377c", + "port_range_max": 22, + "port_range_min": 22, + "protocol": "tcp", + "region": "isti_area_pi_1", + "remote_group_id": "", + "remote_ip_prefix": "146.48.28.10/32", + "security_group_id": "7081ec00-c2d6-4b26-8a98-8b6db89c91cd", + "tenant_id": "d3c30d05b2524faead8fabf0b511622e", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default" + ] + }, + { + "index_key": "ssh_from_s2i2s_vpn_2", + "schema_version": 0, + "attributes": { + "description": "SSH from the S2I2S VPN 2", + "direction": "ingress", + "ethertype": "IPv4", + "id": "08e8a360-b49f-4d30-8e8c-6b86e1429deb", + "port_range_max": 22, + "port_range_min": 22, + "protocol": "tcp", + "region": "isti_area_pi_1", + "remote_group_id": "", + "remote_ip_prefix": "146.48.28.11/32", + "security_group_id": "7081ec00-c2d6-4b26-8a98-8b6db89c91cd", + "tenant_id": "d3c30d05b2524faead8fabf0b511622e", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default" + ] + } + ] + }, + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_networking_secgroup_rule_v2", + "name": "egress-ipv4", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "schema_version": 0, + "attributes": { + "description": "Allow all the egress traffic", + "direction": "egress", + "ethertype": "IPv4", + "id": "dcc6b23a-8756-46d5-8f9b-5104c392adb8", + "port_range_max": 0, + "port_range_min": 0, + "protocol": "", + "region": "isti_area_pi_1", + "remote_group_id": "", + "remote_ip_prefix": "", + "security_group_id": "7081ec00-c2d6-4b26-8a98-8b6db89c91cd", + "tenant_id": "d3c30d05b2524faead8fabf0b511622e", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default" + ] + } + ] + }, + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_networking_secgroup_rule_v2", + "name": "ingress-icmp", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "schema_version": 0, + "attributes": { + "description": "Allow ICMP from remote", + "direction": "ingress", + "ethertype": "IPv4", + "id": "e18a5d15-823e-4327-8fb3-9bcb6a20ef13", + "port_range_max": 0, + "port_range_min": 0, + "protocol": "icmp", + "region": "isti_area_pi_1", + "remote_group_id": "", + "remote_ip_prefix": "0.0.0.0/0", + "security_group_id": "7081ec00-c2d6-4b26-8a98-8b6db89c91cd", + "tenant_id": "d3c30d05b2524faead8fabf0b511622e", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default" + ] + } + ] + }, + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_networking_secgroup_v2", + "name": "default", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "schema_version": 0, + "attributes": { + "all_tags": [], + "delete_default_rules": true, + "description": "Default security group with rules that allow ssh access from the ISTI networks, http, https", + "id": "7081ec00-c2d6-4b26-8a98-8b6db89c91cd", + "name": "default_for_all", + "region": "isti_area_pi_1", + "tags": null, + "tenant_id": "484094ba7c444dd286f63df659c08e16", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==" + } + ] + }, + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_networking_subnet_v2", + "name": "main-private-subnet", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "schema_version": 0, + "attributes": { + "all_tags": [], + "allocation_pool": [ + { + "end": "10.24.7.254", + "start": "10.24.1.1" + } + ], + "allocation_pools": [ + { + "end": "10.24.7.254", + "start": "10.24.1.1" + } + ], + "cidr": "10.24.0.0/21", + "description": "D-Net main private subnet", + "dns_nameservers": [ + "146.48.29.97", + "146.48.29.98", + "146.48.29.99" + ], + "enable_dhcp": true, + "gateway_ip": "10.24.0.1", + "host_routes": [], + "id": "095e534e-212b-4e44-8631-5a8d675b47dc", + "ip_version": 4, + "ipv6_address_mode": "", + "ipv6_ra_mode": "", + "name": "d-net-cloud-main-subnet", + "network_id": "08cea89e-bca8-41e5-9a2f-7c4a7249045a", + "no_gateway": false, + "prefix_length": null, + "region": "isti_area_pi_1", + "service_types": [], + "subnetpool_id": "", + "tags": null, + "tenant_id": "484094ba7c444dd286f63df659c08e16", + "timeouts": null, + "value_specs": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_network_v2.main-private-network" + ] + } + ] + } + ], + "check_results": null +} diff --git a/infrascience/main_net_dns_router/main.tf b/infrascience/main_net_dns_router/main.tf index 6fa986b..a8e9481 100644 --- a/infrascience/main_net_dns_router/main.tf +++ b/infrascience/main_net_dns_router/main.tf @@ -3,8 +3,8 @@ terraform { required_version = ">= 0.14.0" required_providers { openstack = { - source = "terraform-provider-openstack/openstack" - version = "~> 1.53.0" + source = "terraform-provider-openstack/openstack" + # version = "~> 1.53.0" } } } diff --git a/infrascience/main_net_dns_router/terraform.tfstate b/infrascience/main_net_dns_router/terraform.tfstate new file mode 100644 index 0000000..8f75674 --- /dev/null +++ b/infrascience/main_net_dns_router/terraform.tfstate @@ -0,0 +1,870 @@ +{ + "version": 4, + "terraform_version": "1.7.5", + "serial": 14, + "lineage": "4feb75b9-9efc-6de1-8cd3-21b896dc3d22", + "outputs": { + "almalinux_9": { + "value": { + "name": "AlmaLinux-9.0-20220718", + "uuid": "541650fc-dd19-4f38-bb1d-7333ed9dd688" + }, + "type": [ + "map", + "string" + ] + }, + "availability_zone_no_gpu_name": { + "value": "cnr-isti-nova-a", + "type": "string" + }, + "availability_zone_with_gpu_name": { + "value": "cnr-isti-nova-gpu-a", + "type": "string" + }, + "availability_zones_names": { + "value": { + "availability_zone_no_gpu": "cnr-isti-nova-a", + "availability_zone_with_gpu": "cnr-isti-nova-gpu-a" + }, + "type": [ + "map", + "string" + ] + }, + "centos_7": { + "value": { + "name": "CentOS-7", + "user_data_file": "../../s2i2s_openstack_vm_data_scripts/el.sh", + "uuid": "f0187a99-64f6-462a-ab5f-ef52fe62f2ca" + }, + "type": [ + "map", + "string" + ] + }, + "default_security_group_name": { + "value": "default_for_all", + "type": "string" + }, + "dns_zone": { + "value": { + "attributes": null, + "description": "DNS primary zone for the InfraScience project", + "disable_status_check": false, + "email": "postmaster@isti.cnr.it", + "id": "d10e7c2f-e856-4b8e-b5a1-33afa0f87ca8", + "masters": null, + "name": "infrascience.cloud.isti.cnr.it.", + "project_id": "3511cd5293dc435ea421aeb0edcfab43", + "region": "isti_area_pi_1", + "timeouts": null, + "ttl": 8600, + "type": "PRIMARY", + "value_specs": null + }, + "type": [ + "object", + { + "attributes": [ + "map", + "string" + ], + "description": "string", + "disable_status_check": "bool", + "email": "string", + "id": "string", + "masters": [ + "set", + "string" + ], + "name": "string", + "project_id": "string", + "region": "string", + "timeouts": [ + "object", + { + "create": "string", + "delete": "string", + "update": "string" + } + ], + "ttl": "number", + "type": "string", + "value_specs": [ + "map", + "string" + ] + } + ] + }, + "dns_zone_id": { + "value": "d10e7c2f-e856-4b8e-b5a1-33afa0f87ca8", + "type": "string" + }, + "el7_data_file": { + "value": "../../s2i2s_openstack_vm_data_scripts/el.sh", + "type": "string" + }, + "external_gateway_ip": { + "value": [ + { + "ip_address": "146.48.30.166", + "subnet_id": "57f87509-4016-46fb-b8c3-25fca7f72ccb" + } + ], + "type": [ + "list", + [ + "object", + { + "ip_address": "string", + "subnet_id": "string" + } + ] + ] + }, + "external_network": { + "value": { + "id": "1d2ff137-6ff7-4017-be2b-0d6c4af2353b", + "name": "external-network" + }, + "type": [ + "map", + "string" + ] + }, + "external_network_id": { + "value": "1d2ff137-6ff7-4017-be2b-0d6c4af2353b", + "type": "string" + }, + "flavor_list": { + "value": { + "c1_large": "c1.large", + "c1_medium": "c1.medium", + "c1_small": "c1.small", + "c2_large": "c2.large", + "m1_large": "m1.large", + "m1_medium": "m1.medium", + "m1_xlarge": "m1.xlarge", + "m1_xxl": "m1.xxl", + "m2_large": "m2.large", + "m2_medium": "m2.medium", + "m2_small": "m2.small", + "m3_large": "m3.large" + }, + "type": [ + "map", + "string" + ] + }, + "floating_ip_pools": { + "value": { + "main_public_ip_pool": "external-network" + }, + "type": [ + "map", + "string" + ] + }, + "main_private_network": { + "value": { + "admin_state_up": true, + "all_tags": [], + "availability_zone_hints": [], + "description": "InfraScience private network (use this as the main network)", + "dns_domain": "infrascience.cloud.isti.cnr.it.", + "external": false, + "id": "3fec28ce-1f6f-44e7-8084-9fc67a25d7c4", + "mtu": 8942, + "name": "infrascience-cloud-main", + "port_security_enabled": true, + "qos_policy_id": "", + "region": "isti_area_pi_1", + "segments": [ + { + "network_type": "geneve", + "physical_network": "", + "segmentation_id": 34048 + } + ], + "shared": false, + "tags": null, + "tenant_id": "3511cd5293dc435ea421aeb0edcfab43", + "timeouts": null, + "transparent_vlan": false, + "value_specs": null + }, + "type": [ + "object", + { + "admin_state_up": "bool", + "all_tags": [ + "set", + "string" + ], + "availability_zone_hints": [ + "set", + "string" + ], + "description": "string", + "dns_domain": "string", + "external": "bool", + "id": "string", + "mtu": "number", + "name": "string", + "port_security_enabled": "bool", + "qos_policy_id": "string", + "region": "string", + "segments": [ + "set", + [ + "object", + { + "network_type": "string", + "physical_network": "string", + "segmentation_id": "number" + } + ] + ], + "shared": "bool", + "tags": [ + "set", + "string" + ], + "tenant_id": "string", + "timeouts": [ + "object", + { + "create": "string", + "delete": "string" + } + ], + "transparent_vlan": "bool", + "value_specs": [ + "map", + "string" + ] + } + ] + }, + "main_private_network_id": { + "value": "3fec28ce-1f6f-44e7-8084-9fc67a25d7c4", + "type": "string" + }, + "main_region": { + "value": "isti_area_pi_1", + "type": "string" + }, + "main_subnet_network": { + "value": { + "all_tags": [], + "allocation_pool": [ + { + "end": "10.16.7.254", + "start": "10.16.1.1" + } + ], + "allocation_pools": [ + { + "end": "10.16.7.254", + "start": "10.16.1.1" + } + ], + "cidr": "10.16.0.0/21", + "description": "InfraScience main private subnet", + "dns_nameservers": [ + "146.48.29.97", + "146.48.29.98", + "146.48.29.99" + ], + "enable_dhcp": true, + "gateway_ip": "10.16.0.1", + "host_routes": [], + "id": "5daf14c3-8af3-49e1-9ae0-90cfc0432016", + "ip_version": 4, + "ipv6_address_mode": "", + "ipv6_ra_mode": "", + "name": "infrascience-cloud-main-subnet", + "network_id": "3fec28ce-1f6f-44e7-8084-9fc67a25d7c4", + "no_gateway": false, + "prefix_length": null, + "region": "isti_area_pi_1", + "service_types": [], + "subnetpool_id": "", + "tags": null, + "tenant_id": "3511cd5293dc435ea421aeb0edcfab43", + "timeouts": null, + "value_specs": null + }, + "type": [ + "object", + { + "all_tags": [ + "set", + "string" + ], + "allocation_pool": [ + "set", + [ + "object", + { + "end": "string", + "start": "string" + } + ] + ], + "allocation_pools": [ + "list", + [ + "object", + { + "end": "string", + "start": "string" + } + ] + ], + "cidr": "string", + "description": "string", + "dns_nameservers": [ + "list", + "string" + ], + "enable_dhcp": "bool", + "gateway_ip": "string", + "host_routes": [ + "list", + [ + "object", + { + "destination_cidr": "string", + "next_hop": "string" + } + ] + ], + "id": "string", + "ip_version": "number", + "ipv6_address_mode": "string", + "ipv6_ra_mode": "string", + "name": "string", + "network_id": "string", + "no_gateway": "bool", + "prefix_length": "number", + "region": "string", + "service_types": [ + "list", + "string" + ], + "subnetpool_id": "string", + "tags": [ + "set", + "string" + ], + "tenant_id": "string", + "timeouts": [ + "object", + { + "create": "string", + "delete": "string" + } + ], + "value_specs": [ + "map", + "string" + ] + } + ] + }, + "main_subnet_network_id": { + "value": "5daf14c3-8af3-49e1-9ae0-90cfc0432016", + "type": "string" + }, + "mtu_size": { + "value": 8942, + "type": "number" + }, + "os_project_data": { + "value": { + "id": "3511cd5293dc435ea421aeb0edcfab43", + "name": "infrascience-lab-cloud" + }, + "type": [ + "map", + "string" + ] + }, + "policy_list": { + "value": { + "affinity": "affinity", + "anti_affinity": "anti-affinity", + "soft_affinity": "soft-affinity", + "soft_anti_affinity": "soft-anti-affinity" + }, + "type": [ + "map", + "string" + ] + }, + "resolvers_ip": { + "value": [ + "146.48.29.97", + "146.48.29.98", + "146.48.29.99" + ], + "type": [ + "list", + "string" + ] + }, + "ssh_sources": { + "value": { + "infrascience_net_cidr": "146.48.122.0/23", + "isti_net_cidr": "146.48.80.0/21", + "isti_vpn_gw1": "146.48.80.101/32", + "isti_vpn_gw2": "146.48.80.102/32", + "isti_vpn_gw3": "146.48.80.103/32", + "s2i2s_net_cidr": "146.48.28.0/22", + "s2i2s_vpn_1_cidr": "146.48.28.10/32", + "s2i2s_vpn_2_cidr": "146.48.28.11/32" + }, + "type": [ + "map", + "string" + ] + }, + "ubuntu2204_data_file": { + "value": "../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh", + "type": "string" + }, + "ubuntu_2204": { + "value": { + "name": "Ubuntu-Jammy-22.04", + "user_data_file": "../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh", + "uuid": "54768889-8556-4be4-a2eb-82a4d9b34627" + }, + "type": [ + "map", + "string" + ] + } + }, + "resources": [ + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_dns_zone_v2", + "name": "primary_project_dns_zone", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "schema_version": 0, + "attributes": { + "attributes": null, + "description": "DNS primary zone for the InfraScience project", + "disable_status_check": false, + "email": "postmaster@isti.cnr.it", + "id": "d10e7c2f-e856-4b8e-b5a1-33afa0f87ca8", + "masters": null, + "name": "infrascience.cloud.isti.cnr.it.", + "project_id": "3511cd5293dc435ea421aeb0edcfab43", + "region": "isti_area_pi_1", + "timeouts": null, + "ttl": 8600, + "type": "PRIMARY", + "value_specs": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19" + } + ] + }, + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_networking_network_v2", + "name": "main-private-network", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "schema_version": 0, + "attributes": { + "admin_state_up": true, + "all_tags": [], + "availability_zone_hints": [], + "description": "InfraScience private network (use this as the main network)", + "dns_domain": "infrascience.cloud.isti.cnr.it.", + "external": false, + "id": "3fec28ce-1f6f-44e7-8084-9fc67a25d7c4", + "mtu": 8942, + "name": "infrascience-cloud-main", + "port_security_enabled": true, + "qos_policy_id": "", + "region": "isti_area_pi_1", + "segments": [ + { + "network_type": "geneve", + "physical_network": "", + "segmentation_id": 34048 + } + ], + "shared": false, + "tags": null, + "tenant_id": "3511cd5293dc435ea421aeb0edcfab43", + "timeouts": null, + "transparent_vlan": false, + "value_specs": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=" + } + ] + }, + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_networking_router_interface_v2", + "name": "private-network-routing", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "schema_version": 0, + "attributes": { + "force_destroy": false, + "id": "3cafa36f-b806-44ae-a8f4-fd6428d9a854", + "port_id": "3cafa36f-b806-44ae-a8f4-fd6428d9a854", + "region": "isti_area_pi_1", + "router_id": "2d451d72-4ba9-4e89-973f-6578a829cc6a", + "subnet_id": "5daf14c3-8af3-49e1-9ae0-90cfc0432016", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_network_v2.main-private-network", + "module.main_private_net_and_dns_zone.openstack_networking_router_v2.external-router", + "module.main_private_net_and_dns_zone.openstack_networking_subnet_v2.main-private-subnet" + ] + } + ] + }, + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_networking_router_v2", + "name": "external-router", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "schema_version": 0, + "attributes": { + "admin_state_up": true, + "all_tags": [], + "availability_zone_hints": [], + "description": "InfraScience main router", + "distributed": false, + "enable_snat": true, + "external_fixed_ip": [ + { + "ip_address": "146.48.30.166", + "subnet_id": "57f87509-4016-46fb-b8c3-25fca7f72ccb" + } + ], + "external_gateway": "1d2ff137-6ff7-4017-be2b-0d6c4af2353b", + "external_network_id": "1d2ff137-6ff7-4017-be2b-0d6c4af2353b", + "external_subnet_ids": null, + "id": "2d451d72-4ba9-4e89-973f-6578a829cc6a", + "name": "infrascience-lab-cloud-external-router", + "region": "isti_area_pi_1", + "tags": null, + "tenant_id": "3511cd5293dc435ea421aeb0edcfab43", + "timeouts": null, + "value_specs": null, + "vendor_options": [ + { + "set_router_gateway_after_create": true + } + ] + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=" + } + ] + }, + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_networking_secgroup_rule_v2", + "name": "default_firewall_rules", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "index_key": "http_from_everywhere", + "schema_version": 0, + "attributes": { + "description": "HTTP from everywhere", + "direction": "ingress", + "ethertype": "IPv4", + "id": "ed07f356-93d0-43df-8911-529bb04e2240", + "port_range_max": 80, + "port_range_min": 80, + "protocol": "tcp", + "region": "isti_area_pi_1", + "remote_group_id": "", + "remote_ip_prefix": "0.0.0.0/0", + "security_group_id": "d7fa1992-ce11-4508-b8d3-296fdba6c5a1", + "tenant_id": "d3c30d05b2524faead8fabf0b511622e", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default" + ] + }, + { + "index_key": "https_from_everywhere", + "schema_version": 0, + "attributes": { + "description": "HTTPS from everywhere", + "direction": "ingress", + "ethertype": "IPv4", + "id": "021c997a-8278-484f-ba01-3a0603cb618c", + "port_range_max": 443, + "port_range_min": 443, + "protocol": "tcp", + "region": "isti_area_pi_1", + "remote_group_id": "", + "remote_ip_prefix": "0.0.0.0/0", + "security_group_id": "d7fa1992-ce11-4508-b8d3-296fdba6c5a1", + "tenant_id": "d3c30d05b2524faead8fabf0b511622e", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default" + ] + }, + { + "index_key": "ssh_from_isti_net", + "schema_version": 0, + "attributes": { + "description": "SSH from the ISTI network", + "direction": "ingress", + "ethertype": "IPv4", + "id": "16c85d57-da54-435c-9e4b-2ada432856ed", + "port_range_max": 22, + "port_range_min": 22, + "protocol": "tcp", + "region": "isti_area_pi_1", + "remote_group_id": "", + "remote_ip_prefix": "146.48.80.0/21", + "security_group_id": "d7fa1992-ce11-4508-b8d3-296fdba6c5a1", + "tenant_id": "d3c30d05b2524faead8fabf0b511622e", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default" + ] + }, + { + "index_key": "ssh_from_s2i2s_vpn_1", + "schema_version": 0, + "attributes": { + "description": "SSH from the S2I2S VPN 1", + "direction": "ingress", + "ethertype": "IPv4", + "id": "5b972841-3db8-4d8c-a043-118adebcaff7", + "port_range_max": 22, + "port_range_min": 22, + "protocol": "tcp", + "region": "isti_area_pi_1", + "remote_group_id": "", + "remote_ip_prefix": "146.48.28.10/32", + "security_group_id": "d7fa1992-ce11-4508-b8d3-296fdba6c5a1", + "tenant_id": "d3c30d05b2524faead8fabf0b511622e", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default" + ] + }, + { + "index_key": "ssh_from_s2i2s_vpn_2", + "schema_version": 0, + "attributes": { + "description": "SSH from the S2I2S VPN 2", + "direction": "ingress", + "ethertype": "IPv4", + "id": "0fd1c369-7c53-4399-8f26-0b341f2bb8f8", + "port_range_max": 22, + "port_range_min": 22, + "protocol": "tcp", + "region": "isti_area_pi_1", + "remote_group_id": "", + "remote_ip_prefix": "146.48.28.11/32", + "security_group_id": "d7fa1992-ce11-4508-b8d3-296fdba6c5a1", + "tenant_id": "d3c30d05b2524faead8fabf0b511622e", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default" + ] + } + ] + }, + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_networking_secgroup_rule_v2", + "name": "egress-ipv4", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "schema_version": 0, + "attributes": { + "description": "Allow all the egress traffic", + "direction": "egress", + "ethertype": "IPv4", + "id": "5dd409cd-3ebc-4a83-b40e-69ace6b00ecf", + "port_range_max": 0, + "port_range_min": 0, + "protocol": "", + "region": "isti_area_pi_1", + "remote_group_id": "", + "remote_ip_prefix": "", + "security_group_id": "d7fa1992-ce11-4508-b8d3-296fdba6c5a1", + "tenant_id": "d3c30d05b2524faead8fabf0b511622e", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default" + ] + } + ] + }, + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_networking_secgroup_rule_v2", + "name": "ingress-icmp", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "schema_version": 0, + "attributes": { + "description": "Allow ICMP from remote", + "direction": "ingress", + "ethertype": "IPv4", + "id": "a72913ee-3633-486b-9098-92b43ae9d73a", + "port_range_max": 0, + "port_range_min": 0, + "protocol": "icmp", + "region": "isti_area_pi_1", + "remote_group_id": "", + "remote_ip_prefix": "0.0.0.0/0", + "security_group_id": "d7fa1992-ce11-4508-b8d3-296fdba6c5a1", + "tenant_id": "d3c30d05b2524faead8fabf0b511622e", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default" + ] + } + ] + }, + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_networking_secgroup_v2", + "name": "default", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "schema_version": 0, + "attributes": { + "all_tags": [], + "delete_default_rules": true, + "description": "Default security group with rules that allow ssh access from the ISTI networks, http, https", + "id": "d7fa1992-ce11-4508-b8d3-296fdba6c5a1", + "name": "default_for_all", + "region": "isti_area_pi_1", + "tags": null, + "tenant_id": "3511cd5293dc435ea421aeb0edcfab43", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==" + } + ] + }, + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_networking_subnet_v2", + "name": "main-private-subnet", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "schema_version": 0, + "attributes": { + "all_tags": [], + "allocation_pool": [ + { + "end": "10.16.7.254", + "start": "10.16.1.1" + } + ], + "allocation_pools": [ + { + "end": "10.16.7.254", + "start": "10.16.1.1" + } + ], + "cidr": "10.16.0.0/21", + "description": "InfraScience main private subnet", + "dns_nameservers": [ + "146.48.29.97", + "146.48.29.98", + "146.48.29.99" + ], + "enable_dhcp": true, + "gateway_ip": "10.16.0.1", + "host_routes": [], + "id": "5daf14c3-8af3-49e1-9ae0-90cfc0432016", + "ip_version": 4, + "ipv6_address_mode": "", + "ipv6_ra_mode": "", + "name": "infrascience-cloud-main-subnet", + "network_id": "3fec28ce-1f6f-44e7-8084-9fc67a25d7c4", + "no_gateway": false, + "prefix_length": null, + "region": "isti_area_pi_1", + "service_types": [], + "subnetpool_id": "", + "tags": null, + "tenant_id": "3511cd5293dc435ea421aeb0edcfab43", + "timeouts": null, + "value_specs": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_network_v2.main-private-network" + ] + } + ] + } + ], + "check_results": null +} diff --git a/servizi/main_net_dns_router/main.tf b/servizi/main_net_dns_router/main.tf index 77cf900..972763c 100644 --- a/servizi/main_net_dns_router/main.tf +++ b/servizi/main_net_dns_router/main.tf @@ -3,7 +3,7 @@ terraform { required_version = ">= 0.14.0" required_providers { openstack = { - source = "terraform-provider-openstack/openstack" + source = "terraform-provider-openstack/openstack" # version = "~> 1.53.0" } } diff --git a/servizi/main_net_dns_router/terraform.tfstate b/servizi/main_net_dns_router/terraform.tfstate new file mode 100644 index 0000000..35758ab --- /dev/null +++ b/servizi/main_net_dns_router/terraform.tfstate @@ -0,0 +1,870 @@ +{ + "version": 4, + "terraform_version": "1.7.5", + "serial": 14, + "lineage": "84e1a8c3-3475-25cf-374d-045d4bf3e3fe", + "outputs": { + "almalinux_9": { + "value": { + "name": "AlmaLinux-9.0-20220718", + "uuid": "541650fc-dd19-4f38-bb1d-7333ed9dd688" + }, + "type": [ + "map", + "string" + ] + }, + "availability_zone_no_gpu_name": { + "value": "cnr-isti-nova-a", + "type": "string" + }, + "availability_zone_with_gpu_name": { + "value": "cnr-isti-nova-gpu-a", + "type": "string" + }, + "availability_zones_names": { + "value": { + "availability_zone_no_gpu": "cnr-isti-nova-a", + "availability_zone_with_gpu": "cnr-isti-nova-gpu-a" + }, + "type": [ + "map", + "string" + ] + }, + "centos_7": { + "value": { + "name": "CentOS-7", + "user_data_file": "../../s2i2s_openstack_vm_data_scripts/el.sh", + "uuid": "f0187a99-64f6-462a-ab5f-ef52fe62f2ca" + }, + "type": [ + "map", + "string" + ] + }, + "default_security_group_name": { + "value": "default_for_all", + "type": "string" + }, + "dns_zone": { + "value": { + "attributes": null, + "description": "DNS primary zone for the Servizi project", + "disable_status_check": false, + "email": "postmaster@isti.cnr.it", + "id": "fd24f432-e42e-4b18-bb2d-6d254ea0eab6", + "masters": null, + "name": "servizi.cloud.isti.cnr.it.", + "project_id": "71d54644c6a7487696c333255f102822", + "region": "isti_area_pi_1", + "timeouts": null, + "ttl": 8600, + "type": "PRIMARY", + "value_specs": null + }, + "type": [ + "object", + { + "attributes": [ + "map", + "string" + ], + "description": "string", + "disable_status_check": "bool", + "email": "string", + "id": "string", + "masters": [ + "set", + "string" + ], + "name": "string", + "project_id": "string", + "region": "string", + "timeouts": [ + "object", + { + "create": "string", + "delete": "string", + "update": "string" + } + ], + "ttl": "number", + "type": "string", + "value_specs": [ + "map", + "string" + ] + } + ] + }, + "dns_zone_id": { + "value": "fd24f432-e42e-4b18-bb2d-6d254ea0eab6", + "type": "string" + }, + "el7_data_file": { + "value": "../../s2i2s_openstack_vm_data_scripts/el.sh", + "type": "string" + }, + "external_gateway_ip": { + "value": [ + { + "ip_address": "146.48.30.63", + "subnet_id": "57f87509-4016-46fb-b8c3-25fca7f72ccb" + } + ], + "type": [ + "list", + [ + "object", + { + "ip_address": "string", + "subnet_id": "string" + } + ] + ] + }, + "external_network": { + "value": { + "id": "1d2ff137-6ff7-4017-be2b-0d6c4af2353b", + "name": "external-network" + }, + "type": [ + "map", + "string" + ] + }, + "external_network_id": { + "value": "1d2ff137-6ff7-4017-be2b-0d6c4af2353b", + "type": "string" + }, + "flavor_list": { + "value": { + "c1_large": "c1.large", + "c1_medium": "c1.medium", + "c1_small": "c1.small", + "c2_large": "c2.large", + "m1_large": "m1.large", + "m1_medium": "m1.medium", + "m1_xlarge": "m1.xlarge", + "m1_xxl": "m1.xxl", + "m2_large": "m2.large", + "m2_medium": "m2.medium", + "m2_small": "m2.small", + "m3_large": "m3.large" + }, + "type": [ + "map", + "string" + ] + }, + "floating_ip_pools": { + "value": { + "main_public_ip_pool": "external-network" + }, + "type": [ + "map", + "string" + ] + }, + "main_private_network": { + "value": { + "admin_state_up": true, + "all_tags": [], + "availability_zone_hints": [], + "description": "Servizi private network (use this as the main network)", + "dns_domain": "servizi.cloud.isti.cnr.it.", + "external": false, + "id": "172018b1-f109-4377-bd11-70ada8473d03", + "mtu": 8942, + "name": "servizi-cloud-main", + "port_security_enabled": true, + "qos_policy_id": "", + "region": "isti_area_pi_1", + "segments": [ + { + "network_type": "geneve", + "physical_network": "", + "segmentation_id": 32168 + } + ], + "shared": false, + "tags": null, + "tenant_id": "71d54644c6a7487696c333255f102822", + "timeouts": null, + "transparent_vlan": false, + "value_specs": null + }, + "type": [ + "object", + { + "admin_state_up": "bool", + "all_tags": [ + "set", + "string" + ], + "availability_zone_hints": [ + "set", + "string" + ], + "description": "string", + "dns_domain": "string", + "external": "bool", + "id": "string", + "mtu": "number", + "name": "string", + "port_security_enabled": "bool", + "qos_policy_id": "string", + "region": "string", + "segments": [ + "set", + [ + "object", + { + "network_type": "string", + "physical_network": "string", + "segmentation_id": "number" + } + ] + ], + "shared": "bool", + "tags": [ + "set", + "string" + ], + "tenant_id": "string", + "timeouts": [ + "object", + { + "create": "string", + "delete": "string" + } + ], + "transparent_vlan": "bool", + "value_specs": [ + "map", + "string" + ] + } + ] + }, + "main_private_network_id": { + "value": "172018b1-f109-4377-bd11-70ada8473d03", + "type": "string" + }, + "main_region": { + "value": "isti_area_pi_1", + "type": "string" + }, + "main_subnet_network": { + "value": { + "all_tags": [], + "allocation_pool": [ + { + "end": "10.25.7.254", + "start": "10.25.1.1" + } + ], + "allocation_pools": [ + { + "end": "10.25.7.254", + "start": "10.25.1.1" + } + ], + "cidr": "10.25.0.0/21", + "description": "Servizi main private subnet", + "dns_nameservers": [ + "146.48.29.97", + "146.48.29.98", + "146.48.29.99" + ], + "enable_dhcp": true, + "gateway_ip": "10.25.0.1", + "host_routes": [], + "id": "d392fd25-97dd-40bc-a215-e24898ad7502", + "ip_version": 4, + "ipv6_address_mode": "", + "ipv6_ra_mode": "", + "name": "servizi-cloud-main-subnet", + "network_id": "172018b1-f109-4377-bd11-70ada8473d03", + "no_gateway": false, + "prefix_length": null, + "region": "isti_area_pi_1", + "service_types": [], + "subnetpool_id": "", + "tags": null, + "tenant_id": "71d54644c6a7487696c333255f102822", + "timeouts": null, + "value_specs": null + }, + "type": [ + "object", + { + "all_tags": [ + "set", + "string" + ], + "allocation_pool": [ + "set", + [ + "object", + { + "end": "string", + "start": "string" + } + ] + ], + "allocation_pools": [ + "list", + [ + "object", + { + "end": "string", + "start": "string" + } + ] + ], + "cidr": "string", + "description": "string", + "dns_nameservers": [ + "list", + "string" + ], + "enable_dhcp": "bool", + "gateway_ip": "string", + "host_routes": [ + "list", + [ + "object", + { + "destination_cidr": "string", + "next_hop": "string" + } + ] + ], + "id": "string", + "ip_version": "number", + "ipv6_address_mode": "string", + "ipv6_ra_mode": "string", + "name": "string", + "network_id": "string", + "no_gateway": "bool", + "prefix_length": "number", + "region": "string", + "service_types": [ + "list", + "string" + ], + "subnetpool_id": "string", + "tags": [ + "set", + "string" + ], + "tenant_id": "string", + "timeouts": [ + "object", + { + "create": "string", + "delete": "string" + } + ], + "value_specs": [ + "map", + "string" + ] + } + ] + }, + "main_subnet_network_id": { + "value": "d392fd25-97dd-40bc-a215-e24898ad7502", + "type": "string" + }, + "mtu_size": { + "value": 8942, + "type": "number" + }, + "os_project_data": { + "value": { + "id": "71d54644c6a7487696c333255f102822", + "name": "servizi-proj" + }, + "type": [ + "map", + "string" + ] + }, + "policy_list": { + "value": { + "affinity": "affinity", + "anti_affinity": "anti-affinity", + "soft_affinity": "soft-affinity", + "soft_anti_affinity": "soft-anti-affinity" + }, + "type": [ + "map", + "string" + ] + }, + "resolvers_ip": { + "value": [ + "146.48.29.97", + "146.48.29.98", + "146.48.29.99" + ], + "type": [ + "list", + "string" + ] + }, + "ssh_sources": { + "value": { + "infrascience_net_cidr": "146.48.122.0/23", + "isti_net_cidr": "146.48.80.0/21", + "isti_vpn_gw1": "146.48.80.101/32", + "isti_vpn_gw2": "146.48.80.102/32", + "isti_vpn_gw3": "146.48.80.103/32", + "s2i2s_net_cidr": "146.48.28.0/22", + "s2i2s_vpn_1_cidr": "146.48.28.10/32", + "s2i2s_vpn_2_cidr": "146.48.28.11/32" + }, + "type": [ + "map", + "string" + ] + }, + "ubuntu2204_data_file": { + "value": "../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh", + "type": "string" + }, + "ubuntu_2204": { + "value": { + "name": "Ubuntu-Jammy-22.04", + "user_data_file": "../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh", + "uuid": "54768889-8556-4be4-a2eb-82a4d9b34627" + }, + "type": [ + "map", + "string" + ] + } + }, + "resources": [ + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_dns_zone_v2", + "name": "primary_project_dns_zone", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "schema_version": 0, + "attributes": { + "attributes": null, + "description": "DNS primary zone for the Servizi project", + "disable_status_check": false, + "email": "postmaster@isti.cnr.it", + "id": "fd24f432-e42e-4b18-bb2d-6d254ea0eab6", + "masters": null, + "name": "servizi.cloud.isti.cnr.it.", + "project_id": "71d54644c6a7487696c333255f102822", + "region": "isti_area_pi_1", + "timeouts": null, + "ttl": 8600, + "type": "PRIMARY", + "value_specs": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19" + } + ] + }, + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_networking_network_v2", + "name": "main-private-network", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "schema_version": 0, + "attributes": { + "admin_state_up": true, + "all_tags": [], + "availability_zone_hints": [], + "description": "Servizi private network (use this as the main network)", + "dns_domain": "servizi.cloud.isti.cnr.it.", + "external": false, + "id": "172018b1-f109-4377-bd11-70ada8473d03", + "mtu": 8942, + "name": "servizi-cloud-main", + "port_security_enabled": true, + "qos_policy_id": "", + "region": "isti_area_pi_1", + "segments": [ + { + "network_type": "geneve", + "physical_network": "", + "segmentation_id": 32168 + } + ], + "shared": false, + "tags": null, + "tenant_id": "71d54644c6a7487696c333255f102822", + "timeouts": null, + "transparent_vlan": false, + "value_specs": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=" + } + ] + }, + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_networking_router_interface_v2", + "name": "private-network-routing", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "schema_version": 0, + "attributes": { + "force_destroy": false, + "id": "4f46ea4a-471d-4ef4-989b-fecf72f51ed5", + "port_id": "4f46ea4a-471d-4ef4-989b-fecf72f51ed5", + "region": "isti_area_pi_1", + "router_id": "49cbdb62-725a-473c-95ac-d95f1fe3a964", + "subnet_id": "d392fd25-97dd-40bc-a215-e24898ad7502", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_network_v2.main-private-network", + "module.main_private_net_and_dns_zone.openstack_networking_router_v2.external-router", + "module.main_private_net_and_dns_zone.openstack_networking_subnet_v2.main-private-subnet" + ] + } + ] + }, + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_networking_router_v2", + "name": "external-router", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "schema_version": 0, + "attributes": { + "admin_state_up": true, + "all_tags": [], + "availability_zone_hints": [], + "description": "Servizi main router", + "distributed": false, + "enable_snat": true, + "external_fixed_ip": [ + { + "ip_address": "146.48.30.63", + "subnet_id": "57f87509-4016-46fb-b8c3-25fca7f72ccb" + } + ], + "external_gateway": "1d2ff137-6ff7-4017-be2b-0d6c4af2353b", + "external_network_id": "1d2ff137-6ff7-4017-be2b-0d6c4af2353b", + "external_subnet_ids": null, + "id": "49cbdb62-725a-473c-95ac-d95f1fe3a964", + "name": "servizi-proj-external-router", + "region": "isti_area_pi_1", + "tags": null, + "tenant_id": "71d54644c6a7487696c333255f102822", + "timeouts": null, + "value_specs": null, + "vendor_options": [ + { + "set_router_gateway_after_create": true + } + ] + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=" + } + ] + }, + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_networking_secgroup_rule_v2", + "name": "default_firewall_rules", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "index_key": "http_from_everywhere", + "schema_version": 0, + "attributes": { + "description": "HTTP from everywhere", + "direction": "ingress", + "ethertype": "IPv4", + "id": "d2ebd6a2-4c97-4604-901e-a5c3e8f16cee", + "port_range_max": 80, + "port_range_min": 80, + "protocol": "tcp", + "region": "isti_area_pi_1", + "remote_group_id": "", + "remote_ip_prefix": "0.0.0.0/0", + "security_group_id": "bb843991-aaa4-4df4-884a-1b84cd165fe8", + "tenant_id": "d3c30d05b2524faead8fabf0b511622e", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default" + ] + }, + { + "index_key": "https_from_everywhere", + "schema_version": 0, + "attributes": { + "description": "HTTPS from everywhere", + "direction": "ingress", + "ethertype": "IPv4", + "id": "d60ee1b2-648d-4c49-9662-af0d313297ab", + "port_range_max": 443, + "port_range_min": 443, + "protocol": "tcp", + "region": "isti_area_pi_1", + "remote_group_id": "", + "remote_ip_prefix": "0.0.0.0/0", + "security_group_id": "bb843991-aaa4-4df4-884a-1b84cd165fe8", + "tenant_id": "d3c30d05b2524faead8fabf0b511622e", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default" + ] + }, + { + "index_key": "ssh_from_isti_net", + "schema_version": 0, + "attributes": { + "description": "SSH from the ISTI network", + "direction": "ingress", + "ethertype": "IPv4", + "id": "e1528787-ef13-4ee7-802f-b9322f20f858", + "port_range_max": 22, + "port_range_min": 22, + "protocol": "tcp", + "region": "isti_area_pi_1", + "remote_group_id": "", + "remote_ip_prefix": "146.48.80.0/21", + "security_group_id": "bb843991-aaa4-4df4-884a-1b84cd165fe8", + "tenant_id": "d3c30d05b2524faead8fabf0b511622e", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default" + ] + }, + { + "index_key": "ssh_from_s2i2s_vpn_1", + "schema_version": 0, + "attributes": { + "description": "SSH from the S2I2S VPN 1", + "direction": "ingress", + "ethertype": "IPv4", + "id": "5020fc44-4c66-4ec7-8b0e-654c2ac06aee", + "port_range_max": 22, + "port_range_min": 22, + "protocol": "tcp", + "region": "isti_area_pi_1", + "remote_group_id": "", + "remote_ip_prefix": "146.48.28.10/32", + "security_group_id": "bb843991-aaa4-4df4-884a-1b84cd165fe8", + "tenant_id": "d3c30d05b2524faead8fabf0b511622e", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default" + ] + }, + { + "index_key": "ssh_from_s2i2s_vpn_2", + "schema_version": 0, + "attributes": { + "description": "SSH from the S2I2S VPN 2", + "direction": "ingress", + "ethertype": "IPv4", + "id": "d110bb53-f76f-4ee3-a0af-5c8ca0afefb4", + "port_range_max": 22, + "port_range_min": 22, + "protocol": "tcp", + "region": "isti_area_pi_1", + "remote_group_id": "", + "remote_ip_prefix": "146.48.28.11/32", + "security_group_id": "bb843991-aaa4-4df4-884a-1b84cd165fe8", + "tenant_id": "d3c30d05b2524faead8fabf0b511622e", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default" + ] + } + ] + }, + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_networking_secgroup_rule_v2", + "name": "egress-ipv4", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "schema_version": 0, + "attributes": { + "description": "Allow all the egress traffic", + "direction": "egress", + "ethertype": "IPv4", + "id": "bb53e124-14ee-474d-8a3b-29fb3eb23f28", + "port_range_max": 0, + "port_range_min": 0, + "protocol": "", + "region": "isti_area_pi_1", + "remote_group_id": "", + "remote_ip_prefix": "", + "security_group_id": "bb843991-aaa4-4df4-884a-1b84cd165fe8", + "tenant_id": "d3c30d05b2524faead8fabf0b511622e", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default" + ] + } + ] + }, + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_networking_secgroup_rule_v2", + "name": "ingress-icmp", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "schema_version": 0, + "attributes": { + "description": "Allow ICMP from remote", + "direction": "ingress", + "ethertype": "IPv4", + "id": "56cca79f-6902-4190-ab92-bae76202374f", + "port_range_max": 0, + "port_range_min": 0, + "protocol": "icmp", + "region": "isti_area_pi_1", + "remote_group_id": "", + "remote_ip_prefix": "0.0.0.0/0", + "security_group_id": "bb843991-aaa4-4df4-884a-1b84cd165fe8", + "tenant_id": "d3c30d05b2524faead8fabf0b511622e", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_secgroup_v2.default" + ] + } + ] + }, + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_networking_secgroup_v2", + "name": "default", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "schema_version": 0, + "attributes": { + "all_tags": [], + "delete_default_rules": true, + "description": "Default security group with rules that allow ssh access from the ISTI networks, http, https", + "id": "bb843991-aaa4-4df4-884a-1b84cd165fe8", + "name": "default_for_all", + "region": "isti_area_pi_1", + "tags": null, + "tenant_id": "71d54644c6a7487696c333255f102822", + "timeouts": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==" + } + ] + }, + { + "module": "module.main_private_net_and_dns_zone", + "mode": "managed", + "type": "openstack_networking_subnet_v2", + "name": "main-private-subnet", + "provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]", + "instances": [ + { + "schema_version": 0, + "attributes": { + "all_tags": [], + "allocation_pool": [ + { + "end": "10.25.7.254", + "start": "10.25.1.1" + } + ], + "allocation_pools": [ + { + "end": "10.25.7.254", + "start": "10.25.1.1" + } + ], + "cidr": "10.25.0.0/21", + "description": "Servizi main private subnet", + "dns_nameservers": [ + "146.48.29.97", + "146.48.29.98", + "146.48.29.99" + ], + "enable_dhcp": true, + "gateway_ip": "10.25.0.1", + "host_routes": [], + "id": "d392fd25-97dd-40bc-a215-e24898ad7502", + "ip_version": 4, + "ipv6_address_mode": "", + "ipv6_ra_mode": "", + "name": "servizi-cloud-main-subnet", + "network_id": "172018b1-f109-4377-bd11-70ada8473d03", + "no_gateway": false, + "prefix_length": null, + "region": "isti_area_pi_1", + "service_types": [], + "subnetpool_id": "", + "tags": null, + "tenant_id": "71d54644c6a7487696c333255f102822", + "timeouts": null, + "value_specs": null + }, + "sensitive_attributes": [], + "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=", + "dependencies": [ + "module.main_private_net_and_dns_zone.openstack_networking_network_v2.main-private-network" + ] + } + ] + } + ], + "check_results": null +}