Skip to content

destcidrlist isn't supported for cloudstack_egress_firewall #296

Description

@artem-sidorenko

Example usage

resource "cloudstack_egress_firewall" "default" {
  network_id = "6eb22f91-7454-4107-89f4-36afcdf33021"

  rule {
    cidr_list = ["10.0.0.0/8"]
    protocol  = "tcp"
    ports     = ["80", "1000-2000"]
  }
}

If I check the cmk output, there is also destcidrlist:

$ cmk
(localcloud) 🐱 > list egressfirewallrules listall=true domainid=DOMAINID projectid=PROJECTID
{
  "count": 3,
  "firewallrule": [
    {
      "cidrlist": "10.100.0.0/24",
      "destcidrlist": "",                           # <------------
      "endport": 443,
      "fordisplay": true,
      "id": "RULEID",
      "networkid": "NETWORKID",
      "protocol": "tcp",
      "startport": 443,
      "state": "Active",
      "tags": [],
      "traffictype": "Egress"
    },
...
  ]
}

This makes somehow little sense, usually I want to specify the target for egress communication

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions