Skip to content

Commit

Permalink
Add conditional attribute support to profile parcels (#300)
Browse files Browse the repository at this point in the history
seconroy authored Aug 28, 2024

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
1 parent 6e1c88e commit a45c3e7
Showing 58 changed files with 11,993 additions and 6,943 deletions.
5 changes: 5 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -7,6 +7,11 @@
- Add `sdwan_transport_ipv6_tracker_group_profile_parcel` resource and data source
- Add `sdwan_service_object_tracker_profile_parcel` resource and data source
- Add `sdwan_service_object_tracker_group_profile_parcel` resource and data source
- BREAKING CHANGE: Rename `enable_crl_check` attribute of `sdwan_system_remote_access_profile_parcel,` resource to `enable_certificate_list_check`
- BREAKING CHANGE: Rename `psk_selection` attribute of `sdwan_system_remote_access_profile_parcel` resource to `psk_authentication_type`
- BREAKING CHANGE: Rename `aaa_derive_name_identity` attribute of `sdwan_system_remote_access_profile_parcel` resource to `aaa_derive_name_from_peer_identity`
- BREAKING CHANGE: Rename `aaa_derive_name_domain` attribute of `sdwan_system_remote_access_profile_parcel` resource to `aaa_derive_name_from_peer_domain`
- BREAKING CHANGE: Removes `any_connect_eap_profile_download_status` and `any_connect_eap_profile_file_name` attributes of `sdwan_system_remote_access_profile_parcel

## 0.3.13

16 changes: 6 additions & 10 deletions docs/data-sources/system_remote_access_profile_parcel.md
Original file line number Diff line number Diff line change
@@ -29,25 +29,21 @@ data "sdwan_system_remote_access_profile_parcel" "example" {

### Read-Only

- `aaa_derive_name_domain` (String)
- `aaa_derive_name_domain_variable` (String) Variable name
- `aaa_derive_name_identity` (String)
- `aaa_derive_name_identity_variable` (String) Variable name
- `aaa_derive_name_from_peer_domain` (String)
- `aaa_derive_name_from_peer_domain_variable` (String) Variable name
- `aaa_derive_name_from_peer_identity` (String)
- `aaa_derive_name_from_peer_identity_variable` (String) Variable name
- `aaa_enable_accounting` (Boolean) Enable Accounting
- `aaa_enable_accounting_variable` (String) Variable name
- `aaa_specify_name_policy_name` (String)
- `aaa_specify_name_policy_name_variable` (String) Variable name
- `aaa_specify_name_policy_password` (String)
- `aaa_specify_name_policy_password_variable` (String) Variable name
- `any_connect_eap_authentication_type` (String)
- `any_connect_eap_profile_download_status` (String)
- `any_connect_eap_profile_download_status_variable` (String) Variable name
- `any_connect_eap_profile_file_name` (String)
- `any_connect_eap_profile_file_name_variable` (String) Variable name
- `connection_type_ssl` (Boolean) Enabled SSL VPN
- `description` (String) The description of the profile parcel
- `enable_crl_check` (Boolean)
- `enable_crl_check_variable` (String) Variable name
- `enable_certificate_list_check` (Boolean)
- `enable_certificate_list_check_variable` (String) Variable name
- `ikev2_anti_dos_threshold` (Number) Anti-DOS Threshold
- `ikev2_anti_dos_threshold_variable` (String) Variable name
- `ikev2_local_ike_identity_type` (String)
5 changes: 5 additions & 0 deletions docs/guides/changelog.md
Original file line number Diff line number Diff line change
@@ -16,6 +16,11 @@ description: |-
- Add `sdwan_transport_ipv6_tracker_group_profile_parcel` resource and data source
- Add `sdwan_service_object_tracker_profile_parcel` resource and data source
- Add `sdwan_service_object_tracker_group_profile_parcel` resource and data source
- BREAKING CHANGE: Rename `enable_crl_check` attribute of `sdwan_system_remote_access_profile_parcel,` resource to `enable_certificate_list_check`
- BREAKING CHANGE: Rename `psk_selection` attribute of `sdwan_system_remote_access_profile_parcel` resource to `psk_authentication_type`
- BREAKING CHANGE: Rename `aaa_derive_name_identity` attribute of `sdwan_system_remote_access_profile_parcel` resource to `aaa_derive_name_from_peer_identity`
- BREAKING CHANGE: Rename `aaa_derive_name_domain` attribute of `sdwan_system_remote_access_profile_parcel` resource to `aaa_derive_name_from_peer_domain`
- BREAKING CHANGE: Removes `any_connect_eap_profile_download_status` and `any_connect_eap_profile_file_name` attributes of `sdwan_system_remote_access_profile_parcel

## 0.3.13

85 changes: 40 additions & 45 deletions docs/resources/system_remote_access_profile_parcel.md
Original file line number Diff line number Diff line change
@@ -16,29 +16,27 @@ This resource can manage a System Remote Access profile parcel.

```terraform
resource "sdwan_system_remote_access_profile_parcel" "example" {
name = "Example"
description = "My Example"
feature_profile_id = "f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac"
connection_type_ssl = false
any_connect_eap_authentication_type = "user"
any_connect_eap_profile_download_status = "INITIALIZED"
any_connect_eap_profile_file_name = "<form-data>"
ipv4_pool_size = 50
ipv6_pool_size = 1024
enable_crl_check = false
psk_authentication_type = "aaa"
psk_authentication_pre_shared_key = "Cisco123"
radius_group_name = "radius-1"
aaa_derive_name_identity = "MyPassword"
aaa_enable_accounting = false
ikev2_local_ike_identity_type = "EMAIL"
ikev2_local_ike_identity_value = "[email protected]"
ikev2_security_association_lifetime = 86400
ikev2_anti_dos_threshold = 99
ipsec_enable_anti_replay = false
ipsec_anti_replay_window_size = 64
ipsec_security_association_lifetime = 3600
ipsec_enable_perfect_foward_secrecy = false
name = "Example"
description = "My Example"
feature_profile_id = "f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac"
connection_type_ssl = false
any_connect_eap_authentication_type = "user"
ipv4_pool_size = 50
ipv6_pool_size = 1024
enable_certificate_list_check = false
psk_authentication_type = "aaa"
psk_authentication_pre_shared_key = "Cisco123"
radius_group_name = "radius-1"
aaa_derive_name_from_peer_identity = "MyPassword"
aaa_enable_accounting = false
ikev2_local_ike_identity_type = "EMAIL"
ikev2_local_ike_identity_value = "[email protected]"
ikev2_security_association_lifetime = 86400
ikev2_anti_dos_threshold = 99
ipsec_enable_anti_replay = false
ipsec_anti_replay_window_size = 64
ipsec_security_association_lifetime = 3600
ipsec_enable_perfect_foward_secrecy = false
}
```

@@ -47,56 +45,53 @@ resource "sdwan_system_remote_access_profile_parcel" "example" {

### Required

- `any_connect_eap_authentication_type` (String) - Choices: `user`, `device`
- `any_connect_eap_authentication_type` (String) , Attribute conditional on `connection_type_ssl` being equal to `false`
- Choices: `user`, `device`
- `name` (String) The name of the profile parcel
- `radius_group_name` (String)

### Optional

- `aaa_derive_name_domain` (String)
- `aaa_derive_name_domain_variable` (String) Variable name
- `aaa_derive_name_identity` (String)
- `aaa_derive_name_identity_variable` (String) Variable name
- `aaa_derive_name_from_peer_domain` (String) , Attribute conditional on `connection_type_ssl` being equal to `false`
- `aaa_derive_name_from_peer_domain_variable` (String) Variable name
- `aaa_derive_name_from_peer_identity` (String) , Attribute conditional on `connection_type_ssl` being equal to `false`
- `aaa_derive_name_from_peer_identity_variable` (String) Variable name
- `aaa_enable_accounting` (Boolean) Enable Accounting
- Default value: `true`
- `aaa_enable_accounting_variable` (String) Variable name
- `aaa_specify_name_policy_name` (String)
- `aaa_specify_name_policy_name_variable` (String) Variable name
- `aaa_specify_name_policy_password` (String)
- `aaa_specify_name_policy_password_variable` (String) Variable name
- `any_connect_eap_profile_download_status` (String) - Choices: `NONE`, `INITIALIZED`, `INITIALIZED_ERROR`, `COMPLETE`, `COMPLETE_ERROR`
- Default value: `NONE`
- `any_connect_eap_profile_download_status_variable` (String) Variable name
- `any_connect_eap_profile_file_name` (String)
- `any_connect_eap_profile_file_name_variable` (String) Variable name
- `connection_type_ssl` (Boolean) Enabled SSL VPN
- Default value: `false`
- `description` (String) The description of the profile parcel
- `enable_crl_check` (Boolean) - Default value: `false`
- `enable_crl_check_variable` (String) Variable name
- `enable_certificate_list_check` (Boolean) - Default value: `false`
- `enable_certificate_list_check_variable` (String) Variable name
- `feature_profile_id` (String) Feature Profile ID
- `ikev2_anti_dos_threshold` (Number) Anti-DOS Threshold
- `ikev2_anti_dos_threshold` (Number) Anti-DOS Threshold, Attribute conditional on `connection_type_ssl` being equal to `false`
- Range: `10`-`1000`
- Default value: `100`
- `ikev2_anti_dos_threshold_variable` (String) Variable name
- `ikev2_local_ike_identity_type` (String) - Choices: `EMAIL`, `FQDN`, `KEYID`, `IPv4 ADDRESS`, `IPv6 ADDRESS`
- `ikev2_local_ike_identity_type` (String) , Attribute conditional on `connection_type_ssl` being equal to `false`
- Choices: `EMAIL`, `FQDN`, `KEYID`, `IPv4 ADDRESS`, `IPv6 ADDRESS`
- `ikev2_local_ike_identity_type_variable` (String) Variable name
- `ikev2_local_ike_identity_value` (String)
- `ikev2_local_ike_identity_value` (String) , Attribute conditional on `connection_type_ssl` being equal to `false`
- `ikev2_local_ike_identity_value_variable` (String) Variable name
- `ikev2_security_association_lifetime` (Number) Security Association Lifetime in Seconds
- `ikev2_security_association_lifetime` (Number) Security Association Lifetime in Seconds, Attribute conditional on `connection_type_ssl` being equal to `false`
- Range: `3600`-`86400`
- Default value: `86400`
- `ikev2_security_association_lifetime_variable` (String) Variable name
- `ipsec_anti_replay_window_size` (Number) security Association Lifetime
- `ipsec_anti_replay_window_size` (Number) security Association Lifetime, Attribute conditional on `ipsec_enable_anti_replay` being equal to `true`
- Default value: `64`
- `ipsec_anti_replay_window_size_variable` (String) Variable name
- `ipsec_enable_anti_replay` (Boolean) Enable Anti-Replay
- `ipsec_enable_anti_replay` (Boolean) Enable Anti-Replay, Attribute conditional on `connection_type_ssl` being equal to `false`
- Default value: `true`
- `ipsec_enable_anti_replay_variable` (String) Variable name
- `ipsec_enable_perfect_foward_secrecy` (Boolean) security Association Lifetime
- `ipsec_enable_perfect_foward_secrecy` (Boolean) security Association Lifetime, Attribute conditional on `connection_type_ssl` being equal to `false`
- Default value: `false`
- `ipsec_enable_perfect_foward_secrecy_variable` (String) Variable name
- `ipsec_security_association_lifetime` (Number) Security Association Lifetime in Seconds
- `ipsec_security_association_lifetime` (Number) Security Association Lifetime in Seconds, Attribute conditional on `connection_type_ssl` being equal to `false`
- Range: `3600`-`86400`
- Default value: `3600`
- `ipsec_security_association_lifetime_variable` (String) Variable name
@@ -106,9 +101,9 @@ resource "sdwan_system_remote_access_profile_parcel" "example" {
- `ipv6_pool_size` (Number) IPv6 Pool Size
- Default value: `1024`
- `ipv6_pool_size_variable` (String) Variable name
- `psk_authentication_pre_shared_key` (String) PSK Pre Shared Key
- `psk_authentication_pre_shared_key` (String) PSK Pre Shared Key, Attribute conditional on `psk_authentication_type` being equal to `group`
- `psk_authentication_pre_shared_key_variable` (String) Variable name
- `psk_authentication_type` (String) PSK Selection
- `psk_authentication_type` (String) PSK Selection, Attribute conditional on `connection_type_ssl` being equal to `false`
- Choices: `aaa`, `group`
- `psk_authentication_type_variable` (String) Variable name
- `radius_group_name_variable` (String) Variable name
4 changes: 2 additions & 2 deletions docs/resources/transport_management_vpn_profile_parcel.md
Original file line number Diff line number Diff line change
@@ -93,7 +93,7 @@ resource "sdwan_transport_management_vpn_profile_parcel" "example" {

Optional:

- `administrative_distance` (Number) Administrative distance
- `administrative_distance` (Number) Administrative distance, Attribute conditional on `gateway` being equal to `null0`
- Range: `1`-`255`
- Default value: `1`
- `administrative_distance_variable` (String) Variable name
@@ -102,7 +102,7 @@ Optional:
- Default value: `nextHop`
- `network_address` (String) IP Address
- `network_address_variable` (String) Variable name
- `next_hops` (Attributes List) IPv4 Route Gateway Next Hop (see [below for nested schema](#nestedatt--ipv4_static_routes--next_hops))
- `next_hops` (Attributes List) IPv4 Route Gateway Next Hop, Attribute conditional on `gateway` being equal to `nextHop` (see [below for nested schema](#nestedatt--ipv4_static_routes--next_hops))
- `subnet_mask` (String) Subnet Mask
- Choices: `255.255.255.255`, `255.255.255.254`, `255.255.255.252`, `255.255.255.248`, `255.255.255.240`, `255.255.255.224`, `255.255.255.192`, `255.255.255.128`, `255.255.255.0`, `255.255.254.0`, `255.255.252.0`, `255.255.248.0`, `255.255.240.0`, `255.255.224.0`, `255.255.192.0`, `255.255.128.0`, `255.255.0.0`, `255.254.0.0`, `255.252.0.0`, `255.240.0.0`, `255.224.0.0`, `255.192.0.0`, `255.128.0.0`, `255.0.0.0`, `254.0.0.0`, `252.0.0.0`, `248.0.0.0`, `240.0.0.0`, `224.0.0.0`, `192.0.0.0`, `128.0.0.0`, `0.0.0.0`
- `subnet_mask_variable` (String) Variable name
4 changes: 2 additions & 2 deletions docs/resources/transport_wan_vpn_profile_parcel.md
Original file line number Diff line number Diff line change
@@ -112,7 +112,7 @@ resource "sdwan_transport_wan_vpn_profile_parcel" "example" {

Optional:

- `administrative_distance` (Number) Administrative distance
- `administrative_distance` (Number) Administrative distance, Attribute conditional on `gateway` being equal to `null0`
- Range: `1`-`255`
- Default value: `1`
- `administrative_distance_variable` (String) Variable name
@@ -121,7 +121,7 @@ Optional:
- Default value: `nextHop`
- `network_address` (String) IP Address
- `network_address_variable` (String) Variable name
- `next_hops` (Attributes List) IPv4 Route Gateway Next Hop (see [below for nested schema](#nestedatt--ipv4_static_routes--next_hops))
- `next_hops` (Attributes List) IPv4 Route Gateway Next Hop, Attribute conditional on `gateway` being equal to `nextHop` (see [below for nested schema](#nestedatt--ipv4_static_routes--next_hops))
- `subnet_mask` (String) Subnet Mask
- Choices: `255.255.255.255`, `255.255.255.254`, `255.255.255.252`, `255.255.255.248`, `255.255.255.240`, `255.255.255.224`, `255.255.255.192`, `255.255.255.128`, `255.255.255.0`, `255.255.254.0`, `255.255.252.0`, `255.255.248.0`, `255.255.240.0`, `255.255.224.0`, `255.255.192.0`, `255.255.128.0`, `255.255.0.0`, `255.254.0.0`, `255.252.0.0`, `255.240.0.0`, `255.224.0.0`, `255.192.0.0`, `255.128.0.0`, `255.0.0.0`, `254.0.0.0`, `252.0.0.0`, `248.0.0.0`, `240.0.0.0`, `224.0.0.0`, `192.0.0.0`, `128.0.0.0`, `0.0.0.0`
- `subnet_mask_variable` (String) Variable name
Original file line number Diff line number Diff line change
@@ -1,25 +1,23 @@
resource "sdwan_system_remote_access_profile_parcel" "example" {
name = "Example"
description = "My Example"
feature_profile_id = "f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac"
connection_type_ssl = false
any_connect_eap_authentication_type = "user"
any_connect_eap_profile_download_status = "INITIALIZED"
any_connect_eap_profile_file_name = "<form-data>"
ipv4_pool_size = 50
ipv6_pool_size = 1024
enable_crl_check = false
psk_authentication_type = "aaa"
psk_authentication_pre_shared_key = "Cisco123"
radius_group_name = "radius-1"
aaa_derive_name_identity = "MyPassword"
aaa_enable_accounting = false
ikev2_local_ike_identity_type = "EMAIL"
ikev2_local_ike_identity_value = "[email protected]"
ikev2_security_association_lifetime = 86400
ikev2_anti_dos_threshold = 99
ipsec_enable_anti_replay = false
ipsec_anti_replay_window_size = 64
ipsec_security_association_lifetime = 3600
ipsec_enable_perfect_foward_secrecy = false
name = "Example"
description = "My Example"
feature_profile_id = "f6dd22c8-0b4f-496c-9a0b-6813d1f8b8ac"
connection_type_ssl = false
any_connect_eap_authentication_type = "user"
ipv4_pool_size = 50
ipv6_pool_size = 1024
enable_certificate_list_check = false
psk_authentication_type = "aaa"
psk_authentication_pre_shared_key = "Cisco123"
radius_group_name = "radius-1"
aaa_derive_name_from_peer_identity = "MyPassword"
aaa_enable_accounting = false
ikev2_local_ike_identity_type = "EMAIL"
ikev2_local_ike_identity_value = "[email protected]"
ikev2_security_association_lifetime = 86400
ikev2_anti_dos_threshold = 99
ipsec_enable_anti_replay = false
ipsec_anti_replay_window_size = 64
ipsec_security_association_lifetime = 3600
ipsec_enable_perfect_foward_secrecy = false
}
Loading

0 comments on commit a45c3e7

Please sign in to comment.