terraform/contracts.tf at main · Tugrul-NET/terraform · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
resource "aci_contract" "app_to_web" {
  tenant_dn = aci_tenant.tenant.id
  name      = "app_to_web"
}

resource "aci_filter" "allow_tcp" {
  tenant_dn = aci_tenant.tenant.id
  name      = "allow_tcp"
}

resource "aci_filter" "allow_tomcat2" {
  tenant_dn = aci_tenant.tenant.id
  name      = "allow_tomcat2"
}

resource "aci_filter" "allow_icmp" {
  tenant_dn = aci_tenant.tenant.id
  name      = "allow_icmp"
}

resource "aci_filter_entry" "tcp" {
  filter_dn = aci_filter.allow_tcp.id
  name      = "tcp"
  d_from_port = "1"
  d_to_port   = "65535"
  prot        = "tcp"
  ether_t     = "ip"
}

resource "aci_filter_entry" "tomcat" {
  filter_dn = aci_filter.allow_tomcat2.id
  name      = "tomcat"
  d_from_port = "8080"
  d_to_port   = "8082"
  prot        = "tcp"
  ether_t     = "ip"
}

resource "aci_filter_entry" "icmp" {
  filter_dn = aci_filter.allow_icmp.id
  name      = "icmp"
  prot        = "icmp"
  ether_t     = "ip"
}

#Contract Subject Creation
resource "aci_contract_subject" "dev_app" {
  contract_dn = aci_contract.app_to_web.id
  name        = "tomcat_and_tcp"
  relation_vz_rs_subj_filt_att = [aci_filter.allow_tomcat2.id,aci_filter.allow_tcp.id,aci_filter.allow_icmp.id]
}

# app_to_web contract association with WEB_EPG and APP_EPG
resource "aci_epg_to_contract" "app_to_web_consumer" {
  application_epg_dn = aci_application_epg.WEB_EPG.id
  contract_dn        = aci_contract.app_to_web.id
  contract_type      = "consumer"
}

resource "aci_epg_to_contract" "app_to_web_provider" {
  application_epg_dn = aci_application_epg.APP_EPG.id
  contract_dn        = aci_contract.app_to_web.id
  contract_type      = "provider"
}