terraform/ecc-openstack-023-unrestricted_outbound_traffic/red2/network.tf (34 lines of code) (raw):
resource "openstack_networking_secgroup_v2" "this" {
name = "023-security_group-red"
description = "023-security_group-red"
delete_default_rules = true
tags = [
"CustodianRule = ecc-openstack-023-unrestricted_outbound_traffic",
"ComplianceStatus = Red"
]
}
resource "openstack_networking_secgroup_rule_v2" "secgroup_rule_1" {
direction = "egress"
ethertype = "IPv6"
protocol = "tcp"
port_range_min = 1
port_range_max = 65535
remote_ip_prefix = "::/0"
security_group_id = openstack_networking_secgroup_v2.this.id
}
resource "openstack_networking_secgroup_rule_v2" "secgroup_rule_2" {
direction = "egress"
ethertype = "IPv4"
protocol = "tcp"
port_range_min = 22
port_range_max = 22
remote_group_id = data.openstack_networking_secgroup_v2.this.id
security_group_id = openstack_networking_secgroup_v2.this.id
}
data "openstack_networking_secgroup_v2" "this" {
name = "default"
tenant_id = data.openstack_identity_project_v3.this.id
}
data "openstack_identity_project_v3" "this" {
name = var.project_name
}