add vcn, igw, route table, security list

2024-05-24 16:17:53 +06:00
parent d4f4d01645
commit e80919d3be
4 changed files with 79 additions and 0 deletions
@@ -0,0 +1,50 @@
+resource "oci_core_vcn" "vcn" {
+  compartment_id = oci_identity_compartment.compartment.id
+  cidr_block     = var.vcn_cidr
+  is_ipv6enabled = var.enable_ipv6
+  display_name   = join("", [var.prefix, "vcn"])
+  dns_label      = local.vcn_dns_label
+  freeform_tags  = local.freeform_tags
+}
+
+resource "oci_core_internet_gateway" "igw" {
+  compartment_id = oci_identity_compartment.compartment.id
+  vcn_id         = oci_core_vcn.vcn.id
+  display_name   = join("", [var.prefix, "igw"])
+  freeform_tags  = local.freeform_tags
+}
+
+# https://docs.oracle.com/en-us/iaas/Content/API/SDKDocs/terraformbestpractices_topic-vcndefaults.htm
+
+resource "oci_core_default_route_table" "rt" {
+  compartment_id             = oci_identity_compartment.compartment.id
+  manage_default_resource_id = oci_core_vcn.vcn.default_route_table_id
+  freeform_tags              = local.freeform_tags
+  route_rules {
+    network_entity_id = oci_core_internet_gateway.igw.id
+    destination       = "0.0.0.0/0"
+  }
+}
+
+resource "oci_core_security_list" "open_ports" {
+  compartment_id = oci_identity_compartment.compartment.id
+  vcn_id         = oci_core_vcn.vcn.id
+  display_name   = "all-open"
+  freeform_tags  = local.freeform_tags
+  egress_security_rules {
+    destination = "0.0.0.0/0"
+    protocol    = "all"
+  }
+  egress_security_rules {
+    destination = "::/0"
+    protocol    = "all"
+  }
+  ingress_security_rules {
+    source   = "0.0.0.0/0"
+    protocol = "all"
+  }
+  ingress_security_rules {
+    source   = "::/0"
+    protocol = "all"
+  }
+}