2 lines
53 KiB
JSON
2 lines
53 KiB
JSON
{"version":4,"terraform_version":"1.11.6","serial":4,"lineage":"61dd07fa-7dc6-1c49-cb67-1d9e38743f84","outputs":{"dns_zone":{"value":{"attributes":{},"description":"DNS primary zone for the S2I2S project","disable_status_check":false,"email":"postmaster@isti.cnr.it","id":"e826e777-0196-4f63-b2a9-df07f70e618f","masters":[],"name":"s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"PRIMARY","value_specs":null},"type":["object",{"attributes":["map","string"],"description":"string","disable_status_check":"bool","email":"string","id":"string","masters":["set","string"],"name":"string","project_id":"string","region":"string","timeouts":["object",{"create":"string","delete":"string","update":"string"}],"ttl":"number","type":"string","value_specs":["map","string"]}]},"keycloak_cluster_security_group_id":{"value":"84c010c6-64c3-4f7a-91f6-e274b5fb1c67","type":"string"},"keycloak_data":{"value":{"affinity_policy":"anti-affinity","boot_vol_size":30,"flavor":"m1.medium","https_port":9443,"management_port":9000,"srv_name":"keycloak","vm_count":2},"type":["object",{"affinity_policy":"string","boot_vol_size":"number","flavor":"string","https_port":"number","management_port":"number","srv_name":"string","vm_count":"number"}]},"keycloak_instance_ids":{"value":["6b8ccc76-08f8-476c-b769-618f70925ba6","399aeff4-f6a7-4cd1-a73c-91722191afe4"],"type":["tuple",["string","string"]]},"keycloak_instance_names":{"value":["keycloak-01","keycloak-02"],"type":["tuple",["string","string"]]},"keycloak_ip":{"value":["10.10.0.163","10.10.0.164"],"type":["list","string"]},"keycloak_postgresql_ip":{"value":[["192.168.1.83"],["192.168.3.83"]],"type":["tuple",[["list","string"],["list","string"]]]},"keycloak_recordsets":{"value":{"accounts":{"description":"Keycloak of the S2I2S project, published by the main load balancer","name":"accounts.s2i2s.cloud.isti.cnr.it."}},"type":["map",["object",{"description":"string","name":"string"}]]},"keycloak_server_group_id":{"value":"9c9cdfbb-50ee-4503-8143-363fddb755f6","type":"string"},"traffic_to_keycloak_security_group_id":{"value":"f5b3b6d6-a0ca-4cb8-81f2-eaaa3052cfcb","type":"string"}},"resources":[{"mode":"data","type":"terraform_remote_state","name":"postgresql","provider":"provider[\"terraform.io/builtin/terraform\"]","instances":[{"schema_version":0,"attributes":{"backend":"local","config":{"value":{"path":"../postgresql/terraform.tfstate"},"type":["object",{"path":"string"}]},"defaults":null,"outputs":{"value":{"dns_zone":{"attributes":{},"description":"DNS primary zone for the S2I2S project","disable_status_check":false,"email":"postmaster@isti.cnr.it","id":"e826e777-0196-4f63-b2a9-df07f70e618f","masters":[],"name":"s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"PRIMARY","value_specs":null},"postgresql_access_security_group_id":"d23b5c1b-ec2f-4dd3-9f1d-b4936d4e45b8","postgresql_client_access_security_group_id":"09df1cb3-0654-47a0-be50-55bb79b011c9","postgresql_client_access_security_group_name":"vm_access_to_the_postgresql_service","postgresql_main_ip":"10.10.0.162","postgresql_network":{"admin_state_up":true,"all_tags":[],"availability_zone_hints":[],"description":"Network used to communicate with the postgresql service","dns_domain":"s2i2s.cloud.isti.cnr.it.","external":false,"id":"2b4f3653-5016-427f-9ae2-31144f691a93","mtu":8942,"name":"postgresql-srv-net","port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","segments":[],"shared":false,"tags":null,"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"transparent_vlan":false,"value_specs":null},"postgresql_network_id":"2b4f3653-5016-427f-9ae2-31144f691a93","postgresql_port":5432,"postgresql_server_data":{"allocation_pool_end":"192.168.3.254","allocation_pool_start":"192.168.0.100","boot_vol_size":20,"description":"PostgreSQL server","flavor":"m1.large","name":"postgresql","network_cidr":"192.168.0.0/22","network_description":"Network used to communicate with the postgresql service","network_name":"postgresql-srv-net","port":5432,"server_cidr":"192.168.0.5/32","server_ip":"192.168.0.5","subnet_description":"Subnet used to connect to the postgresql service","subnet_name":"postgresql-srv-subnet","vol_data_device":"/dev/vdb","vol_data_name":"postgresql-data","vol_data_size":100,"vol_wal_device":"/dev/vdc","vol_wal_name":"postgresql-wal","vol_wal_size":100,"volume_type":"CephSSD"},"postgresql_server_id":"1078fcff-0eee-48a7-b061-a2ceaedc844c","postgresql_server_ip":"192.168.0.5","postgresql_server_name":"postgresql","postgresql_subnet":{"all_tags":[],"allocation_pool":[{"end":"192.168.3.254","start":"192.168.0.100"}],"cidr":"192.168.0.0/22","description":"Subnet used to connect to the postgresql service","dns_nameservers":["146.48.29.97","146.48.29.98","146.48.29.99"],"dns_publish_fixed_ip":false,"enable_dhcp":true,"gateway_ip":"","id":"228da08f-2b49-4d76-bec4-abab0510f275","ip_version":4,"ipv6_address_mode":"","ipv6_ra_mode":"","name":"postgresql-srv-subnet","network_id":"2b4f3653-5016-427f-9ae2-31144f691a93","no_gateway":true,"prefix_length":null,"region":"isti_area_pi_1","segment_id":"","service_types":[],"subnetpool_id":"","tags":null,"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"postgresql_subnet_id":"228da08f-2b49-4d76-bec4-abab0510f275"},"type":["object",{"dns_zone":["object",{"attributes":["map","string"],"description":"string","disable_status_check":"bool","email":"string","id":"string","masters":["set","string"],"name":"string","project_id":"string","region":"string","timeouts":["object",{"create":"string","delete":"string","update":"string"}],"ttl":"number","type":"string","value_specs":["map","string"]}],"postgresql_access_security_group_id":"string","postgresql_client_access_security_group_id":"string","postgresql_client_access_security_group_name":"string","postgresql_main_ip":"string","postgresql_network":["object",{"admin_state_up":"bool","all_tags":["set","string"],"availability_zone_hints":["set","string"],"description":"string","dns_domain":"string","external":"bool","id":"string","mtu":"number","name":"string","port_security_enabled":"bool","qos_policy_id":"string","region":"string","segments":["set",["object",{"network_type":"string","physical_network":"string","segmentation_id":"number"}]],"shared":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"transparent_vlan":"bool","value_specs":["map","string"]}],"postgresql_network_id":"string","postgresql_port":"number","postgresql_server_data":["object",{"allocation_pool_end":"string","allocation_pool_start":"string","boot_vol_size":"number","description":"string","flavor":"string","name":"string","network_cidr":"string","network_description":"string","network_name":"string","port":"number","server_cidr":"string","server_ip":"string","subnet_description":"string","subnet_name":"string","vol_data_device":"string","vol_data_name":"string","vol_data_size":"number","vol_wal_device":"string","vol_wal_name":"string","vol_wal_size":"number","volume_type":"string"}],"postgresql_server_id":"string","postgresql_server_ip":"string","postgresql_server_name":"string","postgresql_subnet":["object",{"all_tags":["set","string"],"allocation_pool":["set",["object",{"end":"string","start":"string"}]],"cidr":"string","description":"string","dns_nameservers":["list","string"],"dns_publish_fixed_ip":"bool","enable_dhcp":"bool","gateway_ip":"string","id":"string","ip_version":"number","ipv6_address_mode":"string","ipv6_ra_mode":"string","name":"string","network_id":"string","no_gateway":"bool","prefix_length":"number","region":"string","segment_id":"string","service_types":["list","string"],"subnetpool_id":"string","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"value_specs":["map","string"]}],"postgresql_subnet_id":"string"}]},"workspace":null},"sensitive_attributes":[]}]},{"mode":"data","type":"terraform_remote_state","name":"privnet_dns_router","provider":"provider[\"terraform.io/builtin/terraform\"]","instances":[{"schema_version":0,"attributes":{"backend":"local","config":{"value":{"path":"../main_net_dns_router/terraform.tfstate"},"type":["object",{"path":"string"}]},"defaults":null,"outputs":{"value":{"almalinux_9":{"name":"AlmaLinux-9.8 20260526","user_data_file":"../../s2i2s_openstack_vm_data_scripts/almalinux9.sh","uuid":"172f1c52-fa06-4d7d-9db7-0735ab6ef403"},"availability_zone_no_gpu_name":"cnr-isti-nova-a","availability_zone_with_gpu_name":"cnr-isti-nova-gpu-a","availability_zones_names":{"availability_zone_no_gpu":"cnr-isti-nova-a","availability_zone_with_gpu":"cnr-isti-nova-gpu-a"},"centos_7":{"name":"CentOS-7","user_data_file":"../../s2i2s_openstack_vm_data_scripts/el.sh","uuid":"f0187a99-64f6-462a-ab5f-ef52fe62f2ca"},"default_security_group_name":"default_for_all","dns_zone":{"attributes":{},"description":"DNS primary zone for the S2I2S project","disable_status_check":false,"email":"postmaster@isti.cnr.it","id":"e826e777-0196-4f63-b2a9-df07f70e618f","masters":[],"name":"s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"PRIMARY","value_specs":null},"dns_zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f","el7_data_file":"../../s2i2s_openstack_vm_data_scripts/el.sh","external_gateway_ip":[{"ip_address":"146.48.30.6","subnet_id":"57f87509-4016-46fb-b8c3-25fca7f72ccb"}],"external_network":{"id":"1d2ff137-6ff7-4017-be2b-0d6c4af2353b","name":"external-network"},"external_network_id":"1d2ff137-6ff7-4017-be2b-0d6c4af2353b","flavor_list":{"c1_large":"c1.large","c1_medium":"c1.medium","c1_small":"c1.small","c2_large":"c2.large","m1_large":"m1.large","m1_medium":"m1.medium","m1_xlarge":"m1.xlarge","m1_xxl":"m1.xxl","m2_large":"m2.large","m2_medium":"m2.medium","m2_small":"m2.small","m3_large":"m3.large"},"floating_ip_pools":{"main_public_ip_pool":"external-network"},"main_private_network":{"admin_state_up":true,"all_tags":[],"availability_zone_hints":[],"description":"S2I2S private network (use this as the main network)","dns_domain":"s2i2s.cloud.isti.cnr.it.","external":false,"id":"f371c239-6d5d-4ac8-a17e-af607752d82c","mtu":8942,"name":"s2i2s-proj-main","port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","segments":[{"network_type":"geneve","physical_network":"","segmentation_id":47850}],"shared":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"transparent_vlan":false,"value_specs":null},"main_private_network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","main_region":"isti_area_pi_1","main_subnet_network":{"all_tags":[],"allocation_pool":[{"end":"10.10.7.254","start":"10.10.1.1"}],"cidr":"10.10.0.0/21","description":"S2I2S main private subnet","dns_nameservers":["146.48.29.97","146.48.29.98","146.48.29.99"],"dns_publish_fixed_ip":false,"enable_dhcp":true,"gateway_ip":"10.10.0.1","id":"19c649ee-96ea-438b-ac0c-512afdf5046d","ip_version":4,"ipv6_address_mode":"","ipv6_ra_mode":"","name":"s2i2s-proj-main-subnet","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_gateway":false,"prefix_length":null,"region":"isti_area_pi_1","segment_id":"","service_types":[],"subnetpool_id":"","tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"main_subnet_network_id":"19c649ee-96ea-438b-ac0c-512afdf5046d","mtu_size":8942,"os_project_data":{"id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","name":"s2i2s-proj-cloud"},"policy_list":{"affinity":"affinity","anti_affinity":"anti-affinity","soft_affinity":"soft-affinity","soft_anti_affinity":"soft-anti-affinity"},"resolvers_ip":["146.48.29.97","146.48.29.98","146.48.29.99"],"ssh_sources":{"d4s_vpn_1_cidr":"146.48.122.27/32","d4s_vpn_2_cidr":"146.48.122.49/32","infrascience_net_cidr":"146.48.122.0/23","isti_net_cidr":"146.48.80.0/21","isti_vpn_gw1":"146.48.80.101/32","isti_vpn_gw2":"146.48.80.102/32","isti_vpn_gw3":"146.48.80.103/32","s2i2s_net_cidr":"146.48.28.0/22","s2i2s_vpn_1_cidr":"146.48.28.10/32","s2i2s_vpn_2_cidr":"146.48.28.11/32","shell_d4s_cidr":"146.48.122.95/32"},"ubuntu2204_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","ubuntu_2204":{"name":"Ubuntu-Jammy-22.04","user_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","uuid":"54768889-8556-4be4-a2eb-82a4d9b34627"}},"type":["object",{"almalinux_9":["map","string"],"availability_zone_no_gpu_name":"string","availability_zone_with_gpu_name":"string","availability_zones_names":["map","string"],"centos_7":["map","string"],"default_security_group_name":"string","dns_zone":["object",{"attributes":["map","string"],"description":"string","disable_status_check":"bool","email":"string","id":"string","masters":["set","string"],"name":"string","project_id":"string","region":"string","timeouts":["object",{"create":"string","delete":"string","update":"string"}],"ttl":"number","type":"string","value_specs":["map","string"]}],"dns_zone_id":"string","el7_data_file":"string","external_gateway_ip":["list",["object",{"ip_address":"string","subnet_id":"string"}]],"external_network":["map","string"],"external_network_id":"string","flavor_list":["map","string"],"floating_ip_pools":["map","string"],"main_private_network":["object",{"admin_state_up":"bool","all_tags":["set","string"],"availability_zone_hints":["set","string"],"description":"string","dns_domain":"string","external":"bool","id":"string","mtu":"number","name":"string","port_security_enabled":"bool","qos_policy_id":"string","region":"string","segments":["set",["object",{"network_type":"string","physical_network":"string","segmentation_id":"number"}]],"shared":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"transparent_vlan":"bool","value_specs":["map","string"]}],"main_private_network_id":"string","main_region":"string","main_subnet_network":["object",{"all_tags":["set","string"],"allocation_pool":["set",["object",{"end":"string","start":"string"}]],"cidr":"string","description":"string","dns_nameservers":["list","string"],"dns_publish_fixed_ip":"bool","enable_dhcp":"bool","gateway_ip":"string","id":"string","ip_version":"number","ipv6_address_mode":"string","ipv6_ra_mode":"string","name":"string","network_id":"string","no_gateway":"bool","prefix_length":"number","region":"string","segment_id":"string","service_types":["list","string"],"subnetpool_id":"string","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"value_specs":["map","string"]}],"main_subnet_network_id":"string","mtu_size":"number","os_project_data":["map","string"],"policy_list":["map","string"],"resolvers_ip":["list","string"],"ssh_sources":["map","string"],"ubuntu2204_data_file":"string","ubuntu_2204":["map","string"]}]},"workspace":null},"sensitive_attributes":[]}]},{"mode":"data","type":"terraform_remote_state","name":"project_setup","provider":"provider[\"terraform.io/builtin/terraform\"]","instances":[{"schema_version":0,"attributes":{"backend":"local","config":{"value":{"path":"../project-setup/terraform.tfstate"},"type":["object",{"path":"string"}]},"defaults":null,"outputs":{"value":{"access_to_the_jump_proxy":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows SSH access to the jump node from a limited set of sources","id":"4c6b6683-77fa-4d1a-8ba2-41acf10a12ba","name":"ssh_access_to_the_jump_node","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"acme_challenge_hostname":"_acme-challenge.s2i2s.cloud.isti.cnr.it.","availability_zones_names":{"availability_zone_no_gpu":"cnr-isti-nova-a","availability_zone_with_gpu":"cnr-isti-nova-gpu-a"},"basic_services_ip":{"ca":"10.10.0.4","ca_cidr":"10.10.0.4/32","forgejo":"10.10.0.165","forgejo_cidr":"10.10.0.165/32","haproxy_l7_1":"10.10.0.11","haproxy_l7_1_cidr":"10.10.0.11/32","haproxy_l7_2":"10.10.0.12","haproxy_l7_2_cidr":"10.10.0.12/32","keycloak_1":"10.10.0.163","keycloak_1_cidr":"10.10.0.163/32","keycloak_2":"10.10.0.164","keycloak_2_cidr":"10.10.0.164/32","octavia_main":"10.10.0.20","octavia_main_cidr":"10.10.0.20/32","postgresql":"10.10.0.162","postgresql_cidr":"10.10.0.162/32","prometheus":"10.10.0.10","prometheus_cidr":"10.10.0.10/32","ssh_jump":"10.10.0.5","ssh_jump_cidr":"10.10.0.5/32"},"debugging":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows web app debugging via tunnel from the ssh jump node","id":"6c21f51b-9cad-4051-99b6-221bed658a83","name":"debugging_from_jump_node","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"default_security_group":{"all_tags":[],"delete_default_rules":true,"description":"Default security group with rules for ssh access via jump proxy, prometheus scraping","id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","name":"default_for_all","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"default_security_group_id":"1ec8a419-f9cf-473f-a022-6499d67d57b8","default_security_group_name":"default_for_all","dns_zone":{"attributes":{},"description":"DNS primary zone for the S2I2S project","disable_status_check":false,"email":"postmaster@isti.cnr.it","id":"e826e777-0196-4f63-b2a9-df07f70e618f","masters":[],"name":"s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"PRIMARY","value_specs":null},"dns_zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f","floating_ip_pools":{"main_public_ip_pool":"external-network"},"haproxy_l7_data":{"flavor":"m1.medium","name":"main-haproxy-l7","vm_count":"2"},"internal_ca_data":{"flavor":"m1.small","name":"ca"},"internal_ca_id":"286b7a4d-33c6-451f-9019-d9fd79265181","main_haproxy_l7_ids":["b42a0e99-6172-4a5d-886c-c0fb016da60e","b770644a-5c39-4db2-8811-fb62751bd789"],"main_haproxy_l7_ip":["10.10.0.11","10.10.0.12"],"main_lb_to_haproxy_l7_security_group":{"all_tags":[],"delete_default_rules":true,"description":"Traffic coming from the main L4 lb (OVN provider, client IP is preserved) directed to the haproxy l7 servers","id":"613cacac-ac46-46ab-ba7a-d66f61cce84d","name":"traffic_from_main_lb_to_haproxy_l7","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"main_loadbalancer_hostname":"main-lb.s2i2s.cloud.isti.cnr.it.","main_loadbalancer_id":"44dbe548-a436-4816-927a-2912f443b50f","main_loadbalancer_ip":"10.10.0.20","main_loadbalancer_public_ip":"146.48.30.30","main_private_network":{"admin_state_up":true,"all_tags":[],"availability_zone_hints":[],"description":"S2I2S private network (use this as the main network)","dns_domain":"s2i2s.cloud.isti.cnr.it.","external":false,"id":"f371c239-6d5d-4ac8-a17e-af607752d82c","mtu":8942,"name":"s2i2s-proj-main","port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","segments":[{"network_type":"geneve","physical_network":"","segmentation_id":47850}],"shared":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"transparent_vlan":false,"value_specs":null},"main_private_subnet":{"all_tags":[],"allocation_pool":[{"end":"10.10.7.254","start":"10.10.1.1"}],"cidr":"10.10.0.0/21","description":"S2I2S main private subnet","dns_nameservers":["146.48.29.97","146.48.29.98","146.48.29.99"],"dns_publish_fixed_ip":false,"enable_dhcp":true,"gateway_ip":"10.10.0.1","id":"19c649ee-96ea-438b-ac0c-512afdf5046d","ip_version":4,"ipv6_address_mode":"","ipv6_ra_mode":"","name":"s2i2s-proj-main-subnet","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_gateway":false,"prefix_length":null,"region":"isti_area_pi_1","segment_id":"","service_types":[],"subnetpool_id":"","tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"main_region":"isti_area_pi_1","main_subnet_network_id":"19c649ee-96ea-438b-ac0c-512afdf5046d","mtu_size":8942,"os_project_data":{"id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","name":"s2i2s-proj-cloud"},"prometheus_access_from_grafana":{"all_tags":[],"delete_default_rules":true,"description":"The public grafana server must be able to get data from Prometheus","id":"48e9366f-23a8-47df-abcd-66f84d4af395","name":"prometheus_access_from_grafana","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"prometheus_hostname":"prometheus.s2i2s.cloud.isti.cnr.it.","prometheus_public_ip":"146.48.31.67","prometheus_server_data":{"flavor":"m1.medium","name":"prometheus","public_grafana_server_cidr":"146.48.28.103/32","vol_data_device":"/dev/vdb","vol_data_name":"prometheus-data","vol_data_size":"100"},"prometheus_server_id":"d2a37e7c-3eaa-4929-b70d-cfb55416d8bc","public_web":{"all_tags":[],"delete_default_rules":true,"description":"Security group that allows HTTPS and HTTP from everywhere, for the services that are not behind any load balancer","id":"31140e64-667a-4044-b388-79afcc6bcb69","name":"public_web_service","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"resolvers_ip":["146.48.29.97","146.48.29.98","146.48.29.99"],"restricted_web":{"all_tags":[],"delete_default_rules":true,"description":"Security group that restricts HTTPS sources to the VPN nodes and shell.d4science.org. HTTP is open to all, because letsencrypt","id":"359d7ae7-cdff-47c2-bf69-7d423860d2d2","name":"restricted_web_service","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"ssh_jump_proxy":{"flavor":"m2.small","name":"ssh-jump-proxy"},"ssh_jump_proxy_hostname":"ssh-jump-proxy.s2i2s.cloud.isti.cnr.it.","ssh_jump_proxy_id":"6aed1634-ec4e-43b0-a8c6-2da42a27ad25","ssh_jump_proxy_public_ip":"146.48.31.105","ssh_sources":{"d4s_vpn_1_cidr":"146.48.122.27/32","d4s_vpn_2_cidr":"146.48.122.49/32","infrascience_net_cidr":"146.48.122.0/23","isti_net_cidr":"146.48.80.0/21","isti_vpn_gw1":"146.48.80.101/32","isti_vpn_gw2":"146.48.80.102/32","isti_vpn_gw3":"146.48.80.103/32","s2i2s_net_cidr":"146.48.28.0/22","s2i2s_vpn_1_cidr":"146.48.28.10/32","s2i2s_vpn_2_cidr":"146.48.28.11/32","shell_d4s_cidr":"146.48.122.95/32"},"traffic_from_main_haproxy":{"all_tags":[],"delete_default_rules":true,"description":"Allow traffic from the main L7 HAPROXY load balancers","id":"56ba7585-659a-49ac-8d8e-c85ebcb1179f","name":"traffic_from_the_main_load_balancers","region":"isti_area_pi_1","stateful":false,"tags":[],"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"ubuntu2204_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","ubuntu2404_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2404.sh","ubuntu_2204":{"name":"Ubuntu-Jammy-22.04","user_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2204.sh","uuid":"54768889-8556-4be4-a2eb-82a4d9b34627"},"ubuntu_2404":{"name":"Ubuntu-Noble-24.04.img","user_data_file":"../../s2i2s_openstack_vm_data_scripts/ubuntu2404.sh","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075"}},"type":["object",{"access_to_the_jump_proxy":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}],"acme_challenge_hostname":"string","availability_zones_names":["map","string"],"basic_services_ip":["map","string"],"debugging":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}],"default_security_group":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}],"default_security_group_id":"string","default_security_group_name":"string","dns_zone":["object",{"attributes":["map","string"],"description":"string","disable_status_check":"bool","email":"string","id":"string","masters":["set","string"],"name":"string","project_id":"string","region":"string","timeouts":["object",{"create":"string","delete":"string","update":"string"}],"ttl":"number","type":"string","value_specs":["map","string"]}],"dns_zone_id":"string","floating_ip_pools":["map","string"],"haproxy_l7_data":["map","string"],"internal_ca_data":["map","string"],"internal_ca_id":"string","main_haproxy_l7_ids":["tuple",["string","string"]],"main_haproxy_l7_ip":["list","string"],"main_lb_to_haproxy_l7_security_group":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}],"main_loadbalancer_hostname":"string","main_loadbalancer_id":"string","main_loadbalancer_ip":"string","main_loadbalancer_public_ip":"string","main_private_network":["object",{"admin_state_up":"bool","all_tags":["set","string"],"availability_zone_hints":["set","string"],"description":"string","dns_domain":"string","external":"bool","id":"string","mtu":"number","name":"string","port_security_enabled":"bool","qos_policy_id":"string","region":"string","segments":["set",["object",{"network_type":"string","physical_network":"string","segmentation_id":"number"}]],"shared":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"transparent_vlan":"bool","value_specs":["map","string"]}],"main_private_subnet":["object",{"all_tags":["set","string"],"allocation_pool":["set",["object",{"end":"string","start":"string"}]],"cidr":"string","description":"string","dns_nameservers":["list","string"],"dns_publish_fixed_ip":"bool","enable_dhcp":"bool","gateway_ip":"string","id":"string","ip_version":"number","ipv6_address_mode":"string","ipv6_ra_mode":"string","name":"string","network_id":"string","no_gateway":"bool","prefix_length":"number","region":"string","segment_id":"string","service_types":["list","string"],"subnetpool_id":"string","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"create":"string","delete":"string"}],"value_specs":["map","string"]}],"main_region":"string","main_subnet_network_id":"string","mtu_size":"number","os_project_data":["map","string"],"prometheus_access_from_grafana":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}],"prometheus_hostname":"string","prometheus_public_ip":"string","prometheus_server_data":["map","string"],"prometheus_server_id":"string","public_web":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}],"resolvers_ip":["list","string"],"restricted_web":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}],"ssh_jump_proxy":["map","string"],"ssh_jump_proxy_hostname":"string","ssh_jump_proxy_id":"string","ssh_jump_proxy_public_ip":"string","ssh_sources":["map","string"],"traffic_from_main_haproxy":["object",{"all_tags":["set","string"],"delete_default_rules":"bool","description":"string","id":"string","name":"string","region":"string","stateful":"bool","tags":["set","string"],"tenant_id":"string","timeouts":["object",{"delete":"string"}]}],"ubuntu2204_data_file":"string","ubuntu2404_data_file":"string","ubuntu_2204":["map","string"],"ubuntu_2404":["map","string"]}]},"workspace":null},"sensitive_attributes":[]}]},{"module":"module.keycloak","mode":"managed","type":"openstack_compute_instance_v2","name":"keycloak","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"index_key":0,"schema_version":0,"attributes":{"access_ip_v4":"10.10.0.163","access_ip_v6":"","admin_pass":null,"all_metadata":{},"all_tags":[],"availability_zone":"cnr-isti-nova-a","availability_zone_hints":"cnr-isti-nova-a","block_device":[{"boot_index":0,"delete_on_termination":false,"destination_type":"volume","device_type":"","disk_bus":"","guest_format":"","multiattach":false,"source_type":"image","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075","volume_size":30,"volume_type":""}],"config_drive":null,"created":"2026-08-11 16:23:09 +0000 UTC","flavor_id":"4","flavor_name":"m1.medium","force_delete":false,"hypervisor_hostname":"","id":"6b8ccc76-08f8-476c-b769-618f70925ba6","image_id":"Attempt to boot from volume - no image supplied","image_name":null,"key_pair":"adellam","metadata":null,"name":"keycloak-01","network":[{"access_network":false,"fixed_ip_v4":"10.10.0.163","fixed_ip_v6":"","mac":"fa:16:3e:3b:77:97","name":"s2i2s-proj-main","port":"d04f70f3-aa9b-442a-b523-6a4f3c5575b1","uuid":"f371c239-6d5d-4ac8-a17e-af607752d82c"},{"access_network":false,"fixed_ip_v4":"192.168.1.83","fixed_ip_v6":"","mac":"fa:16:3e:9c:ef:f5","name":"postgresql-srv-net","port":"b05b2edf-c23b-4b30-bcaf-01adeb90a418","uuid":"2b4f3653-5016-427f-9ae2-31144f691a93"}],"network_mode":null,"personality":[],"power_state":"active","region":"isti_area_pi_1","scheduler_hints":[{"additional_properties":null,"build_near_host_ip":"","different_cell":[],"different_host":[],"group":"9c9cdfbb-50ee-4503-8143-363fddb755f6","query":[],"same_host":[],"target_cell":""}],"security_groups":["default_for_all","keycloak_cluster_traffic","traffic_to_keycloak_from_the_main_load_balancers","vm_access_to_the_postgresql_service"],"stop_before_destroy":false,"tags":null,"timeouts":null,"updated":"2026-08-11 16:24:24 +0000 UTC","user_data":"164cdf695f3b4a01a2f8b9dc0af2f87629bd89a7","vendor_options":[]},"sensitive_attributes":[[{"type":"get_attr","value":"admin_pass"}]],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjoxODAwMDAwMDAwMDAwLCJkZWxldGUiOjE4MDAwMDAwMDAwMDAsInVwZGF0ZSI6MTgwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.postgresql","data.terraform_remote_state.privnet_dns_router","data.terraform_remote_state.project_setup","module.keycloak.openstack_compute_servergroup_v2.keycloak","module.keycloak.openstack_networking_port_v2.keycloak_main_port","module.keycloak.openstack_networking_port_v2.keycloak_postgresql_port","module.keycloak.openstack_networking_secgroup_v2.keycloak_cluster_traffic","module.keycloak.openstack_networking_secgroup_v2.traffic_to_keycloak"]},{"index_key":1,"schema_version":0,"attributes":{"access_ip_v4":"10.10.0.164","access_ip_v6":"","admin_pass":null,"all_metadata":{},"all_tags":[],"availability_zone":"cnr-isti-nova-a","availability_zone_hints":"cnr-isti-nova-a","block_device":[{"boot_index":0,"delete_on_termination":false,"destination_type":"volume","device_type":"","disk_bus":"","guest_format":"","multiattach":false,"source_type":"image","uuid":"fc3f705d-3cf5-4866-8ef6-ff6e2cdd4075","volume_size":30,"volume_type":""}],"config_drive":null,"created":"2026-08-11 16:23:09 +0000 UTC","flavor_id":"4","flavor_name":"m1.medium","force_delete":false,"hypervisor_hostname":"","id":"399aeff4-f6a7-4cd1-a73c-91722191afe4","image_id":"Attempt to boot from volume - no image supplied","image_name":null,"key_pair":"adellam","metadata":null,"name":"keycloak-02","network":[{"access_network":false,"fixed_ip_v4":"10.10.0.164","fixed_ip_v6":"","mac":"fa:16:3e:97:69:9a","name":"s2i2s-proj-main","port":"76d1fe64-cb21-4931-a918-ba19fbb555db","uuid":"f371c239-6d5d-4ac8-a17e-af607752d82c"},{"access_network":false,"fixed_ip_v4":"192.168.3.83","fixed_ip_v6":"","mac":"fa:16:3e:d1:3c:26","name":"postgresql-srv-net","port":"1eae7d76-d39f-493b-abc6-44ddfe5a757b","uuid":"2b4f3653-5016-427f-9ae2-31144f691a93"}],"network_mode":null,"personality":[],"power_state":"active","region":"isti_area_pi_1","scheduler_hints":[{"additional_properties":null,"build_near_host_ip":"","different_cell":[],"different_host":[],"group":"9c9cdfbb-50ee-4503-8143-363fddb755f6","query":[],"same_host":[],"target_cell":""}],"security_groups":["default_for_all","keycloak_cluster_traffic","traffic_to_keycloak_from_the_main_load_balancers","vm_access_to_the_postgresql_service"],"stop_before_destroy":false,"tags":null,"timeouts":null,"updated":"2026-08-11 16:24:07 +0000 UTC","user_data":"164cdf695f3b4a01a2f8b9dc0af2f87629bd89a7","vendor_options":[]},"sensitive_attributes":[[{"type":"get_attr","value":"admin_pass"}]],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjoxODAwMDAwMDAwMDAwLCJkZWxldGUiOjE4MDAwMDAwMDAwMDAsInVwZGF0ZSI6MTgwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.postgresql","data.terraform_remote_state.privnet_dns_router","data.terraform_remote_state.project_setup","module.keycloak.openstack_compute_servergroup_v2.keycloak","module.keycloak.openstack_networking_port_v2.keycloak_main_port","module.keycloak.openstack_networking_port_v2.keycloak_postgresql_port","module.keycloak.openstack_networking_secgroup_v2.keycloak_cluster_traffic","module.keycloak.openstack_networking_secgroup_v2.traffic_to_keycloak"]}]},{"module":"module.keycloak","mode":"managed","type":"openstack_compute_servergroup_v2","name":"keycloak","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"id":"9c9cdfbb-50ee-4503-8143-363fddb755f6","members":[],"name":"keycloak","policies":["anti-affinity"],"region":"isti_area_pi_1","rules":[{"max_server_per_host":0}],"value_specs":null},"sensitive_attributes":[],"private":"bnVsbA=="}]},{"module":"module.keycloak","mode":"managed","type":"openstack_dns_recordset_v2","name":"keycloak_recordset","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"index_key":"accounts","schema_version":0,"attributes":{"description":"Keycloak of the S2I2S project, published by the main load balancer","disable_status_check":false,"id":"e826e777-0196-4f63-b2a9-df07f70e618f/697873fa-caf7-42bf-98ae-cdd3bea7a980","name":"accounts.s2i2s.cloud.isti.cnr.it.","project_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","records":["main-lb.s2i2s.cloud.isti.cnr.it."],"region":"isti_area_pi_1","timeouts":null,"ttl":8600,"type":"CNAME","value_specs":null,"zone_id":"e826e777-0196-4f63-b2a9-df07f70e618f"},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwLCJ1cGRhdGUiOjYwMDAwMDAwMDAwMH19","dependencies":["data.terraform_remote_state.privnet_dns_router","data.terraform_remote_state.project_setup"]}]},{"module":"module.keycloak","mode":"managed","type":"openstack_networking_port_v2","name":"keycloak_main_port","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"index_key":0,"schema_version":0,"attributes":{"admin_state_up":true,"all_fixed_ips":["10.10.0.163"],"all_security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","84c010c6-64c3-4f7a-91f6-e274b5fb1c67","f5b3b6d6-a0ca-4cb8-81f2-eaaa3052cfcb"],"all_tags":[],"allowed_address_pairs":[],"binding":[{"host_id":"","profile":"","vif_details":{},"vif_type":"","vnic_type":"normal"}],"description":"Port of the keycloak instance on the main private network","device_id":"","device_owner":"","dns_assignment":[{"fqdn":"host-10-10-0-163.internal-cloud.isti.cnr.it.","hostname":"host-10-10-0-163","ip_address":"10.10.0.163"}],"dns_name":"","extra_dhcp_option":[],"fixed_ip":[{"ip_address":"10.10.0.163","subnet_id":"19c649ee-96ea-438b-ac0c-512afdf5046d"}],"id":"d04f70f3-aa9b-442a-b523-6a4f3c5575b1","mac_address":"fa:16:3e:3b:77:97","name":"keycloak-01-main-port","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_fixed_ip":null,"no_security_groups":null,"port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","84c010c6-64c3-4f7a-91f6-e274b5fb1c67","f5b3b6d6-a0ca-4cb8-81f2-eaaa3052cfcb"],"tags":null,"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","data.terraform_remote_state.project_setup","module.keycloak.openstack_networking_secgroup_v2.keycloak_cluster_traffic","module.keycloak.openstack_networking_secgroup_v2.traffic_to_keycloak"]},{"index_key":1,"schema_version":0,"attributes":{"admin_state_up":true,"all_fixed_ips":["10.10.0.164"],"all_security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","84c010c6-64c3-4f7a-91f6-e274b5fb1c67","f5b3b6d6-a0ca-4cb8-81f2-eaaa3052cfcb"],"all_tags":[],"allowed_address_pairs":[],"binding":[{"host_id":"","profile":"","vif_details":{},"vif_type":"","vnic_type":"normal"}],"description":"Port of the keycloak instance on the main private network","device_id":"","device_owner":"","dns_assignment":[{"fqdn":"host-10-10-0-164.internal-cloud.isti.cnr.it.","hostname":"host-10-10-0-164","ip_address":"10.10.0.164"}],"dns_name":"","extra_dhcp_option":[],"fixed_ip":[{"ip_address":"10.10.0.164","subnet_id":"19c649ee-96ea-438b-ac0c-512afdf5046d"}],"id":"76d1fe64-cb21-4931-a918-ba19fbb555db","mac_address":"fa:16:3e:97:69:9a","name":"keycloak-02-main-port","network_id":"f371c239-6d5d-4ac8-a17e-af607752d82c","no_fixed_ip":null,"no_security_groups":null,"port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","security_group_ids":["1ec8a419-f9cf-473f-a022-6499d67d57b8","84c010c6-64c3-4f7a-91f6-e274b5fb1c67","f5b3b6d6-a0ca-4cb8-81f2-eaaa3052cfcb"],"tags":null,"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.privnet_dns_router","data.terraform_remote_state.project_setup","module.keycloak.openstack_networking_secgroup_v2.keycloak_cluster_traffic","module.keycloak.openstack_networking_secgroup_v2.traffic_to_keycloak"]}]},{"module":"module.keycloak","mode":"managed","type":"openstack_networking_port_v2","name":"keycloak_postgresql_port","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"index_key":0,"schema_version":0,"attributes":{"admin_state_up":true,"all_fixed_ips":["192.168.1.83"],"all_security_group_ids":["09df1cb3-0654-47a0-be50-55bb79b011c9"],"all_tags":[],"allowed_address_pairs":[],"binding":[{"host_id":"","profile":"","vif_details":{},"vif_type":"","vnic_type":"normal"}],"description":"Port of the keycloak instance on the dedicated network of the database","device_id":"","device_owner":"","dns_assignment":[{"fqdn":"host-192-168-1-83.internal-cloud.isti.cnr.it.","hostname":"host-192-168-1-83","ip_address":"192.168.1.83"}],"dns_name":"","extra_dhcp_option":[],"fixed_ip":[{"ip_address":"","subnet_id":"228da08f-2b49-4d76-bec4-abab0510f275"}],"id":"b05b2edf-c23b-4b30-bcaf-01adeb90a418","mac_address":"fa:16:3e:9c:ef:f5","name":"keycloak-01-postgresql-port","network_id":"2b4f3653-5016-427f-9ae2-31144f691a93","no_fixed_ip":null,"no_security_groups":null,"port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","security_group_ids":["09df1cb3-0654-47a0-be50-55bb79b011c9"],"tags":null,"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.postgresql"]},{"index_key":1,"schema_version":0,"attributes":{"admin_state_up":true,"all_fixed_ips":["192.168.3.83"],"all_security_group_ids":["09df1cb3-0654-47a0-be50-55bb79b011c9"],"all_tags":[],"allowed_address_pairs":[],"binding":[{"host_id":"","profile":"","vif_details":{},"vif_type":"","vnic_type":"normal"}],"description":"Port of the keycloak instance on the dedicated network of the database","device_id":"","device_owner":"","dns_assignment":[{"fqdn":"host-192-168-3-83.internal-cloud.isti.cnr.it.","hostname":"host-192-168-3-83","ip_address":"192.168.3.83"}],"dns_name":"","extra_dhcp_option":[],"fixed_ip":[{"ip_address":"","subnet_id":"228da08f-2b49-4d76-bec4-abab0510f275"}],"id":"1eae7d76-d39f-493b-abc6-44ddfe5a757b","mac_address":"fa:16:3e:d1:3c:26","name":"keycloak-02-postgresql-port","network_id":"2b4f3653-5016-427f-9ae2-31144f691a93","no_fixed_ip":null,"no_security_groups":null,"port_security_enabled":true,"qos_policy_id":"","region":"isti_area_pi_1","security_group_ids":["09df1cb3-0654-47a0-be50-55bb79b011c9"],"tags":null,"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null,"value_specs":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjo2MDAwMDAwMDAwMDAsImRlbGV0ZSI6NjAwMDAwMDAwMDAwfX0=","dependencies":["data.terraform_remote_state.postgresql"]}]},{"module":"module.keycloak","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"cluster_egress","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"index_key":"10.10.0.163","schema_version":0,"attributes":{"description":"Traffic to the keycloak node 10.10.0.163","direction":"egress","ethertype":"IPv4","id":"fade595e-99e5-4681-b8e1-adb4b3947d49","port_range_max":0,"port_range_min":0,"protocol":"","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.163/32","security_group_id":"84c010c6-64c3-4f7a-91f6-e274b5fb1c67","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.keycloak.openstack_networking_secgroup_v2.keycloak_cluster_traffic"]},{"index_key":"10.10.0.164","schema_version":0,"attributes":{"description":"Traffic to the keycloak node 10.10.0.164","direction":"egress","ethertype":"IPv4","id":"405b5f61-3d94-4406-bec3-56a330e942d9","port_range_max":0,"port_range_min":0,"protocol":"","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.164/32","security_group_id":"84c010c6-64c3-4f7a-91f6-e274b5fb1c67","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.keycloak.openstack_networking_secgroup_v2.keycloak_cluster_traffic"]}]},{"module":"module.keycloak","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"cluster_igmp_egress","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Egress IGMP traffic between the keycloak nodes","direction":"egress","ethertype":"IPv4","id":"e88b9874-112b-4446-b38a-f6afc1c78784","port_range_max":0,"port_range_min":0,"protocol":"igmp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"84c010c6-64c3-4f7a-91f6-e274b5fb1c67","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.keycloak.openstack_networking_secgroup_v2.keycloak_cluster_traffic"]}]},{"module":"module.keycloak","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"cluster_igmp_ingress","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Ingress IGMP traffic between the keycloak nodes","direction":"ingress","ethertype":"IPv4","id":"c29ba6ef-3536-4600-aee7-f51ac9f0eaa1","port_range_max":0,"port_range_min":0,"protocol":"igmp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"0.0.0.0/0","security_group_id":"84c010c6-64c3-4f7a-91f6-e274b5fb1c67","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.keycloak.openstack_networking_secgroup_v2.keycloak_cluster_traffic"]}]},{"module":"module.keycloak","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"cluster_tcp","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"index_key":"10.10.0.163","schema_version":0,"attributes":{"description":"TCP traffic from the keycloak node 10.10.0.163","direction":"ingress","ethertype":"IPv4","id":"3d515e1c-db8f-49c7-8a58-c093a7a4f8ab","port_range_max":0,"port_range_min":0,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.163/32","security_group_id":"84c010c6-64c3-4f7a-91f6-e274b5fb1c67","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.keycloak.openstack_networking_secgroup_v2.keycloak_cluster_traffic"]},{"index_key":"10.10.0.164","schema_version":0,"attributes":{"description":"TCP traffic from the keycloak node 10.10.0.164","direction":"ingress","ethertype":"IPv4","id":"584e09b7-68f9-45dc-ab83-2e486316a89f","port_range_max":0,"port_range_min":0,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.164/32","security_group_id":"84c010c6-64c3-4f7a-91f6-e274b5fb1c67","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.keycloak.openstack_networking_secgroup_v2.keycloak_cluster_traffic"]}]},{"module":"module.keycloak","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"cluster_udp","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"index_key":"10.10.0.163","schema_version":0,"attributes":{"description":"UDP traffic from the keycloak node 10.10.0.163","direction":"ingress","ethertype":"IPv4","id":"d91b3553-8995-4c56-bb6c-eb7533936828","port_range_max":0,"port_range_min":0,"protocol":"udp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.163/32","security_group_id":"84c010c6-64c3-4f7a-91f6-e274b5fb1c67","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.keycloak.openstack_networking_secgroup_v2.keycloak_cluster_traffic"]},{"index_key":"10.10.0.164","schema_version":0,"attributes":{"description":"UDP traffic from the keycloak node 10.10.0.164","direction":"ingress","ethertype":"IPv4","id":"4c1f8b94-3432-4039-b74c-d828bda58cdf","port_range_max":0,"port_range_min":0,"protocol":"udp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.164/32","security_group_id":"84c010c6-64c3-4f7a-91f6-e274b5fb1c67","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["module.keycloak.openstack_networking_secgroup_v2.keycloak_cluster_traffic"]}]},{"module":"module.keycloak","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy_to_keycloak_https","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"index_key":"10.10.0.11","schema_version":0,"attributes":{"description":"HTTPS traffic from the HAPROXY L7 10.10.0.11","direction":"ingress","ethertype":"IPv4","id":"5c7f02c3-eaf7-423e-9132-c7b69a3f56e0","port_range_max":9443,"port_range_min":9443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.11/32","security_group_id":"f5b3b6d6-a0ca-4cb8-81f2-eaaa3052cfcb","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["data.terraform_remote_state.project_setup","module.keycloak.openstack_networking_secgroup_v2.traffic_to_keycloak"]},{"index_key":"10.10.0.12","schema_version":0,"attributes":{"description":"HTTPS traffic from the HAPROXY L7 10.10.0.12","direction":"ingress","ethertype":"IPv4","id":"5a3c895b-b47b-47ee-ad19-76819e405943","port_range_max":9443,"port_range_min":9443,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.12/32","security_group_id":"f5b3b6d6-a0ca-4cb8-81f2-eaaa3052cfcb","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["data.terraform_remote_state.project_setup","module.keycloak.openstack_networking_secgroup_v2.traffic_to_keycloak"]}]},{"module":"module.keycloak","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"haproxy_to_keycloak_management","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"index_key":"10.10.0.11","schema_version":0,"attributes":{"description":"Traffic from the HAPROXY L7 10.10.0.11 to the management port","direction":"ingress","ethertype":"IPv4","id":"d36fc154-e08a-4d75-bada-52591af98fa7","port_range_max":9000,"port_range_min":9000,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.11/32","security_group_id":"f5b3b6d6-a0ca-4cb8-81f2-eaaa3052cfcb","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["data.terraform_remote_state.project_setup","module.keycloak.openstack_networking_secgroup_v2.traffic_to_keycloak"]},{"index_key":"10.10.0.12","schema_version":0,"attributes":{"description":"Traffic from the HAPROXY L7 10.10.0.12 to the management port","direction":"ingress","ethertype":"IPv4","id":"002c9906-c0f5-4299-87f1-36b83a1c8e91","port_range_max":9000,"port_range_min":9000,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.12/32","security_group_id":"f5b3b6d6-a0ca-4cb8-81f2-eaaa3052cfcb","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["data.terraform_remote_state.project_setup","module.keycloak.openstack_networking_secgroup_v2.traffic_to_keycloak"]}]},{"module":"module.keycloak","mode":"managed","type":"openstack_networking_secgroup_rule_v2","name":"prometheus_to_keycloak_metrics","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"description":"Requests from Prometheus to the management port, that serves the metrics","direction":"ingress","ethertype":"IPv4","id":"d7e0bc4a-5353-4a99-8c8e-2ac5fa18ad89","port_range_max":9000,"port_range_min":9000,"protocol":"tcp","region":"isti_area_pi_1","remote_address_group_id":"","remote_group_id":"","remote_ip_prefix":"10.10.0.10/32","security_group_id":"f5b3b6d6-a0ca-4cb8-81f2-eaaa3052cfcb","tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ==","dependencies":["data.terraform_remote_state.project_setup","module.keycloak.openstack_networking_secgroup_v2.traffic_to_keycloak"]}]},{"module":"module.keycloak","mode":"managed","type":"openstack_networking_secgroup_v2","name":"keycloak_cluster_traffic","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Traffic between the nodes of the keycloak cluster","id":"84c010c6-64c3-4f7a-91f6-e274b5fb1c67","name":"keycloak_cluster_traffic","region":"isti_area_pi_1","stateful":false,"tags":null,"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]},{"module":"module.keycloak","mode":"managed","type":"openstack_networking_secgroup_v2","name":"traffic_to_keycloak","provider":"provider[\"registry.opentofu.org/terraform-provider-openstack/openstack\"]","instances":[{"schema_version":0,"attributes":{"all_tags":[],"delete_default_rules":true,"description":"Traffic from the main L7 HAPROXY load balancers to keycloak","id":"f5b3b6d6-a0ca-4cb8-81f2-eaaa3052cfcb","name":"traffic_to_keycloak_from_the_main_load_balancers","region":"isti_area_pi_1","stateful":false,"tags":null,"tenant_id":"d0dcc2b7f3004c9a81b87ab60ec3c0d3","timeouts":null},"sensitive_attributes":[],"private":"eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiZGVsZXRlIjo2MDAwMDAwMDAwMDB9fQ=="}]}],"check_results":[{"object_kind":"var","config_addr":"module.keycloak.var.keycloak_ip","status":"pass","objects":[{"object_addr":"module.keycloak.var.keycloak_ip","status":"pass"}]}]}
|