feat: add web application firewall

README.md

@@ -22,6 +22,7 @@ For more information see, [Getting started with IBM Cloud Internet Services](htt
     * [dns](./modules/dns)
     * [domain](./modules/domain)
     * [glb](./modules/glb)
+    * [waf](./modules/waf)
 * [Examples](./examples)
     * [End-to-end example](./examples/complete)
 * [Contributing](#contributing)

examples/complete/main.tf

@@ -88,3 +88,14 @@ module "cis_glb" {
     }
   ]
 }
+
+##############################################################################
+# Add web application firewall to CIS instance
+##############################################################################
+
+module "cis_domain_settings" {
+  source          = "../../modules/waf"
+  cis_instance_id = module.cis_instance.cis_instance_id
+  domain_id       = module.cis_instance.cis_domain.domain_id
+  waf             = "on"
+}

modules/waf/README.md

@@ -0,0 +1,36 @@
+# CIS web application firewall (WAF) module
+
+This module enable/disable the web application firewall of the domain.
+
+<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+### Requirements
+
+| Name | Version |
+|------|---------|
+| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.3.0, <1.6.0 |
+| <a name="requirement_ibm"></a> [ibm](#requirement\_ibm) | >= 1.49.0 |
+
+### Modules
+
+No modules.
+
+### Resources
+
+| Name | Type |
+|------|------|
+| [ibm_cis_domain_settings.domain_settings](https://registry.terraform.io/providers/IBM-Cloud/ibm/latest/docs/resources/cis_domain_settings) | resource |
+
+### Inputs
+
+| Name | Description | Type | Default | Required |
+|------|-------------|------|---------|:--------:|
+| <a name="input_cis_instance_id"></a> [cis\_instance\_id](#input\_cis\_instance\_id) | CRN of the existing CIS instance. | `string` | n/a | yes |
+| <a name="input_domain_id"></a> [domain\_id](#input\_domain\_id) | ID of the existing domain to add a DNS record to the CIS instance. | `string` | n/a | yes |
+| <a name="input_waf"></a> [waf](#input\_waf) | Enable/disable a web application firewall (WAF). Supported values are off and on. | `string` | n/a | yes |
+
+### Outputs
+
+| Name | Description |
+|------|-------------|
+| <a name="output_cis_domain_settings_details"></a> [cis\_domain\_settings\_details](#output\_cis\_domain\_settings\_details) | CIS Domain settings details |
+<!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->

modules/waf/main.tf

@@ -0,0 +1,9 @@
+##############################################################################
+# Enable Web Application Firewall for a domain
+##############################################################################
+
+resource "ibm_cis_domain_settings" "domain_settings" {
+  cis_id    = var.cis_instance_id
+  domain_id = var.domain_id
+  waf       = var.waf
+}

modules/waf/outputs.tf

@@ -0,0 +1,5 @@
+
+output "cis_domain_settings_details" {
+  description = "CIS Domain settings details"
+  value       = ibm_cis_domain_settings.domain_settings
+}

modules/waf/variables.tf

@@ -0,0 +1,19 @@
+
+variable "cis_instance_id" {
+  type        = string
+  description = "CRN of the existing CIS instance."
+}
+
+variable "domain_id" {
+  type        = string
+  description = "ID of the existing domain to add a DNS record to the CIS instance."
+}
+
+variable "waf" {
+  type        = string
+  description = "Enable/disable a web application firewall (WAF). Supported values are off and on."
+  validation {
+    condition     = contains(["on", "off"], var.waf)
+    error_message = "Provided value of waf is not allowed. Supported values are off and on."
+  }
+}

modules/waf/version.tf

@@ -0,0 +1,10 @@
+
+terraform {
+  required_version = ">= 1.3.0, <1.6.0"
+  required_providers {
+    ibm = {
+      source  = "IBM-Cloud/ibm"
+      version = ">= 1.49.0"
+    }
+  }
+}