ISTI-provisioning
/
openstack-infrastructure-terraform
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
openstack-infrastructure-te.../s2i2s/project-setup/terraform.tfstate

3124 lines
105 KiB
JSON
Raw Blame History

{
"version": 4,
"terraform_version": "1.14.3",
"serial": 72,
"lineage": "63543f0d-4b49-2066-95b6-653706374703",
"outputs": {
"access_to_the_jump_proxy": {
"value": {
"all_tags": [],
"delete_default_rules": true,
"description": "Security group that allows SSH access to the jump node from a limited set of sources",
"id": "0f52158e-c767-4baf-9d6d-1986ca886dd0",
"name": "ssh_access_to_the_jump_node",
"region": "isti_area_pi_1",
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"type": [
"object",
{
"all_tags": [
"set",
"string"
],
"delete_default_rules": "bool",
"description": "string",
"id": "string",
"name": "string",
"region": "string",
"tags": [
"set",
"string"
],
"tenant_id": "string",
"timeouts": [
"object",
{
"delete": "string"
}
]
}
]
},
"availability_zones_names": {
"value": {
"availability_zone_no_gpu": "cnr-isti-nova-a",
"availability_zone_with_gpu": "cnr-isti-nova-gpu-a"
},
"type": [
"map",
"string"
]
},
"basic_services_ip": {
"value": {
"ca": "10.10.0.4",
"ca_cidr": "10.10.0.4/32",
"haproxy_l7_1": "10.10.0.11",
"haproxy_l7_1_cidr": "10.10.0.11/32",
"haproxy_l7_2": "10.10.0.12",
"haproxy_l7_2_cidr": "10.10.0.12/32",
"octavia_main": "10.10.0.20",
"octavia_main_cidr": "10.10.0.20/32",
"prometheus": "10.10.0.10",
"prometheus_cidr": "10.10.0.10/32",
"ssh_jump": "10.10.0.5",
"ssh_jump_cidr": "10.10.0.5/32"
},
"type": [
"map",
"string"
]
},
"debugging": {
"value": {
"all_tags": [],
"delete_default_rules": true,
"description": "Security group that allows web app debugging via tunnel from the ssh jump node",
"id": "9e217f67-497f-4e4c-98fc-8ba9bdfb29c9",
"name": "debugging_from_jump_node",
"region": "isti_area_pi_1",
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"type": [
"object",
{
"all_tags": [
"set",
"string"
],
"delete_default_rules": "bool",
"description": "string",
"id": "string",
"name": "string",
"region": "string",
"tags": [
"set",
"string"
],
"tenant_id": "string",
"timeouts": [
"object",
{
"delete": "string"
}
]
}
]
},
"default_security_group": {
"value": {
"all_tags": [],
"delete_default_rules": true,
"description": "Default security group with rules for ssh access via jump proxy, prometheus scraping",
"id": "c4a3a99c-83e0-46b6-9a28-62d742b6ec0e",
"name": "default_for_all",
"region": "isti_area_pi_1",
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"type": [
"object",
{
"all_tags": [
"set",
"string"
],
"delete_default_rules": "bool",
"description": "string",
"id": "string",
"name": "string",
"region": "string",
"tags": [
"set",
"string"
],
"tenant_id": "string",
"timeouts": [
"object",
{
"delete": "string"
}
]
}
]
},
"default_security_group_id": {
"value": "c4a3a99c-83e0-46b6-9a28-62d742b6ec0e",
"type": "string"
},
"default_security_group_name": {
"value": "default_for_all",
"type": "string"
},
"dns_zone": {
"value": {
"attributes": {},
"description": "DNS primary zone for the S2I2S project",
"disable_status_check": false,
"email": "postmaster@isti.cnr.it",
"id": "f668696a-cedb-4554-8f81-cf7dc1db773b",
"masters": [],
"name": "s2i2s.cloud.isti.cnr.it.",
"project_id": "d58ff441b31d4d0daf4a3e64d5332082",
"region": "isti_area_pi_1",
"timeouts": null,
"ttl": 8600,
"type": "PRIMARY",
"value_specs": null
},
"type": [
"object",
{
"attributes": [
"map",
"string"
],
"description": "string",
"disable_status_check": "bool",
"email": "string",
"id": "string",
"masters": [
"set",
"string"
],
"name": "string",
"project_id": "string",
"region": "string",
"timeouts": [
"object",
{
"create": "string",
"delete": "string",
"update": "string"
}
],
"ttl": "number",
"type": "string",
"value_specs": [
"map",
"string"
]
}
]
},
"dns_zone_id": {
"value": "f668696a-cedb-4554-8f81-cf7dc1db773b",
"type": "string"
},
"floating_ip_pools": {
"value": {
"main_public_ip_pool": "external-network"
},
"type": [
"map",
"string"
]
},
"haproxy_l7_data": {
"value": {
"flavor": "m1.medium",
"name": "main-haproxy-l7",
"vm_count": "2"
},
"type": [
"map",
"string"
]
},
"internal_ca_data": {
"value": {
"flavor": "m1.small",
"name": "ca"
},
"type": [
"map",
"string"
]
},
"main_haproxy_l7_ip": {
"value": [
"10.10.0.11",
"10.10.0.12"
],
"type": [
"list",
"string"
]
},
"main_lb_to_haproxy_l7_security_group": {
"value": {
"all_tags": [],
"delete_default_rules": true,
"description": "Traffic coming from the main L4 lb directed to the haproxy l7 servers",
"id": "68966027-d706-441f-8540-499cd44034af",
"name": "traffic_from_main_lb_to_haproxy_l7",
"region": "isti_area_pi_1",
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"type": [
"object",
{
"all_tags": [
"set",
"string"
],
"delete_default_rules": "bool",
"description": "string",
"id": "string",
"name": "string",
"region": "string",
"tags": [
"set",
"string"
],
"tenant_id": "string",
"timeouts": [
"object",
{
"delete": "string"
}
]
}
]
},
"main_loadbalancer_hostname": {
"value": "octavia-main-lb.s2i2s.cloud.isti.cnr.it.",
"type": "string"
},
"main_loadbalancer_id": {
"value": "fac5939a-0329-4bcb-8fd9-d2d5716b0e84",
"type": "string"
},
"main_loadbalancer_ip": {
"value": "10.10.0.20",
"type": "string"
},
"main_loadbalancer_public_ip": {
"value": "146.48.30.162",
"type": "string"
},
"main_private_network": {
"value": {
"admin_state_up": true,
"all_tags": [],
"availability_zone_hints": [],
"description": "S2I2S private network (use this as the main network)",
"dns_domain": "s2i2s.cloud.isti.cnr.it.",
"external": false,
"id": "9b3cd2d7-f9f0-4d4a-ae0b-29c8ceb055f4",
"mtu": 8942,
"name": "s2i2s-proj-main",
"port_security_enabled": true,
"qos_policy_id": "",
"region": "isti_area_pi_1",
"segments": [
{
"network_type": "geneve",
"physical_network": "",
"segmentation_id": 55270
}
],
"shared": false,
"tags": [],
"tenant_id": "d58ff441b31d4d0daf4a3e64d5332082",
"timeouts": null,
"transparent_vlan": false,
"value_specs": null
},
"type": [
"object",
{
"admin_state_up": "bool",
"all_tags": [
"set",
"string"
],
"availability_zone_hints": [
"set",
"string"
],
"description": "string",
"dns_domain": "string",
"external": "bool",
"id": "string",
"mtu": "number",
"name": "string",
"port_security_enabled": "bool",
"qos_policy_id": "string",
"region": "string",
"segments": [
"set",
[
"object",
{
"network_type": "string",
"physical_network": "string",
"segmentation_id": "number"
}
]
],
"shared": "bool",
"tags": [
"set",
"string"
],
"tenant_id": "string",
"timeouts": [
"object",
{
"create": "string",
"delete": "string"
}
],
"transparent_vlan": "bool",
"value_specs": [
"map",
"string"
]
}
]
},
"main_private_subnet": {
"value": {
"all_tags": [],
"allocation_pool": [
{
"end": "10.10.7.254",
"start": "10.10.1.1"
}
],
"allocation_pools": [
{
"end": "10.10.7.254",
"start": "10.10.1.1"
}
],
"cidr": "10.10.0.0/21",
"description": "S2I2S main private subnet",
"dns_nameservers": [
"146.48.29.97",
"146.48.29.98",
"146.48.29.99"
],
"enable_dhcp": true,
"gateway_ip": "10.10.0.1",
"host_routes": [],
"id": "0a5dd0f6-e23d-469e-982c-7bb280221c12",
"ip_version": 4,
"ipv6_address_mode": "",
"ipv6_ra_mode": "",
"name": "s2i2s-proj-main-subnet",
"network_id": "9b3cd2d7-f9f0-4d4a-ae0b-29c8ceb055f4",
"no_gateway": false,
"prefix_length": null,
"region": "isti_area_pi_1",
"service_types": [],
"subnetpool_id": "",
"tags": [],
"tenant_id": "d58ff441b31d4d0daf4a3e64d5332082",
"timeouts": null,
"value_specs": null
},
"type": [
"object",
{
"all_tags": [
"set",
"string"
],
"allocation_pool": [
"set",
[
"object",
{
"end": "string",
"start": "string"
}
]
],
"allocation_pools": [
"list",
[
"object",
{
"end": "string",
"start": "string"
}
]
],
"cidr": "string",
"description": "string",
"dns_nameservers": [
"list",
"string"
],
"enable_dhcp": "bool",
"gateway_ip": "string",
"host_routes": [
"list",
[
"object",
{
"destination_cidr": "string",
"next_hop": "string"
}
]
],
"id": "string",
"ip_version": "number",
"ipv6_address_mode": "string",
"ipv6_ra_mode": "string",
"name": "string",
"network_id": "string",
"no_gateway": "bool",
"prefix_length": "number",
"region": "string",
"service_types": [
"list",
"string"
],
"subnetpool_id": "string",
"tags": [
"set",
"string"
],
"tenant_id": "string",
"timeouts": [
"object",
{
"create": "string",
"delete": "string"
}
],
"value_specs": [
"map",
"string"
]
}
]
},
"main_region": {
"value": "isti_area_pi_1",
"type": "string"
},
"main_subnet_network_id": {
"value": "0a5dd0f6-e23d-469e-982c-7bb280221c12",
"type": "string"
},
"mtu_size": {
"value": 8942,
"type": "number"
},
"os_project_data": {
"value": {
"id": "d58ff441b31d4d0daf4a3e64d5332082",
"name": "s2i2s-proj"
},
"type": [
"map",
"string"
]
},
"prometheus_access_from_grafana": {
"value": {
"all_tags": [],
"delete_default_rules": true,
"description": "The public grafana server must be able to get data from Prometheus",
"id": "91492d1d-06dc-48e9-91f8-567c3c77d7d5",
"name": "prometheus_access_from_grafana",
"region": "isti_area_pi_1",
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"type": [
"object",
{
"all_tags": [
"set",
"string"
],
"delete_default_rules": "bool",
"description": "string",
"id": "string",
"name": "string",
"region": "string",
"tags": [
"set",
"string"
],
"tenant_id": "string",
"timeouts": [
"object",
{
"delete": "string"
}
]
}
]
},
"prometheus_hostname": {
"value": "prometheus.s2i2s.cloud.isti.cnr.it.",
"type": "string"
},
"prometheus_public_ip": {
"value": "146.48.31.149",
"type": "string"
},
"prometheus_server_data": {
"value": {
"flavor": "m1.medium",
"name": "prometheus",
"public_grafana_server_cidr": "146.48.28.103/32",
"vol_data_device": "/dev/vdb",
"vol_data_name": "prometheus-data",
"vol_data_size": "100"
},
"type": [
"map",
"string"
]
},
"public_web": {
"value": {
"all_tags": [],
"delete_default_rules": true,
"description": "Security group that allows HTTPS and HTTP from everywhere, for the services that are not behind any load balancer",
"id": "c0ec12e4-9a8f-4534-bfd2-d6892a1d6cc0",
"name": "public_web_service",
"region": "isti_area_pi_1",
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"type": [
"object",
{
"all_tags": [
"set",
"string"
],
"delete_default_rules": "bool",
"description": "string",
"id": "string",
"name": "string",
"region": "string",
"tags": [
"set",
"string"
],
"tenant_id": "string",
"timeouts": [
"object",
{
"delete": "string"
}
]
}
]
},
"resolvers_ip": {
"value": [
"146.48.29.97",
"146.48.29.98",
"146.48.29.99"
],
"type": [
"list",
"string"
]
},
"restricted_web": {
"value": {
"all_tags": [],
"delete_default_rules": true,
"description": "Security group that restricts HTTPS sources to the VPN nodes and shell.d4science.org. HTTP is open to all, because letsencrypt",
"id": "54be0898-6c08-400b-9503-9d9dce935371",
"name": "restricted_web_service",
"region": "isti_area_pi_1",
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"type": [
"object",
{
"all_tags": [
"set",
"string"
],
"delete_default_rules": "bool",
"description": "string",
"id": "string",
"name": "string",
"region": "string",
"tags": [
"set",
"string"
],
"tenant_id": "string",
"timeouts": [
"object",
{
"delete": "string"
}
]
}
]
},
"ssh_jump_proxy": {
"value": {
"flavor": "m2.small",
"name": "ssh-jump-proxy"
},
"type": [
"map",
"string"
]
},
"ssh_jump_proxy_hostname": {
"value": "ssh-jump-proxy.s2i2s.cloud.isti.cnr.it.",
"type": "string"
},
"ssh_jump_proxy_public_ip": {
"value": "146.48.30.179",
"type": "string"
},
"ssh_sources": {
"value": {
"d4s_vpn_1_cidr": "146.48.122.27/32",
"d4s_vpn_2_cidr": "146.48.122.49/32",
"infrascience_net_cidr": "146.48.122.0/23",
"isti_net_cidr": "146.48.80.0/21",
"isti_vpn_gw1": "146.48.80.101/32",
"isti_vpn_gw2": "146.48.80.102/32",
"isti_vpn_gw3": "146.48.80.103/32",
"s2i2s_net_cidr": "146.48.28.0/22",
"s2i2s_vpn_1_cidr": "146.48.28.10/32",
"s2i2s_vpn_2_cidr": "146.48.28.11/32",
"shell_d4s_cidr": "146.48.122.95/32"
},
"type": [
"map",
"string"
]
},
"traffic_from_main_haproxy": {
"value": {
"all_tags": [],
"delete_default_rules": true,
"description": "Allow traffic from the main L7 HAPROXY load balancers",
"id": "1556ed52-f8d4-4f80-acbf-5b62c47b20bb",
"name": "traffic_from_the_main_load_balancers",
"region": "isti_area_pi_1",
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"type": [
"object",
{
"all_tags": [
"set",
"string"
],
"delete_default_rules": "bool",
"description": "string",
"id": "string",
"name": "string",
"region": "string",
"tags": [
"set",
"string"
],
"tenant_id": "string",
"timeouts": [
"object",
{
"delete": "string"
}
]
}
]
},
"ubuntu2204_data_file": {
"value": "../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh",
"type": "string"
},
"ubuntu_2204": {
"value": {
"name": "Ubuntu-Jammy-22.04",
"user_data_file": "../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh",
"uuid": "54768889-8556-4be4-a2eb-82a4d9b34627"
},
"type": [
"map",
"string"
]
}
},
"resources": [
{
"mode": "data",
"type": "terraform_remote_state",
"name": "privnet_dns_router",
"provider": "provider[\"terraform.io/builtin/terraform\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"backend": "local",
"config": {
"value": {
"path": "../main_net_dns_router/terraform.tfstate"
},
"type": [
"object",
{
"path": "string"
}
]
},
"defaults": null,
"outputs": {
"value": {
"almalinux_9": {
"name": "AlmaLinux-9.0-20220718",
"uuid": "541650fc-dd19-4f38-bb1d-7333ed9dd688"
},
"availability_zone_no_gpu_name": "cnr-isti-nova-a",
"availability_zone_with_gpu_name": "cnr-isti-nova-gpu-a",
"availability_zones_names": {
"availability_zone_no_gpu": "cnr-isti-nova-a",
"availability_zone_with_gpu": "cnr-isti-nova-gpu-a"
},
"centos_7": {
"name": "CentOS-7",
"user_data_file": "../../s2i2s_openstack_vm_data_scripts/el.sh",
"uuid": "f0187a99-64f6-462a-ab5f-ef52fe62f2ca"
},
"default_security_group_name": "default_for_all",
"dns_zone": {
"attributes": {},
"description": "DNS primary zone for the S2I2S project",
"disable_status_check": false,
"email": "postmaster@isti.cnr.it",
"id": "f668696a-cedb-4554-8f81-cf7dc1db773b",
"masters": [],
"name": "s2i2s.cloud.isti.cnr.it.",
"project_id": "d58ff441b31d4d0daf4a3e64d5332082",
"region": "isti_area_pi_1",
"timeouts": null,
"ttl": 8600,
"type": "PRIMARY",
"value_specs": null
},
"dns_zone_id": "f668696a-cedb-4554-8f81-cf7dc1db773b",
"el7_data_file": "../../s2i2s_openstack_vm_data_scripts/el.sh",
"external_gateway_ip": [
{
"ip_address": "146.48.31.101",
"subnet_id": "57f87509-4016-46fb-b8c3-25fca7f72ccb"
}
],
"external_network": {
"id": "1d2ff137-6ff7-4017-be2b-0d6c4af2353b",
"name": "external-network"
},
"external_network_id": "1d2ff137-6ff7-4017-be2b-0d6c4af2353b",
"flavor_list": {
"c1_large": "c1.large",
"c1_medium": "c1.medium",
"c1_small": "c1.small",
"c2_large": "c2.large",
"m1_large": "m1.large",
"m1_medium": "m1.medium",
"m1_xlarge": "m1.xlarge",
"m1_xxl": "m1.xxl",
"m2_large": "m2.large",
"m2_medium": "m2.medium",
"m2_small": "m2.small",
"m3_large": "m3.large"
},
"floating_ip_pools": {
"main_public_ip_pool": "external-network"
},
"main_private_network": {
"admin_state_up": true,
"all_tags": [],
"availability_zone_hints": [],
"description": "S2I2S private network (use this as the main network)",
"dns_domain": "s2i2s.cloud.isti.cnr.it.",
"external": false,
"id": "9b3cd2d7-f9f0-4d4a-ae0b-29c8ceb055f4",
"mtu": 8942,
"name": "s2i2s-proj-main",
"port_security_enabled": true,
"qos_policy_id": "",
"region": "isti_area_pi_1",
"segments": [
{
"network_type": "geneve",
"physical_network": "",
"segmentation_id": 55270
}
],
"shared": false,
"tags": [],
"tenant_id": "d58ff441b31d4d0daf4a3e64d5332082",
"timeouts": null,
"transparent_vlan": false,
"value_specs": null
},
"main_private_network_id": "9b3cd2d7-f9f0-4d4a-ae0b-29c8ceb055f4",
"main_region": "isti_area_pi_1",
"main_subnet_network": {
"all_tags": [],
"allocation_pool": [
{
"end": "10.10.7.254",
"start": "10.10.1.1"
}
],
"allocation_pools": [
{
"end": "10.10.7.254",
"start": "10.10.1.1"
}
],
"cidr": "10.10.0.0/21",
"description": "S2I2S main private subnet",
"dns_nameservers": [
"146.48.29.97",
"146.48.29.98",
"146.48.29.99"
],
"enable_dhcp": true,
"gateway_ip": "10.10.0.1",
"host_routes": [],
"id": "0a5dd0f6-e23d-469e-982c-7bb280221c12",
"ip_version": 4,
"ipv6_address_mode": "",
"ipv6_ra_mode": "",
"name": "s2i2s-proj-main-subnet",
"network_id": "9b3cd2d7-f9f0-4d4a-ae0b-29c8ceb055f4",
"no_gateway": false,
"prefix_length": null,
"region": "isti_area_pi_1",
"service_types": [],
"subnetpool_id": "",
"tags": [],
"tenant_id": "d58ff441b31d4d0daf4a3e64d5332082",
"timeouts": null,
"value_specs": null
},
"main_subnet_network_id": "0a5dd0f6-e23d-469e-982c-7bb280221c12",
"mtu_size": 8942,
"os_project_data": {
"id": "d58ff441b31d4d0daf4a3e64d5332082",
"name": "s2i2s-proj"
},
"policy_list": {
"affinity": "affinity",
"anti_affinity": "anti-affinity",
"soft_affinity": "soft-affinity",
"soft_anti_affinity": "soft-anti-affinity"
},
"resolvers_ip": [
"146.48.29.97",
"146.48.29.98",
"146.48.29.99"
],
"ssh_sources": {
"infrascience_net_cidr": "146.48.122.0/23",
"isti_net_cidr": "146.48.80.0/21",
"isti_vpn_gw1": "146.48.80.101/32",
"isti_vpn_gw2": "146.48.80.102/32",
"isti_vpn_gw3": "146.48.80.103/32",
"s2i2s_net_cidr": "146.48.28.0/22",
"s2i2s_vpn_1_cidr": "146.48.28.10/32",
"s2i2s_vpn_2_cidr": "146.48.28.11/32"
},
"ubuntu2204_data_file": "../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh",
"ubuntu_2204": {
"name": "Ubuntu-Jammy-22.04",
"user_data_file": "../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh",
"uuid": "54768889-8556-4be4-a2eb-82a4d9b34627"
}
},
"type": [
"object",
{
"almalinux_9": [
"map",
"string"
],
"availability_zone_no_gpu_name": "string",
"availability_zone_with_gpu_name": "string",
"availability_zones_names": [
"map",
"string"
],
"centos_7": [
"map",
"string"
],
"default_security_group_name": "string",
"dns_zone": [
"object",
{
"attributes": [
"map",
"string"
],
"description": "string",
"disable_status_check": "bool",
"email": "string",
"id": "string",
"masters": [
"set",
"string"
],
"name": "string",
"project_id": "string",
"region": "string",
"timeouts": [
"object",
{
"create": "string",
"delete": "string",
"update": "string"
}
],
"ttl": "number",
"type": "string",
"value_specs": [
"map",
"string"
]
}
],
"dns_zone_id": "string",
"el7_data_file": "string",
"external_gateway_ip": [
"list",
[
"object",
{
"ip_address": "string",
"subnet_id": "string"
}
]
],
"external_network": [
"map",
"string"
],
"external_network_id": "string",
"flavor_list": [
"map",
"string"
],
"floating_ip_pools": [
"map",
"string"
],
"main_private_network": [
"object",
{
"admin_state_up": "bool",
"all_tags": [
"set",
"string"
],
"availability_zone_hints": [
"set",
"string"
],
"description": "string",
"dns_domain": "string",
"external": "bool",
"id": "string",
"mtu": "number",
"name": "string",
"port_security_enabled": "bool",
"qos_policy_id": "string",
"region": "string",
"segments": [
"set",
[
"object",
{
"network_type": "string",
"physical_network": "string",
"segmentation_id": "number"
}
]
],
"shared": "bool",
"tags": [
"set",
"string"
],
"tenant_id": "string",
"timeouts": [
"object",
{
"create": "string",
"delete": "string"
}
],
"transparent_vlan": "bool",
"value_specs": [
"map",
"string"
]
}
],
"main_private_network_id": "string",
"main_region": "string",
"main_subnet_network": [
"object",
{
"all_tags": [
"set",
"string"
],
"allocation_pool": [
"set",
[
"object",
{
"end": "string",
"start": "string"
}
]
],
"allocation_pools": [
"list",
[
"object",
{
"end": "string",
"start": "string"
}
]
],
"cidr": "string",
"description": "string",
"dns_nameservers": [
"list",
"string"
],
"enable_dhcp": "bool",
"gateway_ip": "string",
"host_routes": [
"list",
[
"object",
{
"destination_cidr": "string",
"next_hop": "string"
}
]
],
"id": "string",
"ip_version": "number",
"ipv6_address_mode": "string",
"ipv6_ra_mode": "string",
"name": "string",
"network_id": "string",
"no_gateway": "bool",
"prefix_length": "number",
"region": "string",
"service_types": [
"list",
"string"
],
"subnetpool_id": "string",
"tags": [
"set",
"string"
],
"tenant_id": "string",
"timeouts": [
"object",
{
"create": "string",
"delete": "string"
}
],
"value_specs": [
"map",
"string"
]
}
],
"main_subnet_network_id": "string",
"mtu_size": "number",
"os_project_data": [
"map",
"string"
],
"policy_list": [
"map",
"string"
],
"resolvers_ip": [
"list",
"string"
],
"ssh_sources": [
"map",
"string"
],
"ubuntu2204_data_file": "string",
"ubuntu_2204": [
"map",
"string"
]
}
]
},
"workspace": null
},
"sensitive_attributes": [],
"identity_schema_version": 0
}
]
},
{
"mode": "managed",
"type": "openstack_blockstorage_volume_v3",
"name": "prometheus_data_vol",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"attachment": [],
"availability_zone": "nova",
"consistency_group_id": null,
"description": "",
"enable_online_resize": true,
"id": "a5f16ebf-8c08-4d8e-b5ee-2e6a4d229408",
"image_id": null,
"metadata": {},
"multiattach": null,
"name": "prometheus-data",
"region": "isti_area_pi_1",
"scheduler_hints": [],
"size": 100,
"snapshot_id": "",
"source_replica": null,
"source_vol_id": "",
"timeouts": null,
"volume_type": "CephSSD"
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0="
}
]
},
{
"mode": "managed",
"type": "openstack_compute_servergroup_v2",
"name": "main_haproxy_l7",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"id": "e71f9dcb-d071-4afa-93ad-3b833f54ced7",
"members": [],
"name": "main_haproxy_l7",
"policies": [
"anti-affinity"
],
"region": "isti_area_pi_1",
"rules": [
{
"max_server_per_host": 0
}
],
"value_specs": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "bnVsbA=="
}
]
},
{
"mode": "managed",
"type": "openstack_lb_listener_v2",
"name": "main_haproxy_http_listener",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"admin_state_up": true,
"allowed_cidrs": null,
"connection_limit": -1,
"default_pool_id": "",
"default_tls_container_ref": "",
"description": "HTTP listener of the main HAPROXY instances",
"id": "1b635beb-b8db-48eb-81ed-52b4d9996f99",
"insert_headers": null,
"loadbalancer_id": "fac5939a-0329-4bcb-8fd9-d2d5716b0e84",
"name": "main_haproxy_http_listener",
"protocol": "TCP",
"protocol_port": 80,
"region": "isti_area_pi_1",
"sni_container_refs": null,
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeout_client_data": 50000,
"timeout_member_connect": 5000,
"timeout_member_data": 50000,
"timeout_tcp_inspect": 0,
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19",
"dependencies": [
"data.terraform_remote_state.privnet_dns_router",
"openstack_lb_loadbalancer_v2.main_lb"
]
}
]
},
{
"mode": "managed",
"type": "openstack_lb_listener_v2",
"name": "main_haproxy_https_listener",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"admin_state_up": true,
"allowed_cidrs": null,
"connection_limit": -1,
"default_pool_id": "",
"default_tls_container_ref": "",
"description": "HTTPS listener of the main HAPROXY instances",
"id": "c91aeff4-0091-4f25-a6e0-aa3945bb833f",
"insert_headers": null,
"loadbalancer_id": "fac5939a-0329-4bcb-8fd9-d2d5716b0e84",
"name": "main_haproxy_https_listener",
"protocol": "TCP",
"protocol_port": 443,
"region": "isti_area_pi_1",
"sni_container_refs": null,
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeout_client_data": 3600000,
"timeout_member_connect": 10000,
"timeout_member_data": 7200000,
"timeout_tcp_inspect": 0,
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19",
"dependencies": [
"data.terraform_remote_state.privnet_dns_router",
"openstack_lb_loadbalancer_v2.main_lb"
]
}
]
},
{
"mode": "managed",
"type": "openstack_lb_loadbalancer_v2",
"name": "main_lb",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"admin_state_up": true,
"availability_zone": "",
"description": "Main L4 load balancer for the S2I2S services",
"flavor_id": "",
"id": "fac5939a-0329-4bcb-8fd9-d2d5716b0e84",
"loadbalancer_provider": "ovn",
"name": "s2i2s-cloud-l4-load-balancer",
"region": "isti_area_pi_1",
"security_group_ids": [
"41031df4-e33b-4e26-bbbc-a4320eff6f4c"
],
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null,
"vip_address": "10.10.0.20",
"vip_network_id": "9b3cd2d7-f9f0-4d4a-ae0b-29c8ceb055f4",
"vip_port_id": "da981c5e-30a8-47d7-9451-6c2568943286",
"vip_subnet_id": "0a5dd0f6-e23d-469e-982c-7bb280221c12"
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6MzAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19",
"dependencies": [
"data.terraform_remote_state.privnet_dns_router"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_floatingip_associate_v2",
"name": "main_lb",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"fixed_ip": "10.10.0.20",
"floating_ip": "146.48.30.162",
"id": "96b66bce-e1bb-4bad-89ff-e6511d2b0068",
"port_id": "da981c5e-30a8-47d7-9451-6c2568943286",
"region": "isti_area_pi_1"
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "bnVsbA==",
"dependencies": [
"data.terraform_remote_state.privnet_dns_router",
"openstack_lb_loadbalancer_v2.main_lb",
"openstack_networking_floatingip_v2.main_lb_ip"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_floatingip_associate_v2",
"name": "prometheus_server",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"fixed_ip": "10.10.0.10",
"floating_ip": "146.48.31.149",
"id": "78e69528-4763-47e4-bb76-263871866f64",
"port_id": "14f4c125-725c-4a54-bb0e-d442f2dbc65a",
"region": "isti_area_pi_1"
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "bnVsbA==",
"dependencies": [
"data.terraform_remote_state.privnet_dns_router",
"openstack_networking_floatingip_v2.prometheus_server_ip",
"openstack_networking_port_v2.prometheus_server_port",
"openstack_networking_secgroup_v2.default",
"openstack_networking_secgroup_v2.prometheus_access_from_grafana",
"openstack_networking_secgroup_v2.restricted_web"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_floatingip_associate_v2",
"name": "ssh_jump_proxy",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"fixed_ip": "10.10.0.5",
"floating_ip": "146.48.30.179",
"id": "b5fbccf0-fcd1-4402-924f-3a3624f5e265",
"port_id": "e1cf6d34-a286-4a19-aea2-100c8d087d41",
"region": "isti_area_pi_1"
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "bnVsbA==",
"dependencies": [
"data.terraform_remote_state.privnet_dns_router",
"openstack_networking_floatingip_v2.ssh_jump_proxy_ip",
"openstack_networking_port_v2.ssh_jump_proxy_port",
"openstack_networking_secgroup_v2.access_to_the_jump_proxy",
"openstack_networking_secgroup_v2.default"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_floatingip_v2",
"name": "main_lb_ip",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"address": "146.48.30.162",
"all_tags": [],
"description": "Main L4 load balancer for the S2I2S services",
"dns_domain": "",
"dns_name": "",
"fixed_ip": "",
"id": "96b66bce-e1bb-4bad-89ff-e6511d2b0068",
"pool": "external-network",
"port_id": "",
"region": "isti_area_pi_1",
"subnet_id": null,
"subnet_ids": null,
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null,
"value_specs": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0="
}
]
},
{
"mode": "managed",
"type": "openstack_networking_floatingip_v2",
"name": "prometheus_server_ip",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"address": "146.48.31.149",
"all_tags": [],
"description": "Prometheus server",
"dns_domain": "",
"dns_name": "",
"fixed_ip": "",
"id": "78e69528-4763-47e4-bb76-263871866f64",
"pool": "external-network",
"port_id": "",
"region": "isti_area_pi_1",
"subnet_id": null,
"subnet_ids": null,
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null,
"value_specs": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0="
}
]
},
{
"mode": "managed",
"type": "openstack_networking_floatingip_v2",
"name": "ssh_jump_proxy_ip",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"address": "146.48.30.179",
"all_tags": [],
"description": "SSH Proxy Jump Server",
"dns_domain": "",
"dns_name": "",
"fixed_ip": "",
"id": "b5fbccf0-fcd1-4402-924f-3a3624f5e265",
"pool": "external-network",
"port_id": "",
"region": "isti_area_pi_1",
"subnet_id": null,
"subnet_ids": null,
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null,
"value_specs": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0="
}
]
},
{
"mode": "managed",
"type": "openstack_networking_port_v2",
"name": "internal_ca_port",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"admin_state_up": true,
"all_fixed_ips": [
"10.10.0.4"
],
"all_security_group_ids": [
"c4a3a99c-83e0-46b6-9a28-62d742b6ec0e"
],
"all_tags": [],
"allowed_address_pairs": [],
"binding": [
{
"host_id": "",
"profile": "{}",
"vif_details": {},
"vif_type": "unbound",
"vnic_type": "normal"
}
],
"description": "",
"device_id": "",
"device_owner": "",
"dns_assignment": [
{
"fqdn": "host-10-10-0-4.internal-cloud.isti.cnr.it.",
"hostname": "host-10-10-0-4",
"ip_address": "10.10.0.4"
}
],
"dns_name": "",
"extra_dhcp_option": [],
"fixed_ip": [
{
"ip_address": "10.10.0.4",
"subnet_id": "0a5dd0f6-e23d-469e-982c-7bb280221c12"
}
],
"id": "8fafcb49-0b9b-49df-9c1b-fa7c377f7975",
"mac_address": "fa:16:3e:24:37:3f",
"name": "ca-port",
"network_id": "9b3cd2d7-f9f0-4d4a-ae0b-29c8ceb055f4",
"no_fixed_ip": null,
"no_security_groups": null,
"port_security_enabled": true,
"qos_policy_id": "",
"region": "isti_area_pi_1",
"security_group_ids": [
"c4a3a99c-83e0-46b6-9a28-62d742b6ec0e"
],
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null,
"value_specs": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=",
"dependencies": [
"data.terraform_remote_state.privnet_dns_router",
"openstack_networking_secgroup_v2.default"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_port_v2",
"name": "main_haproxy_l7_port",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"index_key": 0,
"schema_version": 0,
"attributes": {
"admin_state_up": true,
"all_fixed_ips": [
"10.10.0.11"
],
"all_security_group_ids": [
"68966027-d706-441f-8540-499cd44034af",
"c4a3a99c-83e0-46b6-9a28-62d742b6ec0e"
],
"all_tags": [],
"allowed_address_pairs": [],
"binding": [
{
"host_id": "",
"profile": "{}",
"vif_details": {},
"vif_type": "unbound",
"vnic_type": "normal"
}
],
"description": "",
"device_id": "",
"device_owner": "",
"dns_assignment": [
{
"fqdn": "host-10-10-0-11.internal-cloud.isti.cnr.it.",
"hostname": "host-10-10-0-11",
"ip_address": "10.10.0.11"
}
],
"dns_name": "",
"extra_dhcp_option": [],
"fixed_ip": [
{
"ip_address": "10.10.0.11",
"subnet_id": "0a5dd0f6-e23d-469e-982c-7bb280221c12"
}
],
"id": "e96b8b2c-1e4f-490d-9db8-398f7a0e3f4a",
"mac_address": "fa:16:3e:c5:68:fb",
"name": "main-haproxy-l7-01-port",
"network_id": "9b3cd2d7-f9f0-4d4a-ae0b-29c8ceb055f4",
"no_fixed_ip": null,
"no_security_groups": null,
"port_security_enabled": true,
"qos_policy_id": "",
"region": "isti_area_pi_1",
"security_group_ids": [
"68966027-d706-441f-8540-499cd44034af",
"c4a3a99c-83e0-46b6-9a28-62d742b6ec0e"
],
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null,
"value_specs": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=",
"dependencies": [
"data.terraform_remote_state.privnet_dns_router",
"openstack_networking_secgroup_v2.default",
"openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"
]
},
{
"index_key": 1,
"schema_version": 0,
"attributes": {
"admin_state_up": true,
"all_fixed_ips": [
"10.10.0.12"
],
"all_security_group_ids": [
"68966027-d706-441f-8540-499cd44034af",
"c4a3a99c-83e0-46b6-9a28-62d742b6ec0e"
],
"all_tags": [],
"allowed_address_pairs": [],
"binding": [
{
"host_id": "",
"profile": "{}",
"vif_details": {},
"vif_type": "unbound",
"vnic_type": "normal"
}
],
"description": "",
"device_id": "",
"device_owner": "",
"dns_assignment": [
{
"fqdn": "host-10-10-0-12.internal-cloud.isti.cnr.it.",
"hostname": "host-10-10-0-12",
"ip_address": "10.10.0.12"
}
],
"dns_name": "",
"extra_dhcp_option": [],
"fixed_ip": [
{
"ip_address": "10.10.0.12",
"subnet_id": "0a5dd0f6-e23d-469e-982c-7bb280221c12"
}
],
"id": "162ae928-c2e4-449e-9521-835ad03e339d",
"mac_address": "fa:16:3e:9d:d6:e4",
"name": "main-haproxy-l7-02-port",
"network_id": "9b3cd2d7-f9f0-4d4a-ae0b-29c8ceb055f4",
"no_fixed_ip": null,
"no_security_groups": null,
"port_security_enabled": true,
"qos_policy_id": "",
"region": "isti_area_pi_1",
"security_group_ids": [
"68966027-d706-441f-8540-499cd44034af",
"c4a3a99c-83e0-46b6-9a28-62d742b6ec0e"
],
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null,
"value_specs": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=",
"dependencies": [
"data.terraform_remote_state.privnet_dns_router",
"openstack_networking_secgroup_v2.default",
"openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_port_v2",
"name": "prometheus_server_port",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"admin_state_up": true,
"all_fixed_ips": [
"10.10.0.10"
],
"all_security_group_ids": [
"54be0898-6c08-400b-9503-9d9dce935371",
"91492d1d-06dc-48e9-91f8-567c3c77d7d5",
"c4a3a99c-83e0-46b6-9a28-62d742b6ec0e"
],
"all_tags": [],
"allowed_address_pairs": [],
"binding": [
{
"host_id": "",
"profile": "{}",
"vif_details": {},
"vif_type": "unbound",
"vnic_type": "normal"
}
],
"description": "",
"device_id": "",
"device_owner": "",
"dns_assignment": [
{
"fqdn": "host-10-10-0-10.internal-cloud.isti.cnr.it.",
"hostname": "host-10-10-0-10",
"ip_address": "10.10.0.10"
}
],
"dns_name": "",
"extra_dhcp_option": [],
"fixed_ip": [
{
"ip_address": "10.10.0.10",
"subnet_id": "0a5dd0f6-e23d-469e-982c-7bb280221c12"
}
],
"id": "14f4c125-725c-4a54-bb0e-d442f2dbc65a",
"mac_address": "fa:16:3e:e1:d2:19",
"name": "prometheus-port",
"network_id": "9b3cd2d7-f9f0-4d4a-ae0b-29c8ceb055f4",
"no_fixed_ip": null,
"no_security_groups": null,
"port_security_enabled": true,
"qos_policy_id": "",
"region": "isti_area_pi_1",
"security_group_ids": [
"54be0898-6c08-400b-9503-9d9dce935371",
"91492d1d-06dc-48e9-91f8-567c3c77d7d5",
"c4a3a99c-83e0-46b6-9a28-62d742b6ec0e"
],
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null,
"value_specs": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=",
"dependencies": [
"data.terraform_remote_state.privnet_dns_router",
"openstack_networking_secgroup_v2.default",
"openstack_networking_secgroup_v2.prometheus_access_from_grafana",
"openstack_networking_secgroup_v2.restricted_web"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_port_v2",
"name": "ssh_jump_proxy_port",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"admin_state_up": true,
"all_fixed_ips": [
"10.10.0.5"
],
"all_security_group_ids": [
"0f52158e-c767-4baf-9d6d-1986ca886dd0",
"c4a3a99c-83e0-46b6-9a28-62d742b6ec0e"
],
"all_tags": [],
"allowed_address_pairs": [],
"binding": [
{
"host_id": "",
"profile": "{}",
"vif_details": {},
"vif_type": "unbound",
"vnic_type": "normal"
}
],
"description": "",
"device_id": "",
"device_owner": "",
"dns_assignment": [
{
"fqdn": "host-10-10-0-5.internal-cloud.isti.cnr.it.",
"hostname": "host-10-10-0-5",
"ip_address": "10.10.0.5"
}
],
"dns_name": "",
"extra_dhcp_option": [],
"fixed_ip": [
{
"ip_address": "10.10.0.5",
"subnet_id": "0a5dd0f6-e23d-469e-982c-7bb280221c12"
}
],
"id": "e1cf6d34-a286-4a19-aea2-100c8d087d41",
"mac_address": "fa:16:3e:36:7c:5c",
"name": "ssh-jump-proxy-port",
"network_id": "9b3cd2d7-f9f0-4d4a-ae0b-29c8ceb055f4",
"no_fixed_ip": null,
"no_security_groups": null,
"port_security_enabled": true,
"qos_policy_id": "",
"region": "isti_area_pi_1",
"security_group_ids": [
"0f52158e-c767-4baf-9d6d-1986ca886dd0",
"c4a3a99c-83e0-46b6-9a28-62d742b6ec0e"
],
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null,
"value_specs": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=",
"dependencies": [
"data.terraform_remote_state.privnet_dns_router",
"openstack_networking_secgroup_v2.access_to_the_jump_proxy",
"openstack_networking_secgroup_v2.default"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "egress-ipv4",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "",
"direction": "egress",
"ethertype": "IPv4",
"id": "414f9a17-37a2-4149-9654-037ca7bc102e",
"port_range_max": 0,
"port_range_min": 0,
"protocol": "",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "",
"security_group_id": "c4a3a99c-83e0-46b6-9a28-62d742b6ec0e",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.default"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "grafana_d4s",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "Allow HTTPS from grafana.d4science.org",
"direction": "ingress",
"ethertype": "IPv4",
"id": "5e39f441-ea00-4953-a02c-0212757783f8",
"port_range_max": 443,
"port_range_min": 443,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "146.48.28.103/32",
"security_group_id": "91492d1d-06dc-48e9-91f8-567c3c77d7d5",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.prometheus_access_from_grafana"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "haproxy-l7-1-443",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "HTTPS traffic from HAPROXY L7 1",
"direction": "ingress",
"ethertype": "IPv4",
"id": "80d8b03b-7630-4283-ad02-c75e1f8cef6d",
"port_range_max": 443,
"port_range_min": 443,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "10.10.0.11/32",
"security_group_id": "1556ed52-f8d4-4f80-acbf-5b62c47b20bb",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.traffic_from_main_haproxy"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "haproxy-l7-1-80",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "HTTP traffic from HAPROXY L7 1",
"direction": "ingress",
"ethertype": "IPv4",
"id": "558f252b-f799-4b95-8b12-8a4d7bd9e47d",
"port_range_max": 80,
"port_range_min": 80,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "10.10.0.11/32",
"security_group_id": "1556ed52-f8d4-4f80-acbf-5b62c47b20bb",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.traffic_from_main_haproxy"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "haproxy-l7-1-8080",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "HTTP traffic from HAPROXY L7 1",
"direction": "ingress",
"ethertype": "IPv4",
"id": "84034709-9cae-494f-b7a0-fd49afae8783",
"port_range_max": 8080,
"port_range_min": 8080,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "10.10.0.11/32",
"security_group_id": "1556ed52-f8d4-4f80-acbf-5b62c47b20bb",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.traffic_from_main_haproxy"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "haproxy-l7-1-8888",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "HTTP traffic from HAPROXY L7 1",
"direction": "ingress",
"ethertype": "IPv4",
"id": "c379f3c4-866e-43d3-a76a-ba7b3a51c6b9",
"port_range_max": 8888,
"port_range_min": 8888,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "10.10.0.11/32",
"security_group_id": "1556ed52-f8d4-4f80-acbf-5b62c47b20bb",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.traffic_from_main_haproxy"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "haproxy-l7-2-443",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "HTTPS traffic from HAPROXY L7 2",
"direction": "ingress",
"ethertype": "IPv4",
"id": "b26ef85e-5760-4467-9d63-28d1e522c1d1",
"port_range_max": 443,
"port_range_min": 443,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "10.10.0.12/32",
"security_group_id": "1556ed52-f8d4-4f80-acbf-5b62c47b20bb",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.traffic_from_main_haproxy"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "haproxy-l7-2-80",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "HTTP traffic from HAPROXY L7 2",
"direction": "ingress",
"ethertype": "IPv4",
"id": "07eefd95-b2a0-445a-83b7-65e3df680fdc",
"port_range_max": 80,
"port_range_min": 80,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "10.10.0.12/32",
"security_group_id": "1556ed52-f8d4-4f80-acbf-5b62c47b20bb",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.traffic_from_main_haproxy"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "haproxy-l7-2-8080",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "HTTP traffic from HAPROXY L7 2",
"direction": "ingress",
"ethertype": "IPv4",
"id": "a0db70d8-dccc-413b-a06c-abf85fb9f0bc",
"port_range_max": 8080,
"port_range_min": 8080,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "10.10.0.12/32",
"security_group_id": "1556ed52-f8d4-4f80-acbf-5b62c47b20bb",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.traffic_from_main_haproxy"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "haproxy-l7-2-8888",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "HTTP traffic from HAPROXY L7 2",
"direction": "ingress",
"ethertype": "IPv4",
"id": "73b6f584-c824-4957-b9a3-3630b9e24863",
"port_range_max": 8888,
"port_range_min": 8888,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "10.10.0.12/32",
"security_group_id": "1556ed52-f8d4-4f80-acbf-5b62c47b20bb",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.traffic_from_main_haproxy"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "http_from_everywhere",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "Allow HTTP from everywhere",
"direction": "ingress",
"ethertype": "IPv4",
"id": "330f6f9f-ed8a-4261-b0dc-0a3708d251c7",
"port_range_max": 80,
"port_range_min": 80,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "0.0.0.0/0",
"security_group_id": "54be0898-6c08-400b-9503-9d9dce935371",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.restricted_web"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "https_from_d4s_vpn_1",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "Allow HTTPS from D4Science VPN 1",
"direction": "ingress",
"ethertype": "IPv4",
"id": "4381df2b-f45f-4d9e-8f59-9b93472be73b",
"port_range_max": 443,
"port_range_min": 443,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "146.48.122.27/32",
"security_group_id": "54be0898-6c08-400b-9503-9d9dce935371",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.restricted_web"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "https_from_d4s_vpn_2",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "Allow HTTPS from D4Science VPN 2",
"direction": "ingress",
"ethertype": "IPv4",
"id": "20941d5a-e371-4eea-9ca0-24b71d2c8239",
"port_range_max": 443,
"port_range_min": 443,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "146.48.122.49/32",
"security_group_id": "54be0898-6c08-400b-9503-9d9dce935371",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.restricted_web"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "https_from_s2i2s_vpn_1",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "Allow HTTPS from S2I2S VPN 1",
"direction": "ingress",
"ethertype": "IPv4",
"id": "79287b9b-cbc2-41eb-aa32-d1b44c3b2080",
"port_range_max": 443,
"port_range_min": 443,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "146.48.28.10/32",
"security_group_id": "54be0898-6c08-400b-9503-9d9dce935371",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.restricted_web"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "https_from_s2i2s_vpn_2",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "Allow HTTPS from S2I2S VPN 2",
"direction": "ingress",
"ethertype": "IPv4",
"id": "1370c330-ae0f-444e-8f9c-f4428b4412c6",
"port_range_max": 443,
"port_range_min": 443,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "146.48.28.11/32",
"security_group_id": "54be0898-6c08-400b-9503-9d9dce935371",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.restricted_web"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "https_from_shell_d4s",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "Allow HTTPS from shell.d4science.org",
"direction": "ingress",
"ethertype": "IPv4",
"id": "f5ffc1f1-1e95-4a15-99ad-b5e3dc2d9032",
"port_range_max": 443,
"port_range_min": 443,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "146.48.122.95/32",
"security_group_id": "54be0898-6c08-400b-9503-9d9dce935371",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.restricted_web"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "ingress-icmp",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "Allow ICMP from remote",
"direction": "ingress",
"ethertype": "IPv4",
"id": "945e9b59-37f5-41f5-af7d-040c97145b24",
"port_range_max": 0,
"port_range_min": 0,
"protocol": "icmp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "0.0.0.0/0",
"security_group_id": "c4a3a99c-83e0-46b6-9a28-62d742b6ec0e",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.default"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "octavia_to_haproxy_l7_8880",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "Traffic from the octavia lb instance to HAPROXY l7 port 8880",
"direction": "ingress",
"ethertype": "IPv4",
"id": "ff4620b9-1c81-46f7-b2be-bb94adbe07af",
"port_range_max": 8880,
"port_range_min": 8880,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "10.10.0.0/21",
"security_group_id": "68966027-d706-441f-8540-499cd44034af",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"data.terraform_remote_state.privnet_dns_router",
"openstack_networking_secgroup_v2.main_lb_to_haproxy_l7"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "prometheus-node",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "Prometheus access to the node exporter",
"direction": "ingress",
"ethertype": "IPv4",
"id": "8bd92fdb-683f-42cd-8e77-7906e4a5922d",
"port_range_max": 9100,
"port_range_min": 9100,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "10.10.0.10/32",
"security_group_id": "c4a3a99c-83e0-46b6-9a28-62d742b6ec0e",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.default"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "public_http",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "Allow HTTP from everywhere",
"direction": "ingress",
"ethertype": "IPv4",
"id": "99eb7104-e65c-47a3-82d9-16f33134f297",
"port_range_max": 80,
"port_range_min": 80,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "0.0.0.0/0",
"security_group_id": "c0ec12e4-9a8f-4534-bfd2-d6892a1d6cc0",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.public_web"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "public_https",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "Allow HTTPS from everywhere",
"direction": "ingress",
"ethertype": "IPv4",
"id": "c537450d-693b-45ef-b461-2b76b872a1ba",
"port_range_max": 443,
"port_range_min": 443,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "0.0.0.0/0",
"security_group_id": "c0ec12e4-9a8f-4534-bfd2-d6892a1d6cc0",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.public_web"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "shell_443",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "https debug port 443 from the shell jump proxy",
"direction": "ingress",
"ethertype": "IPv4",
"id": "0060b542-b01e-48c5-95b1-99a7f24423b1",
"port_range_max": 443,
"port_range_min": 443,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "10.10.0.5/32",
"security_group_id": "9e217f67-497f-4e4c-98fc-8ba9bdfb29c9",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.debugging"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "shell_80",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "http debug port 80 from the shell jump proxy",
"direction": "ingress",
"ethertype": "IPv4",
"id": "52efb525-7933-441a-b6bc-4eb351ff8f6a",
"port_range_max": 80,
"port_range_min": 80,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "10.10.0.5/32",
"security_group_id": "9e217f67-497f-4e4c-98fc-8ba9bdfb29c9",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.debugging"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "shell_8100",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "Tomcat debug on port 8100 from the shell jump proxy",
"direction": "ingress",
"ethertype": "IPv4",
"id": "557e734f-ed4e-4834-845d-f5671e99f16e",
"port_range_max": 8100,
"port_range_min": 8100,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "10.10.0.5/32",
"security_group_id": "9e217f67-497f-4e4c-98fc-8ba9bdfb29c9",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.debugging"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "ssh-d4s-vpn-1",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "SSH traffic from D4Science VPN 1",
"direction": "ingress",
"ethertype": "IPv4",
"id": "abe6773f-24b8-45cc-8903-cd9f15973746",
"port_range_max": 22,
"port_range_min": 22,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "146.48.122.27/32",
"security_group_id": "0f52158e-c767-4baf-9d6d-1986ca886dd0",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.access_to_the_jump_proxy"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "ssh-d4s-vpn-2",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "SSH traffic from D4Science VPN 2",
"direction": "ingress",
"ethertype": "IPv4",
"id": "d756951e-6973-474c-b72c-8b9b93f7ce23",
"port_range_max": 22,
"port_range_min": 22,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "146.48.122.49/32",
"security_group_id": "0f52158e-c767-4baf-9d6d-1986ca886dd0",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.access_to_the_jump_proxy"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "ssh-infrascience-net",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "SSH traffic from the InfraScience network",
"direction": "ingress",
"ethertype": "IPv4",
"id": "6ac4707b-92fc-4937-8dcc-8399b6d1b3fe",
"port_range_max": 22,
"port_range_min": 22,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "146.48.122.0/23",
"security_group_id": "0f52158e-c767-4baf-9d6d-1986ca886dd0",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.access_to_the_jump_proxy"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "ssh-jump-proxy",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "SSH traffic from the jump proxy",
"direction": "ingress",
"ethertype": "IPv4",
"id": "25c5c1fc-b41d-42b6-8b80-39c6bc7966d4",
"port_range_max": 22,
"port_range_min": 22,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "10.10.0.5/32",
"security_group_id": "c4a3a99c-83e0-46b6-9a28-62d742b6ec0e",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.default"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "ssh-s2i2s-vpn-1",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "SSH traffic from S2I2S VPN 1",
"direction": "ingress",
"ethertype": "IPv4",
"id": "ef6e1012-da47-48ba-9101-841b59cbbfea",
"port_range_max": 22,
"port_range_min": 22,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "146.48.28.10/32",
"security_group_id": "0f52158e-c767-4baf-9d6d-1986ca886dd0",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.access_to_the_jump_proxy"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "ssh-s2i2s-vpn-2",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "SSH traffic from S2I2S VPN 2",
"direction": "ingress",
"ethertype": "IPv4",
"id": "9f49d053-e4aa-44b6-8dfe-926e3c87567f",
"port_range_max": 22,
"port_range_min": 22,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "146.48.28.11/32",
"security_group_id": "0f52158e-c767-4baf-9d6d-1986ca886dd0",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.access_to_the_jump_proxy"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_rule_v2",
"name": "ssh-shell-d4s",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"description": "SSH traffic from shell.d4science.org",
"direction": "ingress",
"ethertype": "IPv4",
"id": "b5855fc9-b5ee-489f-97bd-8fec48fefe07",
"port_range_max": 22,
"port_range_min": 22,
"protocol": "tcp",
"region": "isti_area_pi_1",
"remote_group_id": "",
"remote_ip_prefix": "146.48.122.95/32",
"security_group_id": "0f52158e-c767-4baf-9d6d-1986ca886dd0",
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==",
"dependencies": [
"openstack_networking_secgroup_v2.access_to_the_jump_proxy"
]
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_v2",
"name": "access_to_the_jump_proxy",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"all_tags": [],
"delete_default_rules": true,
"description": "Security group that allows SSH access to the jump node from a limited set of sources",
"id": "0f52158e-c767-4baf-9d6d-1986ca886dd0",
"name": "ssh_access_to_the_jump_node",
"region": "isti_area_pi_1",
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_v2",
"name": "debugging",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"all_tags": [],
"delete_default_rules": true,
"description": "Security group that allows web app debugging via tunnel from the ssh jump node",
"id": "9e217f67-497f-4e4c-98fc-8ba9bdfb29c9",
"name": "debugging_from_jump_node",
"region": "isti_area_pi_1",
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_v2",
"name": "default",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"all_tags": [],
"delete_default_rules": true,
"description": "Default security group with rules for ssh access via jump proxy, prometheus scraping",
"id": "c4a3a99c-83e0-46b6-9a28-62d742b6ec0e",
"name": "default_for_all",
"region": "isti_area_pi_1",
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_v2",
"name": "main_lb_to_haproxy_l7",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"all_tags": [],
"delete_default_rules": true,
"description": "Traffic coming from the main L4 lb directed to the haproxy l7 servers",
"id": "68966027-d706-441f-8540-499cd44034af",
"name": "traffic_from_main_lb_to_haproxy_l7",
"region": "isti_area_pi_1",
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_v2",
"name": "prometheus_access_from_grafana",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"all_tags": [],
"delete_default_rules": true,
"description": "The public grafana server must be able to get data from Prometheus",
"id": "91492d1d-06dc-48e9-91f8-567c3c77d7d5",
"name": "prometheus_access_from_grafana",
"region": "isti_area_pi_1",
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_v2",
"name": "public_web",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"all_tags": [],
"delete_default_rules": true,
"description": "Security group that allows HTTPS and HTTP from everywhere, for the services that are not behind any load balancer",
"id": "c0ec12e4-9a8f-4534-bfd2-d6892a1d6cc0",
"name": "public_web_service",
"region": "isti_area_pi_1",
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_v2",
"name": "restricted_web",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"all_tags": [],
"delete_default_rules": true,
"description": "Security group that restricts HTTPS sources to the VPN nodes and shell.d4science.org. HTTP is open to all, because letsencrypt",
"id": "54be0898-6c08-400b-9503-9d9dce935371",
"name": "restricted_web_service",
"region": "isti_area_pi_1",
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="
}
]
},
{
"mode": "managed",
"type": "openstack_networking_secgroup_v2",
"name": "traffic_from_main_haproxy",
"provider": "provider[\"registry.terraform.io/terraform-provider-openstack/openstack\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"all_tags": [],
"delete_default_rules": true,
"description": "Allow traffic from the main L7 HAPROXY load balancers",
"id": "1556ed52-f8d4-4f80-acbf-5b62c47b20bb",
"name": "traffic_from_the_main_load_balancers",
"region": "isti_area_pi_1",
"tags": null,
"tenant_id": "d3c30d05b2524faead8fabf0b511622e",
"timeouts": null
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="
}
]
}
],
"check_results": null
}
Reference in New Issue View Git Blame Copy Permalink